CAN Bus Message ID Encryption via Secret Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing reliance on CAN bus communication in vehicles makes them vulnerable to unauthorized access and man-in-the-middle attacks, which can disrupt critical vehicle functions by intercepting and modifying message IDs.
Innovation Solution
A computing device with data reception and processing circuitry that maps original message IDs to secret IDs using a database stored on the engine control unit, replacing message IDs in data frames transmitted on the CAN bus, thereby securing communication by using a secret ID mapping strategy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If message IDs are transmitted in clear text on the CAN bus, then communication simplicity is maintained, but security against unauthorized access and man-in-the-middle attacks deteriorates
Solution Approach 1:
The patent introduces an intermediary encryption layer that maps original message IDs to encrypted message IDs through a secret mapping table stored in memory. The ECU replaces original message IDs with encrypted versions before transmission, and the receiving ECU uses the same mapping table to decrypt them. This intermediary encryption mechanism protects the communication without requiring fundamental changes to the CAN bus protocol, thus maintaining communication simplicity while significantly improving security against unauthorized access and man-in-the-middle attacks.
2Reliability
If message IDs are encrypted using a secret mapping table, then security against attacks is improved, but device complexity increases
Solution Approach 1:
The patent implements preliminary action by pre-generating and storing the secret mapping table in memory during system initialization or manufacturing. The mapping table, which contains the correspondence between original message IDs and encrypted message IDs, is prepared in advance and remains static during operation. This preliminary preparation eliminates the need for complex real-time encryption algorithms during message transmission, reducing the computational burden and device complexity while maintaining strong security through the secrecy of the pre-established mapping table.
3Reliability
If all message IDs are encrypted, then comprehensive security coverage is achieved, but processing time and computational resources increase
Solution Approach 1:
The patent applies local quality by selectively encrypting only those message IDs that require security protection, rather than uniformly encrypting all messages. The system identifies specific message types that need security coverage and applies the encryption mapping only to those messages. This selective approach reduces the overall processing time and computational resources required while still achieving comprehensive security coverage for the critical messages that need protection.
Data Source
AI summary
Systems and methods are disclosed for implementing enhanced security measures for working against unwanted intrusion from outside attackers into a vehicle's controller area network (CAN) bus. The enhanced security measures utilize existing data frames that are transmitted within the CAN bus to encrypt message identifications (IDs) for certain messages that are related to important features of a vehicle.