Vehicle Log Segmentation for Low-Bandwidth Anomaly Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In-vehicle network logs transmitted to external servers require significant data communication resources due to their large size and variability, making it difficult to detect unauthorized data infiltration effectively.

Innovation Solution

A vehicle log transmission device that divides vehicle logs using IDs associated with data types, generating divided logs and determining which ones match existing logs, thereby reducing data transmission by only sending identifiers for matching logs and the actual data for non-matching logs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If vehicle logs are transmitted in their original large size to external servers, then complete log data is available for analysis, but data communication resources are significantly consumed and processing becomes difficult

Engineering Contradiction:
Improvelog data completenessVSAvoiddata communication volume
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent segments vehicle logs into multiple divided logs based on message IDs, allowing selective transmission of only necessary segments to external servers, thereby reducing overall data communication volume while maintaining analysis capability

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent extracts and transmits only the essential portions of log data (specific divided logs containing anomaly information) to external servers, leaving redundant complete log data in the vehicle, thus reducing communication burden while preserving detection effectiveness

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If all divided logs are transmitted to the server, then complete log data is available for analysis, but the amount of data to be transmitted remains large

Engineering Contradiction:
Improvelog data availabilityVSAvoiddata transmission efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent performs preliminary comparison of divided logs with previously transmitted logs before actual transmission, identifying and eliminating redundant data in advance, thus reducing the volume of data that needs to be transmitted while ensuring complete log availability for analysis

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If divided logs are compared with existing logs using predetermined size division, then data matching is simplified, but the likelihood of matches is low due to log variability

Engineering Contradiction:
Improvedata comparison simplicityVSAvoiddata match accuracy
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent changes the division parameter from fixed predetermined size to dynamic message ID-based segmentation, which adapts to the actual structure and variability of vehicle logs, thereby improving both match accuracy and comparison efficiency

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11997119B2Vehicle log transmission device, vehicle log analysis server, vehicle log analysis system, and vehicle log transmission/reception method
Publication Date: 2024.05.28 PANASONIC INTELLECTUAL PROPERTY CORP OF AMERICA
  • US11997119B2 patent drawing
  • US11997119B2 patent drawing
  • US11997119B2 patent drawing

AI summary

A vehicle log transmission device includes: a vehicle log division processor that generates one or more divided logs; existing identifier storage that stores an existing identifier list, which is a list of identifiers corresponding to existing divided logs generated by dividing an existing vehicle log shared between the vehicle log transmission device and a vehicle log analysis server; a vehicle log transmission necessity determiner that determines that a divided log corresponding to an identifier present in the existing identifier list is a first divided log, and that a divided log corresponding to an identifier not present in the existing identifier list is a second divided log; and a vehicle-side communicator that transmits the identifier corresponding to the first divided log to the vehicle log analysis server, and transmits the second divided log to the vehicle log analysis server.