Certificate Enclave Monitoring for Automated Driving Component Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for efficient monitoring of components in the effect chain for at least partially automated driving functions of motor vehicles to ensure the integrity and security of the system, particularly in preventing manipulations and ensuring trustworthiness of data.
Innovation Solution
A system comprising a computer platform with enclaves, including a certificate enclave to create and verify certificates for components, and a trigger device to initiate security actions based on check results, ensuring the trustworthiness of data and detecting manipulations by using secure enclaves like Intel SGX or ARM TrustZone, which provide protected memory regions for secure operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional monitoring methods are used for components in automated driving systems, then device complexity is reduced, but reliability and security are compromised due to inability to detect manipulations
Solution Approach 1:
The system segments the monitoring function into separate enclaves: a certificate enclave that creates and stores cryptographic certificates, and a monitoring enclave that performs integrity checks. This segmentation isolates security-critical operations into protected memory regions, preventing manipulation while maintaining overall system reliability without excessive complexity.
Solution Approach 2:
The patent introduces cryptographic certificates as an intermediary mechanism between the component and the monitoring system. The certificate enclave creates certificates that serve as trusted intermediaries for verifying component integrity, enabling secure monitoring without requiring direct complex trust relationships between all system components.
2Reliability
If enclaves with certificate verification are implemented, then reliability and manipulation detection are improved, but device complexity increases
Solution Approach 1:
The certificate enclave performs preliminary actions by creating and storing cryptographic certificates before monitoring operations begin. These pre-established certificates enable subsequent integrity checks to be performed efficiently without requiring complex real-time key generation or cryptographic setup during monitoring operations.
Solution Approach 2:
The system uses cryptographic certificates as copies of trust information that can be verified without requiring access to the original secret keys. The monitoring enclave verifies component integrity by checking certificates (copies of authentication data) rather than requiring direct access to sensitive cryptographic materials, simplifying the trust verification process.
3Measurement precision
If monitoring checks are performed continuously, then detection precision is improved, but productivity and system performance deteriorate due to computational overhead
Solution Approach 1:
The monitoring system performs integrity checks periodically or at specific event triggers rather than continuously. The monitoring enclave verifies component output data at defined intervals or when specific conditions occur, maintaining detection precision for security-critical operations while reducing computational overhead during normal operation to preserve system performance.
Data Source
AI summary
A system for monitoring a component of an effect chain for an at least partially automated driving function of a motor vehicle. The system includes: a processor; one or more memory blocks, an input, set up to receive output data output by the component;computer-executable instructions, executable by the processor in order to implement one or more enclaves, using the one or more memory blocks, the one or more enclaves including a certificate enclave, which is set up to create a certificate for the component of the effect chain; an output, set up to output the certificate to the component, the certificate enclave being set up to check the output data received following output of the certificate, on the basis of the certificate, in order to output a check result, and a trigger device, set up to trigger a security action based on the check result.