Two-Point Voltage Ratio Intrusion Detection for CAN Bus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Automotive intrusion detection systems face challenges in accurately identifying the source of anomalies and preventing unauthorized communications between ECUs in vehicle networks, particularly due to variations in voltage outputs and the difficulty in replicating the exact physical location of ECUs for authentication.
Innovation Solution
A two-point measurement system that utilizes the intrinsic physical characteristics of the CAN bus, such as resistance, to determine the relative position of transmitting ECUs and authenticate messages by calculating a signature ratio from voltage measurements at two measurement points, thereby preventing impersonation and voltage spoofing attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If traditional intrusion detection systems are used in automotive networks, then basic anomaly detection is possible, but the systems cannot accurately identify the source of anomalies or prevent unauthorized communications between ECUs
Solution Approach 1:
The system segments the bus network into multiple measurement zones by placing multiple measurement points at different locations on the CAN bus. Each measurement point captures voltage signals from transmitting ECUs, creating spatially segmented detection zones that enable precise localization of anomaly sources through comparative analysis of voltage ratios across different segments
Solution Approach 2:
The system introduces voltage ratio analysis as an intermediary mechanism between raw voltage measurements and anomaly detection. By calculating and comparing voltage ratios (V1/V2) from multiple measurement points, the system creates an intermediate diagnostic layer that accurately identifies anomaly sources without requiring direct physical access to each ECU
2Reliability
If ECUs are authenticated based on physical location, then impersonation attacks can be prevented, but the system cannot adapt to voltage variations or replicate authentication credentials
Solution Approach 1:
The system changes the authentication parameter from absolute voltage levels to voltage ratios (V1/V2). This parameter transformation makes authentication reliable because the ratio remains consistent for legitimate ECUs at specific bus locations while naturally adapting to voltage variations, noise, and environmental conditions that affect absolute voltage levels
3Measurement precision
If multiple measurement points are deployed on the bus, then ECU positioning and authentication accuracy improve, but system complexity and implementation difficulty increase
Solution Approach 1:
The measurement points deployed on the bus serve multiple functions simultaneously: they authenticate ECUs by analyzing voltage ratios, locate anomaly sources through spatial comparison, and provide ongoing security monitoring. This multi-functionality reduces overall system complexity despite the presence of multiple measurement points
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Effectively identifies and mitigates unauthorized communications by ensuring that only valid ECUs can match the expected voltage ratios at measurement points, enhancing the security of in-vehicle networks and preventing ECU impersonation and voltage impersonation attacks.
Implementation Method 1
utilizes the intrinsic physical characteristics of the CAN bus, such as resistance, to determine the relative position of transmitting ECUs
Data Source
AI summary
Various systems and methods for intrusion detection are described herein. An electronic device for intrusion detection includes memory circuitry to store a set of signature voltage ratios and a corresponding set of node identifiers, each node identifier corresponding to a unique signature voltage ratio; and security circuitry to: compare voltages received at a first and second measuring point on a bus, the voltages resulting from a message transmitted by a sending node on the bus, the first measuring point providing a first voltage and the second measuring point providing a second voltage; calculate a test voltage ratio from the first voltage and the second voltage; determine whether the test voltage ratio is in the set of signature voltage ratios; and initiate a security response based on whether the test voltage ratio is in the set of signature voltage ratios.