Bus System Message Validation via Copying to Prevent Service Interruptions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing bus system operation methods fail to maintain system availability and functionality during malicious message attacks, often leading to service interruptions and incomplete vehicle readiness.

Innovation Solution

The method involves transmitting a previously validated, non-malicious message instead of a defense message when a malicious message is detected, ensuring continuous operation by using the original data from a genuine transmitter, thus avoiding substitute reactions that could disable vehicle functions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a defense message triggering a substitute reaction is transmitted to ward off a malicious message, then the attack can be blocked, but the system function may become unavailable and service interruptions occur

Engineering Contradiction:
Improvesecurity protectionVSAvoidsystem availability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent transmits a copy of the original non-malicious message (with identical content) instead of a defense message that would trigger substitute reactions. This copying approach allows the receiver to process legitimate data while blocking the malicious message, thus maintaining system function availability while providing security protection through message validation

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The transmitting unit acts as an intermediary that intercepts malicious messages and replaces them with valid message copies before they reach the receiver. This intermediary function blocks attacks while preserving normal system operation, avoiding the need for substitute reactions that would disable functions

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If a substitute reaction is triggered in the receiver to block malicious messages, then the attacker's influence is neutralized, but the original function becomes disabled and the vehicle is no longer ready for operation

Engineering Contradiction:
Improveattack resistanceVSAvoidvehicle readiness
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

Instead of triggering a substitute reaction that inverts normal operation (disabling functions), the system inverts the approach by transmitting the original valid message content to maintain normal function operation. This inversion of the defense strategy preserves vehicle readiness while still providing attack resistance through message validation

Inventive Principle:
Principle #13The other way round (Inversion)

3Reliability

If defense messages are transmitted to block malicious interventions, then security is improved, but the complexity of the communication system increases

Engineering Contradiction:
Improvemessage securityVSAvoidcommunication protocol complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system uses simple message copying (transmitting identical content) rather than complex defense message protocols. This copying mechanism provides security validation while maintaining communication protocol simplicity, avoiding the need for complex defense message structures and processing

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11366938B2Method and device for operating a bus system
Publication Date: 2022.06.21 ROBERT BOSCH GMBH
  • US11366938B2 patent drawing
  • US11366938B2 patent drawing

AI summary

A method for operating a bus system, in which a message of the bus system is received and its validity is ascertained, wherein, if it was ascertained that the message is “malicious”, a new message is sent to the designated receiver of this “non-malicious” message, the content of the new message having been previously rated as “non-malicious.”