On-Vehicle Network Security Test System for ECU Vulnerability Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security test methods for on-vehicle networks, such as those using fuzzing tests, are ineffective for control devices (ECUs) that do not return calculation process results to test signals, making it difficult to diagnose vulnerabilities and abnormal signal exchanges within the network.
Innovation Solution
A security test system comprising a security test unit that transmits random test signals, including illegal signals, and a function evaluation unit that acquires and analyzes process results to detect abnormalities, allowing for the diagnosis of ECU security without modifying the ECU, using a separate function evaluation unit to output abnormality information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If random test signals are transmitted to ECU via on-vehicle network, then security vulnerability detection is enabled, but the ECU cannot return process results to the test device
Solution Approach 1:
The patent introduces an intermediary device that connects between the test device and ECU. This intermediary captures process results from the ECU's communication bus and forwards them to the test device, enabling feedback without modifying the ECU itself. The intermediary acts as a mediator that bridges the information gap between test signals sent to ECU and process results that need to be observed.
2Adaptability or versatility
If ECU is modified to return process results, then security test capability is improved, but device complexity and modification requirements increase
Solution Approach 1:
Instead of modifying the ECU to return process results, the patent uses an intermediary device that copies process results from the ECU's communication bus. The intermediary intercepts and replicates the data flow, allowing the test device to observe process results without altering the ECU's internal structure or communication protocol.
3Device complexity
If functional evaluation unit is integrated with security test unit, then system complexity is reduced, but abnormality detection capability is compromised
Solution Approach 1:
The patent divides the testing system into two separate functional units: a security test unit that transmits test signals and a function evaluation unit that evaluates process results for abnormalities. This segmentation allows each unit to specialize in its respective function, with the function evaluation unit having dedicated capabilities for detecting abnormal process results that would be lost in an integrated system.
Data Source
AI summary
A security test can be performed on an ECU by using random test signals without changing the ECU. A security test system for a control device for an on-vehicle network, includes a security test unit that includes a test signal transmission portion transmitting random test signals including an illegal signal, for diagnosing security of a control device for an on-vehicle network, and a diagnosis portion specifying the illegal signal on the basis of a process result in the control device using the test signals, and a function evaluation unit that includes a process information acquisition portion acquiring information regarding the process result in the control device, an abnormality detection portion detecting abnormality in the process result in the control device based on the test signal, and an abnormality information output portion outputting information regarding the detected abnormality.