Vehicle ECU Group Key Provisioning for Offline Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key provisioning methods for vehicles fail to efficiently and securely set unique keys for multiple devices in a vehicle, leading to time-consuming processes, increased communication traffic, and dependency on online connections, which are not suitable for vehicle manufacturing environments.
Innovation Solution
A method for key provisioning that uses self-generation of group and functional secret keys within vehicles, utilizing a pre-shared provisioning key and token-based authentication, allowing secure key setting with minimal latency and reduced network traffic, without requiring online connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional key provisioning methods are used for each device individually, then security is maintained, but the provisioning process becomes time-consuming and requires extensive online communication
Solution Approach 1:
The patent merges the key provisioning process for multiple ECUs into a single batch operation. The server generates provisioning data containing provisioning keys for multiple ECUs simultaneously, and the gateway provisions all these ECUs in one communication session, eliminating the need for separate provisioning processes for each device.
Solution Approach 2:
The server performs preliminary key generation and packaging before the provisioning process. It pre-generates provisioning data containing encryption keys and authentication information, which are then transmitted to the gateway for distribution to multiple ECUs, reducing the complexity and time of the actual provisioning operation.
2Reliability
If individual key provisioning is performed for each ECU, then unique security keys are established, but communication traffic and network overhead increase significantly
Solution Approach 1:
The patent combines multiple key provisioning operations into a single batch process. The server transmits one consolidated provisioning data package containing keys for multiple ECUs, and the gateway distributes these keys to all target ECUs in one communication flow, dramatically reducing the number of message exchanges compared to individual provisioning.
Solution Approach 2:
The provisioning data structure is designed to be universal, containing encryption keys, authentication information, and device identification data that can serve multiple ECUs simultaneously. This multi-functional data package eliminates the need for separate communication protocols for each device provisioning.
3Reliability
If online connection is required for key provisioning, then secure key distribution is achieved, but the process cannot be performed in offline vehicle manufacturing environments
Solution Approach 1:
The server performs all key generation, encryption, and authentication data preparation in advance before offline operation begins. The provisioning data is pre-packaged with digital signatures and encryption keys, enabling the gateway to autonomously distribute secure keys to ECUs without requiring real-time server connection during the actual provisioning process.
Solution Approach 2:
The gateway acts as an intermediary that receives pre-prepared provisioning data from the server and independently distributes it to multiple ECUs. This intermediary role allows the system to maintain secure key distribution capabilities while operating offline, as the gateway possesses the necessary authentication credentials and encryption keys to perform secure provisioning autonomously.
Data Source
Figure 1
Figure 2a
Figure 2b
AI summary
Provided are a key provisioning method and related products. In the method, a first device receives from a second device an access request for requesting to access the first device; determining whether the second device is permitted to access the first device; sending an access response to the second device based on the determination; receiving a first provisioning message from the second device; and generating the group key according to the provisioning data. According to the solution provided by the present disclosure, all ECU devices in a vehicle can be provisioned with a group key by virtue of one provisioning message containing provisioning data. In this way, the efficiency for key provisioning is improved, and the provisioning cost is reduced. By using the generated group key, security of the data communication associated with the ECU device is ensured.