Dual-Control ECU Frame Validation for In-Vehicle Bus Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In-vehicle network systems face challenges in preventing the delivery of unauthorized frames to the bus, which can lead to unauthorized vehicle control and increased bus load.
Innovation Solution
An electronic control unit (ECU) with dual control circuits is implemented, where one control circuit performs a first determination process on received frames to check conformity with a rule related to reception interval, and the other control circuit performs a second determination process to check conformity with a different rule, thereby reducing the delivery of unauthorized frames.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single control circuit performs frame reception and processing, then the device complexity is low, but the ability to detect and prevent unauthorized frames is insufficient
Solution Approach 1:
The control circuit is divided into a first control circuit and a second control circuit. The first control circuit performs initial frame format validation and reception interval checking, while the second control circuit performs additional validation rules. This segmentation allows the system to detect unauthorized frames more reliably without requiring a single overly complex control circuit, as each circuit handles specific validation tasks.
2Reliability
If frame validation rules are strictly enforced, then unauthorized frames are prevented, but the processing time and system responsiveness increase
Solution Approach 1:
The first control circuit performs preliminary validation of received frames by checking basic format compliance and reception intervals before the frames are fully processed by the second control circuit. This preliminary action filters out obviously unauthorized frames early in the reception process, preventing them from consuming additional processing time while maintaining strict validation requirements.
3Reliability
If multiple validation rules are applied to received frames, then the security against unauthorized control is improved, but the bus load increases
Solution Approach 1:
The validation process is extracted from the main bus communication flow and performed by dedicated control circuits that monitor frame characteristics. The first control circuit extracts and validates basic frame parameters such as format and reception interval, while the second control circuit extracts and validates additional security parameters. This extraction allows multiple validation rules to be applied without significantly increasing the burden on the main bus, as the validation occurs in parallel monitoring paths.
Data Source
AI summary
An electronic control unit is connected to an in-vehicle network in an in-vehicle network system. The electronic control unit includes a first control circuit that operates on a first operating system and a second control circuit that operates on a second operating system. The first control circuit is connected to the network via the second control circuit. The first control circuit performs a first determination process on a frame that is transmitted to the in-vehicle network, and determines conformity of the frame with a first rule. The second control circuit performs a second determination process on the frame, that is received from the first control circuit, and determines conformity of the frame with a second rule. Upon determining that the frame conforms to the second rule, the second control circuit transmits the frame to the in-vehicle network.