Specialized ECU Gateway for Encrypted Vehicle Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Aftermarket devices struggle to access and control vehicle systems due to encryption of onboard networks, preventing them from acquiring necessary vehicle information or performing functions like engine control and actuator operations, while also facing cybersecurity threats.
Innovation Solution
A specialized electronic control unit (ECU) that can interface with encrypted or non-encrypted vehicle networks, decipher vehicle information, and act as a gateway to provide programmable outputs, while preventing cyber-attacks by blocking unauthorized messages and ensuring secure firmware updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the vehicle network is encrypted to prevent hacking, then security against cyber threats is improved, but aftermarket devices are unable to acquire vehicle information or control vehicle systems
Solution Approach 1:
The patent introduces a gateway module as an intermediary device that connects aftermarket equipment to the encrypted vehicle network. This gateway has dual capability: it can communicate with the encrypted OEM network using authorized credentials while simultaneously providing unencrypted access to connected aftermarket devices. The gateway translates and relays messages between these two different communication environments, enabling third-party devices to access vehicle information and control functions without requiring them to implement their own encryption/decryption capabilities.
2Object-affected harmful factors
If the vehicle network uses encrypted data, then the possibility of hostile hacking is reduced, but aftermarket network devices cannot acquire vehicle information or control vehicle systems
Solution Approach 1:
The patent segments the vehicle network communication into two distinct layers: an encrypted layer for communication with the OEM network that maintains security protocols, and an unencrypted layer for communication with aftermarket devices. The gateway module implements this segmentation by maintaining separate communication interfaces - one that speaks the encrypted OEM protocol and another that provides simple unencrypted access. This allows each layer to operate independently with appropriate security measures only where needed.
3Reliability
If unauthorized messages are blocked to prevent cyber-attacks, then system security is improved, but legitimate aftermarket control functions cannot be performed
Solution Approach 1:
The gateway module implements feedback mechanisms to verify and validate messages before relaying them to the encrypted network. It monitors communication patterns, checks message authenticity, and maintains authorized communication channels. This feedback loop allows the system to distinguish between legitimate control requests from authorized aftermarket devices and malicious unauthorized messages, permitting only valid control functions while blocking cyber-attacks.
Data Source
AI summary
An electronic control unit (ECU) is coupled to a vehicle network, such as a controller area network (CAN), which network can be either encrypted or non-encrypted. The ECU includes input and output ports (at least one) which provides a non-encrypted access into the vehicle network. The electronic control unit, also referred to as a specialized ECU or as an enhanced gateway module, in one embodiment includes at least one port for configuring the ECU through a personal computer or other computing device. The ECU in one embodiment includes multiple input/output ports which can interface with vehicle subsystems either through or separate from the CAN. The ECU, in one embodiment, includes a non-encrypted serial data port which allows for communication between the ECU and subsystems provided by a third-party for interfacing into an OEM vehicle network, and especially an encrypted network.