State-Aware Vehicle Network Command Screening Across CAN and Ethernet
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network systems in mobility entities, such as vehicles, face difficulties in detecting abnormalities, particularly when dealing with multiple communication protocols like CAN and Ethernet, which can lead to unauthorized vehicle control commands.
Innovation Solution
An abnormality detection apparatus is installed in mobility entities, comprising a first communicator for receiving state information from a second network, a second communicator for transmitting and receiving frames according to the first network's protocol, and an abnormality detection processor that checks control commands against stored rules to prevent abnormal commands from being transferred.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple communication protocols (CAN and Ethernet) are used in the network system, then communication versatility and data transmission capability are improved, but the difficulty of detecting and measuring abnormalities increases
Solution Approach 1:
The patent introduces an abnormality detection device as an intermediary component that mediates between multiple communication protocols (CAN and Ethernet). This device monitors control commands regardless of which protocol they use, converting protocol-specific abnormalities into a unified detection framework. The intermediary device captures commands from both CAN and Ethernet networks, applies consistent abnormality detection rules, and prevents abnormal commands from being executed, thereby resolving the detection difficulty while maintaining protocol versatility
Solution Approach 2:
The patent segments the abnormality detection function into a separate, dedicated device that operates independently from the protocol-specific communication layers. By dividing the system into protocol handling components and a universal abnormality detection component, the system can maintain multiple communication protocols while applying unified abnormality detection rules. The segmentation allows each protocol to operate independently while the detection device monitors all commands through a common interface
2Reliability
If abnormality detection rules are strictly enforced to prevent unauthorized commands, then system security is improved, but the device complexity increases
Solution Approach 1:
The abnormality detection device is designed with universal functionality that can handle multiple communication protocols (CAN and Ethernet) through a single detection mechanism. Rather than implementing separate detection systems for each protocol, the device uses a unified abnormality detection rule set that applies to all commands regardless of protocol origin. This multi-functionality reduces overall system complexity while maintaining comprehensive security coverage across different protocol layers
Solution Approach 2:
The detection device implements a feedback mechanism where abnormal commands are identified, blocked, and logged for analysis. This feedback loop allows the system to learn from detected abnormalities and refine detection rules without increasing hardware complexity. The feedback mechanism provides security enhancement through software-based rule adjustments rather than requiring additional physical detection components
Data Source
Figure 1
Figure 2(a)~2(b)
Figure 3
AI summary
An abnormality detection apparatus detects an abnormality in a network system installed on a mobility entity. The abnormality detection apparatus detects an abnormality in the network system including a first network and a second network using different communication protocols. The abnormality detection apparatus receives state information indicating a state of the mobility entity acquired from the second network, transmits and receives an E-frame using the communication protocol of the first network, stores an abnormality detection rule, and detects whether a control command included in the received E-frame is abnormal based on the state information and the abnormality detection rule. In a case where the abnormality detection processor detects that the control command is abnormal, the abnormality detection processor prohibits the transferring of this control command.