Cloud Authorized Vehicle Command Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle remote control systems are vulnerable to unauthorized commands, which can be executed without verification, potentially leading to malicious actions such as unauthorized software updates or remote start commands from non-authorized parties.
Innovation Solution
A vehicle command authentication system that sends an authorization and authentication request to a cloud server for non-customer-initiated commands, ensuring only signed and authenticated commands are executed by the vehicle, utilizing a computing platform to communicate with ECUs and verify the authenticity of data before execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If remote control features are implemented to allow vehicles to receive commands from external parties, then vehicle functionality and convenience are improved, but security vulnerability increases as unauthorized users could post and execute malicious commands
Solution Approach 1:
The patent introduces a cloud server as an intermediary between external parties and the vehicle. The server receives commands from external sources, verifies their authenticity through digital signatures, and only forwards validated commands to the vehicle. This mediator architecture allows remote control functionality while blocking unauthorized commands, resolving the security vulnerability without sacrificing convenience.
2Device complexity
If commands from non-customer parties are executed directly without verification, then system complexity is reduced and response time is improved, but reliability deteriorates as the system becomes vulnerable to malicious commands
Solution Approach 1:
The system performs preliminary verification of command authenticity before execution by checking digital signatures against known authorized sources. The cloud server validates each incoming command against a database of authorized entities and their cryptographic keys before forwarding to the vehicle. This preliminary action ensures reliability while maintaining manageable system complexity through standardized verification protocols.
3Object-affected harmful factors
If all incoming commands are authenticated through a cloud server, then security against unauthorized commands is improved, but processing time and system complexity increase
Solution Approach 1:
The system uses cryptographic signatures as copies of authorization credentials. Instead of complex real-time verification of command sources, the cloud server checks digital signatures that serve as verified copies of authorization. This approach provides strong security against malicious commands while minimizing processing time through efficient cryptographic verification rather than complex authentication protocols.
Data Source
AI summary
A vehicle includes a controller, programmed to responsive to receiving a command from a non-customer party, send an authorization request based on the command and a predefined vehicle parameter to a server; and responsive to receiving a signed command from the server, execute the signed command.