In-Vehicle Frame Monitoring With Random Field Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for detecting improper communication in in-vehicle networks face increased processing loads and vulnerability to malicious attacks, especially when multiple electronic control units (ECUs) are involved, and there is a need to maintain high security performance while simplifying processing.
Innovation Solution
A communication monitoring device that divides frames into field groups, randomly selects object sections for verification, and uses a verification unit to check the validity of these sections, adjusting parameters like monitoring periods and field group usage to reduce processing loads and maintain high detection probability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If control information and state information of frames are examined for improper control detection, then detection capability is improved, but processing loads increase with the number of controlled objects
Solution Approach 1:
The patent extracts only the essential control information from frames for monitoring, rather than examining all control information and state information. This selective extraction reduces processing load while maintaining detection capability for improper control across multiple controlled objects.
Solution Approach 2:
The patent segments the monitoring process by dividing frames into different types and applying different monitoring strategies to each type. This segmentation allows efficient processing by focusing detailed examination only where necessary, reducing overall processing load while maintaining comprehensive detection capability.
2Device complexity
If fixed controlled objects are used for improper control detection, then detection process is simplified, but security performance is compromised as malicious persons can invalidate detection
Solution Approach 1:
The patent implements dynamic selection of controlled objects for monitoring based on current system state and risk assessment. Rather than using fixed controlled objects, the system dynamically adjusts which objects are monitored, making it difficult for malicious persons to invalidate detection while maintaining manageable process complexity through automated selection.
Solution Approach 2:
The patent changes the parameters of monitoring by dynamically adjusting which controlled objects are selected and what level of examination is applied. This parameter change approach maintains security performance by adapting to threats while keeping the detection process complexity manageable through systematic parameter management.
3Reliability
If all fields in frames are monitored for validity verification, then detection probability of improper communication is improved, but processing loads increase
Solution Approach 1:
The patent applies local quality by differentiating monitoring intensity across different fields within frames. Critical fields receive thorough validity verification while less critical fields receive streamlined checking. This approach maintains high detection probability for improper communication while reducing overall processing load through differentiated verification strategies.
Data Source
AI summary
In order to monitor communication by a frame column performed among electronic controllers, a communication monitoring device determines some or all of fields configuring a frame as an object section, extracts the object section as an attention section from the frame received from an in-vehicle network, and verifies validity of the received frame based on the attention section.