ECU Layout and Bus Partitioning for In-Vehicle Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing in-vehicle network security measures are inadequate to prevent unauthorized access, particularly in car-sharing scenarios, leading to potential vehicle theft and data alteration, as they fail to detect spoofing and other attacks effectively.
Innovation Solution
The method involves determining the layout of ECUs by assessing access difficulty and changing the layout of ECUs with low security risk to different buses, ensuring robust physical security measures by minimizing access points.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If ECUs are arranged to minimize wire length and connector usage, then manufacturing cost and complexity are reduced, but security vulnerability increases due to easier physical access from certain positions
Solution Approach 1:
The patent applies local quality by differentiating security requirements for different ECU positions. ECUs arranged in easily accessible positions (front, sides, bottom of vehicle) are assigned higher security levels, while those in harder-to-reach positions can have lower security levels. This spatial differentiation of security properties resolves the contradiction by making security measures location-specific rather than uniform.
Solution Approach 2:
The patent implements preliminary action by pre-assessing physical accessibility during the ECU layout design phase. Before finalizing the arrangement, the system evaluates which positions are vulnerable to unauthorized access and proactively assigns appropriate security levels to ECUs in those positions, preventing security vulnerabilities before the vehicle is manufactured.
2Reliability
If security measures are enhanced for all ECUs, then unauthorized access is prevented, but manufacturing cost and system complexity increase
Solution Approach 1:
The patent applies local quality by making security measures location-specific rather than uniform across all ECUs. Only ECUs in easily accessible positions receive enhanced security measures, while those in protected positions use standard security. This resolves the contradiction by concentrating security resources where they are actually needed.
Solution Approach 2:
The patent implements partial action by applying enhanced security measures only to the extent necessary - specifically to ECUs in vulnerable positions - rather than uniformly to all ECUs. This partial application of security measures achieves adequate protection while avoiding unnecessary complexity and cost.
3Volume of moving object
If ECUs are densely packed to reduce vehicle space usage, then vehicle compactness is improved, but physical access control becomes more difficult
Solution Approach 1:
The patent applies local quality by evaluating each ECU's specific position within the dense packing arrangement to determine its accessibility. Even in compact configurations, ECUs located in easily reachable positions are identified and assigned higher security levels, while those buried deeper in the dense arrangement receive standard security.
Data Source
AI summary
ECU is laid out based on the number of wires and the diameter of the wires used in the in-vehicle networking. A dividing form of the electric wire for realizing the layout of the respective ECU is determined, and a position of the connector arranged at the dividing position and a number of the connectors are determined. It is determined whether or not an ECU having a lower access difficulty exists, and when the bus to which the security risk ECU is connected is a bus to which an ECU having a lower security level is connected, the security risk ECU is laid out on another bus to determine a construction in-vehicle network.