In-Vehicle Relay Control for Blocking Unauthorized ECU Data

Solution Overview

Problem

Conventional in-vehicle relay devices cannot detect unauthorized data transmission from attacked equipment and thus fail to prevent unauthorized control, leading to potential vehicle instability and uncontrolled states.

Innovation Solution

An in-vehicle relay device with first and second communication circuits and a control circuit that stops relaying data when unauthorized data is received, based on the vehicle's traveling state, using MAC addresses or IP addresses to identify and block unauthorized transmission sources.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the in-vehicle relay device monitors only the state of the destination ECU and voltage, then the device complexity is reduced and ease of operation is improved, but the reliability deteriorates because unauthorized data transmission from attacked equipment cannot be detected

Engineering Contradiction:

Improvedetection of unauthorized data transmissionVSAvoidmonitoring scope

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the monitoring function by introducing a dedicated unauthorized activity detection device that operates independently from the relay device. This detection device monitors transmission source equipment separately, allowing the relay device to maintain its simple relay function while the system as a whole achieves comprehensive monitoring coverage.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary unauthorized activity detection device that acts as a mediator between the communication circuits and the relay device. This intermediary detects unauthorized activities and provides information to the relay device, enabling the relay device to stop relaying unauthorized data without requiring complex monitoring capabilities itself.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If the in-vehicle relay device stops transmission upon detecting unauthorized data, then the reliability is improved by preventing unauthorized control, but the productivity deteriorates because legitimate data transmission may be interrupted

Engineering Contradiction:

Improveprevention of unauthorized controlVSAvoiddata transmission efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent implements dynamic control of data transmission by making the relay stopping decision conditional on the vehicle's traveling state. When the vehicle is stationary, the relay device stops transmission of unauthorized data more aggressively. When the vehicle is moving, the device maintains transmission to ensure safety-critical functions continue operating, thus balancing security with productivity.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent changes the parameter of relay stopping based on the vehicle's traveling state. The relay device adjusts its behavior dynamically: stopping relay when the vehicle is stationary and unauthorized data is detected, but continuing relay when the vehicle is moving, thereby adapting the security measure to the operational context.

Inventive Principle:

Principle #35Parameter changes

3Reliability

If the in-vehicle relay device monitors transmission source equipment for unauthorized activity, then the reliability is improved by detecting attacks, but the device complexity increases due to additional monitoring capabilities

Engineering Contradiction:

Improvedetection of attacked equipmentVSAvoidmonitoring architecture

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the monitoring function by introducing a dedicated unauthorized activity detection device that operates independently from the relay device. This detection device monitors transmission source equipment separately, allowing the relay device to maintain its simple relay function while the system as a whole achieves comprehensive monitoring coverage.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary unauthorized activity detection device that acts as a mediator between the communication circuits and the relay device. This intermediary detects unauthorized activities and provides information to the relay device, enabling the relay device to stop relaying unauthorized data without requiring complex monitoring capabilities itself.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11824871B2Vehicle relay device, relay method, and recording medium storing program for stopping unauthorized control by in-vehicle equipment

Publication Date: 2023.11.21 PANASONIC INTELLECTUAL PROPERTY CORP OF AMERICA

AI summary

An in-vehicle relay device for a vehicle is provided. The in-vehicle relay device includes a first communication circuit that transmits and receives first data to and from a first in-vehicle equipment in the vehicle. A second communication circuit transmits and receives second data to and from a second in-vehicle equipment in the vehicle. A control circuit controls relay of third data among the first communication circuit and the second communication circuit. In a case where reception data received by the control circuit from the first communication circuit or the second communication circuit is unauthorized, the control circuit stops relaying the third data in accordance with a traveling state of the vehicle.