Vehicle Software Module Recovery From Cyber Attack Using ROM Backups
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Connected vehicles are vulnerable to cyber attacks that can compromise their software and data, leading to potential malfunctions and safety risks during travel.
Innovation Solution
Implementing a security measure system that includes a vehicle's ROM storing backup modules, which can replace infected software modules with normal ones, and a server that generates and distributes virus patterns to prevent the spread of novel viruses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the vehicle connects to external communication networks to download and update software, then the vehicle can achieve driving assistance or autonomous driving functions, but the vehicle becomes vulnerable to cyber attacks and malware infections
Solution Approach 1:
The patent creates backup modules in advance by copying original software modules to a backup storage area before any cyber attack occurs. These backup modules are stored in a protected region that is isolated from the external communication network, ensuring they remain clean and uninfected. When a cyber attack is detected, the system can immediately switch to using these pre-prepared backup modules without needing to download new software during the attack.
Solution Approach 2:
The patent divides the software system into multiple independent modules, each with its own backup. This segmentation allows the system to isolate and replace only the infected modules while keeping other modules functioning normally. The software is organized as a plurality of first modules in the runtime area and corresponding second modules in the backup area, enabling granular security responses.
2Reliability
If the vehicle uses traditional virus detection methods, then malware can be detected, but the detection and response time may be insufficient to prevent travel safety issues
Solution Approach 1:
The patent implements a mechanism that skips the traditional lengthy virus detection and analysis process by using hash value comparison. Instead of scanning and analyzing potentially infected modules in detail, the system quickly compares hash values of runtime modules with their backup counterparts. This allows extremely rapid detection and immediate switching to backup modules, rushing through the security response process before the malware can cause travel safety issues.
Solution Approach 2:
The patent creates exact copies of original software modules as backups before any infection can occur. These copied backup modules are stored in a protected backup area with restricted access. When infection is detected through hash value mismatch, the system can immediately use the copied backup modules without needing to perform time-consuming virus analysis, thereby ensuring travel safety with minimal time loss.
3Quantity of substance
If the vehicle stores backup software modules in the same storage area as runtime modules, then storage space is efficiently used, but the backup modules may be infected along with the runtime modules
Solution Approach 1:
The patent extracts the backup modules from the common storage area and places them in a separate, dedicated backup storage area. This physical and logical separation ensures that when the runtime area is infected through external communication, the backup area remains isolated and uninfected. The backup area has restricted access controls that prevent malware from compromising both runtime and backup modules simultaneously, while still maintaining efficient storage utilization through organized memory management.
Data Source
AI summary
A security measure method for software executed by a vehicle is provided. The software is implemented by a plurality of first modules. The vehicle includes a ROM configured to store a plurality of second modules corresponding to the plurality of first modules. The vehicle checks whether or not there is an abnormality in each of the plurality of first modules, extracts, when an abnormal first module is detected, the abnormal first module from the software, reads the second module corresponding to the abnormal first module from the ROM, and rewrites the abnormal first module in the software to the second module read from the ROM.