Private CAN Network for ECU Unauthorized Access Notification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Vehicle electronic control units (ECUs) are vulnerable to unauthorized access and tampering, which can lead to loss of control of critical systems like braking and steering, and existing security methods do not effectively notify other ECUs of such incidents.

Innovation Solution

A method and system that utilize a private Controller Area Network (CAN) for secure communication between ECUs without a router or gateway, employing event-based messaging and a shared hacking notification key to alert other ECUs of unauthorized access events, operating in addition to the existing public CAN.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a private CAN network is implemented for secure ECU communication, then security against unauthorized access is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidnetwork architecture
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent divides the vehicle network into two separate CAN networks: a public CAN for general communication and a private CAN for secure communication between safety-critical ECUs. This segmentation isolates critical systems from potential attacks on the public network, improving security without requiring complete redesign of the entire network architecture.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a gateway device that mediates communication between the public CAN and private CAN networks. The gateway performs authentication and encryption/decryption operations, allowing secure isolated communication while maintaining connectivity when needed. This intermediary handles the complexity of security protocols, keeping individual ECU designs simpler.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Speed

If event-based messaging is used on private CAN, then notification speed of unauthorized access events is improved, but information loss increases

Engineering Contradiction:
Improvenotification speedVSAvoidevent details
Core Design Contradiction:
SpeedVSLoss of information

Solution Approach 1:

The notification system segments information into two parts: urgent alerts sent via event-based messaging on the private CAN for immediate notification, and detailed event information transmitted through the gateway when connectivity is available. This ensures critical safety notifications are delivered quickly while comprehensive data is preserved.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system implements feedback mechanisms where ECUs monitor the private CAN for unauthorized access events and immediately notify other ECUs through event-based messaging. The gateway provides additional feedback loops, transmitting detailed event information back to the network when conditions permit, ensuring both speed and information completeness.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP3348036B1Unauthorized access event notificaiton for vehicle electronic control units
Publication Date: 2022.05.11 ROBERT BOSCH GMBH
  • EP3348036B1 patent drawingFigure 1

AI summary

A private controller area network (CAN) is provided in a vehicle to notify non-targeted electronic control units (ECUs) of unauthorized attempts to access a target ECU. Each ECU on the private CAN stores a common encrypted hacking notification key (HNK) and a unique identification code. When a first vehicle system ECU detects an unauthorized access attempt via the public CAN, it sends a warning message to the other ECUs via the closed, private CAN.