Vehicle CAN Bus Intrusion Detection and Dual-Channel Alert System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle security systems fail to effectively alert occupants when a vehicle's CAN bus is compromised by unauthorized access, leaving them unaware of potential safety risks due to malicious messages that can disrupt vehicle operations.
Innovation Solution
A user alert system that includes an intrusion detection system (IDS) and a network access device (NAD) to detect malicious messages on the CAN bus and generate primary and secondary alerts, transmitted to primary and secondary user devices, respectively, to inform and instruct occupants on minimizing risks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an intrusion detection system is implemented to detect malicious messages on the CAN bus, then vehicle security is improved, but the system complexity increases
Solution Approach 1:
The alert notification function is segmented into multiple independent channels: primary alerts to the driver's device and secondary alerts to other user devices. This segmentation allows the security system to maintain high reliability through multiple notification paths without proportionally increasing overall system complexity, as each channel operates independently.
Solution Approach 2:
The IDS integrates with existing vehicle communication infrastructure (CAN bus, NAD) to perform multiple functions: detecting malicious messages, generating alerts, and routing notifications through existing hardware channels. This multi-functionality approach improves security without requiring entirely new dedicated hardware, thereby limiting complexity increases.
2Loss of time
If real-time detection and alerting of malicious messages is implemented, then response time is improved, but the use of energy increases
Solution Approach 1:
The system implements partial monitoring by focusing detection resources on identifying malicious messages rather than analyzing all CAN bus traffic in equal detail. The IDS prioritizes detecting security-relevant patterns while allowing less critical traffic to pass with minimal processing, achieving fast response times for security threats without proportionally increasing energy consumption across all system operations.
Solution Approach 2:
The system uses feedback mechanisms where the IDS continuously monitors CAN bus traffic patterns and adjusts its detection sensitivity based on observed behavior. This allows the system to maintain high response readiness for actual threats while reducing energy-intensive monitoring during normal operating conditions, balancing response time improvement with energy consumption management.
Data Source
AI summary
User alert systems, apparatus, and related methods for use with vehicles are disclosed. A disclosed alert system for a vehicle includes an intrusion detection system (IDS) operatively coupled to the vehicle. The alert system also includes a network access device (NAD) operatively coupled to the vehicle and control circuitry configured to detect, via the IDS, a malicious message transmitted through a controller area network (CAN) bus of the vehicle. The control circuitry is also configured to generate a primary alert indicative of the malicious message and transmit, via the NAD, the primary alert to a primary user device corresponding to a driver of the vehicle. The control circuitry is also configured to generate a secondary alert indicative of the malicious message and transmit, via the NAD, the secondary alert to one or more secondary user devices different from the primary user device.