Dual-Path Power Storage Control for Cyberattack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current remote control systems for power storage devices are vulnerable to cyberattacks, particularly interference-type and falsification-type attacks, which make it difficult to accurately determine the presence of cyberattacks and ensure reliable operation.
Innovation Solution
A control system that uses two communication paths to transmit charging/discharging commands to a power storage device, allowing a determination unit to compare command values received via each path to detect and differentiate between cyberattacks, thereby ensuring accurate detection and prevention of falsification-type cyberattacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single communication path is used for remote control, then the system is simple to operate, but the system is vulnerable to cyberattacks and cannot accurately determine their presence
Solution Approach 1:
The communication system is segmented into multiple independent communication paths (first communication path and second communication path). Each path transmits commands independently, allowing the system to compare results and detect falsification-type cyberattacks by identifying discrepancies between parallel transmission channels.
Solution Approach 2:
The system implements feedback by comparing the command values received through different communication paths. The determination unit uses this feedback mechanism to detect whether a cyberattack has occurred, creating a self-verifying system that monitors its own communication integrity.
2Reliability
If command values are compared to detect interference-type cyberattacks, then the detection method is simple, but it cannot detect falsification-type cyberattacks where command and detection values coincide
Solution Approach 1:
The detection mechanism is segmented into multiple independent communication paths. By transmitting the same command through different paths and comparing the received values, the system can detect falsification-type cyberattacks that would otherwise be undetectable through single-path comparison.
Solution Approach 2:
The determination unit acts as an intermediary that mediates between multiple communication paths. It receives and compares command values from different paths, serving as a verification layer that identifies discrepancies indicating cyberattacks without requiring changes to the original communication protocols.
3Reliability
If remote control is implemented without verification, then the system is easy to operate, but the system cannot distinguish between legitimate and unauthorized commands
Solution Approach 1:
The system uses feedback from multiple communication paths to automatically verify command authenticity. The determination unit compares received commands and provides feedback on whether a cyberattack is detected, enabling automatic authorization verification without requiring manual intervention or complicating user operations.
Solution Approach 2:
The system performs self-service by automatically detecting and preventing cyberattacks through internal comparison of communication paths. The control target itself verifies the authenticity of received commands by comparing values from different paths, eliminating the need for external verification systems.
Data Source
AI summary
A control system includes a computer configured to remotely control at least one of charging and discharging of a power storage device mounted on a control target. The computer is configured to transmit a first command indicating charging power or discharging power of the power storage device to the control target via each of a first communication path and a second communication path. The control system further includes a determination unit configured to determine whether or not any one of the first communication path and the second communication path is under a cyberattack by using a second command received by the control target via the first communication path when the computer transmits the first command, and a third command received by the control target via the second communication path when the computer transmits the first command.