External Plausibility Check for Urea Dosing Manipulation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods are inadequate in detecting manipulations of vehicle components, particularly in urea dosing systems for selective catalytic reduction, as attackers can simulate sensor signals to evade detection, leading to environmental pollution and potential harm.

Innovation Solution

A method involving an external computing unit that performs a plausibility check on component-specific data using wireless communication, comparing it with reference data from other vehicles and environmental sources to identify deviations exceeding predefined thresholds, and potentially conducting active tests to confirm manipulation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If sensor signals are simulated to prevent detection of manipulation, then the reliability of manipulation detection is improved, but the device complexity increases due to additional manipulators

Engineering Contradiction:
Improvemanipulation detection reliabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent transitions from vehicle-internal diagnostic systems to cloud-based analysis, adding a spatial dimension (external computing unit) to the detection process. This allows comparison of sensor data across multiple vehicles and time periods, enabling detection of manipulations that would be invisible to single-vehicle systems while avoiding direct confrontation with the manipulator's simulated signals.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Solution Approach 2:

The system continuously receives sensor data from the vehicle, compares it against expected values from the external computing unit, and uses this feedback loop to detect deviations indicating manipulation. The external unit provides reference feedback that reveals when sensor signals are artificially simulated rather than reflecting actual component operation.

Inventive Principle:
Principle #23Feedback

2Loss of substance

If urea injection is prevented to save consumption, then the loss of substance is reduced, but the object-generated harmful factors increase due to nitrogen oxide emissions

Engineering Contradiction:
Improveurea consumptionVSAvoidnitrogen oxide emissions
Core Design Contradiction:
Loss of substanceVSObject-generated harmful factors

Solution Approach 1:

The patent treats urea as a consumable resource that can be monitored and optimized. By detecting manipulations that prevent urea injection, the system ensures urea is used only when actually needed for emission reduction, preventing both waste of the substance and uncontrolled harmful emissions.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

3Measurement precision

If sensor signals are manipulated to simulate correct operation, then the measurement precision appears maintained, but the reliability of the measurement system deteriorates

Engineering Contradiction:
Improvesensor signal accuracyVSAvoidmeasurement system reliability
Core Design Contradiction:
Measurement precisionVSReliability

Solution Approach 1:

The external computing unit acts as an intermediary between the vehicle's sensor system and the diagnostic evaluation. It receives raw sensor data, compares it against reference values from multiple sources, and independently determines whether manipulation is present. This intermediary layer prevents manipulators from directly influencing the final diagnostic conclusion.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP3667049B1Method for identifying a manipulated operation of a component of a vehicle
Publication Date: 2026.01.21 ROBERT BOSCH GMBH
  • EP3667049B1 patent drawingFigure 1~2
  • EP3667049B1 patent drawingFigure 3a~3b

AI summary

The invention relates to a method for detecting manipulated operation of a component of a vehicle (110), wherein component-specific data originating from the vehicle (110) is received in a separate computing unit (120) (211), wherein a plausibility check (220) of the component-specific data is performed in the separate computing unit (120) using data available in the separate computing unit (120), wherein a plausibility criterion (222) is derived from the data available in the separate computing unit (120), and wherein, based on a result of the plausibility check (220), it is evaluated whether manipulated operation of the vehicle component (110) is present. In particular, it is evaluated whether manipulation of a urea dosing system could be present, and if so, the urea dosing system is activated for testing purposes to assess a pressure drop.