Blockchain Vehicle Network Access Authorization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The increasing use of communications access ports in vehicles for diagnostic and aftermarket devices poses a potential security risk, as existing systems lack effective methods for identifying and authorizing devices accessing the vehicle network.

Innovation Solution

A blockchain-based system comprising external and internal network nodes maintains distributed ledgers to authenticate devices, requiring proof of work and cryptographic tokens for access authorization, ensuring secure access to the vehicle network.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If devices are allowed to access the vehicle communications port for diagnostic and aftermarket functions, then the versatility and functionality of the vehicle system is improved, but the security risk and vulnerability to unauthorized access increases

Engineering Contradiction:
Improvedevice compatibilityVSAvoidsecurity risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a blockchain-based authorization system as an intermediary between devices and the vehicle network. The system includes a plurality of nodes (vehicle node, service provider node, device node) that maintain distributed ledgers to verify device identities and authorization credentials. This intermediary layer prevents direct unauthorized access while allowing legitimate diagnostic and aftermarket devices to communicate with the vehicle network through cryptographic verification of authorization tokens.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If a centralized authorization system is used to manage device access, then the ease of operation and device management is improved, but the system complexity and vulnerability to single points of failure increases

Engineering Contradiction:
Improveaccess managementVSAvoidsystem architecture
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent divides the authorization system into multiple independent nodes distributed across different locations (vehicle node, service provider node, device node). Each node maintains a copy of the blockchain ledger and can independently verify authorization requests. This segmentation eliminates single points of failure while distributing the computational workload for managing device access authorizations across the network.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent replaces traditional centralized mechanical authorization systems with a cryptographic blockchain-based system. Instead of relying on centralized databases and authentication servers, the system uses distributed cryptographic ledgers where authorization credentials are verified through cryptographic proofs and consensus mechanisms across multiple nodes, reducing vulnerability to centralized attacks.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If blockchain technology is implemented for device authorization, then the security and reliability of vehicle network access is improved, but the computational requirements and energy consumption increases

Engineering Contradiction:
Improveaccess authorization securityVSAvoidcomputational energy
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements a partial blockchain approach where not all nodes perform full cryptographic verification for every authorization request. The vehicle node maintains a local copy of the blockchain ledger and can verify authorization tokens locally without requiring full network consensus for routine operations. Full blockchain consensus is only invoked when authorization credentials need to be issued or when there are disputes, reducing overall computational energy requirements while maintaining security.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11438332B2Distributed vehicle network access authorization
Publication Date: 2022.09.06 FORD GLOBAL TECH LLC
  • US11438332B2 patent drawing
  • US11438332B2 patent drawing
  • US11438332B2 patent drawing

AI summary

A system includes a first plurality of blockchain nodes including first network nodes external to a vehicle and second network nodes internal to the vehicle, the first plurality of blockchain nodes maintaining a first distributed blockchain ledger; and a first computing device. The first computing device is programmed to transmit a first request to the first plurality of blockchain nodes requesting access to a vehicle network via a communications access port in the vehicle; demonstrate a first proof of work by responding to a second request from the first plurality of blockchain nodes; and receive, based on a first majority of the first network nodes and the second network nodes in the first plurality of blockchain nodes accepting the first request, first authorization specifying access to the vehicle access via the communications access port.