Fault-Tolerant Distributed CAN Messaging with Dynamic Identifiers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing fault tolerant systems in distributed computing are inadequate in addressing asymmetric faults and cyber-attacks, leading to consensus problems and data manipulation, particularly in critical systems like automotive networks.
Innovation Solution
A method involving the generation and transmission of at least three fault tolerant messages identified by unique fault tolerant identifiers (FTIDs) over a communication channel, such as a CAN bus, to ensure resilient data transmission and detection of anomalies, with mechanisms for reassigning tasks and dynamically shuffling identifiers to maintain system integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional fault tolerant systems use redundancy or replication, then system reliability is improved, but the system cannot detect or handle asymmetric faults and cyber-attacks effectively
Solution Approach 1:
The system segments fault detection by creating multiple independent message paths with different identifiers. Each message is transmitted through separate communication channels with unique FTIDs, allowing the system to detect asymmetric faults by comparing results across segmented paths rather than treating all communication as a single unit.
Solution Approach 2:
The system intentionally introduces asymmetry through dynamic FTID shuffling and random identifier assignment. By varying message identifiers dynamically and assigning them asymmetrically across different communication channels, the system prevents attackers from predicting or manipulating specific identifier patterns, thereby detecting asymmetric faults and cyber-attacks.
2Difficulty of detecting and measuring
If the system transmits multiple fault tolerant messages with different identifiers, then detection capability is improved, but communication complexity increases
Solution Approach 1:
The system employs dynamic FTID assignment and shuffling mechanisms where message identifiers are not fixed but change over time and across different transmissions. This dynamic approach improves detection capability by preventing pattern recognition by attackers while managing complexity through algorithmic generation rather than hardcoding multiple static identifier sets.
Solution Approach 2:
The system changes the identifier parameter dynamically through shuffling and randomization. By varying the FTID parameter across messages and time periods, the system enhances fault detection without requiring fundamentally different communication protocols, thereby managing complexity through parameter variation rather than structural complexity.
3Ease of manufacture
If the system uses static identifier assignment, then implementation simplicity is maintained, but the system becomes vulnerable to predictable attacks
Solution Approach 1:
The system performs preliminary randomization and shuffling of FTIDs before message transmission. By pre-generating and assigning random identifiers to messages before they are sent, the system eliminates predictability in identifier assignment while maintaining implementation simplicity through algorithmic processes rather than complex runtime decision-making.
Solution Approach 2:
The system creates multiple copies of messages with different FTID assignments. By generating replicated messages with varied identifiers through systematic copying and modification rather than creating entirely unique communication paths, the system maintains implementation simplicity while achieving unpredictability through identifier variation.
Data Source
AI summary
Methods, systems, and techniques for fault tolerant distributed computing. At least three fault tolerant messages are generated. The generating involves obtaining a first initial message identifier; mapping the initial message identifier to at least three different fault tolerant identifiers; and using the at least three different fault tolerant identifiers to identify the at least three fault tolerant messages. The at least three fault tolerant messages are then transmitted along at least one communication channel. The at least one communication channel may be a Controller Area Network (CAN) bus and the initial message identifier may be a CAN identifier.