Fraud-Detection ECU for CAN Bus Malicious Frame Prevention

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In-vehicle networks using the CAN protocol are vulnerable to malicious frames transmitted by unauthorized nodes, which can lead to vehicle control malfunctions, as there is no inherent mechanism to differentiate between authorized and unauthorized frames.

Innovation Solution

A fraud-detection ECU is introduced that monitors frames for predetermined conditions indicative of fraud, such as unauthorized IDs or data ranges, and transmits an error frame to prevent malicious frames from being executed, using a method that includes determining fraud conditions in the ID, data, or message authentication codes, and counting error frames to identify malicious nodes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If the CAN protocol is used for in-vehicle network communication, then communication efficiency and simplicity are improved, but vulnerability to malicious frames increases

Engineering Contradiction:

Improvecommunication efficiencyVSAvoidsecurity against malicious frames

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent introduces a fraud-detection ECU as an intermediary component in the CAN network. This dedicated security node monitors incoming frames, verifies their authenticity using authentication codes, and blocks malicious frames before they reach other ECUs. The fraud-detection ECU acts as a mediator that maintains the simplicity of the original CAN protocol while adding necessary security functionality.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements preliminary authentication verification of frame authentication codes before frames are processed by ECUs. The fraud-detection ECU checks the authentication code in advance, and only allows frames with valid authentication codes to proceed. This preliminary action prevents malicious frames from executing harmful processes while maintaining normal communication flow.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If authentication verification is added to CAN protocol frames, then security against malicious frames is improved, but communication overhead and complexity increase

Engineering Contradiction:

Improvesecurity against malicious framesVSAvoidprotocol complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent makes the authentication verification functionality universal by implementing it in a dedicated fraud-detection ECU that serves the entire network. Rather than requiring every ECU to have authentication capabilities, one multi-functional fraud-detection ECU performs authentication for all frames, reducing overall system complexity while maintaining security.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The fraud-detection ECU performs self-service by autonomously monitoring all incoming frames, verifying their authentication codes, and blocking malicious frames without requiring intervention from other ECUs. This self-service approach centralizes the complexity in one component while keeping the rest of the network simple.

Inventive Principle:

Principle #25Self-service

3Measurement precision

If fraud-detection ECU monitors all frames for authentication codes, then detection precision of malicious frames is improved, but processing time and energy consumption increase

Engineering Contradiction:

Improvedetection precision of malicious framesVSAvoidenergy consumption of fraud-detection ECU

Core Design Contradiction:

Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The fraud-detection ECU implements partial verification by focusing authentication checks on critical frames that could pose security risks, rather than uniformly verifying every single frame with equal depth. This selective approach maintains high detection precision for malicious frames while reducing overall processing burden and energy consumption.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS11595422B2Method for preventing electronic control unit from executing process based on malicious frame transmitted to bus

Publication Date: 2023.02.28 PANASONIC INTELLECTUAL PROPERTY CORP OF AMERICA

AI summary

A method for use in a network communication system including a plurality of electronic controllers that communicate with each other via a bus in accordance with a Controller Area Network (CAN) protocol determines whether or not content of a predetermined field in a frame which has started to be transmitted meets a predetermined condition indicating fraud. In a case where the content of the predetermined field meets the predetermined condition, a frame including predetermined consecutive dominant bits for notifying an anomaly is transmitted before an end of the frame is transmitted. A number of times the frame including the predetermined consecutive dominant bits is transmitted is recorded for each identifier (ID) represented by content of an ID field included in a plurality of frames which has been transmitted. A malicious electronic controller is determined in accordance with the number of times recorded for each ID.