Vehicle Bus ECU Authentication Using Voltage Threshold Responses
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle-mounted communication systems require secret information to detect unauthorized ECUs, which is vulnerable to leakage or falsification by malicious parties.
Innovation Solution
A vehicle-mounted communication system that uses a determination signal transmitted at a predetermined voltage to communication devices, where each device outputs a logical value signal based on a unique voltage threshold, allowing the determination device to identify abnormalities without relying on secret information by comparing response signals with stored patterns.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secret information is stored in each ECU to generate determination data, then unauthorized devices can be detected, but the system becomes vulnerable to leakage or falsification by malicious third parties
Solution Approach 1:
The patent extracts the secret information from the ECUs and relocates it to an external determination device. The determination device stores the secret information and performs the determination data generation centrally, while ECUs only store public identification information. This extraction eliminates the security vulnerability of storing secrets in distributed ECUs while maintaining the detection capability.
Solution Approach 2:
The patent introduces an intermediary determination device that acts as a mediator between the ECUs and the authentication process. This determination device holds the secret information and generates determination data based on received identification information, thereby preventing ECUs from needing to store secret information directly and reducing their security exposure.
2Reliability
If secret information is stored in ECUs for determination data generation, then communication abnormalities can be detected, but the complexity of protecting secret information increases
Solution Approach 1:
The patent merges the secret information storage and determination data generation functions into a single centralized determination device. This consolidation eliminates the need for multiple ECUs to independently protect secret information, thereby reducing the overall system complexity related to secret information protection while maintaining abnormality detection capability.
Solution Approach 2:
By extracting secret information from distributed ECUs and concentrating it in a single determination device, the patent simplifies the protection mechanism from multiple distributed security points to a single centralized security point, reducing the complexity of implementing and managing secret information protection across the system.
Data Source
AI summary
A vehicle-mounted communication system in which a plurality of communication devices and a determination device for determining an abnormality regarding the communication devices are connected to each other via a bus, wherein the determination device includes: a transmitting unit that transmits a determination signal at a predetermined voltage to each of the communication devices; and a determination unit that determines the abnormality based on a response signal transmitted from each of the communication devices in response to the determination signal, each of the communication devices includes: a signal output unit that outputs a first logical value signal based on a unique voltage threshold, in response to a determination signal that is received; and a generating unit that generates a second logical value signal based on the first logical value signal, and the signal output unit outputs the response signal to the bus based on the second logical value signal.