ECU Communication System for Fraudulent Message Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing communication systems face increased processing loads when dealing with fraudulent messages, as each Electronic Control Unit (ECU) needs to generate and verify Message Authentication Codes (MACs), leading to inefficiencies.

Innovation Solution

A communication system that includes a first and second electronic control unit connected via a communication bus, where the first ECU determines if a received message is fraudulent and outputs a notification signal to the second ECU to delete the message without generating or verifying a MAC, thereby reducing processing loads for both ECUs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If each ECU generates and verifies MAC to cope with fraudulent messages, then message authentication reliability is improved, but processing load of the ECU increases

Engineering Contradiction:
Improvemessage authentication reliabilityVSAvoidprocessing load of ECU
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent extracts the MAC generation and verification functions from the ECU to an external authentication server. The ECU only needs to send messages to the server and receive authentication results, eliminating the need for ECUs to perform complex MAC operations locally, thus reducing processing load while maintaining authentication reliability

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an authentication server as an intermediary between ECUs for message authentication. Instead of ECUs directly generating and verifying MACs, they communicate through the authentication server which handles the cryptographic operations, reducing the processing burden on ECUs while ensuring message authenticity

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If ECU processes all received messages including fraudulent ones, then message reception completeness is improved, but processing time increases

Engineering Contradiction:
Improvemessage reception completenessVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by having the authentication server authenticate messages before they are fully processed by the ECU. The server verifies MACs in advance and only forwards authenticated messages to ECUs, preventing fraudulent messages from entering the ECU processing pipeline and saving time

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10862687B2Communication system for suppressing a processing load of an ECU when dealing with fraudulent messages
Publication Date: 2020.12.08 TOYOTA JIDOSHA KK
  • US10862687B2 patent drawing
  • US10862687B2 patent drawing
  • US10862687B2 patent drawing

AI summary

A communication system includes a first electronic control unit configured to determine whether a reception message received from a communication bus corresponds to a communication message determined in advance to be transmitted to the communication bus by the first electronic control unit, determine whether the communication message is transmitted from the first electronic control unit to the communication bus, and output a notification signal that is a signal for causing the communication message that a second electronic control unit acquires from the communication bus to be deleted from the second electronic control unit when the first electronic control unit determines that the reception message corresponds to the communication message and determines that the communication message is not transmitted from the first electronic control unit to the communication bus.