ECU Authentication via Bus Voltage Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In vehicle electronic control systems, the lack of a source identifier in some bus protocols makes it difficult to identify compromised ECUs that may be injecting malicious messages into the network, leading to unintended vehicle operations.
Innovation Solution
A system that determines a unique signature for each ECU based on bus voltages, using classifier circuitry to identify the transmitting ECU and filter out ACK bit voltages to enhance authentication accuracy, and updates feature set values to account for variations in ECU transceiver characteristics over time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If bus protocols are used without source identifiers to simplify communication, then device complexity is reduced, but the ability to identify compromised ECUs deteriorates
Solution Approach 1:
The patent introduces an intermediary authentication mechanism that operates at the voltage signal level rather than modifying the message protocol. The receiving ECU measures bus voltages during message transmission and uses these physical layer characteristics to identify the transmitting ECU, thereby maintaining protocol simplicity while enabling source identification through a separate authentication channel.
Solution Approach 2:
The patent transitions from identifying ECUs through logical message content (which lacks source identifiers) to identifying ECUs through physical voltage characteristics. By measuring voltage levels, rise times, and signal patterns in the time domain, the system creates a new dimension of identification that operates parallel to the existing message protocol without interfering with it.
2Measurement precision
If voltage measurements are used to identify transmitting ECUs, then source identification accuracy is improved, but the system becomes susceptible to ACK bit interference
Solution Approach 1:
The patent performs preliminary measurements of ACK bit voltage patterns during normal operation to establish baseline characteristics. By pre-characterizing the voltage signatures of ACK bits from different ECUs, the system can later subtract or filter these known patterns from incoming voltage measurements, isolating the transmitting ECU's voltage signature from the ACK interference.
Solution Approach 2:
The patent applies different analysis methods to different portions of the voltage signal. Instead of treating the entire voltage measurement uniformly, the system identifies specific time windows corresponding to data bits versus ACK bits, and applies targeted analysis only to the relevant portions. This localized approach allows accurate identification of the transmitting ECU by focusing on voltage characteristics during data transmission while excluding ACK bit periods.
3Adaptability or versatility
If ECU transceiver characteristics are allowed to vary over time, then adaptability to environmental changes is improved, but authentication reliability deteriorates
Solution Approach 1:
The patent implements a dynamic authentication system that adapts to changes in ECU transceiver characteristics over time. Instead of using fixed voltage thresholds, the system continuously learns and updates the voltage signatures of each ECU, adjusting to environmental variations, temperature changes, and component aging. This dynamic adaptation maintains authentication reliability by tracking each ECU's evolving characteristics rather than comparing against static references.
Solution Approach 2:
The system incorporates feedback mechanisms where authentication results and voltage measurements are continuously monitored and used to refine the voltage signatures of each ECU. By feeding back observed variations in transceiver characteristics, the system automatically adjusts its authentication criteria to account for legitimate changes while maintaining discrimination against malicious messages.
Data Source
AI summary
One embodiment provides an electronic control unit (ECU) for a vehicle. The ECU includes transceiver circuitry, voltage measurement circuitry and feature set circuitry. The transceiver circuitry is to at least one of send and/or receive a message. The voltage measurement circuitry is to determine at least one of a high bus line voltage (VCANH) value and/or a low bus line voltage (VCANL) value, for each zero bit of at least one zero bit of a received message. The received the message includes a plurality of bits. The feature set circuitry is to determine a value of at least one feature of a feature set based, at least in part, on at least one of a high acknowledge (ACK) threshold voltage (VthH) and/or a low ACK threshold voltage (VthL). The feature set includes at least one of an operating most frequently measured VCANH value (VfreqH2) of a number of VCANH values and/or an operating most frequently measured VCANL value (VfreqL2) of a number of VCANL values.