DSSAD Data Access via ECDH Authentication and External Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data storage systems for autonomous driving (DSSAD) face challenges in maintaining the confidentiality and integrity of data, particularly in providing access to users after a collision, where the replay protected memory block (RPMB) in eMMC is insufficient for storage and authentication is complex, making it difficult for users to determine responsibility.
Innovation Solution
The solution involves storing DSSAD data in external memory, such as SD cards, and using a mechanism that combines one-pass elliptic curve Diffie-Hellman (ECDH) and message authentication codes (MAC) for authentication, allowing the autonomous driving controller to verify the head unit and user terminal before transmitting encrypted DSSAD data in XML format to ensure confidentiality and integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If DSSAD data is stored in RPMB in eMMC, then data integrity and confidentiality are maintained, but storage capacity is insufficient for extended storage periods
Solution Approach 1:
The patent divides the storage system into two parts: RPMB in eMMC for storing critical authentication data and integrity verification information, and external memory (SD card) for storing the actual DSSAD data. This segmentation allows the system to maintain data integrity through RPMB's secure features while gaining extended storage capacity through the external memory.
2Reliability
If DSSAD data is provided only to specified diagnostic devices, then data confidentiality is maintained, but user accessibility is reduced when determining responsibility after accidents
Solution Approach 1:
The patent introduces an authentication mechanism where the autonomous driving controller acts as an intermediary. It verifies the user terminal's authentication information and, upon successful verification, provides authorized access to DSSAD data. This mediator approach maintains confidentiality by controlling access while enabling legitimate users to access data when needed for responsibility determination.
3Reliability
If authentication mechanism is implemented for user access, then data confidentiality is improved, but system complexity increases
Solution Approach 1:
The patent uses authentication information (such as digital certificates or cryptographic keys) that can be copied to the user terminal in advance. During data access, the terminal presents this copied authentication information for verification, eliminating the need for complex real-time authentication protocols while maintaining security. The authentication burden is shifted to the initial credential distribution phase rather than every data access operation.
Data Source
AI summary
An embodiment method of providing data storage system for autonomous driving (DSSAD) data by an autonomous driving controller includes verifying a head unit based on a first secret key verification message, verifying a user terminal based on a second secret key verification message, and transmitting the DSSAD data to the user terminal when both the head unit and the user terminal are verified.