Vehicle Abnormality Detection via Multi-Layer Network Correlation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle abnormality detection systems can only detect abnormalities on in-vehicle networks but require significant effort to analyze the cause of these abnormalities, lacking efficient methods to identify the source of issues.
Innovation Solution
A vehicle abnormality detection device and method that includes a transmission and reception unit, an abnormality cause candidate acquisition unit, and an abnormality information management unit to efficiently identify and manage potential cause control devices within a multi-layered in-vehicle network, enabling quick detection and analysis of abnormality causes, including external attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional abnormality detection methods are used to monitor in-vehicle networks, then abnormality detection capability is provided, but the effort and time required to analyze the cause of abnormalities increases significantly
Solution Approach 1:
The system performs preliminary actions by proactively monitoring and recording operation states of multiple control devices before abnormalities occur. When an abnormality is detected in a first control device, the system has already captured relevant operational data from other control devices, enabling immediate cause analysis without requiring additional investigation time.
Solution Approach 2:
The abnormality cause analysis system acts as an intermediary between control devices and abnormality analysis. It automatically collects operation states from multiple control devices, correlates them with abnormality information, and presents integrated analysis results, thereby reducing the time and effort required for manual cause analysis.
2Measurement precision
If comprehensive monitoring of multiple control devices is implemented to identify abnormality causes, then analysis accuracy improves, but system complexity increases
Solution Approach 1:
The system segments the monitoring function by assigning different control devices to monitor specific other devices. Each control device records operation states of designated target devices, creating a distributed monitoring architecture that improves cause identification accuracy while avoiding the complexity of a centralized comprehensive monitoring system.
Solution Approach 2:
Control devices are designed with multi-functionality, serving both their primary control functions and secondary monitoring functions. Each control device can monitor its own operation state as well as the operation states of other designated control devices, eliminating the need for separate dedicated monitoring hardware and reducing overall system complexity.
3Speed
If real-time monitoring of all control devices is performed, then abnormality detection speed improves, but energy consumption and processing load increase
Solution Approach 1:
The system applies local quality by having control devices monitor only specific designated target devices rather than all devices uniformly. Each control device records operation states of particular devices it is assigned to monitor, enabling targeted real-time monitoring that improves detection speed for critical devices while reducing overall energy consumption and processing load compared to universal monitoring.
Data Source
AI summary
In a vehicle abnormality detection device, when a transmission and reception unit receives abnormality information of a first control device on an in-vehicle network configured by a plurality of layers via a firewall, an abnormality cause candidate acquisition unit acquires a candidate for a second control device that may cause the abnormality of the first control device. An abnormality information management unit manages the first control device and the second control device as abnormality cause control devices when the second control device in which an abnormality occurs before a time when the abnormality of the first control device is detected is detected from the candidate acquired by the abnormality cause candidate acquisition unit.