In-Vehicle Update Control for False Cyber Attack Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In-vehicle systems face high false positive rates in cyber attack detection, leading to unnecessary emergency measures that reduce system availability, as existing techniques struggle to accurately differentiate between actual and erroneous cyber attack signals.

Innovation Solution

An information processing device equipped with a storage unit for control information, a communication unit for receiving updates, and an update propriety determination unit that manages software updates based on communication messages, ensuring accurate detection and minimizing adverse effects by using secure communication paths and encryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cyber attack detection mechanisms are implemented in in-vehicle systems, then system security is improved, but false positive detection leads to unnecessary emergency measures that reduce system availability

Engineering Contradiction:
Improvesystem securityVSAvoidsystem availability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent introduces an update control unit as an intermediary between the detection mechanism and the emergency response system. This unit receives detection results and determines whether to permit software updates based on those results, acting as a buffer that prevents false positive detections from directly triggering unnecessary emergency measures. The intermediary validates detection accuracy before initiating restrictive actions, thereby maintaining system availability while preserving security.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements a feedback mechanism where the update control unit continuously monitors detection results and adjusts software update permissions accordingly. When false positives are detected or when detection confidence is insufficient, the system provides feedback to suppress unnecessary emergency measures. This feedback loop enables the system to learn from detection accuracy and reduce false positive impacts on system availability.

Inventive Principle:
Principle #23Feedback

2Reliability

If software update control is restricted to prevent unauthorized updates, then system security is improved, but legitimate update operations may be blocked

Engineering Contradiction:
Improvesystem securityVSAvoidsoftware update operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent applies preliminary action by establishing update control information and determination criteria before software update operations are attempted. The update control unit pre-configures permission rules based on detection results and system state, so that when update requests occur, they can be quickly evaluated against pre-established criteria. This preliminary setup ensures security requirements are met while enabling smooth legitimate update operations without unnecessary delays or blocks.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12039050B2Information processing device
Publication Date: 2024.07.16 ASTEMO LTD
  • US12039050B2 patent drawing
  • US12039050B2 patent drawing
  • US12039050B2 patent drawing

AI summary

An information processing device that can update software includes: a storage unit that stores control information for controlling whether or not the software can be updated; a communication unit that receives a communication message transmitted from another information processing device connected thereto via a communication line; an update control unit that updates the control information on the basis of the communication message received by the communication unit; and an update propriety determination unit that determines whether or not the software can be updated, on the basis of the control information.