Vehicle ECU Key Distribution via Batched CAN-ID Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The efficiency of encryption key distribution in vehicle systems, particularly in automated driving technology, is hindered by the need for rapid communication and increased network load, necessitating an improvement in key update processes.
Innovation Solution
A vehicle system with a management electronic control device that updates encryption keys by transmitting CAN-ID and new encryption keys over a network, allowing all relevant electronic control units to update their keys simultaneously, reducing individual key distribution requests and enhancing efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If individual key distribution requests are processed separately for each ECU, then security verification is thorough, but network load increases and key distribution efficiency decreases
Solution Approach 1:
The patent combines multiple individual key distribution requests into a single batched request. The management ECU collects key update requests from multiple ECUs and processes them together in one communication cycle, reducing the number of separate transactions and lowering network load while maintaining security verification.
Solution Approach 2:
The management ECU performs preliminary collection and validation of key distribution requests before executing the actual key updates. By gathering all necessary information and verifying requirements in advance, the system can process multiple ECUs efficiently in a single coordinated operation, reducing redundant communications.
2Reliability
If encryption keys are updated frequently to maintain security, then security strength is improved, but communication overhead and network load increase
Solution Approach 1:
The patent implements periodic batched key distribution where multiple ECUs are updated in coordinated cycles rather than continuously individually. This periodic batching maintains security through regular key updates while reducing communication overhead by consolidating updates into fewer, more efficient transactions.
Solution Approach 2:
Multiple key distribution operations are merged into a single batched communication event. The management ECU coordinates updates across multiple ECUs simultaneously, maintaining frequent key rotation for security while reducing the total communication overhead compared to individual sequential updates.
3Productivity
If automated driving technology is implemented requiring rapid communication, then functionality is improved, but network load increases reducing communication efficiency
Solution Approach 1:
The patent merges multiple key distribution transactions into single batched operations, reducing the total volume of network traffic. This consolidation maintains rapid communication capability for automated driving functions while lowering overall network load by eliminating redundant individual request-handling overhead.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A vehicle system includes a plurality of electronic control devices configured to control each unit of a vehicle; and a management electronic control device configured to manage the plurality of electronic control devices, wherein in a case where an encryption key used to verify a message is updated to another encryption key, the management electronic control device transmits a first message that includes a CAN-ID that identifies the message and a second message that includes the another encryption key to a network, and in a case where the CAN-ID of the message included in the first message is a CAN-ID to be processed, the plurality of electronic control devices updates the encryption key used to verify the message to the another encryption key included in the second message.