CAN Subscriber Station Frame Marking Against Bus Manipulation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current bus systems, such as CAN FD and Classical CAN, lack security against manipulation on layer 2 of the OSI layer model, allowing unauthorized frames to disrupt normal operation and pose safety risks, especially in applications like autonomously driving vehicles.
Innovation Solution
A subscriber station with a communication control device, transmitting/receiving device, and marking module that evaluates frames for authorization and marks unauthorized frames with a marking to inform other stations, ensuring secure communication and high tolerance to errors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If CAN FD and Classical CAN protocols are used for data transmission, then data transmission speed and compatibility are improved, but security against frame manipulation deteriorates
Solution Approach 1:
The marking module performs preliminary evaluation of received frames against a list of permitted frames before they are processed by the communication control device. This preliminary action prevents unauthorized frames from entering the higher-level technical installation, resolving the security issue while maintaining the high data transmission speeds of CAN FD and Classical CAN protocols.
2Reliability
If frame evaluation and marking functionality is added to subscriber stations, then security against manipulation is improved, but device complexity increases
Solution Approach 1:
The marking module is integrated into the existing subscriber station structure and serves multiple functions: it evaluates frames against permitted lists, marks unauthorized frames, and communicates marking status to other stations. This multi-functional approach adds security capabilities without requiring separate dedicated security hardware, thus limiting the increase in device complexity.
3Reliability
If marking modules evaluate frames against permitted lists, then error tolerance and security are improved, but communication overhead increases
Solution Approach 1:
The frame evaluation and marking function is extracted as a separate modular component that operates independently from the main communication data path. This allows the marking module to filter and evaluate frames without blocking the high-speed data transmission, thereby maintaining low communication overhead while improving error tolerance and security.
Data Source
AI summary
A subscriber station for a serial bus system. The subscriber station includes: a communication control device for controlling a communication of the subscriber station with at least one other subscriber station of the bus system and for generating a transmission signal according to a frame; a transmitting/receiving device which is designed for the serial transmission of the transmission signal generated by the communication control device to a bus of the bus system, and which is designed for the serial reception of signals from the bus; and a marking module for evaluating whether or not a frame received from the bus is permitted to occur on the bus, and for marking a frame with a marking in such a way that the transmitting/receiving device transmits the marking to the bus in order to communicate the result of the evaluation to the at least one other subscriber station.