Distribution Server Secure Software Update via Session Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for distributing software update data to in-vehicle devices via wireless communication networks face challenges in ensuring secure and efficient data distribution, particularly in preventing eavesdropping and tampering, while maintaining secrecy and reducing communication load.
Innovation Solution
A distribution server that encrypts update data with a common key and transmits this key encrypted using a session key method to in-vehicle devices, employing methods like Diffie-Hellman key exchange or elliptic curve Diffie-Hellman key exchange for secure key sharing, allowing for secure and efficient distribution of the same encrypted data to multiple vehicles.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the distribution server encrypts update data with a common key and transmits it to multiple vehicles, then the distribution efficiency is improved and communication load is reduced, but the security risk increases because the same key is used for multiple vehicles
Solution Approach 1:
The patent segments the key management process into two distinct parts: a common key for encrypting update data (used by all vehicles) and individual session keys for each vehicle-to-transceiver communication. This segmentation allows the same encrypted data to be distributed efficiently to multiple vehicles while maintaining security through vehicle-specific key pairs for key exchange and authentication.
2Reliability
If the distribution server uses a session key method to share encryption keys with each vehicle, then the security is improved, but the device complexity and communication load increase due to individual key management for each vehicle
Solution Approach 1:
The patent implements a universal common key that serves multiple functions: it encrypts update data for all vehicles, enables efficient distribution to multiple recipients simultaneously, and works in conjunction with individual session keys. This multi-functional approach reduces key management complexity while maintaining security, as the common key handles the bulk encryption task that would otherwise require separate encryption operations for each vehicle.
3Ease of operation
If the distribution server transmits encrypted update data via wireless communication network, then the ease of operation is improved, but the risk of eavesdropping and tampering increases
Solution Approach 1:
The patent performs preliminary key exchange and authentication actions before the actual update data transmission. The transceiver and vehicle communication device establish secure session keys and authenticate each other beforehand, ensuring that when encrypted update data is transmitted over the wireless network, the communication channel is already secured against eavesdropping and tampering attempts.
Solution Approach 2:
The patent introduces a transceiver as an intermediary device between the distribution server and the vehicle. This intermediary handles the secure key management, establishes session keys, and manages the encrypted communication channel, thereby protecting the wireless transmission from eavesdropping and tampering while maintaining ease of operation for the end user.
Data Source
AI summary
A distribution server distributes update data of software for an in-vehicle device to vehicles via a wireless communication network. The distribution server includes a processor. The processor distributes the update data encrypted with a common key to the vehicles. The processor transmits the common key encrypted by a session key method to each of the vehicles.