Dynamic Reference Time Generation for In-Vehicle Network Message Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current technologies for detecting unauthorized messages in in-vehicle networks lack accuracy, leading to potential erroneous detections and failures in identifying abnormal communication patterns.

Innovation Solution

A detection device and method that monitors authorized and unauthorized messages, generates a reference time based on transmission times, and updates statistical values to prevent erroneous detections by using a new reference time generated by adding the latest statistical value to the previous reference time when an abnormal message is detected.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If a fixed reference time is used for detecting unauthorized messages, then the detection process is simple, but the accuracy of detection deteriorates due to timing variations in message transmission

Engineering Contradiction:
Improvedetection process complexityVSAvoiddetection accuracy
Core Design Contradiction:
Device complexityVSMeasurement precision

Solution Approach 1:

The reference time is changed from a fixed value to a dynamic value that is updated based on statistical analysis of actual message transmission times. The detection device calculates the average time difference between consecutive authorized messages and uses this statistical value to dynamically adjust the reference time, allowing the detection system to adapt to natural variations in message timing while maintaining high detection accuracy

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The detection device implements a feedback mechanism where the reference time is continuously updated based on the statistical analysis of actual message transmission patterns. By calculating the average time difference from received authorized messages and feeding this information back into the reference time calculation, the system progressively improves its detection accuracy while maintaining operational simplicity

Inventive Principle:
Principle #23Feedback

2Measurement precision

If the reference time is updated frequently to improve accuracy, then the detection accuracy improves, but the system complexity and computational load increase

Engineering Contradiction:
Improvedetection accuracyVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

Instead of updating the reference time for every single message or using complex real-time adjustments, the system applies partial action by updating the reference time based on the average of multiple observed time differences. This statistical approach smooths out variations and provides stable reference values without requiring excessive computational resources or frequent updates

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The system changes the parameter of reference time from a static fixed value to a dynamically adjusted value based on statistical parameters (average time difference). By using statistical values derived from multiple observations, the system achieves high detection accuracy while keeping the update mechanism simple and computationally efficient

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11849324B2Detection device, vehicle, detection method, and detection program
Publication Date: 2023.12.19 AUTONETWORKS TECH LTD
  • US11849324B2 patent drawing
  • US11849324B2 patent drawing
  • US11849324B2 patent drawing

AI summary

A detection device includes: a monitoring unit configured to monitor, as target messages, an authorized message being periodically transmitted and the unauthorized message in the in-vehicle network; and a generation unit configured to generate a reference time to be used in a detection process of detecting the unauthorized message; a detection unit configured to perform detection process, based on time difference between a time corresponding to a transmission time of target message based on a monitoring result of the monitoring unit, and the reference time generated by the generation unit. When target message has been determined to be abnormal in the detection process, the generation unit, based on a value obtained by adding a latest statistical value to the reference time, generates a new reference time to be used in the detection process for a target message to be transmitted after the target message having been determined to be abnormal.