Vehicle Relay Device Unauthorized Message Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Vehicle-mounted communication systems face challenges in detecting and preventing the transmission of unauthorized messages, as existing solutions cannot effectively restrict small amounts of malicious data from causing communication device malfunctions.
Innovation Solution
A vehicle-mounted relay device with determination, notification, and prohibition units to identify and prevent the relay of unauthorized messages, including storage and re-notification of identification information when the ignition is turned on, ensuring communication devices can discard or handle unauthorized messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a communication management device monitors CAN bus data and restricts external data transmission based on usage rate thresholds, then communication load can be controlled, but it cannot detect or restrict small amounts of malicious data transmission
Solution Approach 1:
The relay device performs preliminary actions by storing identification information of unauthorized messages in advance, and uses this stored information to detect and block subsequent unauthorized messages. This preliminary preparation enables the system to detect even small amounts of malicious data without requiring complex real-time analysis infrastructure.
2Reliability
If the relay device blocks unauthorized messages using stored identification information, then system security is improved, but communication latency increases due to additional processing
Solution Approach 1:
The relay device creates a copy of the unauthorized message's identification information and stores it in advance. When subsequent messages arrive, the device only needs to compare their identification information against the stored copy, rather than performing full message analysis. This copying approach significantly reduces processing time while maintaining security.
3Reliability
If the relay device notifies all communication units about relay prohibition, then system-wide security is improved, but communication overhead increases
Solution Approach 1:
The notification process is segmented into targeted communications rather than blanket notifications to all units. The relay device identifies specific communication units that need notification about relay prohibition and sends notifications only to those units, reducing overall communication overhead and energy consumption while maintaining system-wide security through coordinated blocking.
Data Source
AI summary
Provided is a vehicle-mounted relay device, a vehicle-mounted communication system, and a relay program configured to prevent an unauthorized message from being relayed between networks. A vehicle-mounted relay device includes a plurality of communication units to which a plurality of CAN buses are connected and determines whether a message transmitted by any ECU connected to the CAN buses are authorized. If a message is unauthorized, then the vehicle-mounted relay device 10 gives, to the respective CAN bus connected to the communication unit receiving the message, a notification that the unauthorized message has been transmitted. The vehicle-mounted relay device prohibits further relaying of a message that has the same CAN-ID as the CAN-ID contained in the message determined to be unauthorized. Concurrently, the vehicle-mounted relay device gives, to the other communication lines connected to a communication unit, a notification that relay of the message is prohibited.