Vehicle Networking Intrusion Detection with Federated Model Learning

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional intrusion detection methods for vehicle networking systems face challenges in dealing with constantly changing attack patterns, leading to low detection accuracy and high false alarm rates, while also incurring significant communication and storage costs and risking data privacy breaches due to centralized data collection.

Innovation Solution

A method for constructing a vehicle networking intrusion detection model using federated learning, which decouples local models into feature extractors and classifiers, utilizes a similarity matrix to select similar clients for training, aggregates feature extractors, and updates local models with gradient descent, while communicating only model parameters to ensure data privacy and reduce communication costs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If centralized data collection is used for intrusion detection, then detection accuracy can be improved through comprehensive data analysis, but communication and storage costs increase significantly and data privacy risks arise

Engineering Contradiction:
Improvedetection accuracyVSAvoidcommunication and storage costs
Core Design Contradiction:
Measurement precisionVSLoss of energy

Solution Approach 1:

The patent implements federated learning where each vehicle client trains local intrusion detection models using its own data locally, rather than centralizing all data. This allows each client to maintain local data privacy while contributing to a global model, reducing communication overhead to only model parameters rather than raw data

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The global intrusion detection model is segmented into local models deployed at each vehicle client. Each local model independently processes local data, and only model updates are aggregated centrally. This segmentation eliminates the need to transmit large volumes of raw data while maintaining detection capabilities

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If traditional centralized intrusion detection methods are used, then comprehensive attack pattern analysis is possible, but the system struggles to cope with constantly changing attack patterns resulting in low detection accuracy and high false alarm rates

Engineering Contradiction:
Improveability to cope with changing attack patternsVSAvoiddetection accuracy
Core Design Contradiction:
Adaptability or versatilityVSMeasurement precision

Solution Approach 1:

The patent implements dynamic model updates through federated learning where local models continuously adapt to changing attack patterns in their respective environments. The global model aggregates these adaptive local models, enabling the system to dynamically respond to evolving threats rather than relying on static centralized training

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system incorporates feedback loops where local models continuously learn from new attack patterns and feed updated model parameters back to the global model. This continuous feedback mechanism enables the intrusion detection system to adapt to constantly changing attack patterns while maintaining high detection accuracy

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS12368738B1Method for constructing a vehicle networking intrusion detection model based on federated learning
Publication Date: 2025.07.22 ZHEJIANG FORESTRY UNIVERSITY
  • US12368738B1 patent drawing
  • US12368738B1 patent drawing
  • US12368738B1 patent drawing

AI summary

A method for constructing a vehicle networking intrusion detection model based on federated learning is provided, which includes decoupling a local model according to a feature extractor and a classifier; selecting other vehicle clients with higher similarity to each vehicle client; collecting a local feature extractor from each vehicle client and distributing them to each vehicle client along with a global classifier obtained in a previous round, by a server; aggregating the local classifier and feature extractor from other vehicle clients to form an evaluation model; updating weights to obtain an updated local feature extractor, and combining it with the global classifier in the previous round to update the local model; aggregating feature representations extracted from a local dataset, and obtaining a current feature representation; collecting all current feature representations to train a global classifier and distributing them to vehicle clients that participate a next round of training.