Shifting CAN Message References to Harden In-Vehicle ECU Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Controller Area Network (CAN) communication in vehicles is vulnerable to hacking due to its open communication channel, allowing hackers to intercept and decode messages, potentially causing system malfunctions.
Innovation Solution
Implementing a system where electronic control units (ECUs) periodically shift their reference to a new CAN database based on sensor measurements, using a unique configuration of CAN message information stored in each database, making it difficult for hackers to decode messages and detect system attacks early.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If CAN communication uses a fixed message reference for simplicity, then ease of operation is improved, but security deteriorates as hackers can predict and decode messages
Solution Approach 1:
The patent applies dynamics by making the CAN message reference changeable over time rather than fixed. The system periodically shifts to different CAN databases based on time intervals or triggering events, making the message reference dynamic and unpredictable to hackers while maintaining operational simplicity through automated management
Solution Approach 2:
The system implements periodic action by automatically shifting the CAN message reference at predetermined time intervals or upon receiving triggering events. This periodic change makes message prediction difficult for hackers while the automation ensures ease of operation is maintained
2Object-affected harmful factors
If CAN communication frequently shifts message reference to improve security, then security is improved, but device complexity increases due to multiple CAN databases
Solution Approach 1:
The patent applies segmentation by dividing the CAN message reference into multiple separate CAN databases. Each database contains a portion of the message reference information, and the system shifts between them periodically. This segmentation enables security through unpredictability while the modular structure manages complexity by organizing information into discrete, manageable units
3Device complexity
If CAN communication uses a single database for simplicity, then device complexity is reduced, but reliability deteriorates as damage from breaches cannot be limited
Solution Approach 1:
The system segments the CAN message reference across multiple databases, which limits the impact of a security breach. If one database is compromised, only the messages in that specific database are affected, while other databases remain secure. This segmentation improves reliability by containing potential damage
Solution Approach 2:
The system prepares multiple CAN databases in advance, each containing valid message reference information. This beforehand preparation acts as cushioning against potential breaches, as the system can switch to a different pre-prepared database if one is compromised, maintaining operational reliability
Data Source
AI summary
A method for controlling controller area network (CAN) communication in a vehicle including a plurality of electronic control units (ECUs) and a plurality of CAN databases accessible by the plurality of ECUs can include: storing CAN message information in the plurality of CAN databases such that each CAN database stores a unique configuration of the CAN message information; establishing a plurality of periodic intervals; and when a subsequent interval among the plurality of periodic intervals begins: receiving a plurality of measurement values deriving from a plurality of sensors equipped in the vehicle, calculating a database reference number based upon the plurality of measurement values, the database reference number newly identifying a particular CAN database among the plurality of CAN databases, and performing CAN communication, by each ECU, based upon the uniquely configured CAN message information stored in the newly identified CAN database.