Motor Vehicle Data Network Domain Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing motor vehicle data networks face challenges in securely distributing general information across domains while maintaining the separation of driving safety-relevant control devices from other control devices, as current methods can introduce transmission latency and security vulnerabilities.
Innovation Solution
The data network is subdivided into non-overlapping domains with an overall domain for secure message data distribution, using a Secure Interdomain Master (SIM) for authorization and cryptographic checks to ensure only valid message data is transmitted across domain boundaries, eliminating the need for complex routing and reducing latency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a data network is divided into multiple separate domains to separate driving safety-relevant control devices from other control devices, then security and safety are improved, but transmission latency increases and distribution of general information becomes more difficult
Solution Approach 1:
A gateway is introduced as an intermediary component between separate domains to enable controlled transmission of message data containing general pieces of information. The gateway manages domain transitions while maintaining security boundaries, allowing necessary information flow without compromising the separation of driving safety-relevant control devices.
Solution Approach 2:
The data network is segmented into multiple separate domains using different bus technologies (multiple CAN lines, FlexRay bus, Ethernet) to create isolated networks for different control device groups. This segmentation ensures that defects or tampering in one domain cannot directly affect other domains, particularly protecting driving safety-relevant control devices.
2Reliability
If a gateway is used to control transmission of message data with general pieces of information across domain boundaries, then security is maintained, but transmission latency increases
Solution Approach 1:
The gateway serves as a controlled intermediary that enables secure cross-domain communication while managing transmission latency through efficient message routing and prioritization mechanisms.
Solution Approach 2:
Message data are assigned different priority levels, and the gateway applies different transmission parameters based on priority. High-priority messages containing critical general information are transmitted with higher precedence, reducing their latency while maintaining security controls.
3Reliability
If multiple bus technologies are used to create separate domains, then security and separation are improved, but device complexity increases
Solution Approach 1:
The network is segmented into separate domains using multiple bus technologies (CAN, FlexRay, Ethernet), each optimized for specific control device groups. This segmentation provides security isolation while allowing each domain to be managed independently, reducing the complexity of securing the entire network.
Solution Approach 2:
Gateways act as standardized intermediaries between different bus technologies, providing a uniform interface for cross-domain communication. This abstraction layer simplifies the complexity by hiding the details of multiple bus technologies behind a common gateway protocol.
Data Source
AI summary
The disclosure relates to a motor vehicle having a data network via multiple control devices of the motor vehicle for exchanging message data (that are coupled together, wherein the data network is subdivided into different domains and via each of the domains respectively some of the control devices are coupled to the data network and in each domain respectively other of the control devices are included and the exchange of message data is blocked between the control devices of different domains or permitted only as a function of an authorization check of at least one domain transition is provided. The disclosure provides that the data network also includes an overall domain and each of the control devices is also coupled via the overall domain to the data network.