CAN Data Obfuscation for Transport Refrigeration Unit Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Controller Area Network (CAN) data in transport refrigeration units is vulnerable to interception by sniffers, compromising the security and integrity of communications.

Innovation Solution

Obfuscate CAN data using an exclusive OR function and a pre-defined key before transmission, and de-obfuscate it upon receipt using the same method, ensuring secure communication within the transport refrigeration unit.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If CAN data is transmitted without obfuscation, then communication simplicity is maintained, but communication security deteriorates due to interception by sniffers

Engineering Contradiction:

Improvecommunication securityVSAvoidcommunication process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by obfuscating the CAN data before transmission using an XOR function with a pre-defined key. This preprocessing step ensures that even if data is intercepted during transmission, it remains unintelligible without the key, thus securing communication while maintaining relative simplicity in the transmission process itself.

Inventive Principle:

Principle #10Preliminary action

2Loss of information

If obfuscation is applied to CAN data, then data confidentiality is improved, but processing time increases due to additional obfuscation and de-obfuscation steps

Engineering Contradiction:

Improvedata confidentialityVSAvoidprocessing time

Core Design Contradiction:

Loss of informationVSLoss of time

Solution Approach 1:

The patent uses parameter changes by applying a simple XOR bitwise operation with a pre-defined key for obfuscation and de-obfuscation. This mathematical transformation is computationally efficient and can be executed rapidly, minimizing the time penalty while ensuring that the original data can be perfectly recovered without loss or corruption.

Inventive Principle:

Principle #35Parameter changes

3Object-affected harmful factors

If CAN data is obfuscated using XOR function, then security against sniffers is enhanced, but system compatibility may be affected due to additional processing requirements

Engineering Contradiction:

Improvesniffer interception resistanceVSAvoidsystem compatibility

Core Design Contradiction:

Object-affected harmful factorsVSAdaptability or versatility

Solution Approach 1:

The patent achieves universality by implementing the obfuscation/de-obfuscation mechanism at the application layer, allowing existing CAN communication infrastructure to continue functioning without modification. Any node in the CAN network can participate in secure communication by incorporating the same XOR-based obfuscation logic, making the security enhancement universally applicable across different manufacturers and system configurations.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12591710B2Obfuscating data in controller area network messages for transport refrigeration units

Publication Date: 2026.03.31 CARRIER CORP

AI summary

A method of securing communications in a transport refrigeration unit is provided. The method including: generating a CAN data; obfuscating the CAN data to generate an obfuscated CAN data; transmitting the obfuscated CAN data; receiving the obfuscated CAN data by at least one of a node or a main micro; and de-obfuscating the obfuscated CAN data to generate the CAN data.