Misuse Detection ECU Selective Error Frame Handling

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle network systems face challenges in effectively dealing with unauthorized frames without disrupting authorized data transmission, as frequent issuance of error frames can hinder vehicle control.

Innovation Solution

A misuse detection electronic control unit (ECU) is introduced to detect unauthorized frames and determine whether to prevent their processing based on predetermined conditions related to vehicle control, using a CAN protocol, which allows for switching between preventing and allowing unauthorized frames to minimize adverse effects on vehicle control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If error frames are frequently issued to prevent unauthorized data frames, then security against unauthorized access is improved, but transmission of authorized data frames is hindered and vehicle control is affected

Engineering Contradiction:
Improvesecurity against unauthorized accessVSAvoidtransmission of authorized data frames
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent applies local quality by making the error frame response selective rather than uniform. The ECU determines whether to transmit an error frame based on specific conditions: whether the unauthorized frame's message ID matches a predetermined ID and whether the ECU is in a specific operation state. This localized, condition-based response prevents blanket error frame transmission that would disrupt all communications, while still providing security where necessary.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent implements dynamics by making the error frame transmission behavior adaptable to different operational contexts. The ECU dynamically adjusts its response based on real-time conditions, including the message ID of the received frame and the current operational state of the ECU. This dynamic behavior allows the system to maintain security postures while adapting to minimize disruption to authorized communications under different operating conditions.

Inventive Principle:
Principle #15Dynamics

2Measurement precision

If error frames are transmitted for every unauthorized frame detected, then detection precision is improved, but adverse effects upon vehicle control increase

Engineering Contradiction:
Improveunauthorized frame detectionVSAvoidadverse effects upon vehicle control
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent applies local quality by making the error frame response selective rather than uniform. The ECU determines whether to transmit an error frame based on specific conditions: whether the unauthorized frame's message ID matches a predetermined ID and whether the ECU is in a specific operation state. This localized, condition-based response prevents blanket error frame transmission that would disrupt all communications, while still providing security where necessary.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent applies partial action by transmitting error frames only for certain unauthorized frames that meet specific criteria, rather than responding to all unauthorized frames. The ECU selectively responds based on message ID matching and operational state, performing partial error frame transmission that provides adequate security detection while avoiding excessive responses that would cause harmful effects on vehicle control.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentEP3249855B1Invalid frame handling method, invalidity detection electronic-control unit and vehicle-mounted network system
Publication Date: 2022.03.16 PANASONIC INTELLECTUAL PROPERTY CORP OF AMERICA
  • EP3249855B1 patent drawingFigure 1
  • EP3249855B1 patent drawingFigure 2
  • EP3249855B1 patent drawingFigure 3~5

AI summary

A method for dealing with unauthorized frames that makes it possible to take appropriate measures when an unauthorized data frame is detected in a vehicle network system is provided. A plurality of electronic control units (ECUs) in the vehicle network system are connected to a bus used for communicating frames. In the method for dealing with unauthorized frames, if a misuse detection ECU (100) that checks a frame appearing in the bus detects an unauthorized frame that does not comply with a certain rule (N in step S1003) and a certain prevention condition is satisfied (Y in step S1006), a prevention process for preventing the plurality of ECUs from performing a process corresponding to the unauthorized frame is performed (an error frame is transmitted) (step S1007) or, if the certain prevention condition is not satisfied, the prevention process is not performed.