In-vehicle CAN (Controller Area Network) bus network does not have any network security protection measures, which is facing a serious network security threat. However, most of the intrusion detection solutions requiring extensive computational resources cannot be implemented in invehicle network system because of the resource constrained ECUs. To add additional hardware or to utilize cloud computing, we need to solve the cost problem and the reliable communication requirement between vehicles and cloud platform, which is difficult to be applied in a short time. Therefore, we need to propose a short-term solution for automobile manufacturers. In this paper, we propose a signature-based light-weight intrusion detection system, which can be applied directly and promptly to vehicle's ECUs (Electronic Control Units). We detect the anomalies caused by several attack modes on CAN bus from real-world scenarios, which provide the basis for selecting signatures. Experimental results show that our method can effectively detect CAN traffic related anomalies. For the content related anomalies, the detection ratio can be improved by exploiting the relationship between the signals.

FlexRay is becoming the in-vehicle communication network of the next generation. In this study, the main contents are the FlexRay network static segment scheduling algorithm and optimization strategy, improve the scheduling efficiency of vehicle network and optimize the performance of communication network. The FlexRay static segment characteristic was first analyzed, then selected bandwidth utilization as the performance metrics to scheduling problem. A signal packing method is proposed based on Next Fit Decreasing (NFD) algorithm. Then Frame ID (FID) multiplexing method was used to minimize the number of FIDs. Finally, experimental simulation by CANoe. FlexRay software, that shows the model can quickly obtain the message schedule of each node, effectively control the message payload size and reduced bus payload by 16.3%, the number of FID drops 53.8% while improving bandwidth utilization by 32.8%.

No abstract

Information security in a controller area network (CAN) is becoming more important as the connections between a vehicle’s internal and external networks increase. Encryption and authentication techniques can be applied to CAN data frames to enhance security. To authenticate a data frame, a message authentication code (MAC) needs to be transmitted with the CAN data frame. Therefore, space for transmitting the MAC is required within the CAN frame. Recently, the Triple ID algorithm has been proposed to create additional space in the data field of the CAN frame. The Triple ID algorithm ensures every CAN frame is authenticated by at least 4 bytes of MAC without changing the original CAN protocol. However, since the Triple ID algorithm uses six header bits, there is a problem associated with low data compression efficiency. In this paper, we propose an algorithm that can remove up to 15 bits from frames compressed with the Triple ID algorithm. Through simulation using CAN signals of a Kia Sorento vehicle and an LS Mtron tractor, we show that the generation of frames containing compressed messages of 4 bytes or more is reduced by up to 99.57% compared to the Triple ID method.

Actually, the development of increasingly powerful systems and information technologies capable of monitoring in real time the vital signs and the location of people are providing significant changes in the functions that Social Solidarity Institutions (IPSS) have in society, from simple treatment of disabling diseases and palliative care, to prevention and monitoring of users, promoting their mobility, with the ultimate goal of improving the quality of life of institutionalized people. The main objective of the system presented here is to monitor the elderly or with problems within institutions through the acquisition and treatment of data and information related to their location and health status, in a discrete and non-intrusive way, through information and communication. So, that both the institution and the family members can monitor in real time the status of the users they have under their responsibility. Considering that the systems focused on the monitoring and data management of people are in great evolution, that pervasive and ubiquitous computing is present in our daily life, with the present work we hope to contribute positively to the improvement of the quality of life of the users of the social solidarity institutions, especially in the senior population, with special attention to people suffering from psychological pathologies such as Alzheimer's and other types of dementia. The system utilizes low-cost communication and data processing facilities that couple heart rate sensors among others, allowing the system operator to access user information at any time. Being a low-cost system, social solidarity institution can easily implement your custom solution for new social responses.