Vehicular Secure Gateway Dynamic Security Adaptation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicular processing systems lack flexibility in adapting and adjusting security measures based on specific needs, leading to potential vulnerabilities in securing various vehicle systems and accessories.
Innovation Solution
A scalable secure gateway system that dynamically selects and adjusts security measures, such as OBDII isolation, CAN protection, Ethernet security, USB security, Bluetooth, Wi-Fi, and GPS security, based on the situation, using a centralized trust anchor and network segmentation for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If fixed security measures are implemented in vehicular processing systems, then basic security protection is provided, but the system lacks flexibility to adapt to different security needs and situations
Solution Approach 1:
The patent implements a dynamic security gateway that can adjust security measures in real-time based on detected threats and system state. The gateway dynamically selects from multiple security protocols (encryption, authentication, isolation) and adjusts their intensity based on the situation, transforming the static security system into an adaptive one that responds to changing conditions.
Solution Approach 2:
The system changes security parameters such as encryption key length, authentication requirements, and network isolation levels based on the detected threat level. When threats are detected, the gateway increases security parameters; when the system is secure, it reduces parameters to maintain normal operation, thus achieving both adaptability and reliable security protection.
2Reliability
If multiple security measures are implemented across all vehicle systems, then comprehensive security coverage is achieved, but the system complexity increases
Solution Approach 1:
The patent segments the vehicular network into multiple zones with different security requirements. The security gateway divides the network into trusted and untrusted segments, applying security measures only where needed. This segmentation allows comprehensive security coverage in critical areas while avoiding unnecessary complexity in less sensitive areas.
Solution Approach 2:
Different security measures are applied to different parts of the vehicular system based on their specific security needs. Critical systems like braking and steering receive high-level security protection, while less critical systems use simpler measures. This local differentiation achieves comprehensive coverage without uniformly increasing system complexity.
3Reliability
If security measures are added to protect against potential threats, then security robustness improves, but the ease of operation and system responsiveness deteriorates
Solution Approach 1:
The security gateway applies partial security measures based on the actual threat level rather than maximum protection at all times. When no threats are detected, minimal security measures are applied to maintain responsiveness. When threats are detected, additional security actions are taken, achieving robust security without permanently degrading system responsiveness.
Solution Approach 2:
The system performs security checks and adjustments periodically rather than continuously, and only when triggered by specific events. The gateway monitors for threats and activates security measures periodically or event-driven, maintaining system responsiveness during normal operation while providing robust security when needed.
Data Source
AI summary
A vehicular secure gateway system for a vehicle includes a central security gateway disposed at the vehicle. The vehicular secure gateway system includes a connected gateway and a secure gateway. The connected gateway receives wireless communications emanating from external of the vehicle. The vehicular secure gateway system is operable to enable a particular security measure based on determination of a need for that particular security measure. The particular security measure provides enhanced isolation of an on-board diagnostic interface at the secure gateway and enhanced protection of a data communication network of the vehicle. Wireless communications received at the connected gateway are routed through the secure gateway for communication, via a data communication network of the vehicle, to a driving assist system of the vehicle.