CAN Device Identifier Comparison for Intrusion Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In-vehicle networks using the CAN bus protocol face security concerns, including intrusion detection and prevention, as compromised networks can allow attackers to maliciously control vehicle components, with existing solutions failing to effectively invalidate suspicious messages.
Innovation Solution
A CAN device with a compare module that interfaces with a CAN transceiver, decodes identifiers, and generates an error signal to invalidate matching messages, preventing malicious activity by comparing received identifiers with stored entries and sending error signals onto the CAN bus.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a CAN device monitors and compares identifiers to detect intrusions, then network security is improved, but device complexity increases due to additional comparison logic and memory requirements
Solution Approach 1:
The compare module is integrated within the CAN device architecture, nesting the security monitoring function inside the existing CAN controller structure. This allows intrusion detection capabilities to be added without creating a completely separate system, thereby improving security while limiting the increase in overall device complexity through hierarchical integration
Solution Approach 2:
The identifier memory pre-stores valid CAN identifiers before runtime operations. By having the comparison database ready in advance, the device can immediately validate incoming messages without requiring complex real-time analysis algorithms, thus improving security response while keeping the computational complexity manageable through pre-computation
2Reliability
If the CAN device validates every incoming message identifier, then network security is improved, but processing time increases due to continuous comparison operations
Solution Approach 1:
The comparison operation is localized to only those message identifiers that are stored in the identifier memory. Rather than performing exhaustive searches or complex validations on all possible identifiers, the system efficiently compares against a curated subset of valid identifiers, thus maintaining security while minimizing processing time through selective local validation
3Reliability
If error signals are generated to invalidate malicious messages, then network security is improved, but network traffic increases due to additional error signal transmissions
Solution Approach 1:
The error signal generation function is extracted as a separate output from the comparison logic. This allows the system to selectively activate error signals only when actual intrusions are detected, rather than continuously transmitting validation signals. By separating the detection mechanism from the response mechanism, security is maintained while minimizing unnecessary network traffic from error signals
Data Source
AI summary
Embodiments of a device and method are disclosed. A controller area network (CAN) device includes a compare module configured to interface with a CAN transceiver, the compare module having a receive data (RXD) interface configured to receive data from the CAN transceiver, a CAN decoder configured to decode an identifier of a CAN message received from the RXD interface, and an identifier memory configured to store an entry that corresponds to at least one identifier, and compare logic configured to compare a received identifier from a CAN message to the entry that is stored in the identifier memory and to output a match signal when the comparison indicates that the received identifier of the CAN message matches the entry that is stored at the CAN device. The CAN device also includes a signal generator configured to output, in response to the match signal, a signal to invalidate the CAN message.