Vehicle Communication Rule Caching for Low-Load Anomaly Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle-mounted control systems face challenges in detecting abnormalities caused by cyberattacks without increasing data-processing load, as they require exhaustive rule referencing and are prone to redundant rule definitions and erroneous detections.
Innovation Solution
A vehicle-mounted control apparatus with a first storage unit for normal communication data rules, a second storage unit for frequently accessed rules, and a monitoring unit that efficiently refers to these rules to detect abnormalities, updating the second storage unit based on coincidence records to minimize redundant rule definitions and processing load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If all rules related to normal-time communication data are preliminarily defined and comprehensively referred to during monitoring, then abnormality detection accuracy is improved, but monitoring processing load increases
Solution Approach 1:
The patent divides the comprehensive rule set into two storage units: a first storage unit containing all rules for normal-time communication data, and a second storage unit containing frequently accessed rules. The monitoring unit first checks against the second storage unit (reducing processing load), and only refers to the first storage unit when necessary (maintaining detection accuracy).
Solution Approach 2:
The system performs preliminary action by pre-loading frequently accessed rules into the second storage unit before monitoring operations begin. This allows the monitoring unit to quickly access common rules without scanning the entire rule set, thereby reducing processing load while maintaining detection accuracy.
2Adaptability or versatility
If rules are defined for each vehicle state, then adaptability to different states is improved, but redundant rule definitions increase processing load
Solution Approach 1:
The patent implements universality by having the second storage unit store rules that are frequently accessed across multiple vehicle states. This allows a single rule set to serve multiple states, eliminating redundant definitions while maintaining state-specific adaptability through selective rule application.
Solution Approach 2:
The system applies local quality by storing state-specific rules only in the first storage unit when needed, while keeping commonly applicable rules in the second storage unit. This allows the system to adapt to different states without duplicating rules across all state-specific configurations.
3Measurement precision
If monitoring determines normality for each communication data transmission, then detection accuracy is improved, but data processing load increases with massive communication data
Solution Approach 1:
The patent extracts frequently accessed rules from the comprehensive rule set and places them in the second storage unit. This extraction allows the monitoring unit to quickly validate communication data against common rules without processing the entire rule set, thereby maintaining detection accuracy while reducing processing load for massive data volumes.
Data Source
AI summary
A vehicle-mounted control apparatus includes a first storage unit that stores a rule at a time when communication data is normal, a second storage unit that stores part of rules stored in the first storage unit, a monitoring unit that monitors whether or not communication data is normal, a reference-rule recording unit that records a rule that coincides with under-monitoring communication data and the number of coincidences therebetween, and a rule-updation unit that updates a rule stored in the second storage unit, based on a rule stored in the first storage unit and a record in the reference-rule recording unit.