Remote Vehicle Diagnosis Authorization Table
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Remote diagnostic systems for vehicles lack security measures, allowing unauthorized access and potential misuse, such as activating functions that could lead to unintended consequences like starting a fire when the operator cannot visually assess the vehicle's state.
Innovation Solution
Implementing a method that includes session opening and closing steps with authorization verification and a filtering mechanism to restrict access to certain vehicle functions during remote diagnostics, using a table to determine authorized requests and ensuring messages are exchanged through a data bus, preventing malicious use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If remote diagnostic functions are activated without restrictions, then operator convenience and diagnostic capability are improved, but vehicle safety and functional integrity are compromised due to potential unauthorized or accidental activation of harmful functions
Solution Approach 1:
The patent applies preliminary action by pre-defining authorized diagnostic functions in an authorization table stored in the vehicle's computer before remote diagnostic sessions begin. This table explicitly lists which functions can be remotely activated, preventing unauthorized or harmful function activation before it can occur. The system proactively establishes security boundaries rather than reacting to threats after they manifest.
Solution Approach 2:
The patent introduces an intermediary authorization table that acts as a mediator between the remote operator's requests and the vehicle's execution system. This table serves as a filter, allowing only pre-approved functions to be activated remotely while blocking potentially harmful ones. The intermediary layer decouples the operator's convenience from direct access to all vehicle functions, maintaining safety while enabling remote diagnostics.
2Adaptability or versatility
If all diagnostic functions are accessible remotely, then diagnostic completeness is improved, but system security and control integrity deteriorate due to lack of visual verification by the operator
Solution Approach 1:
The system pre-establishes an authorization table that defines which diagnostic functions can be safely activated remotely. This preliminary configuration allows comprehensive remote access to approved functions while maintaining reliability by excluding functions that require visual verification or pose safety risks when activated remotely.
Solution Approach 2:
The patent applies local quality by differentiating between functions suitable for remote activation and those requiring local operator presence. The authorization table creates distinct access rights for different functions, allowing versatile remote access to safe functions while maintaining strict control over functions that need visual verification, thus preserving functional integrity.
3Reliability
If session management is implemented for remote diagnostics, then security control is improved, but system complexity and operational overhead increase
Solution Approach 1:
The authorization table serves as a simple intermediary mechanism that provides security control without complex session management. Instead of implementing elaborate session opening/closing protocols with multiple verification steps, the patent uses a straightforward table lookup approach where the vehicle's computer checks each remote request against the pre-defined authorization table, maintaining security while minimizing system complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for assisting remote vehicle diagnosis. The invention concerns a method for assisting the remote diagnosis of a vehicle (100), the vehicle (100) comprising a first computer (102), and at least a second computer (103) connected to the first computer (102), said method comprising: - checking (306) whether the request for a remote diagnosis session is authorised and, if the request is authorised, transmitting a message (205) from the second computer (103) to the first computer (102), the message comprising data in response to the request, - transmitting the response message (206) from the first computer (102) to the diagnostic tool (101).