Dual-SIM Vehicle Telematics Security via Trusted Execution

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing telematics services in vehicles face security challenges when the vehicle is out of network coverage or when communication with the remote server is unreliable, and the use of a user's cellular subscription for internet access complicates the implementation of security measures.

Innovation Solution

A vehicle system that includes a communication module capable of using two telecommunications identifier cards, one for the vehicle constructor and one for the user, with a trusted execution environment that monitors the connection to a remote management server and switches to the constructor's subscription for secure communication when necessary.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a user's cellular subscription is used for internet access in the vehicle, then users can access the internet via their own subscription, but security protection and corrective measures from the constructor's telecommunications operator cannot be applied

Engineering Contradiction:

Improveinternet access capabilityVSAvoidsecurity protection

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The communication system is segmented into two distinct parts: a public internet communication channel using the user's SIM card for general internet access, and a dedicated telematics communication channel using the constructor's SIM card for secure vehicle management. This segmentation allows both internet accessibility and security protection to coexist by separating their respective communication paths.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The telecommunications operator of the constructor acts as an intermediary that provides a dedicated communication channel through its own SIM card and network infrastructure. This intermediary ensures that critical telematics communications remain protected and reliable, while the user's subscription handles general internet traffic.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If two cellular modems or active dual-SIM capability is implemented, then both constructor's subscription and user's subscription can be used simultaneously, but cost overhead increases significantly

Engineering Contradiction:

Improvesecure communication capabilityVSAvoidcommunication system cost

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system merges the constructor's SIM card and the user's SIM card into a single cellular modem, utilizing the modem's capability to handle multiple SIM cards sequentially or simultaneously. This consolidation avoids the need for two separate modems, significantly reducing hardware costs while maintaining the ability to use both subscriptions for their respective purposes.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

A single cellular modem is designed with universal capability to support multiple SIM cards and switch between them based on communication requirements. This multi-functional modem handles both the user's internet access traffic and the constructor's secure telematics traffic, eliminating the need for dedicated hardware for each function and reducing overall system complexity and cost.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Reliability

If the vehicle switches to the constructor's subscription for secure communication, then security protection is restored, but internet access via user's subscription is interrupted

Engineering Contradiction:

Improvesecurity protectionVSAvoidinternet access continuity

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The communication system dynamically switches between the user's SIM card and the constructor's SIM card based on the type of traffic and security requirements. Internet traffic flows through the user's subscription for cost-effectiveness, while telematics and security-critical communications use the constructor's subscription. This dynamic routing ensures both security protection and internet access continuity without interruption.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system adds a dimensional layer of communication routing by implementing separate logical channels for different traffic types. Instead of choosing between security or internet access, the system operates in multiple communication dimensions simultaneously: one dimension for public internet access via user's SIM, and another dimension for secure telematics via constructor's SIM, allowing both functions to coexist without interference.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS12278823B2Securing the connection between a vehicle and a remote management server for managing said vehicle

Publication Date: 2025.04.15 NISSAN MOTOR CO LTD

AI summary

A vehicle includes a communication module capable of using two telecommunication identifier cards, one relating to a subscription between a constructor of the vehicle and a telecommunications operator, the other relating to a subscription between a user of the vehicle and a telecommunications operator. The vehicle includes a trusted execution environment hosting security functions of the vehicle and a multimedia system execution environment hosting at least a part of the communication module. The trusted execution environment includes a supervision module monitoring the connection between the vehicle and a remote management server of the vehicle.