Electronic Control Device False Instruction Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current technologies are inadequate in detecting and mitigating false operation control instructions transmitted to in-vehicle networks, particularly failing to address abnormal acceleration and steering control instructions effectively.

Innovation Solution

An electronic control device and method that acquires state information about the vehicle and its environment, determining whether acceleration or steering control instructions are false by comparing them against actual states, and disabling such instructions to prevent unauthorized control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If an attacker transmits false operation control instructions to the in-vehicle network, then the vehicle can be compromised and controlled maliciously, but current detection technologies fail to identify these false instructions effectively

Engineering Contradiction:
Improvesecurity of in-vehicle networkVSAvoiddetection of false control instructions
Core Design Contradiction:
ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The system continuously monitors control instructions and compares them against expected operational patterns, creating a feedback loop that identifies deviations. The determination unit receives control instructions, compares them with state information, and feeds back decisions about authenticity, enabling continuous security verification without disrupting normal operations

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The gateway device acts as an intermediary between the in-vehicle network and external systems or between different network segments. It intercepts control instructions, performs authenticity determination, and only allows verified instructions to pass through, thereby protecting the network without requiring changes to all endpoint devices

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the system verifies all control instructions for authenticity, then security improves, but processing time and system complexity increase

Engineering Contradiction:
Improveauthentication of control instructionsVSAvoidprocessing time for instruction verification
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs verification on a selective basis rather than uniformly on all instructions. The determination unit focuses verification efforts on control instructions that exhibit suspicious characteristics or originate from untrusted sources, while allowing clearly valid instructions to pass through with minimal processing, thereby reducing overall verification time while maintaining security

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The system pre-establishes criteria for authentic control instructions based on vehicle state information and operational contexts before verification is needed. By preparing validation rules and expected parameter ranges in advance, the system can quickly compare incoming instructions against these pre-set criteria rather than performing complex analysis in real-time

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11440557B2Electronic control device, recording medium, and gateway device
Publication Date: 2022.09.13 PANASONIC AUTOMOTIVE SYST CO LTD
  • US11440557B2 patent drawing
  • US11440557B2 patent drawing
  • US11440557B2 patent drawing

AI summary

An electronic control device includes: an acquisition unit that acquires state information indicating at least one of a state of a movable body and a state of an external environment in which the movable body is moving, and a control instruction indicating at least one of a steering control instruction for steering the movable body and an acceleration control instruction for adjusting acceleration of the movable body; and a determining unit that determines whether the control instruction is a false control instruction based on the at least one state indicated by the state information acquired and control indicated by the control instruction acquired.