Vehicle ECU Data Transmission with Selective Protection Policies
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing data communication demands in vehicle electrical systems, particularly with the adoption of IEEE 802.3 Ethernet, overwhelm hardware capabilities due to the high calculation requirements for data protection, necessitating an effective method to balance calculation resources while ensuring data security.
Innovation Solution
A data transmission method that selects appropriate protection policies for data based on importance, balancing calculation loads across ECUs by using different protection policies such as no protection, anti-replay attack, integrity protection, or confidentiality protection, and includes mechanisms like anti-replay counters and integrity check codes to manage data transmission efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If heavy data protection is applied to all Ethernet traffic, then data security is improved, but hardware performance requirements increase
Solution Approach 1:
The patent applies different protection policies to different data types based on their importance. Critical data (e.g., driver assistance, braking control) receives strong protection including encryption and integrity checks, while non-critical data (e.g., infotainment, diagnostics) receives lighter or no protection. This localized approach ensures data security for critical functions without uniformly increasing hardware performance requirements across all ECUs.
Solution Approach 2:
The patent segments Ethernet traffic into different categories based on data importance and applies protection policies accordingly. By dividing the data transmission into critical and non-critical segments, the system can allocate protection resources selectively, reducing overall computational burden while maintaining security for essential functions.
2Reliability
If multiple protection policies are implemented, then data security is improved, but calculation resources are consumed
Solution Approach 1:
The patent implements multiple protection policies selectively based on data importance. Critical data receives comprehensive protection (encryption, integrity protection, anti-replay mechanisms), while non-critical data receives minimal or no protection. This selective application of multiple protection policies maintains data security for essential functions without consuming excessive calculation resources across the entire system.
Solution Approach 2:
The patent applies full protection measures only to the extent necessary for critical data, rather than implementing all possible protection policies uniformly. By applying partial protection (or no protection) to non-critical data, the system avoids excessive consumption of calculation resources while maintaining adequate security for essential functions.
Data Source
AI summary
A data transmission method includes: a first electronic control unit (ECU) that obtains to-be-sent data. The first ECU determines a protection policy corresponding to the to-be-sent data from a plurality of protection policies, where the protection policies include a plurality of different encapsulation formats for the to-be-sent data and at least two protection policies with different calculation amounts for processing the to-be-sent data. The first ECU encapsulates the to-be-sent data according to the protection policy corresponding to the to-be-sent data to obtain an encapsulated packet. The first ECU sends the encapsulated packet to a second ECU, where the first ECU and the second ECU are any two ECUs in a vehicle.