Bus System Unauthorized Access Detection via Voltage Pattern Sampling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing bus systems, particularly the CAN bus, are vulnerable to unauthorized physical access, where attackers can intercept and manipulate data or overwhelm the system by flooding it with high-priority messages, posing a risk to the integrity and functionality of the network.
Innovation Solution
A method that uses binary sampled patterns compared to reference patterns to detect unauthorized access by evaluating voltage signals at specific times, leveraging interference characteristics unique to each bus system, allowing for rapid comparison without high computational requirements, and employing a computation unit or computer program to implement this method.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encoding is used to prevent data manipulation, then data integrity is improved, but the complexity of the system increases
Solution Approach 1:
The patent applies preliminary action by pre-establishing encoding schemes and authentication protocols before data transmission begins. The bus system is configured with predetermined encoding rules and authentication mechanisms that are activated automatically, preventing the need for complex real-time verification and reducing overall system complexity while maintaining data integrity.
2Reliability
If an attacker is prevented from accessing the physical layer, then security is improved, but the ability to detect attacks deteriorates
Solution Approach 1:
The patent implements feedback mechanisms through continuous monitoring of voltage signals on the bus. The system constantly evaluates signal characteristics and compares them against expected patterns, providing real-time feedback that enables detection of physical layer attacks while maintaining security through automatic response protocols.
3Productivity
If the bus is flooded with high-priority messages, then the attacker can overwhelm the system, but the functionality of the bus system deteriorates
Solution Approach 1:
The patent applies preliminary anti-action by implementing authentication and authorization mechanisms that prevent attackers from injecting high-priority messages in the first place. The system proactively blocks unauthorized message transmission before flooding can occur, maintaining both bus bandwidth utilization and functionality through preventive security measures.
4Speed
If rapid comparison of patterns is achieved, then detection speed is improved, but computational requirements worsen
Solution Approach 1:
The patent applies segmentation by dividing the voltage signal into discrete sampling points and representing them as binary patterns. This segmentation transforms continuous signal analysis into discrete binary comparisons, enabling rapid detection through simple bitwise operations that reduce computational resource consumption while maintaining high detection speed.
Data Source
AI summary
A method for detecting an unauthorized physical access to a bus system. The method includes detecting a test level sequence in the voltage signal; constituting a binary sampled pattern by sampling the voltage signal at specified pattern times associated with the detected test level sequence, and assigning a first value if the voltage signal is above a predefined voltage threshold at the respective pattern time, and a second value if the voltage signal is not above the voltage threshold; comparing the sampled pattern with a reference pattern that is associated with the detected test level sequence and that was constituted for the test level sequence as a sampled pattern in a state of the bus system during which no unauthorized access existed; and determining that a possible unauthorized physical access exists if the reference pattern does not match the sampled pattern.