CAN Bus Wake-Up Anomaly Detector for Vehicle Battery Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern vehicles with numerous Electronic Control Units (ECUs) communicating over a Controller Area Network (CAN) bus are vulnerable to wake-up attacks, which can drain the vehicle battery by repeatedly waking up ECUs, rendering the vehicle inoperable until the battery is recharged or replaced.
Innovation Solution
A system comprising a detector communicatively coupled to the CAN bus, equipped with a non-volatile memory, CAN transceiver, and microcontroller, which logs wake-up and sleep times to detect abnormal wake-up patterns and generates a notification when the total operational time exceeds a predetermined threshold, thereby identifying potential attacks and preventing battery drain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ECUs are allowed to wake up repeatedly in response to messages on the CAN bus, then the vehicle system remains responsive and operational, but the battery may be drained excessively leading to vehicle inoperability
Solution Approach 1:
The detector performs preliminary analysis of wake-up patterns by logging wake-up times and calculating total operational time before the battery is fully depleted. This advance monitoring and threshold-based detection prevents excessive battery drain by identifying abnormal patterns early, while still allowing legitimate wake-up operations to proceed normally.
2Reliability
If a detector monitors and logs all ECU wake-up events to detect abnormal patterns, then wake-up attacks can be identified and prevented, but the complexity of the vehicle system increases
Solution Approach 1:
A dedicated detector component is introduced as an intermediary between ECUs and the CAN bus. This specialized component handles the complex tasks of logging wake-up events, calculating operational time, and generating anomaly notifications, while other ECUs continue their normal operations without modification. The detector absorbs the complexity burden, allowing the rest of the system to remain simple.
3Measurement precision
If the detector continuously monitors CAN bus traffic and calculates total operational time, then abnormal wake-up patterns are detected accurately, but the processing overhead and communication latency increase
Solution Approach 1:
The detector logs wake-up times and calculates total operational time in advance, before anomaly detection is needed. By maintaining a running total of operational time and comparing it against thresholds proactively, the system avoids computationally intensive real-time analysis during normal operation, thus minimizing processing overhead and maintaining fast response times.
Data Source
AI summary
Techniques for using a detector coupled to a controller area network (CAN) bus of a vehicle system to identify and generate alerts in response to wake-up attacks on the vehicle system. Techniques include an electronic control unit (ECU) sending a wake-up message across the CAN bus that is detected by the detector. The detector includes memory and a processor to identify the timestamp of the wake-up message when the vehicle ignition is off. The detector determines a total operational time for the ECU over an observation time period and generates a notification of a wake-up anomaly when the total operational time over the observation time period exceeds a predetermined threshold.