Vehicle CAN Node Security Module for Malicious Message Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle CAN communication systems are slow to detect and respond to malicious messages, as they require receiving the entire frame before determining if an attack signal is present, which can lead to delayed intervention in potential vehicle control attacks.
Innovation Solution
An apparatus and method that includes a security module within each node of the CAN network to monitor message identifiers in real-time, determining and blocking malicious messages by comparing received IDs with pre-registered IDs, and performing error processing when a matching ID is detected, even before the entire message frame is received.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the entire CAN message frame is received before determining if an attack signal is present, then the ID check can be performed accurately, but the response time to malicious messages is delayed
Solution Approach 1:
The patent applies preliminary action by monitoring and checking the message ID during the reception process before the entire frame is received. The security module compares the received ID with pre-registered allowed IDs in real-time, enabling early detection of malicious messages while maintaining accurate identification verification. This resolves the contradiction by performing the critical ID check operation in advance of complete frame reception.
2Loss of time
If real-time monitoring of CAN message IDs is performed during reception, then the response time to malicious messages is reduced, but the system complexity increases
Solution Approach 1:
The patent applies segmentation by dividing the security monitoring function into a separate dedicated security module that operates independently from the main CAN controller. This module specifically handles ID comparison and attack detection, allowing real-time monitoring without significantly complicating the overall system architecture. The segmentation isolates the security function, making it manageable and maintainable while achieving real-time response.
Solution Approach 2:
The patent uses an intermediary approach by introducing a pre-registered list of allowed IDs as a reference database that the security module compares against received message IDs. This intermediary structure enables efficient real-time comparison without requiring complex analysis algorithms, simplifying the monitoring system while maintaining effective attack detection capability.
3Reliability
If the security module monitors all CAN message IDs, then all malicious messages can be detected, but the processing load on the node increases
Solution Approach 1:
The patent applies partial action by having the security module monitor only the ID portion of the CAN message rather than analyzing the entire message frame. This selective monitoring approach provides sufficient security coverage for detecting most attacks while significantly reducing the processing load and energy consumption compared to full frame analysis. The ID-level monitoring captures the essential security requirement without excessive processing.
Data Source
AI summary
Provided is an apparatus for security of vehicle CAN communication including a security module unit included in each node of a vehicle CAN communication network and configured to monitor an identifier (ID) of each CAN message received through a CAN transceiver to determine whether the CAN message is a malicious CAN message to perform error processing, and a control unit configured to set an ID to be monitored by the security module unit and control the security module unit not to perform monitoring on the ID when the node transmits the CAN message.