CAN Gateway Message Arbitration Blocking Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems in vehicles are vulnerable to improper message transmission and Denial of Service (DoS) attacks, where unauthorized programs can inject malicious messages, leading to malfunctions and communication blockages, and current systems lack effective measures to detect and mitigate such issues.
Innovation Solution
A communication device with a priority-based arbitration system that counts consecutive blocked messages and compares them to allowed blocks, using a detection unit to identify abnormality and a control unit to fix the communication line if necessary, while also monitoring accumulated bits for additional threat detection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple ECUs are connected via a network to enable information exchange, then communication functionality and system intelligence are improved, but the system becomes vulnerable to improper message transmission and DoS attacks from unauthorized programs
Solution Approach 1:
The detection unit performs preliminary monitoring of message transmission patterns before malicious activity can fully disrupt the system. By continuously counting consecutive blocked messages and comparing against allowed thresholds, the system prepares to detect and respond to DoS attacks and improper message transmission in advance, preventing rather than merely reacting to attacks.
Solution Approach 2:
The system establishes a feedback loop where the detection unit monitors arbitration outcomes and message blocking patterns, then uses this information to identify abnormal transmission behavior. The continuous comparison of consecutive block counts against allowed blocks creates a self-regulating mechanism that can detect and respond to malicious activity while maintaining normal communication functionality.
2Productivity
If an arbitration system is implemented to manage message priority, then message transmission efficiency is improved, but the system can be exploited by unauthorized programs to block legitimate messages through DoS attacks
Solution Approach 1:
The detection unit creates a feedback mechanism that monitors the arbitration process and message blocking patterns. By continuously counting consecutive blocked messages and comparing against priority-level-specific thresholds, the system can identify when the arbitration system is being exploited for DoS attacks, maintaining both transmission efficiency and reliability through adaptive detection.
Solution Approach 2:
The system changes the parameter of monitoring from simple message counting to consecutive block counting with priority-level differentiation. By storing allowed block numbers associated with each priority level and comparing actual blocking patterns against these dynamic thresholds, the system adapts to normal variations in message priority while detecting abnormal patterns indicative of attacks.
3Device complexity
If conventional communication systems are used without additional detection mechanisms, then device complexity is minimized, but the systems cannot detect or prevent improper message transmission and DoS attacks
Solution Approach 1:
The detection unit serves multiple functions within a single integrated component: it counts consecutive blocked messages, compares against stored thresholds, detects abnormal patterns, and identifies both DoS attacks and improper message transmission. This multi-functional approach enhances security without proportionally increasing device complexity, as the same hardware resources are used for multiple protective functions.
Solution Approach 2:
The communication device performs self-monitoring and self-detection of security threats using its own existing message handling infrastructure. The detection unit leverages the normal arbitration and message transmission processes to gather data for security analysis, eliminating the need for separate external monitoring systems and reducing overall system complexity while maintaining security.
Data Source
AI summary
A communication device capable of detecting transmission of an improper message to a network. A CAN controller in the gateway transmits and receives a message attached with a priority level (ID) to/from an ECU through a communication line, and counts, by the consecutive block number counter, the number of transmitted messages that are consecutively blocked as a result of arbitration processing as the number of consecutive blocks and stores the number as the number of allowed blocks into an allowed block number table in the storage unit in association with a priority level attached to the message received at the communication line. Every time a message is received, the controller compares the number of consecutive blocks with the number of allowed blocks for this message, and detects abnormality if the number of consecutive blocks is larger than the number of allowed blocks.