In-Vehicle Relay Control for Unauthorized ECU Connection Screening
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing number of ECUs in vehicles leads to an increase in communication lines, which results in vehicle weight and space constraints, and there is a risk of unauthorized data transmission due to unauthorized apparatuses connected to the communication network.
Innovation Solution
An in-vehicle relay apparatus that relays data between communication lines while restricting unauthorized data transmission by analyzing the operation of newly connected communication apparatuses using correspondence information and performing authentication processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the number of ECUs and communication lines is increased to improve vehicle functions, then the communication capability and functionality are improved, but the vehicle weight and space requirements increase
Solution Approach 1:
Multiple communication lines are virtually merged into a single physical line by using a single communication cable that carries multiple communication signals simultaneously through time-division or frequency-division multiplexing, thereby reducing the physical number of cables and vehicle weight while maintaining multiple communication channels
Solution Approach 2:
A single communication line is designed to serve multiple functions by allowing different ECUs to share the same physical medium for data transmission, making the communication system more versatile while reducing the number of dedicated cables needed for each ECU
2Adaptability or versatility
If the number of ECUs and communication lines is increased to improve vehicle functions, then the communication capability and functionality are improved, but the space available for arranging communication lines decreases
Solution Approach 1:
Multiple communication lines are virtually merged into a single physical line by using a single communication cable that carries multiple communication signals simultaneously through time-division or frequency-division multiplexing, thereby reducing the physical number of cables and vehicle weight while maintaining multiple communication channels
Solution Approach 2:
The communication system transitions from spatial multiplexing (multiple physical cables arranged in different spatial positions) to temporal or spectral multiplexing (multiple logical channels on a single cable), effectively moving the differentiation dimension from space to time or frequency
3Reliability
If relay restriction is imposed on newly connected communication apparatuses to prevent unauthorized data transmission, then communication security is improved, but the complexity of the relay apparatus increases due to behavior analysis requirements
Solution Approach 1:
The relay apparatus monitors the operational behavior of connected devices and uses this feedback information to dynamically adjust relay restrictions, allowing authorized devices to be identified and permitted while maintaining security without requiring overly complex predetermined authentication mechanisms
Solution Approach 2:
Authorized communication apparatuses automatically register their behavior patterns with the relay apparatus during normal operation, enabling the relay apparatus to learn and recognize authorized devices through their self-exhibited operational characteristics without requiring manual configuration or complex authentication protocols
Data Source
AI summary
An in-vehicle relay apparatus configured to reduce an adverse effect from an unauthorized apparatus being connected to a communication line in a vehicle. The in-vehicle relay apparatus is to be connected to a plurality of communication lines mounted in a vehicle, and relays transmission/reception of data between the communication lines. The in-vehicle relay apparatus includes a relay restricting unit restricting data transmitted by a communication apparatus newly connected to one communication line from being relayed to another communication line. A behavior analysis unit analyzes an operation performed by the communication apparatus, based on correspondence information between an input value that is input to the communication apparatus and an operation result of the communication apparatus in response to the input value. A restriction cancelling unit cancels relay restriction performed by the relay restricting unit, in accordance with a result of analysis performed by the behavior analysis unit.


