In-Vehicle Network Abnormality Detection with Priority-Based Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle-mounted equipment security systems face challenges in efficiently transmitting detailed information to external servers, leading to potential log overwrites and limited data availability for abnormality detection and analysis, as they typically output all stored data, increasing communication demands and limiting real-time monitoring capabilities.
Innovation Solution
An abnormality detecting device with a controller and storage unit that determines data amount and timing for communication with an external server based on the type, content, frequency, and risk of detected abnormalities, allowing prioritized transmission of essential information to prevent log overwrites and ensure timely notification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If all detailed information stored in the storage device is transmitted to the external server, then the external server can have comprehensive knowledge for analysis, but the communication data amount increases and log storage capacity is consumed
Solution Approach 1:
The patent segments information into multiple priority levels (high priority including abnormality occurrence timing, type, and state; medium priority including detailed log information; low priority including general operational data). The communication unit transmits only high priority information continuously, while medium and low priority information is transmitted selectively based on storage capacity and communication availability, thus reducing overall communication data volume while preserving critical information.
Solution Approach 2:
The patent extracts and prioritizes only the most essential abnormality-related information (occurrence timing, type, and state) for continuous transmission to the external server. Less critical detailed log information is retained in the storage device and transmitted only when storage capacity permits or upon external server requests, thereby extracting the core valuable data for immediate analysis while deferring less urgent data transmission.
2Quantity of substance
If detailed information is transmitted only when requested by the external server, then communication data amount is suppressed, but the external server's knowledge capability is limited and logs may be overwritten before transmission
Solution Approach 1:
The patent performs preliminary classification and prioritization of information before transmission. High priority information regarding abnormalities is prepared and transmitted proactively without waiting for external server requests. The system continuously monitors storage capacity and proactively transmits medium priority detailed information when capacity allows, preventing log overwriting before transmission opportunities arise.
Solution Approach 2:
The patent implements a feedback mechanism where the communication unit continuously monitors storage device capacity and transmission status. When storage capacity becomes insufficient, the system receives feedback and automatically adjusts transmission priorities, transmitting critical abnormality information first and deferring less critical logs. This feedback loop ensures that important information is transmitted before storage space is consumed.
3Loss of information
If the storage device stores all detailed information, then comprehensive logs are available for analysis, but the storage capacity is consumed and log overwriting occurs when storage is full
Solution Approach 1:
The patent applies local quality by assigning different retention priorities to different types of information stored in the storage device. High priority abnormality information (occurrence timing, type, state) is retained with highest priority and protected from overwriting. Medium priority detailed log information is stored with lower priority and subject to overwriting when storage capacity is insufficient. This differential retention strategy preserves essential diagnostic information while managing limited storage resources.
Solution Approach 2:
The patent implements a selective discarding mechanism where low and medium priority log information is discarded (overwritten) when storage capacity is full, while high priority abnormality information is protected. The system recovers essential diagnostic capability by ensuring that critical abnormality data remains stored even when general operational logs are overwritten, maintaining the ability to analyze security incidents while managing storage constraints.
Data Source
AI summary
An abnormality detecting device includes a controller for detecting an abnormality occurred in an in-vehicle network in which a plurality of pieces of vehicle-mounted equipment mounted in a vehicle communicate with each other; and a storage device for storing information. the controller determines a data amount and/or a timing to be used for communication with an external device, based on a priority that is a degree of influence on a system based on a degree of security violation or a degree of gradually increasing risk from a history of the number of times a security violation signal has been acquired when the security violation signal is detected as the abnormality from acquired data, and communicates contents or a transmission destination of a data frame including the security violation signal if the priority is more than a first prescribed value.