Vehicle ECU Abnormality Diagnosis for Failure vs Cyberattack
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods fail to distinguish between defects in vehicle ECUs caused by failures or cyberattacks, leading to delayed or inappropriate responses that can exacerbate damage or require unnecessary man-hours.
Innovation Solution
A state determination device with an extra-vehicular communication monitoring unit, code verification unit, device abnormality monitoring unit, and abnormality factor determination unit to identify whether an ECU abnormality is due to a failure or cyberattack by analyzing communication presence, code verification results, and device abnormalities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Duration of action of stationary object
If a log storage method prioritizing important logs is used in ECUs with limited resources, then long-term storage of critical logs is improved, but the ability to identify whether an abnormality is caused by failure or cyberattack deteriorates
Solution Approach 1:
The log data is segmented into multiple types including communication logs, code verification logs, and device abnormality logs. Each log type captures specific aspects of system operation, allowing comprehensive abnormality analysis while maintaining manageable storage requirements in resource-constrained ECUs.
Solution Approach 2:
The system adds a temporal dimension to log analysis by comparing communication patterns before and after abnormality occurrence. This dimensional approach enables cause identification without requiring additional storage capacity, as the same log data provides multiple analytical perspectives across different time points.
2Measurement precision
If communication monitoring and code verification are performed to identify abnormality causes, then abnormality factor identification accuracy is improved, but device complexity increases
Solution Approach 1:
The ECU's existing communication interface and processing units are made multi-functional by using them for both normal operation and security monitoring. The same communication bus transmits both operational data and security-relevant data, while existing processors execute both control functions and code verification, eliminating the need for dedicated monitoring hardware.
Solution Approach 2:
The system uses its own existing resources (communication interfaces, processors, memory) to perform monitoring and verification functions. The ECU monitors its own communication patterns, verifies its own code integrity, and analyzes its own log data, eliminating the need for separate external monitoring devices and reducing overall system complexity.
Data Source
AI summary
A state determination device is a state determination device which determines an abnormal state of an electronic control device mounted on a vehicle, the state determination device including: an extra-vehicular communication monitoring unit which monitors a presence or an absence of communication between the electronic control device and an outside of the vehicle; a code verification unit which executes code verification of the electronic control device; a device abnormality monitoring unit which monitors occurrence or non-occurrence of abnormality of the electronic control device; and an abnormality factor determination unit which determines a factor of an abnormality, wherein the abnormality factor determination unit identifies a factor of the abnormality based on a presence or an absence of communication, a result of the code verification, and existence or non-existence of the abnormality.