ECU Key Generation via Secure Access Device
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicle-mounted communication systems face security vulnerabilities due to plaintext data transmission on CAN buses, requiring costly server configurations and inflexible key updates, leading to high maintenance and repair costs when ECUs need to be replaced or updated.
Innovation Solution
A vehicle-mounted key generation method that allows ECUs to independently generate and transmit keys via a secure access device, eliminating the need for a dedicated server and enabling flexible key updates without encryption, reducing hardware costs and maintenance expenses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a dedicated server is configured to generate and manage keys for ECUs, then key security and centralized management are improved, but hardware costs and system complexity increase
Solution Approach 1:
The key generation function is extracted from the centralized server and embedded directly into the ECU. Each ECU contains a key generation module that can independently generate keys without requiring external server intervention, thereby eliminating the need for costly dedicated server hardware while maintaining key security
Solution Approach 2:
The ECU performs key generation autonomously through its built-in key generation module. The system serves itself by generating cryptographic keys locally within the ECU rather than relying on external centralized key management infrastructure, reducing both hardware costs and system complexity
2Reliability
If keys are encrypted during transmission between ECUs, then key security is improved, but communication overhead and processing time increase
Solution Approach 1:
Keys are generated and prepared in advance within the ECU before transmission is needed. The key generation module creates cryptographic keys locally and stores them ready for immediate use, eliminating the need for real-time encryption/decryption operations during communication and reducing communication overhead
Solution Approach 2:
The same cryptographic key is copied and distributed to multiple ECUs that need to communicate. Instead of encrypting keys during transmission, the system uses key copying where the generated key is replicated across necessary ECUs, maintaining security while reducing processing time
3Stability of the object's composition
If all ECUs are replaced when one ECU needs key updates, then key matching consistency is improved, but maintenance costs increase
Solution Approach 1:
The key management system is segmented so that each ECU operates independently with its own key generation capability. When one ECU needs a key update, only that specific ECU is replaced or updated, not the entire system. The new ECU can generate its own key or receive key update information through normal communication protocols
Solution Approach 2:
The key management system becomes dynamic and adaptive, allowing individual ECUs to be updated independently. The system accommodates partial updates where only the affected ECU is replaced, and the key management protocol automatically handles key distribution and synchronization among remaining ECUs without requiring full system replacement
4Ease of operation
If ECUs communicate via plaintext broadcast on CAN bus, then communication simplicity is improved, but security against interception and forgery worsens
Solution Approach 1:
Security is applied locally at the ECU level rather than requiring system-wide encrypted communication. Each ECU generates and uses cryptographic keys for authentication and data protection only when needed, maintaining simple plaintext communication for routine operations while providing security for critical communications
Solution Approach 2:
The communication mode changes dynamically based on the type of data being transmitted. Routine control signals can use simple plaintext broadcast, while sensitive commands and key-related communications automatically switch to encrypted modes using the locally generated cryptographic keys, optimizing both simplicity and security
Data Source
AI summary
A vehicle-mounted key-generation method is for a vehicle including electronic control units (ECUs) that communicate with each other via a vehicle-mounted network. At least one ECU includes a key generation module and a key transmission module, and each of the other ECUs includes a key receiving module and a key invoking module. The method includes receiving, through at least one ECU, a secure access request sent from an authorized user through a secure access device, and, after confirming to accept the secure access request from the secure access device, waiting for the secure access device to send a key generation request. The method further includes, after receiving the key generation request, generating a key through the key generation module, using the key transmission module to send the key to other ECUs via the vehicle-mounted network, and receiving the key through the key receiving module in other ECUs.