Electronic Control Architecture for Shared Safety-Security Countermeasures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic control systems face challenges in effectively addressing both functional safety and information security events, with security event countermeasures requiring extensive development.
Innovation Solution
An electronic control system incorporating a security event analysis unit, safety feature execution unit, security feature execution unit, storage unit, and determination unit to identify and execute corresponding features based on predefined correspondence information, facilitating the handling of both safety and security events.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all security event countermeasures are developed separately, then security event handling capability is improved, but development time and cost increase
Solution Approach 1:
The patent makes the safety countermeasure feature executable for both safety events and security events. The determination unit identifies the type of event (safety or security) and executes the appropriate countermeasure from the same safety countermeasure feature set, allowing one feature to serve multiple purposes and reducing the need for separate security-specific countermeasures.
Solution Approach 2:
The patent combines the handling of safety events and security events into a unified framework. Both event types are processed through the same event determination unit and can utilize the same countermeasure feature execution mechanism, merging previously separate development paths into a single integrated system.
2Reliability
If all security event countermeasures are developed separately, then security event handling capability is improved, but development cost increases
Solution Approach 1:
The safety countermeasure feature is designed to be universally applicable to both safety and security events. By making the same feature executable for both event types, the system eliminates the need to develop and maintain separate security-specific countermeasures, thereby reducing development cost while maintaining comprehensive event handling capability.
Solution Approach 2:
The system changes the parameter of event type classification rather than creating separate features. By identifying events as either safety or security types and routing them appropriately through the same countermeasure feature, the system achieves security event handling without the cost of separate feature development.
3Measurement precision
If separate security features are implemented, then security event response accuracy is improved, but device complexity increases
Solution Approach 1:
The determination unit segments events into safety and security types and routes them appropriately. This segmentation allows accurate response to each event type while maintaining a unified countermeasure execution framework, avoiding the complexity of entirely separate handling systems.
Solution Approach 2:
The countermeasure feature execution unit is designed to be universal, executing both safety and security countermeasures through the same mechanism. This reduces system complexity by eliminating redundant separate execution paths while maintaining the ability to respond accurately to different event types through the determination unit's event type identification.
Data Source
AI summary
Provided is an electronic control system configured to read a log recording an operation of a device and to detect a security event that is an event related to information security; execute a safety feature serving as a measure against a safety event that is an event related to functional safety; execute a security feature serving as a measure against the security event; store correspondence information indicating at least one of the safety feature and the security feature corresponding to the security event; and identify, based on the correspondence information, a feature corresponding to the security event to execute the identified feature, wherein the correspondence information records the event classified into at least one of the security events so as to correspond to the safety feature.