Parallel Log Readout for Intrusion Detection Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Delays in logging and evaluation of intrusion detection system (IDS) events in vehicles due to time-consuming connections between Online Connectivity Units (OCU) and Electronic Control Units (ECU), leading to overload and inefficient handling of log entries.
Innovation Solution
A method using two readout information pointers to read log entries simultaneously, allowing for parallel reading of historical and current entries without waiting for older entries to be fully read, thereby reducing the load on the interface and improving monitoring efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a sequential readout process is used to read log entries, then the reading process is simple to implement, but the logging and evaluation speed is slow causing interface overload
Solution Approach 1:
The patent divides the readout process into multiple parallel readout processes, each responsible for reading different time periods of log entries. Instead of using a single sequential readout process, the system creates multiple independent readout processes that operate simultaneously, thereby increasing the overall logging and evaluation speed without overwhelming the interface.
2Loss of time
If the connection between ECU and OCU is established, then log entries can be transferred, but the connection establishment is time-consuming causing delays
Solution Approach 1:
The patent implements preliminary action by pre-establishing multiple readout processes and having them ready to read log entries as soon as they become available. Instead of waiting for the connection to be established and then starting the readout process, the system prepares the readout mechanisms in advance, reducing the delay caused by connection establishment time.
3Speed
If only one read pointer is used to read log entries, then the readout process is straightforward, but current log entries cannot be read simultaneously with historical entries
Solution Approach 1:
The patent segments the log entry reading task by implementing multiple read pointers, each associated with different time periods. The first read pointer reads historical log entries while the second read pointer reads current log entries simultaneously. This segmentation allows parallel reading of different log entry types, increasing readout speed while managing complexity through clear separation of reading tasks.
Data Source
Figure 1~2
Figure 3~4
AI summary
The invention relates to a method for providing log entries (301) of a system log (300), wherein the following steps are carried out: - Initiating, at a readout time (310), a readout process (200) using a first and a second readout information (201, 202) in parallel to read the log entries (301), - Reading the log entries (301) logged before the readout time (310) by using the first readout information (201), - Reading the log entries (301) logged after the readout time (310) by using the second readout information (202).