In-Vehicle ECU Anomaly Detection for False Speed Messages
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In-vehicle networks are vulnerable to attacks where unauthorized ECUs transmit false messages, potentially leading to vehicle control issues and accidents, as existing security measures are inadequate in detecting and handling such anomalies.
Innovation Solution
An anomaly detection electronic control unit (ECU) is connected to the in-vehicle network, receiving speed and peripheral information messages to determine the vehicle's traveling state and identify anomalous messages, triggering appropriate processing to handle anomalies, such as invalidating diagnostic messages and notifying users or intervening in driving operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing security measures are used to reject diagnostic messages while the vehicle is moving, then some security protection is provided, but false messages with falsified speed information can still be transmitted to mislead the vehicle control system
Solution Approach 1:
The anomaly detection ECU continuously monitors speed information from multiple sources (speed sensor, peripheral information) and compares these values in real-time. When a discrepancy is detected between the speed information in diagnostic messages and the actual vehicle speed, the system generates an anomaly signal that triggers security responses, creating a feedback loop that dynamically protects against false messages
Solution Approach 2:
The anomaly detection ECU acts as an intermediary between the CAN network and the vehicle control system. It receives and validates diagnostic messages before they reach the control system, checking whether the speed information matches actual vehicle conditions. This intermediary layer filters out malicious messages without disrupting legitimate communication
2Ease of operation
If the vehicle control system accepts all received messages, then normal communication is maintained, but the system becomes vulnerable to attacks with falsified speed information
Solution Approach 1:
The anomaly detection ECU performs preliminary validation of diagnostic messages before they are processed by the vehicle control system. It checks whether the speed information in incoming messages matches the actual vehicle speed obtained from independent sensors. Only messages that pass this preliminary check are allowed to reach the control system, preventing falsified messages from causing harm
3Reliability
If anomaly detection is implemented by comparing speed information with peripheral information, then false messages can be detected, but additional processing complexity is introduced
Solution Approach 1:
The anomaly detection ECU utilizes existing peripheral information already present in the vehicle system (such as data from speed sensors and other ECUs) to perform anomaly detection. Rather than introducing entirely new sensing mechanisms, the system repurposes existing data sources to validate diagnostic messages, reducing the need for additional hardware while maintaining detection capability
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
An anomaly detection electronic control unit (11) connected to an in-vehicle network includes: a receiver (111) that receives a first communication message indicating speed information of a vehicle including the in-vehicle network and a second communication message indicating peripheral information of the vehicle; a traveling-state determiner (112) that determines a first traveling state of the vehicle based on the speed information and a second traveling state based on the peripheral information; an anomaly determiner (113) that determines, by comparing the first traveling state and the second traveling state determined by the traveling state determiner (112), that the first communication message is anomalous when the first traveling state is different from the second traveling state; and an anomaly processor (115) that executes processing to handle an anomaly when the first communication message is determined to be anomalous.