Vehicle Log Management with Main-Device Selection for Secure ECU Logs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing log collection and anomaly detection systems in vehicles are susceptible to cyberattacks, leading to unreliable log collection and detection of cyberattacks, as a single device may malfunction or be compromised, affecting the reliability of cyberattack analysis.
Innovation Solution
A log management system with multiple devices that acquire logs from ECUs, determines a primary device to transmit logs to an external system based on stored main device information, ensuring reliable log collection and detection even if individual devices are compromised.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single log management device is used to collect and transmit logs, then the device complexity is reduced, but the reliability of log collection and cyberattack detection deteriorates due to susceptibility to cyberattacks and malfunction
Solution Approach 1:
The system divides the log management function into multiple independent log management devices distributed across different electronic control units. Each device independently collects logs from its associated ECU and participates in the selection process, eliminating single-point-of-failure risks while maintaining functional distribution.
Solution Approach 2:
The determination unit acts as an intermediary that selects which log management device will transmit logs to the external device based on security status assessment. This mediator mechanism ensures that only trustworthy devices transmit critical log data, preventing compromised devices from undermining system reliability.
2Reliability
If multiple log management devices are deployed to improve reliability, then the reliability of log collection improves, but the device complexity increases
Solution Approach 1:
Multiple log management devices are deployed across different electronic control units, each performing the same universal function of collecting logs from its associated ECU. This multi-functional deployment ensures redundancy and reliability while using identical standardized components, avoiding the complexity of specialized redundant systems.
Solution Approach 2:
Each log management device autonomously determines its own security status and participates in the selection process without requiring centralized control. The devices self-assess their trustworthiness and independently contribute to the determination of which device should transmit logs, reducing the need for complex centralized management infrastructure.
3Productivity
If logs are transmitted from any log management device, then the productivity of log transmission is maintained, but the reliability of cyberattack detection deteriorates due to potential log tampering by compromised devices
Solution Approach 1:
The system continuously monitors the security status of each log management device and uses this feedback to determine which devices are trustworthy for log transmission. The determination unit receives security status information from the control unit and uses it to make real-time decisions about log transmission, ensuring only reliable devices contribute to cyberattack detection.
Solution Approach 2:
The determination unit serves as a mediator between the multiple log management devices and the external device. It selectively enables or disables transmission based on the security status assessment, preventing compromised devices from tampering with logs while maintaining uninterrupted data flow from trusted devices, thus preserving both productivity and reliability.
Data Source
AI summary
A log management device includes a storage unit in which main device information indicating a main log management device is stored. The log management device is configured to: acquire logs from an electronic control unit; determine whether the ego log management device is the main log management device based on the main device information stored in the storage unit of the ego log management device; in response to determining that the ego log management device is the main log management device, transmit the acquired logs to a device located outside of the mobile object; and in response to determining that the ego log management device is not the main log management device, not transmit the acquired logs to the device located outside of the mobile object.