In-Vehicle Network Configuration Using Pre-Authenticated Function Units
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing in-vehicle network systems lack the ability to flexibly construct new configurations while ensuring security through a simple process.
Innovation Solution
A setting device and method that acquires authentication results for new function units added to the network, allowing secure communication via relay devices, and updates network settings using stored information to simplify the construction of new configurations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication processes are performed for new function units added to the network, then security is improved, but the setting process becomes complex and time-consuming
Solution Approach 1:
The setting device performs preliminary actions by acquiring authentication results before the new function unit actually needs to communicate with existing function units. The authentication is done in advance by the setting device, and the authentication result is stored and later used to automatically configure communication permissions, eliminating the need for complex real-time authentication processes during network configuration.
Solution Approach 2:
The setting device acts as an intermediary between the new function unit and the existing function units. Instead of requiring the new function unit to directly authenticate with multiple relay devices and existing function units, the setting device centrally manages authentication and generates communication permission configurations, simplifying the overall process.
2Reliability
If multiple relay devices perform authentication for new function units, then security is improved, but the time required for network configuration increases
Solution Approach 1:
The setting device performs authentication in advance before the new function unit needs to communicate. By acquiring authentication results beforehand and storing them, the system eliminates repeated authentication delays during the actual network configuration process, significantly reducing configuration time while maintaining security.
Solution Approach 2:
The authentication function is merged into a single centralized setting device rather than being distributed across multiple relay devices. This consolidation allows authentication to be performed once and the result to be shared with all necessary function units, eliminating redundant authentication operations and reducing overall time consumption.
3Ease of operation
If existing network settings are used as templates for new configurations, then ease of operation is improved, but adaptability to specific security requirements may be reduced
Solution Approach 1:
The setting device performs preliminary configuration based on existing network settings as templates, then adapts these templates to specific authentication results. This allows the system to leverage the simplicity of template-based configuration while maintaining the adaptability to incorporate specific security requirements through pre-acquired authentication information.
Solution Approach 2:
The system changes parameters by combining template-based default settings with specific authentication results. The communication permission configuration starts with generic template parameters and is then customized based on the acquired authentication information, achieving both ease of operation through templates and adaptability through specific parameter modification.
Data Source
AI summary
A network having a new configuration is flexibly constructed through a simple process while ensuring security in the network. A setting device includes: an acquisition unit configured to acquire an authentication result regarding a new function unit serving as a function unit newly added to an in-vehicle network including one or a plurality of function units; and a setting unit configured to, when the authentication result acquired by the acquisition unit is affirmative, perform a setting process for allowing the new function unit and an existing function unit serving as a function unit included in the in-vehicle network before the new function unit is added thereto, to perform communication via a plurality of relay devices capable of relaying information between the function units, the setting process being regarding at least one of the relay devices, the existing function unit, and the new function unit.