In-Vehicle Network Fraud Detection via Event-Driven Identifier Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing in-vehicle network systems struggle to accurately detect fraudulent data frames, particularly event-driven frames that deviate from predetermined transmission periods, leading to misclassification and increased processing loads due to the use of Message Authentication Codes (MAC) for verification.
Innovation Solution
The implementation of a fraud detection method in the in-vehicle network system that includes providing a specific identifier in data frames not following predetermined transmission periods, allowing for efficient verification of data frames using a specific identifier, such as a counter value or Message Authentication Code, to differentiate between authorized and fraudulent frames.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If transmission period verification is performed for all data frames, then fraudulent periodic frames can be detected, but event-driven frames are misclassified as fraudulent and processing load increases
Solution Approach 1:
The patent segments the fraud detection process into two distinct paths: one for periodic data frames (verified by transmission period) and another for event-driven data frames (verified by specific identifiers). This segmentation allows the system to apply appropriate verification methods to different frame types, avoiding misclassification and reducing unnecessary processing.
Solution Approach 2:
The patent applies preliminary action by verifying the specific identifier (such as sequence number or counter value) in event-driven data frames before subjecting them to full MAC verification. This preliminary check enables the system to quickly identify and process legitimate event-driven frames, reducing the processing load on the more computationally intensive MAC verification.
2Reliability
If MAC verification is applied to all data frames, then fraud detection capability is enhanced, but processing load and verification time significantly increase
Solution Approach 1:
The patent applies partial action by selectively verifying MAC only for data frames that fail the specific identifier verification. Instead of verifying MAC for all data frames, the system performs MAC verification only when necessary (i.e., when the specific identifier verification fails or for periodic frames), significantly reducing the overall verification time and processing load while maintaining adequate fraud detection capability.
3Productivity
If specific identifier verification is performed only on event-driven frames, then processing load is reduced, but the system cannot detect fraudulent event-driven frames without proper identifiers
Solution Approach 1:
The patent introduces specific identifiers (such as sequence numbers or counter values) as intermediary verification elements for event-driven data frames. These identifiers serve as a lightweight first line of defense that can detect many fraudulent frames without requiring full MAC verification, thus reducing processing load while maintaining detection capability. The specific identifier acts as an intermediary between the simple transmission period check and the comprehensive MAC verification.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A fraud detection method for use in an in-vehicle network system including a plurality of electronic control units that communicate with one another via a bus in accordance with the CAN protocol includes receiving a data frame sent to the bus and verifying, if a data frame that does not follow a predetermined rule regarding a transmission period is received in receiving a data frame, a specific identifier in the data frame.