V2X Message Validation Using Signal Path Simulation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing V2X message validation methods are inadequate in ensuring the trustworthiness of information exchanged in vehicle-to-x communication, as they can be vulnerable to attacks and errors, leading to misjudgment of driving situations and potentially dangerous actions in ADAS/AD systems.
Innovation Solution
A validation procedure that simulates the signal path of a V2X message using local ambient geodata to determine the actual physical reception signal properties, comparing them with simulated properties to verify the authenticity of the transmitter position, thereby making it difficult for attackers to fake the transmitter position.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If V2X message validation uses simple plausibility checks of received signal strength, then the validation process is computationally simple and fast, but the system becomes vulnerable to attacks where attackers can transmit from positions that do not match the specified transmitter position yet still meet the plausibility check
Solution Approach 1:
The patent transitions from validating only signal strength (one dimension) to validating multiple signal properties including time of arrival, angle of arrival, and signal strength (multiple dimensions). This multi-dimensional validation approach creates a more robust verification system where attackers must simultaneously fake multiple independent parameters, significantly increasing the difficulty of successful attacks while maintaining computational efficiency through coordinated validation of these parameters.
2Measurement precision
If V2X message validation uses movement model checking with multiple position reports, then the validation accuracy improves, but the computational effort required increases considerably
Solution Approach 1:
The patent performs preliminary validation of individual signal properties (time of arrival, angle of arrival, signal strength) before conducting the more computationally intensive movement model analysis. This preliminary filtering eliminates obviously invalid messages early in the process, reducing the number of messages that require full movement model checking and thereby decreasing overall computational effort while maintaining high validation accuracy.
3Ease of operation
If V2X messages are validated using only transmitter position information, then the validation process is simple, but it cannot detect cases where the transmitter position is falsified but other message contents are correct
Solution Approach 1:
The patent creates a universal validation framework that uses multiple signal properties (time of arrival, angle of arrival, signal strength) that can validate both transmitter position authenticity and message content integrity simultaneously. This multi-functional approach allows a single validation system to detect various types of attacks including position spoofing, message tampering, and completely forged messages, eliminating the need for separate validation mechanisms for different attack types.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
In order to devise an improved method for validating a V2X message (3) transmitted by a transmitter (2) and received by a receiver (1) disposed on a vehicle, when receiving the V2X message, at least one actual physical receive signal property of the V2X message (3) is ascertained, and an alleged position (p2) of the transmitter (2) is ascertained from the V2X message (3). Local environmental geodesic data comprising positions of a number of stationary objects (O1, O2, O3, O4) is made available, a signal path (x) of the V2X message (3) is simulated on the basis of the alleged transmitter position (p2) taking into account the environmental geodesic data and the receiver position (P1), and at least one simulated physical receive signal property is ascertained from the simulated signal path (x) and the receiver position (P1). The V2X message (3) is validated if the at least one simulated physical receive signal property differs from the at least one actual physical receive signal property by less than a limit value (G).