Hardware Security Module for ECU Voltage Fingerprinting

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Vehicle control networks (VCNs) and other non-traditional computing platforms are vulnerable to security breaches due to increased connectivity and data exchanges, particularly with single-point network gateways and software-based solutions being susceptible to remote unauthorized access.

Innovation Solution

A security platform that includes a hardware module connected to electronic control units (ECUs) for centralized communication and security assessment, providing encryption, attack detection, ECU fingerprinting, authentication, and message modification prevention, along with a next-generation firewall to protect against malicious modifications and unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If a single-point network gateway and software-based solutions are used for vehicle control networks, then device complexity is reduced and ease of manufacture is improved, but security reliability deteriorates due to susceptibility to remote unauthorized access and security breaches

Engineering Contradiction:
Improvenetwork gateway structureVSAvoidsecurity reliability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent segments the network gateway functionality into two distinct components: a hardware-based security module and a software-based network gateway. The security module is physically separated from the main gateway and positioned between external networks and the vehicle control network, creating distinct security zones. This segmentation allows the gateway to maintain simplicity while the separate hardware module provides enhanced security protection against remote unauthorized access.

Inventive Principle:
Principle #1Segmentation

2Reliability

If hardware-based security modules are integrated into each electronic control unit, then security reliability is improved through distributed security assessment, but device complexity and manufacturing difficulty increase

Engineering Contradiction:
Improvesecurity reliabilityVSAvoidsystem architecture
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the security assessment functionality from individual electronic control units and consolidates it into a centralized hardware security module. Instead of distributing security hardware across multiple ECUs, the security module is positioned as a separate entity that monitors and assesses security for the entire vehicle control network, thereby maintaining high security reliability while reducing overall system complexity.

Inventive Principle:
Principle #2Taking out (Extraction)

3Object-affected harmful factors

If voltage monitoring and fingerprinting are implemented for ECU authentication, then security against unauthorized access is improved, but measurement precision requirements and device complexity increase

Engineering Contradiction:
Improveunauthorized access protectionVSAvoidvoltage measurement precision
Core Design Contradiction:
Object-affected harmful factorsVSMeasurement precision

Solution Approach 1:

The patent implements preliminary action by pre-establishing voltage fingerprints for each ECU during a calibration phase before the ECU is deployed in the vehicle. These fingerprints are stored in the hardware security module and used for subsequent authentication. This preliminary fingerprinting approach simplifies real-time authentication operations and reduces the precision requirements during runtime, as the comparison is against pre-stored reference values rather than requiring high-precision real-time measurements.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3596902B1Electronic control unit protection framework using security zones
Publication Date: 2025.01.01 CYLANCE INC
  • EP3596902B1 patent drawingFigure 1
  • EP3596902B1 patent drawingFigure 2
  • EP3596902B1 patent drawingFigure 3

AI summary

Systems are provided herein for a hardware protection framework. A security module monitors a plurality of voltage lines of at least one electronic control unit (ECU) electrically coupled to a communications bus. A voltage differential across at least two of the plurality of voltage lines of the at least one ECU is measured. The voltage differential is compared to a plurality of predetermined signal fingerprints associated with the at least one ECU. A variance in the compared voltage differential is identified relative to one or more of the plurality of predetermined signal fingerprints. Data characterizing the identified variance is provided. In some aspects, a pulse or a data stream is injected based on the voltage differential having an amplitude lower than a predetermined voltage threshold.