Security Function Resource Reallocation in Vehicle Control Units
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic control devices in vehicles face resource insufficiency when executing security functions due to already executing or installing many functions, leading to potential cybersecurity vulnerabilities and user function disruptions.
Innovation Solution
A security function management device that acquires resource requirements and usage degrees of existing functions, determines resource insufficiency, and selectively releases non-essential functions to ensure execution of security functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple functions are executed or installed on the electronic control device, then the functionality and versatility of the device is improved, but the available resources for executing security functions become insufficient
Solution Approach 1:
The system dynamically adjusts resource allocation by monitoring resource usage in real-time and selectively releasing resources from non-essential functions when security functions require them. The resource management is flexible and adaptive, allowing the electronic control device to switch between different resource allocation states based on security requirements.
Solution Approach 2:
The system changes the operational parameters of functions by adjusting their resource consumption levels. When a security function is detected, the system modifies resource allocation parameters, reducing or suspending resources for non-essential functions to ensure sufficient resources are available for security operations.
2Reliability
If resources are allocated to security functions, then cybersecurity reliability is improved, but the execution of existing user functions may be disrupted
Solution Approach 1:
The system extracts or releases resources specifically from non-essential functions to allocate to security functions. By identifying and separating the resource requirements of different functions, the system can selectively take resources from functions that are less critical and provide them to security functions without completely disrupting user operations.
Solution Approach 2:
The system applies different resource allocation strategies to different functions based on their importance. Critical user functions maintain their resource allocation, while non-essential functions have their resources reduced or released. This localized approach ensures security functions receive necessary resources while preserving essential user functionalities.
3Productivity
If the electronic control device executes multiple functions simultaneously, then the productivity and operational capability are improved, but resource insufficiency occurs when security attacks are detected
Solution Approach 1:
The system performs preliminary resource management by pre-identifying non-essential functions that can have their resources released. When a security attack is detected, the system can quickly activate pre-planned resource reallocation strategies, reducing the time needed to secure resources for security functions while maintaining normal operational capability during non-critical periods.
Data Source
AI summary
A security function management device is configured to manage execution of a first function, by acquiring a resource requirement, which is an amount of resource required by a second function different from the first function. A usage degree of the second function is acquired. When an attack is detected and execution of the first function is necessary, it is determined whether the resource will be insufficient when executing the first function, based on the resource requirement of the second function. The second function is selected for releasing the resource currently being consumed based on the usage degree and the resource requirement when it is determined that the resource is insufficient. The security function management device outputs an instruction to execute the first function and an instruction to release the resource currently consumed by the second function.