Vehicle ECU Message Verification for Low-Latency Spoofing Defense
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle communication networks face challenges in achieving low latency and high security, particularly in the presence of spoofing attacks, as current verification methods are deterministic and can be exploited by malicious actors.
Innovation Solution
A nondeterministic message verification system that selectively verifies a subset of messages based on previous trust status, using message authentication codes to set current trust status, thereby reducing latency and enhancing security by making spoofing attacks less predictable.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If deterministic message verification is used, then security can be ensured, but latency increases and predictability of spoofing attacks rises
Solution Approach 1:
The patent applies dynamics by transitioning from deterministic to nondeterministic message verification. The verification process dynamically adapts its behavior based on trust status, selectively verifying messages rather than all messages, thereby reducing latency while maintaining security. The nondeterministic selection of messages for verification prevents attackers from predicting which messages will be checked, disrupting spoofing attacks.
2Reliability
If all messages are verified, then security is maximized, but message delivery speed decreases
Solution Approach 1:
The patent implements partial action by verifying only a subset of messages rather than all messages. The system selectively verifies messages based on nondeterministic selection and trust status, performing verification only when necessary to maintain security. This partial verification approach maintains security while allowing faster message delivery for unverified messages when trust status permits.
3Device complexity
If deterministic verification is implemented, then verification process is simple, but spoofing attacks become predictable
Solution Approach 1:
The patent applies preliminary action by establishing trust status before message verification. The system pre-establishes a trust status based on previous message verifications, and this trust status guides subsequent verification decisions. This preliminary trust assessment allows the system to nondeterministically select which messages to verify, making spoofing attacks unpredictable while maintaining a relatively simple verification process.
Data Source
AI summary
A computer includes a processor and a memory, and the memory stores instructions executable by the processor to nondeterministically select a message from a plurality of messages, the messages including respective message authentication codes; set a current trust status by verifying the message authentication code from the selected message; and forward the selected message to a recipient in response to a previous trust status being trusted.