Vehicle Control Device Message Validation Across Bus Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle bus systems lack efficient methods to identify and detect unauthorized or manipulated control device messages, allowing unauthorized message sending without authorization.
Innovation Solution
A second control device monitors multiple bus systems and identifies inadmissible messages by determining the associated bus system, comparing it with the first bus system, and sending an alarm to a vehicle-external server if a mismatch is found, thereby identifying manipulated control devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a control device sends messages on bus systems without authorization checks, then communication efficiency is maintained, but security against unauthorized message sending deteriorates
Solution Approach 1:
The patent applies preliminary action by having the second control device pre-determine and store the correct bus system associations for each message type before receiving messages. When a message is received, the device compares the message's declared bus system against the pre-determined correct bus system, enabling rapid security verification without disrupting communication flow.
2Difficulty of detecting and measuring
If the second control device monitors all messages on all bus systems, then detection capability improves, but device complexity increases
Solution Approach 1:
The patent extracts the security monitoring function from the general message processing flow by dedicating a specific second control device to this task. This specialized device focuses exclusively on comparing message bus system associations against pre-determined correct associations, simplifying the monitoring logic while maintaining comprehensive detection capability across all bus systems.
3Measurement precision
If the second control device compares each received message against all possible bus systems, then measurement precision improves, but processing time increases
Solution Approach 1:
The patent resolves this contradiction by performing the bus system association determination in advance and storing these correct associations. During message reception, the device only needs to compare the message's declared bus system against the single pre-determined correct association for that message type, achieving both high precision and fast processing without exhaustive comparison.
Data Source
AI summary
A method for identifying an inadmissible message of a manipulated control device of a vehicle using a second control device includes receiving a first message of a first control device via a first bus system using the second control device, and determining a bus system that is associated with the received first message. If the determined bus system differs from the first bus system, then the received first message is determined to be an inadmissible message of the first bus system by means of the second control device. The method also includes identifying the first control device as the manipulated control device using the second control device if the received first message has been identified as an inadmissible message. The method further includes providing an alarm message to a vehicle-external server using the second control device if the received first message is an inadmissible message.