Kernel Interception for Secure ECU Interprocess Communication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current automotive control systems face security vulnerabilities due to multiple decision-making points for access control, making it difficult to predict system behavior under hacking attempts, and allowing potential compromise of control units, especially when left unattended.

Innovation Solution

Implementing a secure operating system with a single decision-making point, where the kernel intercepts interprocess communication requests and uses a security policy to grant access based on a list of authorized interactions, ensuring all communications are verified and compliant with formalized security models.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple decision-making points are used for access control in interprocess communication, then the system can provide more flexible access control options, but the security predictability and reliability deteriorate due to inability to guarantee complete and non-contradictory security policies

Engineering Contradiction:

Improveaccess control flexibilityVSAvoidsecurity predictability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the access control functionality into two distinct components: a security policy definition component that specifies allowed interprocess communications, and a kernel component that enforces these policies by intercepting and verifying communication requests. This segmentation allows flexible policy definitions while ensuring reliable enforcement through a single decision-making point in the kernel.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary security verification mechanism where the kernel acts as a mediator between communicating processes. The kernel intercepts interprocess communication requests and verifies them against predefined security policies before allowing communication to proceed. This intermediary layer ensures that all communications are verified according to complete and non-contradictory security policies.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Speed

If conventional access control methods are used without kernel-level interception, then the system operation speed is maintained, but security vulnerabilities increase due to lack of centralized verification

Engineering Contradiction:

Improvesystem operation speedVSAvoidsecurity vulnerabilities

Core Design Contradiction:

SpeedVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary action by pre-defining security policies that specify which interprocess communications are allowed before any communication occurs. The kernel uses these predefined policies to quickly verify communication requests without requiring complex runtime decision-making. This approach maintains system operation speed while ensuring security through centralized verification.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If security verification is performed at every interprocess communication point, then security reliability is improved, but the device complexity increases due to additional verification mechanisms

Engineering Contradiction:

Improvesecurity reliabilityVSAvoidverification mechanism complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a universal security verification mechanism where the kernel's security policy checking functionality serves all interprocess communication requests across the entire system. Instead of implementing separate verification mechanisms at each communication point, a single kernel-level security subsystem handles all verification tasks, reducing overall device complexity while maintaining high security reliability.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS11361090B2System and method for enabling an interprocess communication in electronic control units of vehicles

Publication Date: 2022.06.14 AO KASPERSKY LAB

AI summary

A method for providing an interprocess interaction in an electronic control unit having an operating system defining a kernel space, wherein the method involves steps in which: the kernel of the operating system intercepts a request for an interprocess communication between a first application and a second application of the electronic control unit. A verdict is requested, from an access control component of the operating system, with respect to granting access for the requested interprocess communication between the first application and the second application of the electronic control unit. The access control component generates the verdict for the requested interprocess communication based on a security policy. The kernel of the operating system selectively allows the requested interprocess communication between the first application and the second application based on the generated verdict.