Vehicle Communication Device Abnormality Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle communication devices cannot distinguish between communication failures caused by hacking attacks and device abnormalities, such as breakdowns, leading to inadequate measures being taken.
Innovation Solution
A vehicle communication device that generates and compares Message Authentication Codes (MACs) based on received data and an encryption key, determining device states by analyzing multiple authentication results within a predetermined time after startup, distinguishing between device operating states and abnormal states.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data authentication is performed using MAC comparison, then communication security is improved, but the ability to distinguish between attacks and device abnormalities deteriorates
Solution Approach 1:
The patent segments the authentication failure analysis into two distinct phases: (1) authentication phase using MAC comparison for security verification, and (2) diagnosis phase using temporal pattern analysis to distinguish between attacks and device abnormalities. This segmentation allows each phase to optimize for its specific purpose without interfering with the other.
Solution Approach 2:
The patent performs preliminary authentication using MAC comparison before conducting the diagnostic analysis. By first verifying the authenticity of received data through MAC validation, the system establishes a baseline of legitimate communications, which then enables more accurate distinction between genuine attacks and device abnormalities in subsequent analysis.
2Reliability
If authentication failures are treated as potential attacks, then security response is improved, but false alarms from device abnormalities increase
Solution Approach 1:
The patent implements dynamic classification of authentication failures by continuously monitoring the temporal patterns and frequencies of MAC mismatches. Rather than using a static threshold, the system adapts its response based on whether failures occur sporadically (suggesting device abnormalities) or in concentrated patterns (suggesting attacks), thereby reducing false alarms while maintaining security response accuracy.
Solution Approach 2:
The patent establishes a feedback mechanism where the results of MAC authentication are fed into the temporal pattern analysis system. This feedback loop allows the system to learn from past authentication outcomes and refine its distinction between attacks and device abnormalities, progressively reducing false alarms while maintaining accurate security responses.
3Measurement precision
If multiple authentication comparisons are performed within a time window, then abnormality detection accuracy is improved, but processing time increases
Solution Approach 1:
The patent employs periodic authentication comparisons at predetermined time intervals rather than continuous monitoring. By performing MAC comparisons periodically within a defined time window and then pausing for analysis, the system achieves accurate device state determination through multiple data points while avoiding the excessive processing time that would result from continuous real-time analysis.
Data Source
AI summary
A vehicle communication device including a processor, wherein the processor: receives first data, and second data that is different from the first data; generates third data based on the received first data and an encryption key; compares the second data and the third data, and authenticates the first data in a case in which the second data and the third data match; and as a result of comparisons that are carried out a plurality of times on receivings that are within a predetermined amount of time after start-up of a vehicle, determines that a case in which the second data and the third data do not match every time is a device abnormal state, and, as a result of the comparisons of the plurality of times, determines that a case that includes matching is a device operating state.