BLE TPMS Authentication for Secure Tire Data Pairing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional tire pressure monitoring systems (TPMS) face security vulnerabilities, as their broadcasts are not secured, allowing malicious users to spoof tire conditions or track vehicles, due to unencrypted data and static identifiers.
Innovation Solution
A system and method using Bluetooth Low Energy (BLE) protocol for one-way TPMS communication, where vehicles broadcast learning mode advertisements to auto-locate and derive unique keys for secure communication, ensuring only authentic TPMS data is received, using pre-shared keys and cryptographic hashing to verify authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional UHF broadcast communication is used for TPMS, then communication simplicity is maintained, but security is compromised allowing spoofing and tracking
Solution Approach 1:
The system performs preliminary key establishment between the TPMS and vehicle before actual communication. The vehicle stores cryptographic keys in its memory, and the TPMS uses these keys to sign its identity and data. This preliminary setup enables subsequent secure communication without adding real-time complexity to the communication protocol.
Solution Approach 2:
The patent introduces cryptographic keys and digital signatures as intermediaries between the TPMS and vehicle communication. Instead of direct unsecured broadcast, the TPMS identity and data are signed with cryptographic keys, creating a trusted intermediary layer that verifies authenticity without complicating the underlying broadcast mechanism.
2Ease of operation
If static identifiers are included in broadcasts, then TPMS identification is simplified, but vehicle tracking becomes possible
Solution Approach 1:
The system transitions from static identifiers to dynamic cryptographic authentication. Instead of using fixed static identifiers in broadcasts, the TPMS dynamically signs its identity with cryptographic keys. The vehicle verifies these dynamic signatures against stored keys, maintaining identification capability while preventing tracking since each communication instance is cryptographically unique.
Solution Approach 2:
The patent changes the fundamental parameter of identification from static identifier values to dynamic cryptographic signatures. The TPMS identity is no longer a fixed value but a dynamically generated signature based on cryptographic keys and current data, fundamentally changing how identification works to eliminate tracking vulnerability.
3Reliability
If broadcast messages are unsecured, then data transmission is simple, but data integrity cannot be ensured
Solution Approach 1:
The vehicle preliminarily stores cryptographic keys in its memory before receiving TPMS communications. This preliminary key storage enables the vehicle to verify data integrity through cryptographic signature validation without adding complexity to the TPMS transmission side. The verification capability is pre-established in the vehicle's communication module.
Solution Approach 2:
Cryptographic signatures act as intermediaries between the TPMS data and the vehicle's trust verification. The TPMS signs its data with cryptographic keys, creating a trusted intermediary layer that proves data authenticity and integrity. The vehicle verifies these signatures using stored keys, ensuring data integrity without requiring complex real-time cryptographic operations during transmission.
Data Source
AI summary
A method to facilitate secure communication between a first tire pressure monitoring system (TPMS) and a vehicle is disclosed. The method may include obtaining a trigger signal to auto-locate the first TPMS from a plurality of TPMSs. The method may further include obtaining learning mode advertisements from each TPMS responsive to obtaining the trigger signal. The learning mode advertisements may include a random value and a test value associated with each TPMS. The test value may be an encrypted value generated using TPMS keys. The method may further include calculating a vehicle test value using the random value and a vehicle pre-shared key, and comparing the test value with the vehicle test value. The method may further include auto-locating the first TPMS based on the comparison. The method may include receiving vehicle tire condition data from the first TPMS responsive to auto-locating the first TPMS.