In-Vehicle Network Message Detection via Periodic Reception Patterns
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing in-vehicle network communication devices struggle to accurately detect unauthorized messages due to their similarity with authorized messages, leading to undetected security breaches.
Innovation Solution
A detection device and method that monitors the reception status of periodic messages in an in-vehicle network, utilizing a state detection unit to identify transitions in message states and a processing unit to analyze reception intervals and frequencies of periodic messages to detect unauthorized messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If message detection is performed by comparing message content with predetermined criteria, then detection capability is provided, but unauthorized messages similar to authorized messages cannot be detected
Solution Approach 1:
The system transitions from static criterion-based detection to dynamic behavioral pattern detection. By continuously monitoring message reception status over time and comparing against learned normal patterns, the system adapts to detect deviations that indicate unauthorized messages, even when their content resembles authorized messages.
Solution Approach 2:
The detection approach shifts from analyzing single message dimensions (content matching) to multi-dimensional analysis including reception timing, frequency, and behavioral patterns. This dimensional expansion enables detection of unauthorized messages that mimic authorized content by identifying anomalies in their transmission characteristics.
2Device complexity
If conventional detection methods are used, then simple comparison processing is possible, but detection accuracy remains insufficient
Solution Approach 1:
The system performs preliminary learning of normal message reception patterns during a calibration phase before actual detection begins. This preliminary action establishes a baseline of expected behavior, enabling more accurate subsequent detection without requiring complex real-time analysis of every message.
Solution Approach 2:
The detection system incorporates feedback mechanisms where detection results and pattern mismatches are used to refine and update the learned normal patterns over time. This continuous feedback loop improves detection accuracy while maintaining relatively simple processing by building on established patterns rather than analyzing each message from scratch.
Data Source
AI summary
The detection device that detects presence of an unauthorized message in an in-vehicle network, the detection device includes: a state detection unit configured to detect a transition to a state in which a periodic message is transmitted in an in-vehicle network, based on content of a message transmitted in the in-vehicle network; and a processing unit configured to perform detection processing to detect presence of the unauthorized message based on a reception status of a plurality of the periodic messages in the state detected by the state detection unit.