Vehicle Relay Chain for Unauthorized Wireless Attack Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing relay apparatuses in vehicles lack robustness against unauthorized communication attacks from outside the vehicle, which can lead to abnormal states and compromise the safety of in-vehicle systems.
Innovation Solution
A relay apparatus system is designed with a wireless relay apparatus connected in series with multiple wired relay apparatuses, where each wired relay apparatus includes a communication unit, a determination unit for abnormality detection, and a signal output unit to disconnect communication with abnormal components, ensuring that even if the wireless relay apparatus is attacked, the wired relay apparatuses act as a barrier and prioritize communication with higher-priority ECUs for safety.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If relay apparatuses are directly connected to ECUs to enable communication, then communication functionality is achieved, but robustness against unauthorized communication attacks deteriorates
Solution Approach 1:
The relay apparatus system is divided into multiple relay apparatuses connected in series between the external communication apparatus and ECUs. Each relay apparatus acts as an independent segment that can detect abnormalities and disconnect from the network, preventing attack propagation while maintaining communication functionality for critical ECUs.
Solution Approach 2:
Multiple relay apparatuses are introduced as intermediary devices between the external communication apparatus and ECUs. These intermediary relays provide a protective layer that can identify and block unauthorized communications before they reach critical ECUs, thereby improving robustness without eliminating communication capabilities.
2Reliability
If wired relay apparatuses are connected in series downstream of wireless relay apparatus, then robustness against attacks improves, but communication delay increases
Solution Approach 1:
Different relay apparatuses are assigned different priorities based on the criticality of connected ECUs. High-priority ECUs (e.g., those controlling braking or steering) are connected through relays with higher communication priority, ensuring minimal delay for safety-critical communications, while lower-priority ECUs experience standard relay processing delays.
Solution Approach 2:
The relay apparatuses are pre-configured with abnormality detection capabilities and priority information for connected ECUs. This preliminary setup allows the system to quickly respond to attacks without requiring complex real-time decision-making, thereby minimizing communication delays while maintaining robustness.
3Reliability
If priority-based ECU connection is implemented, then protection of critical systems improves, but system complexity increases
Solution Approach 1:
Each ECU is assigned a priority parameter that reflects its criticality to vehicle safety and operation. The relay apparatus uses this priority parameter to determine communication handling, ensuring that critical ECUs receive protected and prioritized communication while non-critical ECUs receive standard service, thereby simplifying the protection strategy through a single key parameter.
Data Source
AI summary
A relay apparatus system is a relay apparatus system that is mounted in a vehicle, and includes: a wireless relay apparatus that wirelessly communicates with a communication apparatus provided outside of the vehicle; and a plurality of wired relay apparatuses that are connected in series downstream of the wireless relay apparatus when the communication apparatus is assumed to be positioned upstream of the wireless relay apparatus, wherein each of the plurality of wired relay apparatuses includes a communication unit that is communicably connected to an ECU for controlling an in-vehicle apparatus that is mounted in the vehicle.