Using signal rating to identify security critical CAN messages and nodes for efficient implementation of distributed network security features

A computer-implemented method, comprising:

• determining a criticality rating for a first electronic control unit communicatively coupled to a controller area network (CAN) bus based on a message classification of one or more messages transmitted by the first electronic control unit, the message classification assigned based on a signal classification of one or more signals incorporated in the one or more messages;
• receiving, at a second electronic control unit, a first message from the first electronic control unit, wherein the first electronic control unit has a pre-assigned criticality rating;
• and
• applying a priority to the first message based on the message classification and the pre-assigned criticality rating of the first electronic control unit coupled to a vehicle system, wherein the first message is assigned higher priority when the first electronic control unit has a first criticality rating than when the first electronic control unit has a second criticality rating lower than the first criticality rating.

A system comprising:

• a plurality of electronic control units communicatively coupled to a controller area network (CAN) bus, wherein each of the plurality of electronic control units transmits one or more messages each comprising one or more signals over the CAN bus, wherein each of the electronic control units is assigned a criticality rating based on a message classification of the one or more messages transmitted by the respective electronic control unit, wherein the message classification of a given message is assigned based on a signal classification of the one or more signals of the respective given message, and
• wherein each electronic control unit comprises one or more processors and a memory having stored thereon instructions that, upon execution by the one or more processors, cause the one or more processors to:
• receive a first message from a second electronic control unit of the plurality of electronic control units, wherein the second electronic control unit has a pre-assigned criticality rating;
• and
• apply a priority to the first message based on the message classification of the first message and the pre-assigned criticality rating of the second electronic control unit, wherein the first message is assigned higher priority when the second electronic control unit has a first criticality rating than when the second electronic control unit has a second criticality rating lower than the first criticality rating.