CAN Bus ECU Authentication Using Physical Layer ID Signals

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current communication systems, particularly in automotive environments, lack effective source authentication mechanisms for messages on Controller Area Network (CAN) buses, leading to security vulnerabilities such as unauthorized message transmission, which can compromise critical vehicle functions like braking and steering. Cryptographic methods are complex and prone to key management issues, making them unsuitable for widespread implementation.

Innovation Solution

The system applies a unique physical layer signal to CAN messages, incorporating an identifier of the transmitter, which is decoded by the receiver to authenticate the message source. This approach eliminates the need for cryptographic key management and uses a modulator to add an analog fingerprint to each message, allowing only authorized transmitters to send messages by corrupting the CRC if unauthorized, ensuring all ECUs reject unauthorized messages.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic methods are used for message authentication, then security is improved, but system complexity and key management burden increase

Engineering Contradiction:
Improvemessage authentication securityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the authentication mechanism from the message data layer and places it at the physical layer. Instead of embedding cryptographic keys in message payloads, the system uses physical layer signals (voltage levels, timing characteristics, signal morphology) that inherently encode transmitter identity. This extraction eliminates the need for complex key management while maintaining authentication security.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent replaces the cryptographic/software-based authentication system with a physics-based physical layer authentication system. By utilizing inherent electrical characteristics of the transmission medium and signal properties (such as rise time, fall time, voltage thresholds), the system achieves authentication without cryptographic algorithms, thereby reducing computational complexity and key management overhead.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If physical layer signals are applied to CAN messages, then authentication capability is improved, but message structure complexity increases

Engineering Contradiction:
Improvetransmitter authenticationVSAvoidmessage structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the authentication function from the message structure by applying authentication signals at the physical layer rather than embedding them in the message data field. The physical layer signal carries authentication information independently from the CAN message protocol structure, allowing authentication without modifying the standard CAN message format.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The physical layer signal serves multiple functions simultaneously: it carries the CAN message data while also encoding transmitter authentication information through its electrical characteristics. This multi-functionality allows a single signal to fulfill both communication and authentication roles, avoiding the need for separate authentication data fields.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP3471371B1Authentication system for electronic control unit on a bus
Publication Date: 2021.09.29 GARRETT TRANSPORTATION I INC
  • EP3471371B1 patent drawingFigure 1
  • EP3471371B1 patent drawingFigure 2
  • EP3471371B1 patent drawingFigure 3A~3B

AI summary

An authentication system having a communications bus, a transmitter connected to the bus, and a receiver connected to the bus. A physical layer signal may be applied by the transmitter to a message on the bus for authenticating the transmitter. The physical layer signal may incorporate an identifier (ID) of the transmitter. The receiver may receive the message and decode the physical layer signal on the message. Decoding the physical layer signal on the message may reveal the ID of the transmitter sending the message. The receiver may look up the ID on a list of IDs corresponding to transmitters approved to send the message, to determine whether the ID of the transmitter sending the message matches an ID on the list. Only if the ID of the transmitter matches an ID on the list, then the transmitter may be authenticated and authorized to send the message.