Vehicle Cyberattack Detection via Hatch and Equipment State Correlation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Ground transportation vehicles, such as trains, subways, and buses, are vulnerable to cyberattacks due to the inability to constantly monitor passengers and protect sensitive digital equipment, which can be accessed and potentially tampered with, leading to disruptions in critical infrastructure.
Innovation Solution
A method and system that detects the opening of maintenance hatches and correlates this with communication disruptions of electronic devices stored within, using sensors and a main processing unit to differentiate between legitimate maintenance and potential cyberattack scenarios, thereby minimizing false alarms and ensuring timely alerts to security personnel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If surveillance solutions such as cameras are used to monitor passengers, then passenger safety is improved, but the ability to cover the whole space intended for passengers is insufficient
Solution Approach 1:
The patent replaces physical surveillance (cameras and crew members) with a digital detection system that uses sensors to monitor maintenance hatches and correlates sensor data with operational data. This substitution allows comprehensive monitoring of previously inaccessible areas without physical presence.
Solution Approach 2:
The patent introduces sensors as intermediary devices that detect maintenance hatch openings and transmit data to a central system. These sensors act as intermediaries between the physical maintenance activities and the digital monitoring system, enabling indirect observation of critical areas.
2Ease of operation
If maintenance hatches are opened to access digital equipment, then maintenance operations are enabled, but cyberattack risks increase
Solution Approach 1:
The patent implements a feedback mechanism where sensors detect maintenance hatch openings and immediately transmit this information to the main processing unit. The system continuously monitors and correlates this data with operational data to detect anomalies, providing real-time feedback on potential security threats.
Solution Approach 2:
The patent performs preliminary detection of maintenance hatch openings before actual maintenance activities begin. By detecting and recording hatch openings in advance, the system can correlate this data with subsequent operational changes to identify potential cyberattacks before they fully execute.
3Reliability
If alarm systems are triggered for maintenance hatch openings, then security monitoring is improved, but false alarms increase
Solution Approach 1:
The patent merges multiple data sources including sensor data from maintenance hatches, operational data from the vehicle's control systems, and contextual information about maintenance schedules. By combining these diverse data streams and analyzing them together, the system can distinguish between legitimate maintenance activities and potential cyberattacks.
Solution Approach 2:
The patent implements dynamic threshold adjustment and adaptive monitoring that changes system sensitivity based on operational context. During scheduled maintenance windows, the system is less sensitive to hatch openings, while during normal operation, it maintains higher sensitivity, dynamically adjusting its response based on the operational state.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention concerns a method of detection of a cyberattack event in a ground transportation vehicle, the method comprising at least one iteration of the following steps: - receiving (10), from a sensor, at least one datum representing the opening of a hatch of a maintenance compartment of said ground transportation vehicle, said maintenance compartment comprising at least one digital equipment connected to a main processing unit of said ground transportation vehicle by using a communication network; - obtaining (20) at least one datum representing a state of said at least one digital equipment; - determining (30) that said at least one datum representing the state of said at least one digital equipment and said at least one datum representing the opening of said hatch are in discordance with an operation state of said ground transportation vehicle; and - raising (40) at least one alarm.