CAN Relay Device Authentication via Parent-Child Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In vehicular networks using CAN technology, malicious replacement of communication nodes can lead to unintended actuation due to spoofed IDs, and existing authentication methods cannot identify the replaced node without modifying ECUs.
Innovation Solution
A system with a parent device and child devices connected through a CAN, where child devices register whitelisted IDs and report anomalies to the parent device, allowing identification of maliciously replaced ECUs by comparing received IDs with stored lists.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication processing is performed between each communication node and every other communication node, then detection capability of malicious replacement is improved, but processing load increases significantly
Solution Approach 1:
The patent segments the authentication function by introducing a parent device that performs authentication on behalf of multiple child devices. Instead of each communication node performing full authentication with all other nodes, the parent device authenticates with each child device individually, dividing the overall authentication task into smaller, manageable segments that reduce processing load while maintaining detection capability.
Solution Approach 2:
The parent device acts as an intermediary between child devices and the authentication system. It receives data frames from child devices, performs authentication processing using stored identification information, and determines whether to transmit the data frames to other communication nodes. This intermediary approach eliminates the need for each node to perform comprehensive authentication, significantly reducing individual processing loads.
2Reliability
If existing authentication methods are used, then network security is maintained, but ability to identify replaced nodes is lost
Solution Approach 1:
The patent implements a feedback mechanism where child devices report authentication results to the parent device. The parent device stores identification information of communication nodes and compares it with the identification information in data frames. When a mismatch is detected, the system can identify that a node has been replaced, providing precise identification capability while maintaining security through the authentication process.
Solution Approach 2:
The parent device performs preliminary authentication processing before data frames are transmitted between communication nodes. It pre-compares identification information from data frames against stored lists of legitimate node identifiers. This preliminary action allows the system to detect and identify replaced nodes before they can cause harm, maintaining both security and identification accuracy.
Data Source
AI summary
A communication relay device that is situated between a corresponding communication node and a bus in a communication network in which a plurality of communication nodes mutually perform a data communication through the bus. A storage configured to store therein pieces of identification information that are likely to be included in data transmitted by the corresponding communication node. A processor configured to perform first authentication processing between the communication relay device and a management device that is connected to the bus, and to perform second authentication processing according to a result of comparing identification information included in data transmitted by the corresponding communication node with the pieces of identification information stored in the storage. A transceiver configured to report, to the management device, a result of the second authentication processing when the first authentication processing has been successful.