Vehicle Communication System Authentication Accuracy

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In communication systems where electronic control devices and a collection device are connected through a network, existing technologies fail to accurately classify and exclude attack information caused by circuit faults from unauthorized access, leading to degraded analysis accuracy.

Innovation Solution

The system initiates a test mode where both the collection device and electronic control devices generate message authentication codes based on a shared counter value, allowing only matching codes to transmit attack information, thereby distinguishing between legitimate and faulty authentication processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If the collection device collects all attack information from electronic control devices, then the quantity of collected information increases, but the analysis accuracy degrades due to inclusion of faulty authentication data

Engineering Contradiction:

Improvequantity of attack informationVSAvoidanalysis accuracy

Core Design Contradiction:

Quantity of substanceVSMeasurement precision

Solution Approach 1:

The patent extracts and excludes attack information that is determined to be caused by circuit faults from the collected data set. The collection device analyzes the cause of each authentication abnormality and selectively extracts only the legitimate attack information for analysis, removing faulty data that would degrade analysis accuracy.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The system implements a feedback mechanism where the collection device receives information about the cause of authentication abnormalities from electronic control devices. Based on this feedback regarding whether the abnormality was caused by a circuit fault or a security attack, the collection device adjusts its data collection and analysis process to maintain high accuracy.

Inventive Principle:

Principle #23Feedback

2Reliability

If the system performs authentication processing using a counter, then security verification is enabled, but circuit faults cause false attack information to be generated

Engineering Contradiction:

Improveauthentication securityVSAvoidfalse attack information

Core Design Contradiction:

ReliabilityVSObject-generated harmful factors

Solution Approach 1:

The patent converts the harmful effect of circuit faults generating false attack information into a beneficial diagnostic opportunity. By analyzing the cause of authentication abnormalities, the system identifies circuit faults and distinguishes them from real attacks, thereby converting erroneous data generation into a means for detecting hardware issues.

Inventive Principle:

Principle #22Blessing in disguise (Convert harm into benefit)

Solution Approach 2:

The collection device acts as an intermediary that receives authentication abnormality information from electronic control devices, analyzes the cause (circuit fault vs. security attack), and selectively processes the information. This intermediary function filters out false attack information while preserving legitimate security data.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Measurement precision

If the counter operation is stopped for testing, then accurate fault detection is enabled, but the vehicle is vulnerable to security attacks during the test mode

Engineering Contradiction:

Improvefault detection accuracyVSAvoidsecurity vulnerability

Core Design Contradiction:

Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary actions by stopping the counter operation and entering test mode only after confirming specific safety conditions are met. This preliminary verification of safety conditions allows the system to conduct accurate fault detection while minimizing security exposure to acceptable levels.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system dynamically adjusts its operational state by transitioning between normal mode (counter running) and test mode (counter stopped) based on safety conditions. This dynamic switching allows the system to balance security requirements with the need for accurate fault detection when conditions permit.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS10178094B2Communication system and information collection method executed in communication system

Publication Date: 2019.01.08 TOYOTA JIDOSHA KK

AI summary

An information collection method includes determining whether or not a vehicle satisfies predetermined conditions when a target device receives a test mode start request from an collection device, and when it is determined that the vehicle satisfies the predetermined conditions, starting the test mode. In the test mode, update of a predetermined counter is stopped. The collection device generates a first MAC based on the count value received from the target device and transmits an attack information acquisition request with the first MAC to the target device. If the attack information acquisition request with the first MAC is received from the collection device, the target device generates a second MAC based on the stopped count value, determines that the host device is normal in a case where the first MAC and the second MAC coincide with each other, and transmits the attack information to the collection device.