EV Battery Offline Authentication via CAN Bus Random Challenge
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current battery authentication methods for electric vehicles rely on online server arrangements, which are vulnerable to connectivity disruptions and security threats, such as sniffing and replay attacks, leading to potential misuse and theft.
Innovation Solution
An offline authentication system using a CAN bus network where primary and secondary batteries generate and verify dynamic random numbers, eliminating server dependency and preventing unauthorized access through encrypted communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If online server arrangement is used for battery authentication, then authentication can be performed, but connectivity loss disrupts authentication and exposes sensitive information to security threats
Solution Approach 1:
The authentication system is segmented into two independent modes: online authentication via server and offline authentication via local exchange between primary and secondary batteries. This segmentation allows the system to maintain authentication capability during connectivity loss while limiting security exposure to the local vehicle network only.
Solution Approach 2:
A random number generator acts as an intermediary mechanism in offline authentication, generating dynamic random numbers that are exchanged between primary and secondary batteries through the CAN bus. This intermediary prevents direct exposure of sensitive authentication credentials while enabling verification.
2Reliability
If encrypted communication is used in offline authentication, then security is improved, but system complexity increases
Solution Approach 1:
The primary battery performs self-service by generating random numbers and computing authentication hashes locally without requiring external computational resources. The secondary battery similarly verifies authentication using local computation, eliminating the need for complex centralized authentication servers within the vehicle.
Solution Approach 2:
Complex cryptographic verification mechanisms are replaced with simplified hash-based authentication using predefined secret keys stored in both primary and secondary batteries. This substitution maintains security while significantly reducing computational complexity and implementation overhead.
Data Source
AI summary
An offline authentication of batteries includes communicating an encrypted authentication request to secondary batteries and a vehicle controller by a primary battery of an electric vehicle. The encrypted authentication request is decrypted to obtain a first random number and a fleet flag. An encrypted authentication response, including a first random number, a second random number, and a vehicle identifier, is communicated to each battery. Each battery verifies the first random number and the vehicle identifier. An encrypted battery status, including the first and second random numbers and an authentication status, is communicated to the primary battery that verifies the first and second random number and the authentication status. The primary battery communicates an encrypted authentication message to the secondary batteries and the vehicle controller. The secondary batteries and the vehicle controller verify the first and second random numbers and the authentication status for authenticating each battery.