FlexRay Frame Timing Control for In-Vehicle Anomaly Containment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing anomaly detection methods for in-vehicle networks, such as those using the CAN protocol, are not applicable to FlexRay networks with a TDMA scheme, and there is a need for enhanced security measures to prevent unauthorized frame transmission in in-vehicle networks.
Innovation Solution
An anomaly handling method and device that detect anomalous frames in in-vehicle networks and dynamically switch the transmission timing of such frames based on predetermined information, including error counts, transmission times, and risk levels, to prevent unauthorized access and maintain network security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If anomaly detection is performed using fixed communication intervals as in CAN protocol, then anomaly detection can be implemented, but the method is not applicable to FlexRay networks with TDMA scheme where communication is performed at predetermined timings
Solution Approach 1:
The patent applies dynamics by making the transmission timing of safety-critical frames dynamic and unpredictable. Instead of using fixed communication intervals, the system varies the transmission timing within acceptable ranges, making it difficult for attackers to predict when anomalies will occur and when to inject malicious frames. This dynamic timing adjustment maintains anomaly detection capability while adapting to FlexRay's TDMA scheme.
Solution Approach 2:
The system changes the timing parameter of frame transmission from a fixed value to a variable range. By adjusting the transmission timing parameter dynamically based on predetermined information, the system maintains communication reliability while preventing predictable anomaly patterns that attackers could exploit in TDMA-based FlexRay networks.
2Reliability
If transmission timing of frames is switched dynamically based on predetermined information, then the range of influence by anomalous frames is reduced, but the complexity of transmission timing control increases
Solution Approach 1:
The system performs preliminary actions by pre-defining multiple transmission timings and predetermined information sets before actual communication occurs. When an anomaly is detected, the system switches to a pre-planned alternative timing based on the predetermined information, avoiding the need for complex real-time decision-making and reducing control complexity while maintaining security.
Solution Approach 2:
The patent introduces an intermediary mechanism (the anomaly detection and timing switching device) that mediates between the frame transmission system and potential anomalies. This intermediary monitors transmission timings, detects anomalies, and automatically switches to alternative timings, isolating the complexity of timing control from the main communication system and simplifying overall control.
3Productivity
If fixed transmission timing is used in TDMA scheme, then communication efficiency is maintained, but attackers can predict transmission timing and inject anomalous frames more easily
Solution Approach 1:
The system makes transmission timing dynamic by varying it within acceptable ranges while maintaining the TDMA structure. This dynamic approach prevents attackers from predicting exact transmission moments, reducing anomaly injection risk while preserving communication efficiency through structured timing slots and predictable patterns within the variation range.
Data Source
AI summary
An anomaly handling method in an in-vehicle network includes: transmitting and receiving frames; detecting a frame having an anomaly; and switching, when the anomaly is detected in the detecting, a transmission timing of the frame in which the anomaly is detected. The switching includes changing a switched transmission timing to which the transmission timing is switched, according to predetermined information.