Bi-directional CAN Bus Firewall for Vehicle Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Vehicle communication systems without firewalls cannot distinguish between benign and malicious CAN messages, making them vulnerable to hacking.
Innovation Solution
A vehicle communication system incorporating a bi-directional CAN-bus firewall module with a vehicle status logger, CAN message filter, and storage module to block malicious messages and log events, which are then uploaded to a cloud server for analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a CAN controller sends CAN messages passively to the CAN bus without a firewall, then the communication simplicity is maintained, but the vehicle becomes vulnerable to malicious messages from hackers
Solution Approach 1:
A bi-directional firewall module is introduced as an intermediary component between the CAN controller and the CAN bus. This firewall module actively monitors, filters, and blocks malicious CAN messages while allowing legitimate messages to pass through, thereby enhancing vehicle security without requiring fundamental changes to the existing CAN communication architecture
2Reliability
If a bi-directional firewall module is introduced to block malicious messages, then vehicle security is enhanced, but the communication system complexity increases
Solution Approach 1:
The firewall module is segmented into distinct functional components: a message filter unit for blocking malicious messages, a status logger unit for monitoring vehicle status, and a cloud communication unit for uploading logs. This segmentation allows each component to perform its specific function efficiently while maintaining overall system manageability
Solution Approach 2:
The firewall module is designed with multi-functionality, serving as both a security barrier against malicious messages and a diagnostic tool through status logging and cloud communication. This multi-functionality reduces the need for separate dedicated security and monitoring systems
3Measurement precision
If the firewall module uploads blocked messages and logs to the cloud server, then security analysis capability is improved, but communication time and data transmission requirements increase
Solution Approach 1:
The firewall module implements periodic action by uploading blocked messages and event logs to the cloud server at scheduled intervals rather than continuously. This approach maintains security analysis capability while reducing the time and communication resources required compared to real-time continuous transmission
Data Source
AI summary
A vehicle communication system boarded on a vehicle, comprises a main processor, a Controller Area Network (CAN) controller, and a bi-directional firewall module. The main processor is configured to send one or more CAN messages to the CAN controller and the CAN controller is configured to forward the CAN messages to a CAN through the bi-directional firewall module. The bi-directional firewall module further includes a vehicle status logger, a CAN message filter and a storage module, and the vehicle status logger is configured to check the vehicle's status by collecting diagnostic parameters from ECUs, the storage module is configured to store a white-list and a black-list, and the CAN message filter is configured to selectively choose one of the white-list and the black-list according to different statuses of the vehicle and apply the one of the white-list and the black-list to the CAN messages.