Multicore Controller Security via Processor Core Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern motor vehicles connected to external networks like the Internet face security risks from hacking and jamming attacks due to the link between the controller and vehicle bus systems, necessitating enhanced security measures to prevent unauthorized access.
Innovation Solution
A controller with a multicore processor architecture, where one processor core is dedicated to data interchange with the communication device, creating a multilevel security concept with a demilitarized zone and memory protection to isolate vehicle systems from external network threats, ensuring that even if the secondary processor core is compromised, the primary core remains secure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a controller with communication device is connected to external networks and vehicle bus systems, then added-convenience functions and up-to-date information are provided, but security risks from hacking and jamming attacks increase
Solution Approach 1:
The controller is divided into multiple processor cores with distinct security domains. A first processor core handles vehicle bus communications, while a second processor core handles external network communications. This segmentation isolates security risks so that a compromise in one domain does not automatically affect the other, allowing network connectivity while maintaining vehicle system security.
Solution Approach 2:
A demilitarized zone (DMZ) is introduced as an intermediary layer between the external network and vehicle bus systems. The DMZ acts as a buffer that mediates all communications between these domains, enabling network connectivity functions while preventing direct access to critical vehicle systems, thus reducing security risks.
2Reliability
If multiple processor cores are used to create security domains, then security against external attacks is improved, but device complexity increases
Solution Approach 1:
The controller uses a single multicore processing unit that performs multiple functions: the first processor core manages vehicle bus communications, the second processor core manages external network communications, and together they implement security protocols. This multi-functionality within a single unit provides security benefits without requiring multiple separate physical controllers, thus limiting the increase in device complexity.
Solution Approach 2:
Multiple security domains and communication protocols are merged into a single controller housing with shared memory and coordinated processing. The first and second processor cores work together within the same physical device, sharing resources while maintaining security boundaries. This merging approach provides comprehensive security without the complexity of multiple separate devices.
Data Source
AI summary
A communication device provides wireless communication between a controller in a motor vehicle and a network having at least one device external to the motor vehicle. The controller includes a computation device with at least two processor cores. Data interchange between the communication device and a first processor core takes place exclusively via a second of the processor cores.