Bus System Message Validation and Defend Message Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing bus systems in motor vehicles are vulnerable to irregular interventions, which can compromise network integrity and security, particularly due to the misuse of diagnostic functions for interfering with vehicle operations, and existing solutions do not effectively prevent such interventions without disrupting normal system operation.
Innovation Solution
A method for operating a bus system that involves validating messages through a two-step evaluation and sending a 'defend message' to designated recipients to initiate defensive measures, utilizing existing on-board arrangements to prevent irregular interventions, ensuring compatibility and security without affecting normal system operation, applicable to both stateful and stateless protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If diagnostic functions are activated in control units, then system functionality and ease of operation are improved, but vulnerability to irregular interventions and security risks increase
Solution Approach 1:
The system applies preliminary anti-action by implementing a monitoring mechanism that detects irregular messages before they can execute harmful diagnostic functions. The method validates incoming messages against expected protocols and patterns, preventing unauthorized diagnostic interventions before they compromise system security.
Solution Approach 2:
An intermediary validation layer is introduced between message transmission and diagnostic function execution. The monitoring mechanism acts as a mediator that filters and validates messages, allowing legitimate diagnostic operations while blocking irregular interventions without preventing authorized system operation.
2Reliability
If security monitoring is implemented to detect irregular interventions, then network integrity is improved, but system complexity increases
Solution Approach 1:
The monitoring mechanism utilizes self-service by leveraging existing bus system infrastructure and message formats for its own operation. It monitors communications using the same protocol stack and message structures already present in the system, eliminating the need for separate complex monitoring hardware or protocols.
Solution Approach 2:
The monitoring mechanism is designed with universality by being protocol-agnostic and applicable to multiple bus systems and control units simultaneously. It can monitor various message types and protocols without requiring separate implementation for each, reducing overall system complexity while maintaining broad security coverage.
3Reliability
If defensive measures are activated to block irregular interventions, then security is improved, but normal system operation may be disrupted
Solution Approach 1:
The system applies partial action by selectively blocking only irregular messages that fail validation, while allowing all legitimate diagnostic and operational messages to pass through unchanged. This targeted approach provides security without disrupting normal system productivity or authorized operations.
Solution Approach 2:
The monitoring mechanism implements feedback by continuously validating incoming messages and dynamically responding to irregular patterns. When irregular messages are detected, the system provides feedback by blocking only those specific messages while maintaining normal operation for all other communications, ensuring security without systematic disruption.
Data Source
AI summary
A method for operating a bus system in which a message of the bus system is received and its validity is ascertained, characterized in that, when it has been ascertained that the message is “not valid”, a defend message is transmitted to a designated recipient of the message, the defend message being configured so that the designated recipient is instructed by way of the defend message to initiate defensive measures against the message.