Vehicle Diagnostic Socket Intermediary for Secure Data Bus Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for controlling access to vehicle on-board data buses face challenges with electromagnetic compatibility, electrostatic discharges, and unauthorized communication frames, particularly when external diagnostic IT tools with a single material port connect to vehicles, leading to compatibility issues and potential vehicle operation degradation.
Innovation Solution
A system that includes a calculator acting as a gateway, with authentication and filtering mechanisms to authorize communication frames and prevent unauthorized access, using switching means to manage connections between data buses and diagnostic ports, ensuring secure and efficient data access while preventing electromagnetic interference and unauthorized commands.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If external diagnostic tools with a single material port are connected directly to onboard data buses, then diagnostic access is simplified, but electromagnetic compatibility and security risks increase
Solution Approach 1:
The patent introduces a diagnostic socket as an intermediary component between external diagnostic tools and onboard data buses. This socket includes material ports that physically disconnect from data bus connections, serving as a buffer zone. The switching means controlled by the gateway computer manage the connection state, allowing diagnostic access while preventing direct electromagnetic coupling between external tools and vehicle data buses, thus resolving the contradiction between ease of operation and electromagnetic compatibility.
2Ease of operation
If external diagnostic tools are connected to onboard data buses, then diagnostic functionality is enabled, but unauthorized communication frames may be transmitted
Solution Approach 1:
The patent implements authentication means that perform preliminary authentication of external diagnostic tools before granting access to onboard data buses. The gateway computer verifies the identity and authorization of diagnostic tools through authentication protocols executed before connection is established. This preliminary action ensures that only authorized tools can access the data buses, preventing unauthorized communication frames while maintaining diagnostic functionality for legitimate tools.
Solution Approach 2:
The system employs feedback mechanisms where the gateway computer continuously monitors communication frames on the data buses and verifies their authenticity. When unauthorized frames are detected, the system responds by disconnecting the external diagnostic tool through the switching means. This closed-loop feedback ensures security while allowing legitimate diagnostic operations to proceed uninterrupted.
3Productivity
If direct connection between diagnostic port and onboard data buses is established, then data download speed is improved, but vulnerability to electrostatic discharge and foreign objects increases
Solution Approach 1:
The diagnostic socket serves as a protective intermediary between the external diagnostic port and the onboard data buses. The material ports of the socket can be physically disconnected from the data bus connections, creating a physical barrier against electrostatic discharge and foreign objects. During normal operation, the switching means establish electrical connections through the socket, maintaining data download speed while the socket structure itself provides passive protection against harmful factors during connection/disconnection operations.
4Productivity
If gateway computer controls switching means to provide direct access, then communication efficiency is improved, but system complexity increases
Solution Approach 1:
The gateway computer is designed with multi-functionality, integrating authentication means, filtering means, and switching control capabilities within a single device. This universal approach allows the gateway to perform multiple functions (authentication, frame filtering, connection management) without requiring separate dedicated systems for each function. The switching means are controlled by the gateway computer which already performs gateway functions, thereby improving communication efficiency through direct access while minimizing additional system complexity by leveraging existing multi-functional components.
Data Source
Figure 1~2
Figure 3~4
AI summary
The invention relates to a method and device for controlling access to at least one databus (1013) on board a vehicle by external diagnostic computing means (140). The device comprises switching means which are connected to a second hardware port (112) of a diagnostic connector and are designed to connect the second hardware port (112) of the diagnostic connector to a first hardware port of a computer when said switching means (150) are at rest and to connect the second hardware port (112) of the diagnostic connector to a second hardware port (126) of the computer when said external diagnostic computing means (140) are authenticated by authentication means (122).