Session Key Generation for Autonomous Vehicle Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Autonomous vehicle (AV) service providers face vulnerabilities to replay attacks due to the use of traditional communications channels, which can be exploited by malicious entities to transmit spurious messages to AV service subscribers.
Innovation Solution
The implementation of a session key generation method that incorporates entropy generated by each AV service subscriber into a salt, used to calculate single-use symmetric keys for encrypting messages, allowing subscribers and providers to independently verify and calculate session keys, thereby preventing replay attacks and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional communications channels are used for AV service communication, then ease of operation is improved, but security is worsened due to vulnerability to replay attacks
Solution Approach 1:
The patent changes the communication protocol parameters by implementing session key generation using entropy from subscriber inputs combined with provider entropy. This transforms the communication from using traditional fixed protocols to dynamic session-specific keys, preventing replay attacks while maintaining ease of operation through automated key management
Solution Approach 2:
The patent introduces session keys as an intermediary layer between the traditional communication channel and the actual message transmission. These session keys act as a mediator that encrypts communications, adding security without requiring subscribers to change their communication behavior or increase operational complexity
2Reliability
If session key generation using subscriber entropy is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The system implements self-service by automatically generating session keys through combining provider entropy with entropy from subscriber inputs. The complexity of key management is handled automatically by the system itself rather than requiring manual intervention from subscribers, thereby improving security without significantly increasing operational complexity for users
Solution Approach 2:
The patent merges entropy from two sources (provider and subscriber) to generate session keys. This combination approach distributes the complexity burden and leverages existing entropy sources from both parties, achieving enhanced security while minimizing additional system complexity through resource consolidation
3Device complexity
If traditional communication protocols are used, then device complexity is reduced, but security against replay attacks is worsened
Solution Approach 1:
The patent implements periodic session key generation and rotation, where new session keys are created for each communication session or time period. This periodic renewal of encryption keys prevents replay attacks by ensuring that captured messages cannot be reused, while keeping protocol complexity manageable through structured periodic operations rather than continuous complex key management
Data Source
AI summary
Methods, apparatus, and systems for session key generation for AV operation are disclosed. In an embodiment, a vehicle service subscriber system generates an entropy. The vehicle service subscriber system is associated with a vehicle service subscriber. The vehicle service subscriber system transmits a synchronization message to a vehicle service provider system associated with at least one vehicle. The synchronization message includes the entropy. The vehicle service subscriber system receives a salt from the vehicle service provider system. The vehicle service subscriber system verifies that the salt was generated using the entropy. The vehicle service subscriber system calculates session keys using the salt. The vehicle service subscriber system receives a protected message from the vehicle service provider system. The vehicle service subscriber system authenticates the protected message using the session keys. The protected message is used to provide a ride involving the at least one vehicle.