Gateway Device Selective MAC Removal for Vehicle Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicle network systems lack efficient mechanisms to manage message authentication codes (MACs) in CAN networks, leading to inefficiencies and security vulnerabilities, particularly when transferring frames between ECUs without verification functions.
Innovation Solution
A gateway device that selectively removes or adds MACs from frames based on specific conditions, such as the presence of verification-enabled ECUs or bus occupation rates, to optimize frame transfer and enhance security by reducing unnecessary processing and bus occupation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If MAC verification is performed on all frames in the vehicle network, then security against unauthorized frame transmission is improved, but processing load and bus occupation time increase for ECUs without verification functions
Solution Approach 1:
The patent segments the vehicle network into security zones by dividing ECUs into verification-enabled groups and non-verification groups. The gateway device performs MAC verification only on frames from verification-enabled ECUs before forwarding to non-verification ECUs, while ECUs without verification functions can operate without MAC processing. This selective segmentation resolves the contradiction by applying security measures only where necessary.
Solution Approach 2:
The gateway device acts as an intermediary between verification-enabled ECUs and non-verification ECUs. It receives frames with MACs from verification-enabled ECUs, performs MAC verification, and forwards verified frames to non-verification ECUs after removing or retaining MACs as needed. This intermediary approach allows security to be maintained at the gateway level rather than requiring all ECUs to have verification capabilities.
2Reliability
If MAC information is retained in all transferred frames, then security verification capability is improved, but traffic volume and bus occupation time increase
Solution Approach 1:
The patent applies local quality by making MAC retention decisions based on the specific characteristics of the destination ECU and frame type. The gateway device removes MACs from frames destined for non-verification ECUs to reduce traffic volume, while retaining MACs in frames destined for verification-enabled ECUs or frames requiring security tracking. This localized approach optimizes traffic volume while maintaining necessary security verification capability.
3Reliability
If all ECUs are equipped with MAC verification functions, then security against unauthorized frames is improved, but device complexity and cost increase
Solution Approach 1:
The gateway device serves multiple functions: it acts as a router for frame forwarding, a security verification unit for MAC validation, and an adapter between verification-enabled and non-verification ECUs. By concentrating these multiple functions in the gateway, the system achieves comprehensive security without requiring all ECUs to have complex verification capabilities, thus resolving the contradiction between security and device complexity.
Data Source
Figure 1
Figure 2(a)~2(b)
Figure 3
AI summary
A gateway (90) connected to a bus (10), a bus (20), and the like used by a plurality of electronic control units for communication includes a frame communication unit (901) that receives a frame, a transfer control unit (906) that removes verification information used to verify a frame from the content of the frame received by the frame communication unit (901) and transfers the frame to a destination bus or that adds verification information to the content of the frame and transfers the frame to the destination bus, and the like.