Message monitoring system, message transmission electronic control unit, and monitoring electronic control unit

An electronic control unit comprising at least one first processor connected to a second processor in a monitoring electronic control unit via a communication network, the first processor being configured to:

• generate a first message in response to an aperiodic occurrence of a predetermined event;
• calculate a first feature value representing a feature of the first message using a first calculation method that generates the first feature value based on the feature of the first message;
• generate a second message storing the first feature value;
• and
• transmit the first message to the second processor in the monitoring electronic control unit aperiodically in response to the aperiodic occurrence of the predetermined event while periodically transmitting the second message to the second processor in the monitoring electronic control unit;
• wherein:
• the second processor is configured to receive the first message and the second message, calculate a second feature value representing the feature of the received first message using a second calculation method that generates the second feature value based on the feature of the first message, perform a comparison between the first feature value stored in the received second message and the second feature value, and determine whether the first message is normal based on a result of the comparison;
• the second calculation method corresponds to the first calculation method;
• the first processor is configured to use the first calculation method to calculate the first feature value based on a number of transmission times the first message has been transmitted;
• and
• the second processor is configured to use the second calculation method to calculate the second feature value based on a number of reception times the first message has been received.

A monitoring electronic control unit comprising at least one second processor connected to at least one first processor in an electronic control unit via a communication network, the second processor being configured to:

• receive a first message transmitted aperiodically and a second message transmitted periodically from the first processor in the electronic control unit, the second message storing a first feature value representing a feature of the first message, and the first feature value having been calculated by the at least one first processor using a first calculation method that generates the first feature value based on the feature of the first message;
• calculate a second feature value representing the feature of the first message received, the second feature value being calculated by the second processor using a second calculation method that generates the second feature value based on the feature of the first message, and the second calculation method corresponding to the first calculation method;
• and
• perform a comparison between (i) the first feature value stored in the second message received and (ii) the second feature value calculated, to determine whether the first message is normal based on a result of the comparison;
• wherein:
• the first processor is configured to use the first calculation method to perform a logical operation on a value stored in the first message generated to calculate the first feature value;
• and
• the second processor is further configured to use the second calculation method to calculate the second feature value by performing a logical operation on a value stored in the first message received.

A computer-implemented message generation method executed by at least one processor for an electronic control unit connected to a monitoring electronic control unit via a communication network, the method comprising:

• generating a first message in response to an aperiodic occurrence of a predetermined event;
• calculating a first feature value representing a feature of the first message, using a first calculation method that generates the first feature value based on the feature of the first message;
• generating a second message storing the first feature value;
• and
• transmitting the first message to the monitoring electronic control unit aperiodically in response to the aperiodic occurrence of the predetermined event while periodically transmitting the second message to the monitoring electronic control unit,
• wherein the monitoring electronic control unit is configured to calculate a second feature value representing the feature of the first message using a second calculation method that generates the second feature value based on the feature of the first message, the second calculation method corresponding to the first calculation method, and to perform a comparison between the first feature value and the second feature value to determine whether the first message is normal;
• wherein the first feature value is calculated using the first calculation method based on a number of transmission times the first message has been transmitted;
• and
• wherein the second feature value is calculated using the second calculation method based on a number of reception times the first message has been received.

A computer-implemented message monitoring method executed by at least one processor in a monitoring electronic control unit connected to an electronic control unit via a communication network, the method comprising:

• receiving a first message transmitted aperiodically and a second message transmitted periodically from the electronic control unit, the second message storing a first feature value representing a feature of the first message, and the first feature value being calculated by the electronic control unit using a first calculation method that generates the first feature value based on the feature of the first message;
• calculating a second feature value representing a feature of the received first message, the second feature value being calculated by the monitoring electronic control unit using a second calculation method that generates the second feature value based on the feature of the first message, and the second calculation method corresponding to the first calculation method;
• performing a comparison between the first feature value stored in the received second message and the calculated second feature value;
• and
• determining whether the first message is normal based on a result of the comparison;
• wherein:
• the first feature value is calculated using the first calculation method by performing a logical operation on a value stored in the transmitted first message;
• and
• the second feature value is calculated using the second calculation method by performing a logical operation on a value stored in the received first message.

A message monitoring system for a vehicle, comprising:

• a first electronic control unit;
• and
• a second electronic control unit connected to the first electronic control unit via a communication network,
• the first electronic control unit comprising at least one first processor configured to:
• generate a first message in response to an aperiodic occurrence of a predetermined event;
• calculate a first feature value representing a feature of the first message using a first calculation method that generates the first feature value based on the feature of the first message;
• generate a second message storing the first feature value;
• and
• transmit the first message aperiodically in response to the aperiodic occurrence of the predetermined event while periodically transmitting the second message,
• the second electronic control unit comprising at least one second processor different from the first processor, the second processor being connected to the first processor via the communication network, the second processor being configured to:
• receive the first message transmitted aperiodically and the second message transmitted periodically from the first processor in the first electronic control unit;
• calculate a second feature value representing the feature of the first message received by the reception unit using a second calculation method that generates the second feature value based on the feature of the first message, the second calculation method corresponding to the first calculation method;
• and
• perform a comparison between (i) the first feature value stored in the second message received by the reception unit and (ii) the second feature value calculated by the second calculation unit, to determine whether the first message is normal based on a result of the comparison;
• wherein:
• the first processor is configured to use the first calculation method to perform a logical operation on a value stored in the first message generated to calculate the first feature value;
• and
• the second processor is configured to use the second calculation method to calculate the second feature value by performing a logical operation on a value stored in the first message received.