Vehicle Network Security via Gateway Mode Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Vehicles equipped with extra-vehicular communication systems are vulnerable to unauthorized access, allowing external users to alter the programming of onboard computers, compromising security.
Innovation Solution
A vehicle communication system comprising a gateway computer and network computers, where the gateway computer determines a current mode of the vehicle and sends a security message to the network computers, which then decide whether to accept data messages based on the mode and message type.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If extra-vehicular communication is enabled for vehicle equipment, then communication functionality is improved, but security vulnerability increases allowing unauthorized access
Solution Approach 1:
The patent introduces a gateway computer as an intermediary between external communication interfaces and internal vehicle network computers. The gateway receives communication requests, determines the current vehicle mode, and mediates whether to forward messages to specific network computers. This intermediary structure enables external communication while preventing direct unauthorized access to internal systems, thus resolving the contradiction between communication functionality and security vulnerability.
2Adaptability or versatility
If data messages are accepted from external sources, then communication capability is improved, but risk of unauthorized programming alteration increases
Solution Approach 1:
The patent implements preliminary action by having network computers pre-store current vehicle mode information received from the gateway. Before accepting or executing any external data messages, each network computer checks the stored mode information to determine whether the message should be accepted. This preliminary preparation of security criteria prevents unauthorized programming alterations while allowing legitimate communication, thus resolving the contradiction between communication capability and programming integrity.
3Reliability
If security filtering is implemented for data messages, then security is improved, but message processing complexity increases
Solution Approach 1:
The patent segments the security filtering function into two parts: the gateway computer determines current vehicle mode and makes initial decisions about message forwarding, while individual network computers store mode information and make final acceptance decisions based on message type and mode. This segmentation distributes the processing complexity across multiple components rather than concentrating it in one system, thus improving data security while managing processing complexity through functional distribution.
Data Source
AI summary
A method is disclosed; the method may comprise: receiving, at each of a plurality of network computers, a security message from a gateway computer, wherein the security message identifies a current mode of the vehicle, wherein the current mode is indicative of a vehicle state; storing the current mode; receiving a data message; and based on the current mode, determining whether to accept the data message.