Private CAN Network for ECU Unauthorized Access Notification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Vehicle electronic control units (ECUs) are vulnerable to unauthorized access and tampering, which can lead to loss of control of critical systems like braking and steering, and existing security methods do not effectively notify other ECUs of such incidents.
Innovation Solution
A method and system that utilize a private Controller Area Network (CAN) for secure communication between ECUs without a router or gateway, employing event-based messaging and a shared hacking notification key to alert other ECUs of unauthorized access events, operating in addition to the existing public CAN.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a private CAN network is implemented for secure ECU communication, then security against unauthorized access is improved, but device complexity increases
Solution Approach 1:
The patent divides the vehicle network into two separate CAN networks: a public CAN for general communication and a private CAN for secure communication between safety-critical ECUs. This segmentation isolates critical systems from potential attacks on the public network, improving security without requiring complete redesign of the entire network architecture.
Solution Approach 2:
The patent introduces a gateway device that mediates communication between the public CAN and private CAN networks. The gateway performs authentication and encryption/decryption operations, allowing secure isolated communication while maintaining connectivity when needed. This intermediary handles the complexity of security protocols, keeping individual ECU designs simpler.
2Speed
If event-based messaging is used on private CAN, then notification speed of unauthorized access events is improved, but information loss increases
Solution Approach 1:
The notification system segments information into two parts: urgent alerts sent via event-based messaging on the private CAN for immediate notification, and detailed event information transmitted through the gateway when connectivity is available. This ensures critical safety notifications are delivered quickly while comprehensive data is preserved.
Solution Approach 2:
The system implements feedback mechanisms where ECUs monitor the private CAN for unauthorized access events and immediately notify other ECUs through event-based messaging. The gateway provides additional feedback loops, transmitting detailed event information back to the network when conditions permit, ensuring both speed and information completeness.
Data Source
Figure 1
AI summary
A private controller area network (CAN) is provided in a vehicle to notify non-targeted electronic control units (ECUs) of unauthorized attempts to access a target ECU. Each ECU on the private CAN stores a common encrypted hacking notification key (HNK) and a unique identification code. When a first vehicle system ECU detects an unauthorized access attempt via the public CAN, it sends a warning message to the other ECUs via the closed, private CAN.