State-Based CAN Communication Filtering Against Malicious Messages
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
CAN networks face challenges in meeting the dynamic and flexible communication requirements of emerging technologies like autonomous driving and over-the-air updates, with increased risk of cyber attacks due to static communication configurations and lack of real-time channel establishment and termination capabilities.
Innovation Solution
A communication module that dynamically filters network traffic based on a configuration state and message properties, allowing or blocking communication according to predefined criteria, using a configuration unit and state management to adapt filtering and enhance security against malicious messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a static communication matrix filter is used, then message filtering is simple and reliable, but the system cannot adapt to dynamic communication requirements of new technologies
Solution Approach 1:
The patent implements dynamic filtering by transitioning from a static communication matrix to a state-based filtering mechanism. The communication module now evaluates messages based on current system states (e.g., driving mode, diagnostic state) and dynamically adjusts which messages are forwarded, allowing adaptation to changing communication requirements while maintaining manageable complexity through structured state management.
Solution Approach 2:
The system changes the filtering parameter from fixed message IDs in a static matrix to dynamic state-based criteria. The communication module now uses state parameters (such as operational modes, diagnostic states) to determine message forwarding decisions, enabling flexibility to accommodate new technologies like autonomous driving and over-the-air updates without requiring complete system redesign.
2Reliability
If all messages are allowed to pass through the bus, then communication flexibility is high, but the risk of cyber attacks and erroneous messages increases
Solution Approach 1:
The communication module acts as an intermediary between the CAN bus and the control unit. It intercepts messages on the bus, evaluates them against current state criteria, and selectively forwards only authorized messages. This intermediary function enhances security by blocking potentially harmful messages while maintaining operational simplicity through automated state-based decision-making, eliminating the need for complex manual filtering configurations.
3Adaptability or versatility
If dynamic state-based filtering is implemented, then communication security and flexibility improve, but the device complexity increases
Solution Approach 1:
The patent segments the filtering function into distinct components: state management (tracking system states), message evaluation (comparing messages against state criteria), and forwarding decisions (selective message transmission). This segmentation allows dynamic state-based filtering to be implemented in a modular, manageable way that reduces overall device complexity while maintaining high adaptability for future technologies.
Data Source
AI summary
A communication module for a user of a serial bus. The communication module is configured to receive a first message stream, encompassing a multitude of messages, via a first interface, and to provide a respective message of the first message stream as a message of a second message stream, as a function of a configuration state and as a function of at least one property of the respective message of the first message stream, via a second interface.