Vehicle Control Interface Gateway for Autonomous Driving Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In vehicle control systems, compatibility issues arise when autonomous driving ECUs and vehicle power management ECUs are supplied by different vendors, leading to potential security risks due to unauthorized access to in-vehicle network information.

Innovation Solution

A vehicle control interface that filters and converts control commands and sensor data between the vehicle platform and autonomous driving platform, ensuring only predetermined commands and data types are transmitted, thereby enhancing security and compatibility across different vehicle types and manufacturers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If an autonomous driving ECU is added to manage autonomous driving functions separately from the engine ECU, then the autonomous driving function can be added without drastically changing the existing vehicle platform and third-party development can be expected, but compatibility issues arise when the autonomous driving ECU and engine ECU are supplied by different vendors

Engineering Contradiction:
Improveautonomous driving function compatibilityVSAvoidvendor compatibility
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a gateway as an intermediary device between the autonomous driving ECU and the engine ECU. The gateway translates control commands from the autonomous driving ECU into formats compatible with the engine ECU, and translates sensor data from the engine ECU into formats the autonomous driving ECU can process. This mediator resolves compatibility issues between components from different vendors while maintaining system reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If the autonomous driving ECU can access information flowing through the in-vehicle network, then it can perform autonomous driving control, but security risks arise due to unauthorized access to unnecessary information

Engineering Contradiction:
Improveinformation accessibilityVSAvoidsecurity risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts and filters only the necessary information from the in-vehicle network traffic. The gateway selectively passes through only the sensor data and control commands required for autonomous driving operation, while blocking access to unnecessary or sensitive information. This extraction approach maintains operational ease while mitigating security risks by limiting the autonomous driving ECU's access scope to only essential data.

Inventive Principle:
Principle #2Taking out (Extraction)

3Loss of information

If all information flowing through the in-vehicle network is transmitted to the autonomous driving ECU, then complete vehicle status information is available, but security and compatibility issues arise due to unnecessary information access

Engineering Contradiction:
Improveinformation completenessVSAvoidsystem security
Core Design Contradiction:
Loss of informationVSReliability

Solution Approach 1:

The gateway acts as an intelligent intermediary that selectively filters and translates information. It receives complete vehicle status information from the in-vehicle network, processes it to retain only the necessary data for autonomous driving, and translates it into appropriate formats. This mediator ensures information completeness for autonomous operation while maintaining security and compatibility by excluding unnecessary information.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11535273B2Vehicle control interface and vehicle system
Publication Date: 2022.12.27 TOYOTA JIDOSHA KK
  • US11535273B2 patent drawing
  • US11535273B2 patent drawing
  • US11535273B2 patent drawing

AI summary

A vehicle control interface connects a vehicle platform including a first computer that performs travel control of a vehicle and an autonomous driving platform including a second computer that performs autonomous driving control of the vehicle. The vehicle control interface includes a control unit configured to execute: acquiring, from the second computer, a first control command including a plurality of commands for the vehicle platform; removing, from the first control command, a command that does not correspond to a predetermined kind of command by filtering the plurality of commands included in the first control command; converting the first control command, after filtering the plurality of commands, into a second control command for the first computer; and transmitting the second control command to the first computer.