Vehicle CAN Bus Gateway for Unauthorized Signal Blocking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle security measures require the physical addition of a new dedicated communication line to the wire harness, which is cumbersome and difficult to implement, making it challenging to prevent unauthorized intrusion into the vehicle's communication network.
Innovation Solution
An on-vehicle communication line connection apparatus with a first and second common communication line, a common connector, and a substitute management unit that monitors and blocks unauthorized signals, allowing easy integration without adding electric wires, and distinguishing between authorized and unauthorized signals based on vehicle state.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a new dedicated communication line is physically added to the wire harness, then security against unauthorized intrusion is improved, but device complexity and manufacturing difficulty increase
Solution Approach 1:
The patent introduces a gateway device as an intermediary component that connects to the existing CAN bus through a standard connector. This gateway acts as a mediator between the unauthorized external access point and the vehicle's internal network, monitoring and filtering communication signals without requiring physical modifications to the wire harness structure. The gateway device implements security functions by analyzing signal patterns and blocking unauthorized commands while allowing legitimate communication to pass through.
Solution Approach 2:
The patent replaces the mechanical approach of adding physical dedicated communication lines with an electronic/software-based solution. Instead of modifying the physical wire harness structure, the security function is implemented through a gateway device that uses signal analysis, pattern recognition, and digital filtering to prevent unauthorized intrusion. This substitution transforms a mechanical structural modification problem into an electronic signal processing problem.
2Reliability
If a new dedicated communication line is physically added to the wire harness, then security against unauthorized intrusion is improved, but ease of manufacture deteriorates
Solution Approach 1:
The patent segments the security function from the wire harness structure by using a separate gateway device that connects via existing connectors. This segmentation allows the wire harness to be manufactured and assembled using standard procedures without integration of additional dedicated lines. The gateway device is installed as a separate module, enabling parallel manufacturing processes and simplifying assembly operations.
Solution Approach 2:
The gateway device is designed to connect to the existing CAN bus infrastructure using standard connectors and protocols, making it compatible with various vehicle models and wire harness configurations. This universal design allows the same gateway device to be applied across different vehicle platforms without requiring custom wire harness modifications, thereby maintaining ease of manufacture while providing security enhancements.
3Measurement precision
If communication is executed via dedicated line independent of CAN bus, then detection of impersonated signals is improved, but device complexity increases
Solution Approach 1:
The gateway device serves as an intermediary monitoring point on the existing CAN bus where all communication signals pass through. This position allows the gateway to analyze signal patterns, identify impersonated signals by comparing them against known legitimate patterns, and detect anomalies without requiring a separate dedicated communication line. The gateway intercepts and examines messages before they reach critical vehicle systems.
Solution Approach 2:
The gateway device implements feedback mechanisms by continuously monitoring CAN bus communication and providing real-time analysis of signal authenticity. When impersonated signals are detected, the gateway provides feedback by blocking these signals and can alert vehicle systems or log security events. This feedback loop enables dynamic detection and response to unauthorized intrusion attempts while maintaining normal communication flow for legitimate signals.
Data Source
AI summary
Instead of a joint connector, a function substitution unit is attached to a position where a plurality of communication lines of systems of a wire harness are concentrated. The function substitution unit includes a plurality of terminals for connection of CAN buses of a plurality of systems, and detects and blocks an unauthorized signal sent from an unauthorized device by distinguishing a position of each terminal from a region of a path through which a CAN signal passes.