Vehicle ECU Key Distribution via Batched CAN-ID Updates

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The efficiency of encryption key distribution in vehicle systems, particularly in automated driving technology, is hindered by the need for rapid communication and increased network load, necessitating an improvement in key update processes.

Innovation Solution

A vehicle system with a management electronic control device that updates encryption keys by transmitting CAN-ID and new encryption keys over a network, allowing all relevant electronic control units to update their keys simultaneously, reducing individual key distribution requests and enhancing efficiency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If individual key distribution requests are processed separately for each ECU, then security verification is thorough, but network load increases and key distribution efficiency decreases

Engineering Contradiction:
Improvekey distribution efficiencyVSAvoidnetwork load
Core Design Contradiction:
ProductivityVSQuantity of substance

Solution Approach 1:

The patent combines multiple individual key distribution requests into a single batched request. The management ECU collects key update requests from multiple ECUs and processes them together in one communication cycle, reducing the number of separate transactions and lowering network load while maintaining security verification.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The management ECU performs preliminary collection and validation of key distribution requests before executing the actual key updates. By gathering all necessary information and verifying requirements in advance, the system can process multiple ECUs efficiently in a single coordinated operation, reducing redundant communications.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If encryption keys are updated frequently to maintain security, then security strength is improved, but communication overhead and network load increase

Engineering Contradiction:
Improvesecurity strengthVSAvoidcommunication overhead
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent implements periodic batched key distribution where multiple ECUs are updated in coordinated cycles rather than continuously individually. This periodic batching maintains security through regular key updates while reducing communication overhead by consolidating updates into fewer, more efficient transactions.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

Multiple key distribution operations are merged into a single batched communication event. The management ECU coordinates updates across multiple ECUs simultaneously, maintaining frequent key rotation for security while reducing the total communication overhead compared to individual sequential updates.

Inventive Principle:
Principle #5Merging (Combining)

3Productivity

If automated driving technology is implemented requiring rapid communication, then functionality is improved, but network load increases reducing communication efficiency

Engineering Contradiction:
Improvecommunication speedVSAvoidnetwork load
Core Design Contradiction:
ProductivityVSQuantity of substance

Solution Approach 1:

The patent merges multiple key distribution transactions into single batched operations, reducing the total volume of network traffic. This consolidation maintains rapid communication capability for automated driving functions while lowering overall network load by eliminating redundant individual request-handling overhead.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentEP3618361B1Vehicle system and key distribution method
Publication Date: 2021.06.16 FUJITSU LTD
  • EP3618361B1 patent drawingFigure 1
  • EP3618361B1 patent drawingFigure 2
  • EP3618361B1 patent drawingFigure 3

AI summary

A vehicle system includes a plurality of electronic control devices configured to control each unit of a vehicle; and a management electronic control device configured to manage the plurality of electronic control devices, wherein in a case where an encryption key used to verify a message is updated to another encryption key, the management electronic control device transmits a first message that includes a CAN-ID that identifies the message and a second message that includes the another encryption key to a network, and in a case where the CAN-ID of the message included in the first message is a CAN-ID to be processed, the plurality of electronic control devices updates the encryption key used to verify the message to the another encryption key included in the second message.