Multi-Layered ECU Soft Part Authentication via Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for soft part updates in electronic control units (ECUs) lack robustness in ensuring that only authorized updates are made, as they primarily rely on seed-based authentication, which may not prevent unauthorized actors from intervening in the update process.
Innovation Solution
A multi-layered authentication method that requires both unlock key authentication and message digest verification, involving challenge authentication, data authentication, and module authentication, to ensure that soft part updates are validated by a trusted authority and remain unaltered during implementation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If seed-based authentication is used for soft part updates, then the authentication process is simple and quick, but the security is insufficient and unauthorized actors can intervene in the update process
Solution Approach 1:
The authentication process is segmented into multiple independent layers: challenge authentication (verifying programming tool identity), data authentication (verifying soft part integrity), and module authentication (verifying ECU identity). Each layer uses different cryptographic mechanisms and validates different aspects of the update process, collectively providing robust security while maintaining clear separation of concerns
Solution Approach 2:
The patent transitions from a single-dimensional seed-based authentication to a multi-dimensional authentication framework. The first dimension is challenge authentication using asymmetric cryptography, the second dimension is data authentication using message digests and MACs, and the third dimension is module authentication. This multi-dimensional approach comprehensively addresses security requirements that a single authentication mechanism cannot satisfy
2Reliability
If multi-layered authentication is implemented, then the security and integrity of soft part updates are enhanced, but the authentication process becomes more complex and time-consuming
Solution Approach 1:
The challenge authentication is performed preliminarily before the actual soft part update. The programming tool proves its identity and authorization by successfully completing the challenge authentication and receiving the soft part signing key. This preliminary verification prevents unauthorized tools from attempting updates, saving time by rejecting invalid requests early in the process
Solution Approach 2:
The patent replaces mechanical/time-consuming manual verification processes with efficient cryptographic operations. Message digests provide instant verification of soft part integrity, and MACs enable rapid authentication without physical inspection or manual validation, significantly reducing authentication time while maintaining high security
3Productivity
If only unlock key authentication is performed, then the update process is fast and straightforward, but unauthorized soft parts can be installed without verification
Solution Approach 1:
The data authentication mechanism provides immediate feedback on the integrity of the soft part. The ECU calculates a message digest of the received soft part and compares it with the expected digest. If they match, the soft part is verified as authentic and intact; if not, the update is rejected. This feedback loop ensures that only authorized, unaltered soft parts can be installed, preventing unauthorized modifications while maintaining efficient update throughput
Data Source
AI summary
A method and system for authenticating soft part updates to an electronic control unit (ECU) or other processing device is contemplated. The authenticating may include a back office providing authentication data to a programming tool whereupon the ECU interacts with the programming tool to authenticate the soft part updates. The authenticating may optionally include the ECU identifying whether the soft part update is to be authenticated according to different types of authentications.