In-Vehicle Relay Gateway for Load-Based Frame Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In-vehicle networks face challenges in securing communication due to varying packet volumes based on driving patterns and function usage, requiring effective methods to defend against attacks without needing to test multiple scenarios.
Innovation Solution
An in-vehicle relay device with a relay unit, calculation unit, and determination unit that calculates and assesses the processing load of frames to decide on relaying, allowing for dynamic defense against attacks by considering packet types, processing times, and device specifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If packet rate monitoring and threshold-based discarding is implemented, then network security is improved, but device complexity increases
Solution Approach 1:
The patent introduces a gateway device as an intermediary between the attack source and the in-vehicle network. This gateway calculates processing loads and makes relay decisions, protecting the internal network devices from direct exposure to attack traffic while maintaining security monitoring capabilities.
Solution Approach 2:
The patent implements partial action by selectively relaying only those packets that meet the processing load criteria. Instead of monitoring and discarding all packets exceeding a threshold, the system calculates individual processing loads and makes granular relay decisions, reducing unnecessary packet discarding while maintaining security.
2Adaptability or versatility
If statistical attribute collection for operation mode transition is implemented, then defense strategy adaptability is improved, but measurement precision requirements increase
Solution Approach 1:
The gateway device performs self-service by autonomously calculating processing loads and making relay decisions based on predefined criteria. The system automatically adapts its behavior by comparing calculated loads against thresholds without requiring external intervention or complex mode transition mechanisms.
Solution Approach 2:
The patent changes the parameter from collecting multiple statistical attributes for mode transition to using a single processing load calculation parameter. This simplifies measurement requirements while maintaining adaptability through dynamic relay decisions based on real-time load assessment.
3Reliability
If comprehensive scenario testing with different driving patterns is performed, then security coverage is improved, but loss of time increases
Solution Approach 1:
The patent applies preliminary action by pre-configuring processing load thresholds and relay criteria in the gateway device. Instead of performing comprehensive scenario testing during deployment, the system is pre-prepared to handle various attack patterns through predefined calculation methods and threshold values.
Solution Approach 2:
The system implements feedback by continuously monitoring actual processing loads and using this information to make real-time relay decisions. This ongoing feedback mechanism replaces the need for extensive prior scenario testing, as the system adapts to actual conditions through continuous measurement and adjustment.
Data Source
AI summary
Provided is an in-vehicle relay device including a relay unit that relays frames transmitted and received between one in-vehicle device and another in-vehicle device in an in-vehicle network, a calculation unit that calculates a processing load of the other in-vehicle device based on frames that were received from the in-vehicle device by the relay unit and are addressed to the other in-vehicle device, and a determination unit that determines whether or not the relay unit is to relay the frames addressed to the other in-vehicle device based on the processing load calculated by the calculation unit.