In-Vehicle Message ID Blocking for ECU Anomaly Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing in-vehicle network security measures are costly and increase network traffic, as they require adding an IDS ECU or modifying CAN controllers to prevent unauthorized data transmission, which is not efficient in detecting anomalies.
Innovation Solution
An anomaly detection device is placed between ECUs and the network, using a communication circuit and processor to manage received and transmitted message IDs, blocking anomalous messages without adding an IDS ECU or modifying existing ECUs, by maintaining lists of valid IDs and preventing messages with unknown or unauthorized IDs from being transmitted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an IDS ECU is added to detect unauthorized messages, then anomaly detection capability is improved, but device complexity and cost increase
Solution Approach 1:
The patent introduces an anomaly detection device as an intermediary component positioned between the ECU and the in-vehicle network. This mediator intercepts messages, compares their IDs against registered valid IDs, and blocks unauthorized messages without requiring modification of existing ECUs or addition of complex IDS ECU systems. The intermediary approach achieves anomaly detection while maintaining system simplicity.
2Measurement precision
If hash values of unauthorized messages are transmitted to the network for comparison, then anomaly detection accuracy is improved, but network traffic load increases
Solution Approach 1:
The patent implements preliminary action by pre-registering valid message IDs in the anomaly detection device before normal operation begins. During runtime, the device directly compares incoming message IDs against this pre-established list of valid IDs, eliminating the need to transmit hash values or detection data across the network for comparison. This approach achieves high detection accuracy while minimizing network traffic.
3Reliability
If CAN controllers are modified to store and check message IDs, then unauthorized message blocking is improved, but ease of manufacture decreases due to high introduction cost
Solution Approach 1:
The patent applies segmentation by separating the anomaly detection function from the existing ECUs and CAN controllers. Instead of modifying multiple ECUs or controllers, the system divides functionality by introducing a dedicated, standalone anomaly detection device that handles all ID comparison and blocking operations. This segmentation reduces manufacturing complexity and introduction costs while maintaining effective unauthorized message blocking.
Data Source
AI summary
An anomaly detection device is located between a network and a first ECU in the plurality of ECUs, and includes: a communication circuit; a processor; and a memory including a set of instructions that, when executed, causes the processor to perform operations including: receiving a message from the first ECU and transmitting the message to the network, and receiving a message from the network and transmitting the message to the first ECU, using the communication circuit; holding, in the memory, a received ID list; when an ID of the message received by the communication circuit from the network is not included in the received ID list, adding the ID to the received ID list; and when an ID of the message received by the communication circuit from the first ECU is included in the received ID list, causing the communication circuit not to transmit the message to the network.