Vehicle Network Authentication for Fast Cross-Group Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle control systems face challenges in maintaining high responsiveness while effectively detecting and protecting against illegal communication attacks.
Innovation Solution
A vehicle control system with two control device groups and a communication management device that performs authentication and routing, allowing direct communication between control devices without intermediation, using Service Oriented Middle warE over IP (SOME/IP) protocol.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication processing is performed by the communication management device for all inter-group communication, then security against illegal communication is improved, but communication responsiveness deteriorates due to the authentication overhead
Solution Approach 1:
The communication management device performs authentication processing in advance before communication between control devices of different groups begins. By completing authentication beforehand, the system ensures security is established prior to data transmission, eliminating the need for repeated authentication during communication and thus maintaining high responsiveness while ensuring security.
2Loss of time
If direct communication between control devices is enabled without communication management device interposition, then communication responsiveness is improved, but security control capability deteriorates
Solution Approach 1:
The communication system is segmented into two distinct groups: control devices that perform motion control (first group) and control devices that perform communication with outside (second group). This segmentation allows direct communication within each group without management device interposition, maintaining responsiveness, while the communication management device maintains overall security control by managing authentication and relay between groups.
Data Source
AI summary
A vehicle control system includes two control device groups respectively constituting two communication networks, a communication management device communicably connected to the two control device groups, and a routing device that routes communication between the two communication networks. When a message is received from one of control devices, the communication management device performs authentication processing for the control device and includes a communication address of one control device as a transmission source address in a relay message for relaying the message received from the one control device to a control device of the other of the control device groups, and the control device of the other of the control device groups performs communication with the one control device by using the communication address of the one control device included in the relay message without interposition of the communication management device.