In-Vehicle Gateway Prioritization for Fraud Detection Traffic

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing in-vehicle network systems lack effective security measures to prevent fraudulent frame transmission, leading to increased network communication traffic and processing loads on fraud detection servers, which can result in delayed detection of fraudulent events.

Innovation Solution

An electronic control device that determines priority based on vehicle state, message identifiers, and fraud detection results, and notifies a fraud detection server of this information, allowing for efficient allocation of computational resources and immediate handling of high-priority notifications, thereby reducing the processing load on the server.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If information about in-vehicle networks is uploaded from a number of vehicles to a fraud detection server, then fraud detection capability is improved, but processing load of the server increases

Engineering Contradiction:
Improvefraud detection capabilityVSAvoidprocessing load of server
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system segments the fraud detection process by introducing local ECUs in each vehicle that perform preliminary fraud detection and filtering before uploading information to the central server. This segmentation reduces the volume of data requiring central processing while maintaining comprehensive fraud detection capability across the network.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements local quality by enabling each ECU to perform fraud detection using locally stored information about legitimate frames and nodes. This allows distributed intelligence where each node independently evaluates its own traffic, reducing the processing burden on the central server while improving overall detection reliability.

Inventive Principle:
Principle #3Local quality

2Measurement precision

If all in-vehicle network information is transmitted to the fraud detection server, then detection accuracy is improved, but network communication traffic increases

Engineering Contradiction:
Improvedetection accuracyVSAvoidnetwork communication traffic
Core Design Contradiction:
Measurement precisionVSQuantity of substance

Solution Approach 1:

The system extracts only the essential and suspicious information from in-vehicle networks for transmission to the fraud detection server. ECUs filter and select specific frame information, node identifiers, and anomaly indicators rather than transmitting complete network traffic data, thereby reducing communication overhead while preserving detection accuracy.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent applies partial action by transmitting a representative subset of network information that is sufficient for fraud detection purposes. Rather than exhaustive data collection, the system sends selectively filtered information that captures the essential patterns needed for accurate fraud detection while minimizing network traffic.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11838314B2Electronic control device, fraud detection server, in-vehicle network system, in-vehicle network monitoring system, and in-vehicle network monitoring method
Publication Date: 2023.12.05 PANASONIC INTELLECTUAL PROPERTY CORP OF AMERICA
  • US11838314B2 patent drawing
  • US11838314B2 patent drawing
  • US11838314B2 patent drawing

AI summary

A gateway that notifies a fraud detection server located outside a vehicle of information about an in-vehicle network system including an in-vehicle network includes: a priority determiner that determines a priority using at least one of: a state of the vehicle including the in-vehicle network system; an identifier of a message communicated on the in-vehicle network; and a result of fraud detection performed on the message; a frame transmitter-receiver that transmits and receives the message communicated on the in-vehicle network; a frame interpreter that extracts information about the in-vehicle network based on the message received by the frame transmitter-receiver; and a frame uploader that notifies the fraud detection server of notification information including the priority and the information about the in-vehicle network.