CAN Bus Baud-Rate Switching for Secure Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
CAN bus architectures are vulnerable to malicious attacks due to the lack of specific destination addresses for messages, allowing attackers to access all bus communications, which compromises network security.
Innovation Solution
Implement a dynamic baud-rate change process that synchronizes devices to switch to a new, random baud-rate at unpredictable intervals, making it difficult for malicious devices to synchronize and detect the current baud-rate, thereby generating communication errors that can be detected and countered.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a single bus consolidation approach is used in CAN architectures, then flexibility and robustness are improved, but network access security deteriorates
Solution Approach 1:
The patent implements dynamic baud-rate switching where the communication rate changes over time based on synchronization signals. This dynamic parameter change creates time-varying communication conditions that prevent static eavesdropping while maintaining network flexibility and robustness among legitimate nodes.
Solution Approach 2:
The patent changes the baud-rate parameter dynamically during operation. By transitioning between different baud-rates (e.g., 500 kbps to 1 Mbps) based on synchronization sequences, the system maintains open bus architecture benefits while securing communications through parameter variation that confuses unauthorized nodes.
2Stability of the object's composition
If a single bus consolidation approach is used in CAN architectures, then robustness is improved, but network access security deteriorates
Solution Approach 1:
The patent introduces dynamic baud-rate switching with synchronization sequences that maintain robust communication among authorized nodes while creating time-varying security barriers. The dynamic nature ensures that even if the bus structure remains consolidated, unauthorized access is prevented through changing communication parameters.
Solution Approach 2:
The patent employs periodic synchronization sequences at defined intervals to coordinate baud-rate changes across the network. This periodic action maintains system robustness through regular synchronization while simultaneously providing security by periodically changing the communication state, making it difficult for attackers to maintain continuous eavesdropping.
3Object-affected harmful factors
If dynamic baud-rate switching is implemented, then network access security is improved, but device complexity is worsened
Solution Approach 1:
The patent implements preliminary synchronization sequences before baud-rate changes to coordinate the switching action across all nodes. This preliminary action simplifies the implementation complexity by providing a clear protocol framework that devices can follow, rather than requiring complex autonomous decision-making about when and how to switch rates.
Solution Approach 2:
The patent uses acknowledgment signals and error framing to provide feedback about successful baud-rate transitions. This feedback mechanism reduces device complexity by allowing nodes to verify synchronization status and adjust accordingly, rather than requiring complex error handling logic for every possible transition scenario.
4Object-affected harmful factors
If dynamic baud-rate switching is implemented, then network access security is improved, but communication reliability is worsened
Solution Approach 1:
The patent performs preliminary synchronization using dedicated synchronization sequences before each baud-rate transition. This preliminary action ensures that all authorized nodes are prepared for the rate change, maintaining communication reliability by preventing data loss during transitions while still achieving security through the rate switching itself.
Solution Approach 2:
The patent incorporates error framing and acknowledgment mechanisms that cushion against potential communication failures during baud-rate transitions. These protective measures ensure that even if a transition encounters issues, the system can detect and recover from the error, maintaining overall communication reliability while preserving the security benefits of dynamic rate switching.
Data Source
AI summary
A communications network includes a bus communicatively coupled to a first device and a second device. The first device and the second device are operable to perform multiple iterations of a baud-rate change (BRC) process. Each of the multiple iterations of the BRC process includes synchronizing the first device and the second device to identify when a baud-rate switch operation will be applied; and applying the baud-rate switch operation to change a currently-used baud-rate of communications between the first device and the second device to a new baud-rate of communications between the first device and the second device.