ECU Authentication via External Server One-Time Passwords
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication systems for maintenance tools used on electronic control units (ECUs) are vulnerable to misuse and security threats, as they often store authentication information within the tool, leading to increased costs and potential leaks of secret keys, and can be compromised by GPS signal manipulation and brute force attacks.
Innovation Solution
An authentication system that authenticates the operator rather than the maintenance tool, using an external authentication server to generate and verify one-time passwords, eliminating the need for authentication information within the tool and enhancing security by sharing authentication keys and Hash functions only between the ECU and the server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication information is stored inside the maintenance tool, then the tool can independently perform authentication, but the cost increases and security risk increases due to potential key leakage
Solution Approach 1:
The patent extracts the authentication information storage function from the maintenance tool and relocates it to the authentication server. The maintenance tool no longer stores secret keys or authentication data locally, eliminating the security risk of key leakage while reducing device complexity. The server centrally manages all authentication credentials and performs verification operations.
Solution Approach 2:
The patent introduces an authentication server as an intermediary between the maintenance tool and the ECU. This server mediates the authentication process by receiving authentication requests from the tool, verifying credentials against stored information, and returning verification results. This eliminates the need for the tool to independently store sensitive authentication data.
2Reliability
If GPS measurement function is added to the maintenance tool, then position-based authentication is enabled, but the cost increases and lead time increases
Solution Approach 1:
The patent performs position verification in advance during the authentication process before the maintenance work begins. The authentication server checks the GPS position data as part of the preliminary authentication verification, ensuring that the tool is located at an authorized position. This preliminary check prevents unauthorized use while enabling quick start of maintenance work once authenticated.
3Reliability
If secret key is stored in the maintenance tool for MAC communication, then secure communication with the authentication server is enabled, but the risk of key leakage through reverse engineering increases
Solution Approach 1:
The patent removes the secret key storage function from the maintenance tool entirely. Instead of storing MAC keys locally for secure communication, the system uses public-key infrastructure where the tool only holds public keys or certificates. The private keys remain securely stored only on the authentication server, eliminating the vulnerability to reverse engineering attacks on the tool.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention prevents a maintenance tool for carrying out maintenance work of an electronic control unit (ECU) from being abused by a third person. In an authentication system according to the present invention, an authentication apparatus authenticates an operator of an operation terminal (equivalent to the maintenance tool), and the operation terminal forwards an authentication code generated by the authentication apparatus to the ECU. By using the authentication code, the ECU determines whether or not to permit the operation terminal to carry out a maintenance operation.