Dynamic Mathematical Operator for Vehicle Intravehicular Security Breach Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Modern vehicle systems are vulnerable to hacking and malicious tampering due to their reliance on electronic communications, as conventional checksums are ineffective in detecting such breaches, allowing hackers to gain control of vehicle subsystems via buses like the CAN bus.

Innovation Solution

Incorporating a dynamic mathematical operator (DMO) in communication messages, along with a checksum, to differentiate between transmission errors and hacking attempts, using parameters that are not publicly known, and employing a Threat Assessment Gateway (TAG) to monitor and respond to potential security breaches by adjusting engine operating parameters.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If conventional checksums are used for error detection, then transmission errors can be detected, but hacking attempts cannot be differentiated from transmission errors

Engineering Contradiction:
Improveerror detection capabilityVSAvoidsecurity breach detection
Core Design Contradiction:
Measurement precisionVSReliability

Solution Approach 1:

The verification mechanism is segmented into two independent components: a conventional checksum for error detection and a secret mathematical operator for security verification. This segmentation allows each component to specialize in its specific function while working together to provide comprehensive protection.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A secret mathematical operator with non-public parameters acts as an intermediary layer between the transmitted data and the verification process. This intermediary transforms the data in a way that requires knowledge of secret parameters, thereby preventing hackers from successfully tampering with messages.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If a dynamic mathematical operator with secret parameters is added to messages, then hacking can be detected, but message complexity increases

Engineering Contradiction:
Improvesecurity breach detectionVSAvoidmessage structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The checksum and dynamic mathematical operator results are merged into a single verification process. Both verification mechanisms operate on the same message data and their results are combined to make the final acceptance decision, reducing the need for separate processing channels.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The system performs verification in stages: first the conventional checksum, then the dynamic mathematical operator. This partial action approach allows the system to quickly reject obviously erroneous messages with the simpler checksum before applying the more complex secret operator only when necessary.

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If secret parameters are used in the dynamic mathematical operator, then hacking detection improves, but key synchronization between sender and receiver becomes critical

Engineering Contradiction:
Improvehacking detectionVSAvoidkey management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system incorporates feedback mechanisms to monitor and maintain key synchronization between sender and receiver. When synchronization issues are detected, the system can trigger key updates or error correction procedures to restore proper functioning.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

Secret parameters are updated periodically or on an event-driven basis rather than remaining static. This periodic renewal of cryptographic material maintains security while providing structured opportunities to re-synchronize keys between communication parties.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS10516683B2Systems and methods for security breach detection in vehicle communication systems
Publication Date: 2019.12.24 FORD GLOBAL TECH LLC
  • US10516683B2 patent drawing
  • US10516683B2 patent drawing
  • US10516683B2 patent drawing

AI summary

Systems and methods for detection of security breaches in intravehicular communication systems are disclosed. In some embodiments, this may include intravehicular communication using messages sent with a checksum and a dynamic mathematical operator field. Errors in the checksum may be interpreted as ordinary transmission errors, whereas errors in the dynamic mathematical operator field may be interpreted as potential threats. Repeated errors in the dynamic mathematical operator, and/or unexpected messages in the intravehicular communications, may be interpreted as confirmed hacking. Upon confirmation of hacking, a warning may be issued to an operator and a vehicle safe mode may be entered, including restricting vehicle functionality.