CAN Bus Malicious ECU Disabling via Error Injection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The CAN bus network in vehicles is vulnerable to malicious activity, as it lacks inherent security and encryption standards, allowing hackers to manipulate ECUs and transmit faulty messages, which can lead to vehicle malfunctions and safety risks.
Innovation Solution
A method and system that detect malicious messages on the CAN bus network and inject predefined bits to trigger errors, increasing the error counter of malicious ECUs above a threshold, thereby disabling them from retransmitting malicious data, preventing further interference.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If error injection is used to disable malicious ECU, then network security is improved, but network traffic increases due to injected bits
Solution Approach 1:
The system injects a predefined plurality of bits to trigger a specific number of errors sufficient to disable the malicious ECU. This excessive action ensures the error counter reaches the threshold that disables the malicious node, preventing any possibility of malicious message retransmission while accepting the temporary increase in network traffic.
2Reliability
If error counter manipulation is used to disable malicious ECU, then malicious message retransmission is prevented, but detection complexity increases
Solution Approach 1:
The system leverages the existing error counter mechanism inherent in CAN bus ECUs to disable malicious nodes. By manipulating the error counter through injected bits, the malicious ECU disables itself automatically when its error counter exceeds the threshold, eliminating the need for external detection and disabling mechanisms.
3Reliability
If bit injection is performed to trigger errors, then malicious ECU is disabled quickly, but energy consumption increases
Solution Approach 1:
The system pre-calculates and injects a predefined sequence of bits designed to trigger a specific number of errors. This preliminary action ensures rapid disabling of the malicious ECU by directly manipulating the error counter to exceed the threshold, achieving quick response while minimizing energy consumption through efficient bit sequence design.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
There is provided a computer implemented method of disabling a malicious electronic control unit (ECU) of a plurality of ECUs in communication with a controller area network (CAN) bus network, the method executed by a computing device in communication with the plurality of ECUs and the CAN bus network, the method comprising: detecting a malicious message transmitted by the malicious ECU over the CAN bus network, and injecting a plurality of bits over the CAN bus network to trigger a predefined plurality of errors for disabling the malicious ECU before the malicious ECU makes an additional attempt to retransmit an additional instance of the malicious message.