Heartbeat Scheduling for Low-Latency TSN Desynchronization Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional intrusion detection systems (IDS) in time-synchronized networks (TSNs) are unable to detect desynchronization attacks quickly enough, particularly in systems with strict time requirements, leading to potential catastrophic failures due to the latency of existing detection methods.

Innovation Solution

Implementing a low-latency heartbeat message system with cryptographic timestamps and higher priority scheduling to enable rapid detection, quantification, and localization of desynchronization attacks through an IDS, using machine learning models to analyze immutable timestamps.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional intrusion detection systems are used in TSNs, then system complexity remains manageable, but detection speed and reliability are insufficient for real-time safety-critical applications

Engineering Contradiction:
Improvedetection reliabilityVSAvoiddetection latency
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary action by deploying heartbeat monitoring that continuously tracks timing deviations before they manifest as complete desynchronization attacks. The system performs preliminary detection of timing anomalies through scheduled heartbeat messages that monitor clock drift and scheduling violations in advance, enabling early warning and prevention rather than reactive response after failures occur.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent employs feedback mechanisms where the intrusion detection system continuously monitors network timing behavior, compares actual timing against expected parameters, and adjusts detection thresholds and alerts in real-time. The feedback loop processes heartbeat message timing deviations, updates statistical models of normal behavior, and dynamically adapts detection sensitivity to maintain optimal performance under varying network conditions.

Inventive Principle:
Principle #23Feedback

2Speed

If higher priority scheduling is implemented for heartbeat messages, then detection speed improves, but device complexity increases

Engineering Contradiction:
Improvedetection speedVSAvoidscheduling complexity
Core Design Contradiction:
SpeedVSDevice complexity

Solution Approach 1:

The patent applies segmentation by separating detection traffic into distinct heartbeat messages with higher priority scheduling, independent from regular data traffic. This segmentation allows the monitoring system to use dedicated scheduling resources and priority queues, ensuring fast delivery of timing information without interfering with normal network operations and avoiding the need for complex global priority management.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces heartbeat messages as intermediary carriers that mediate between network nodes and the intrusion detection system. These specialized messages serve as intermediaries for timing information exchange, allowing the detection system to operate at higher priority without requiring fundamental changes to the underlying network architecture or scheduling mechanisms.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Measurement precision

If cryptographic timestamps are used for authentication, then security and measurement precision improve, but computational requirements and device complexity increase

Engineering Contradiction:
Improvetimestamp precisionVSAvoidcryptographic processing complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent applies partial action by implementing cryptographic timestamps only at critical network nodes and for critical timing measurements, rather than universally across all traffic. The system uses cryptography selectively where it provides the most security benefit for timing integrity, avoiding the computational overhead of applying cryptographic operations to all network traffic and messages.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS12494927B2Scheduled-based low-latency detection for desynchronization attacks
Publication Date: 2025.12.09 INTEL CORP
  • US12494927B2 patent drawing
  • US12494927B2 patent drawing
  • US12494927B2 patent drawing

AI summary

Techniques include a method, apparatus, system and computer-readable medium to detect, quantify and localize attacks to enhance security for time-synchronized networking. Embodiments include a diagnostic stream producer to produce diagnostic information providing evidence of a timing attack on a node of a time-synchronized network. Embodiments include a diagnostic stream consumer to consume diagnostic information, analyze the diagnostic information, and determine whether a node is under a timing attack. Other embodiments are described and claimed.