Vehicle Bus Message Verification for Manipulated Controller Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle bus systems lack efficient methods to verify the legitimacy of message transmitters, allowing unauthorized control devices to manipulate vehicle functions.

Innovation Solution

A method and system using a second control device to transmit, receive, and compare messages with a reference message to identify deviations, thereby identifying and reporting manipulated control devices on a vehicle's bus system.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If message transmission on bus system is allowed without verification, then communication efficiency is improved, but system security deteriorates allowing unauthorized manipulation

Engineering Contradiction:
Improvecommunication efficiencyVSAvoidsystem security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system performs preliminary verification by comparing the received message against a reference message before processing. The second control device stores a reference message and compares incoming messages against it to identify potential manipulations in advance, preventing unauthorized control actions before they can affect vehicle functions.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The second control device acts as an intermediary between the first control device (message transmitter) and the bus system. It intercepts messages, performs verification by comparing against reference messages, and only allows verified messages to proceed, thereby securing the communication without blocking legitimate traffic.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If message verification is implemented on bus system, then system security is improved, but communication efficiency deteriorates due to additional verification steps

Engineering Contradiction:
Improvesystem securityVSAvoidcommunication efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The verification process performs only essential comparisons - checking if the received message matches the reference message in key aspects. This partial verification approach provides sufficient security to detect manipulations while minimizing the processing overhead and time added to message transmission.

Inventive Principle:
Principle #16Partial or excessive action

3Measurement precision

If reference message comparison is performed, then detection precision is improved for manipulated devices, but device complexity increases due to additional comparison functionality

Engineering Contradiction:
Improvedetection precisionVSAvoiddevice complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The verification function is segmented and assigned to a specific second control device rather than requiring all control devices to have verification capabilities. This divides the system into a verifier (second control device) and verified parties (first control device), reducing complexity for the majority of devices while maintaining high detection precision through dedicated verification logic.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS12418439B2Method and system for identifying a manipulated control device of a bus system
Publication Date: 2025.09.16 BAYERISCHE MOTOREN WERKE AG
  • US12418439B2 patent drawing
  • US12418439B2 patent drawing

AI summary

A method for identifying a manipulated controller of a bus system of a vehicle is disclosed herein. The method includes transmitting a first message via the bus system by means of a first controller, and receiving the first message via the bus system by means of a second controller. The method further includes determining a message type of the received first message and determining a reference message by means of the second controller, wherein the reference message has a message type that corresponds to the determined message type of the first message. The method also includes determining a deviation of the first message from the reference message. When the first message deviates from the reference message, the method further includes identifying the first controller as the manipulated controller by means of the second controller, and providing an alarm message from the second controller to a server outside the vehicle.