Diagnostic Connector Wake-Up Access Control for Vehicle ECUs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing methods for waking up vehicles for diagnostic purposes using the Ethernet activation line can lead to battery drain and deep discharge, as any OBD dongle can partially or fully wake up the vehicle without control, potentially causing unauthorized access and battery issues.
Innovation Solution
Implementing a system where the vehicle's ECU transitions to an active mode only upon successful authentication and authorization via a diagnostic connector, with a grace period for authentication, and reverts to standby or sleep mode if authentication or authorization fails, thereby controlling battery usage and restricting access to authorized tools and users.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the Ethernet activation line is used to wake up the vehicle for diagnostic purposes, then diagnostic access is enabled, but battery drain and deep discharge occur due to unauthorized or uncontrolled wake-up
Solution Approach 1:
The patent introduces an authentication and authorization system as an intermediary between the Ethernet activation line and the vehicle wake-up function. The ECU monitors authentication credentials and authorization tokens received through the diagnostic connector, and only permits wake-up when valid credentials are present. This mediator prevents unauthorized wake-up events that would cause battery drain while maintaining diagnostic accessibility for authorized tools.
2Adaptability or versatility
If the dedicated pin is enabled to wake up the vehicle, then remote diagnostic capability is improved, but security control is reduced allowing unauthorized access
Solution Approach 1:
The patent implements preliminary authentication and authorization actions before allowing the vehicle to wake up from the diagnostic connector. The ECU checks for valid authentication credentials and authorization tokens before transitioning from sleep/standby mode to active mode. This preliminary security check ensures that only authorized diagnostic tools can wake up the vehicle, maintaining security control while enabling remote diagnostic capability.
3Productivity
If the vehicle remains in active mode during diagnostics, then diagnostic activities can be performed, but battery energy is consumed continuously
Solution Approach 1:
The patent implements periodic monitoring of authentication credentials and authorization tokens during the diagnostic session. The ECU periodically verifies that the diagnostic tool maintains valid credentials and continues to have authorization. If authentication is lost or authorization expires, the vehicle transitions back to sleep/standby mode. This periodic verification allows diagnostic activities to proceed when authorized while automatically conserving battery energy when diagnostics are complete or unauthorized.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
A method comprising: receiving (1001), by a processor device of an electronic control unit (110), an indication for a vehicle to transition from an inactive mode (404) to an active mode (406); at least partially transitioning (1003)at least the ECU (110) of the vehicle to an active mode (406) responsive to receiving the indication; transitioning the at least the ECU (110) back to the inactive mode (404) in response to at least one of: determining (1005) that an authentication or an authorization was not received during a grace period; and determining (1007) that an authentication or an authorization failed during the grace period.