Networked Control Unit Mode Change Consensus Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In modern vehicles with networked components, the risk of intrusion via manipulated network signals can deactivate safety mechanisms, allowing individual control units to change modes without consensus, potentially leading to unsafe operating states.
Innovation Solution
A method where control units in a network synchronize status information and require agreement from all units before changing modes, ensuring compatibility and integrity through checks based on distributed state vectors and Byzantine error models to prevent unauthorized mode changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If individual control units are allowed to change modes independently based on network signals, then system adaptability and responsiveness are improved, but system reliability and safety deteriorate due to potential intrusions and incompatible state combinations
Solution Approach 1:
The patent implements a feedback mechanism where control units broadcast their current operating states to the network and receive feedback from other units. Before changing mode, a control unit must verify that the requested state transition is compatible with the current states of other control units. This feedback loop prevents incompatible mode changes while allowing legitimate adaptability, resolving the contradiction between responsiveness and safety.
Solution Approach 2:
The patent introduces an intermediary verification process where control units act as mediators for each other's mode changes. When one control unit requests a mode change, other control units verify the compatibility of this change with their current states before allowing the transition. This intermediary check prevents intrusions from causing unsafe state combinations while maintaining system adaptability.
2Reliability
If safety mechanisms with limiters are implemented in control units, then system reliability is improved, but device complexity increases due to additional safety verification processes
Solution Approach 1:
The patent implements a universal safety mechanism where all control units in the network perform the same safety verification functions. Each control unit is equipped with the capability to both send and receive state information and to verify compatibility of mode changes. This multi-functional approach distributes the safety burden across all units rather than requiring complex centralized safety systems, reducing overall device complexity while maintaining high reliability.
3Reliability
If all control units must agree before mode changes occur, then system reliability is improved, but productivity and response time deteriorate due to consensus requirements
Solution Approach 1:
The patent implements a partial consensus mechanism where control units verify compatibility with the most critical safety-related states of other units rather than requiring full consensus on all operational parameters. This selective verification approach maintains reliability for safety-critical transitions while reducing the overhead and time required for mode changes, thus improving productivity without sacrificing integrity.
Data Source
AI summary
A method for operating a control unit in a network of control units, including the following features: a request to change a mode of the network is received, the request is subjected to a check, which provides a check result; a communication is disseminated to the remaining control units and a response is received in each case with respect to the check result and to a status of the network known to the control unit; and the request is complied with or rejected as a function of the responses.