Vehicular Secured Communication System Message Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle communication systems lack effective mechanisms to filter out malicious or corrupted messages within the vehicle's network, which can lead to unintended vehicle behavior.
Innovation Solution
A secured communication system that employs a two-step filtering process to determine the legitimacy of messages. This involves examining the parameters of multiple electronic control units involved in the command and comparing the behavior indicated by the message to a typical driver profile or average operating conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a communication network is implemented in the vehicle to enable data exchange between control units, then communication capability and system integration are improved, but the risk of malicious or corrupted messages infiltrating the network increases
Solution Approach 1:
The patent introduces a message filtering system as an intermediary component between the communication network and the electronic control units. This filtering system intercepts all incoming messages, validates their legitimacy through multiple checks (source verification, parameter plausibility, behavioral consistency), and only allows authenticated messages to reach the control units. The intermediary thus protects the system from malicious messages while maintaining communication functionality.
Solution Approach 2:
The patent implements preliminary validation checks on messages before they are processed by control units. The filtering system performs source authentication, parameter range verification, and behavioral pattern matching in advance, blocking potentially harmful messages before they can execute unintended actions. This preliminary action prevents malicious messages from compromising vehicle safety.
2Reliability
If message filtering mechanisms are added to the communication system, then system security and message legitimacy verification are improved, but system complexity and processing overhead increase
Solution Approach 1:
The patent divides the message filtering function into multiple independent modules: source verification module, parameter validation module, behavioral analysis module, and blocking module. Each module performs a specific check and can operate independently. This segmentation allows the system to achieve comprehensive security through multiple layers of validation while keeping each individual module relatively simple and maintainable.
3Measurement precision
If multiple filtering checks are performed on each message, then message verification accuracy is improved, but processing time and computational load increase
Solution Approach 1:
The patent implements a hierarchical filtering approach where quick, simple checks (source verification, basic parameter validation) are performed first on all messages. Only messages that pass these initial filters undergo more intensive analysis (behavioral pattern matching, cross-referencing with driver profiles). This partial application of extensive verification to only suspicious messages maintains high accuracy while minimizing overall processing time for legitimate traffic.
Data Source
AI summary
A vehicular secured communication system includes a plurality of electronic control units disposed at a vehicle and interconnected by a communication network of the vehicle. The vehicular secured communication system determines if data received at an interface disposed at the vehicle is valid by (i) determining correspondence of a first parameter received via the communication network from a first electronic control unit of the plurality of electronic control units with a second parameter received via the communication network from a second electronic control unit of the plurality of electronic control units, (ii) determining correspondence of the first and second parameters with a current vehicle operating parameter or driving condition or driver profile, and (iii) comparing a vehicle behavior indicated by the received data to the current vehicle operating parameter or driving condition or driver profile.