Security-Aware In-Vehicle Routing Controller
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In-vehicle communication networks face challenges in ensuring secure and timely communication between network nodes, particularly in preventing malicious frame injection and maintaining authenticity of protocol frames, which is critical for safe vehicle operation.
Innovation Solution
Implementing a security-aware routing system that includes a controller to identify message characteristics, determine priorities based on these characteristics, and route messages accordingly, using secure zones and channels to prioritize secure messages and control plane messages over non-secure and data plane messages, ensuring secure and timely communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security-aware routing is implemented to prioritize secure messages, then security reliability is improved, but device complexity increases
Solution Approach 1:
The system segments messages into different priority queues based on security characteristics. The controller divides the communication handling into multiple priority levels (first priority for secure/control plane messages, second priority for non-secure/data plane messages), allowing security-critical messages to be processed separately from regular traffic without requiring complete system redesign.
Solution Approach 2:
The patent applies different quality of service treatments to different messages based on their local security characteristics. Each message is evaluated for its security properties and assigned appropriate priority handling, rather than applying uniform security measures to all traffic. This allows security resources to be concentrated where needed while maintaining system efficiency.
2Loss of time
If message prioritization based on security characteristics is implemented, then message delivery timing is improved, but processing complexity increases
Solution Approach 1:
The system performs preliminary classification of messages by security characteristics before routing. The controller identifies security properties and assigns priority levels in advance, allowing messages to be queued in appropriate priority buffers before transmission. This preliminary sorting enables efficient time-critical delivery without requiring complex real-time decision-making during message forwarding.
Data Source
AI summary
A controller may receive a message provided by a network node included in an in-vehicle communication network. The controller may identify one or more characteristics of the message, the one or more characteristics indicating at least one of a message type of the message, a security property of the message, or a secure zone (SZ) associated with the message. The controller may determine a priority of the message based at least in part on the one or more characteristics. The controller may provide the message to an output buffer based at least in part on the priority of the message, the output buffer being one of a plurality of output buffers.