Inter-VM Communication Anomaly Detection in Virtualized ECUs

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing technologies fail to effectively detect anomalies in inter-VM communication, which is crucial for securing virtualized environments in vehicles.

Innovation Solution

An information processing device that includes an acknowledgment unit, a parameter generation unit, and a detection unit to analyze communication patterns between virtual machines, detecting anomalies based on generated parameters and executing countermeasures.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If virtualization technology is used to execute multiple functions on a single physical ECU, then device integration and cost reduction are achieved, but security risks and difficulty in detecting anomalies in inter-VM communication increase

Engineering Contradiction:

Improvefunctional integrationVSAvoidsecurity

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a gateway as an intermediary component that monitors and controls communication between virtual machines. The gateway intercepts communication data packets, generates parameters from the data, and detects anomalies before forwarding legitimate traffic, thus securing inter-VM communication without compromising virtualization benefits

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary actions by pre-generating communication parameters and establishing baseline communication patterns before actual communication occurs. The gateway prepares detection rules and parameter thresholds in advance, enabling rapid anomaly detection when communication happens

Inventive Principle:

Principle #10Preliminary action

2Measurement precision

If communication data is monitored and parameters are generated for anomaly detection, then detection accuracy is improved, but processing time and system complexity increase

Engineering Contradiction:

Improveanomaly detection accuracyVSAvoidprocessing time

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The gateway extracts only essential parameters from communication data packets for analysis, rather than processing the entire data stream. By selecting and monitoring specific critical parameters, the system achieves high detection accuracy while minimizing processing time and computational overhead

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The system applies partial action by monitoring only the most critical communication parameters and using simplified detection rules for common patterns. This selective approach maintains high detection accuracy for significant anomalies while reducing processing overhead for routine communications

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS12632277B2Information processing device, anomaly detection method, and computer-readable recording medium

Publication Date: 2026.05.19 PANASONIC AUTOMOTIVE SYST CO LTD

AI summary

In an ECU, virtualization software operates a first virtual machine (VM) and a second VM. A transfer unit of the second VM acknowledges communication data transmitted from the first VM and destined to the second VM. A transfer unit generates a parameter related to communication between the VMs, based on the communication data acknowledged. A detection unit of the second VM detects abnormal communication, based on the parameter generated by the transfer unit.