FlexRay Frame Timing Switching for In-Vehicle Anomaly Handling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing anomaly detection methods for in-vehicle networks using the FlexRay protocol are not applicable and security improvements are needed to reduce the impact of anomalous frames.
Innovation Solution
Anomaly handling method and device that dynamically change the transmission timing of frames in response to detected anomalies, using a switching process based on predetermined information to make it difficult for attackers to predict the new timing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If anomaly detection is performed in FlexRay network using predetermined communication intervals, then security against anomalous frames can be improved, but the method is not applicable because FlexRay uses TDMA scheme with fixed transmission timings
Solution Approach 1:
The patent applies dynamics by making the transmission timing of safety-critical frames changeable rather than fixed. The ECU dynamically adjusts transmission timing based on detection results of other frames, allowing the system to adapt to security threats while maintaining TDMA scheme compatibility. This resolves the contradiction by enabling security measures without requiring fixed predetermined intervals.
Solution Approach 2:
The patent changes the parameter of transmission timing from a fixed value to a variable that can be adjusted based on network conditions and security requirements. By modifying transmission timing parameters dynamically, the system achieves both security improvement and compatibility with FlexRay's TDMA architecture.
2Productivity
If transmission timing of frames is fixed according to slot numbers in TDMA scheme, then communication efficiency is improved, but security is worsened because attackers can predict transmission timings and inject anomalous frames
Solution Approach 1:
The patent makes transmission timing dynamic by allowing ECUs to adjust when they transmit frames based on detection results. This dynamic adjustment maintains communication efficiency by still using structured time slots while adding security through unpredictable timing changes that prevent attacker prediction.
Solution Approach 2:
The patent performs preliminary detection of frames before transmission timing is finalized. By detecting other frames first and then determining transmission timing based on those results, the system prepares security measures in advance while maintaining efficient communication.
3Reliability
If transmission timing is dynamically changed based on anomaly detection, then security is improved by making prediction difficult, but communication efficiency may be reduced due to timing adjustments
Solution Approach 1:
The patent applies local quality by making only safety-critical frames have changeable transmission timing while other frames maintain fixed timing. This selective approach improves security for important communications without significantly impacting overall communication efficiency of the network.
Solution Approach 2:
The patent applies partial action by dynamically changing timing only for specific frames that require enhanced security rather than all frames. This partial application of dynamic timing provides necessary security improvement while minimizing impact on overall communication efficiency.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An anomaly handling method in an in-vehicle network includes: transmitting and receiving frames; detecting a frame having an anomaly; and switching, when the anomaly is detected in the detecting (S3002: No), a transmission timing of the frame in which the anomaly is detected (S3004 to S3013). The switching includes changing a switched transmission timing to which the transmission timing is switched, according to predetermined information.