Device Provisioning Using PKI and TPMs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Autonomous vehicles face challenges in securely provisioning and authenticating electronic devices, which are crucial for reliable communication and operation, as existing methods lack robustness in ensuring only authorized devices are deployed and updated, leading to potential security vulnerabilities.
Innovation Solution
The implementation of a system that uses cryptographically secure digital certificates and a public key infrastructure (PKI) to provision and authenticate devices, including the use of trusted platform modules (TPMs) or hardware security modules (HSMs, to manage cryptographic keys and ensure secure communication within an enterprise environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional provisioning methods are used, then device deployment is simple, but security is compromised and unauthorized devices can be deployed
Solution Approach 1:
The system performs preliminary actions by pre-configuring devices with unique identities and cryptographic credentials during manufacturing. The trusted platform module is provisioned with root of trust credentials before the device is deployed, enabling secure authentication from the first boot without requiring complex runtime provisioning procedures.
Solution Approach 2:
The patent introduces a provisioning service and device authority server as intermediary components that mediate between devices and the enterprise system. These intermediaries handle certificate issuance, credential verification, and device registration, simplifying the overall system while maintaining strong security through centralized control.
2Reliability
If cryptographic credentials are stored in software, then device complexity is low, but security is weakened and credentials can be compromised
Solution Approach 1:
The patent replaces software-based cryptographic storage with hardware-based secure elements. The trusted platform module and hardware security modules provide physically protected storage for cryptographic credentials, replacing vulnerable software implementations with tamper-resistant hardware that resists extraction and manipulation attacks.
Solution Approach 2:
The system changes the physical state and protection parameters of cryptographic credentials by embedding them in hardware with different security properties. The credentials are stored in secure elements with controlled access policies, physical protection, and resistance to side-channel attacks, fundamentally changing the security parameters compared to software storage.
3Reliability
If device authentication is not verified, then ease of operation is high, but security vulnerabilities arise from unauthorized devices
Solution Approach 1:
The system implements self-service authentication where devices automatically present their credentials and receive verification from the device authority server during boot and provisioning. The trusted platform module autonomously manages credential presentation and authentication, eliminating manual verification steps while ensuring security through automated cryptographic proof of authenticity.
Data Source
AI summary
Among other things, techniques are described for provisioning and authentication of devices in vehicles. In one aspect, a device in a vehicle establishes a communication session with a network server that manages provisioning of devices corresponding to an enterprise associated with the vehicle. The device receives instructions from the network server to generate cryptographic keys, and in response, generates a public and private key pair. The device sends, to the network server, a certificate signing request that includes the public key and an identifier of the device. In response, the device receives a digital security certificate for the device, and a security certificate of a signing certificate authority. The device authenticates the security certificate of the certificate authority using a known enterprise root certificate, and upon successful authentication, stores the device security certificate and the security certificate of the signing certificate authority.