Message Timing Validation for Bus Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing methods in communications systems fail to effectively detect anomalies and potential attacks, particularly in messages that deviate from expected transmitting times, leading to potential security breaches.
Innovation Solution
A method that determines and evaluates the transmitting time of messages against a defined time frame, using real-time capable operating systems and communication drivers, to identify deviations that may indicate attacks, and considers factors like arbitration events and transmitter strategies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If message transmitting times are not evaluated against defined time frames, then the communications system operates with simpler processing, but security vulnerabilities arise from undetected attacks
Solution Approach 1:
The patent applies preliminary action by pre-defining valid time frames for message transmitting times before actual message processing occurs. The system establishes expected transmission patterns in advance, allowing it to quickly validate incoming messages against these pre-established criteria rather than performing complex real-time analysis of transmission patterns.
Solution Approach 2:
The patent changes the parameter of message validation from content-based checking to timing-based checking. By focusing on the transmitting time parameter and comparing it against predefined time frames, the system achieves security validation with simpler processing logic that doesn't require deep analysis of message content or complex behavioral patterns.
2Measurement precision
If all message timing deviations are investigated in detail, then detection precision improves, but processing time increases
Solution Approach 1:
The patent segments the time domain into distinct valid time frames and invalid regions. By dividing the continuous time space into discrete segments (valid vs. invalid), the system can quickly determine whether a message timing deviation requires detailed investigation or can be immediately classified as anomalous based on which segment it falls into.
Solution Approach 2:
The patent applies local quality by treating different time regions differently - messages within valid time frames receive standard processing, while messages in invalid regions trigger anomaly detection protocols. This localized approach ensures detailed precision is applied only where necessary (at time frame boundaries) rather than uniformly to all messages.
3Reliability
If the system evaluates every message transmitting time against the time frame, then attack detection capability improves, but system productivity decreases
Solution Approach 1:
The patent extracts only the essential timing parameter from each message and evaluates it against the time frame, separating this critical security check from the full message processing workflow. By taking out just the transmitting time for validation while allowing other message processing to proceed independently, the system maintains high throughput while ensuring security checks are performed on all messages.
Data Source
AI summary
A computer-implemented method for processing data, which are associated with at least one message received via a communications system, such as a bus system. The method includes: determining a first variable, which characterizes a transmitting time of the at least one message; evaluating the first variable with regard to at least one time frame of possible transmitting times of the at least one message.