Electronic Control Device Software Downgrade Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic control devices cannot downgrade software versions, leading to limitations in software management and potential security vulnerabilities.
Innovation Solution
An electronic control device with a version check unit, security determination unit, and rewriting unit that allows software downgrades if the distribution software meets security standards, using a security level list to verify compliance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software version checking is performed to prevent downgrades, then system security is improved, but software management flexibility deteriorates
Solution Approach 1:
The patent changes the parameter being checked from单纯的版本号码 (simple version number) to a comprehensive security evaluation that includes multiple security standards. By transforming the version comparison parameter into a multi-dimensional security assessment, the system allows downgrades when security requirements are met, thus improving flexibility while maintaining security.
Solution Approach 2:
Instead of preventing downgrades by default and requiring exceptions, the patent inverts the logic by allowing downgrades by default and requiring security verification only when downgrading. This reversal of the default position resolves the contradiction by making the system flexible while maintaining security controls where necessary.
2Adaptability or versatility
If software downgrades are allowed without security verification, then software management flexibility is improved, but system security deteriorates
Solution Approach 1:
The patent performs preliminary security verification before allowing software downgrades. By checking whether the downgrade target meets security standards in advance, the system ensures security requirements are satisfied before the downgrade occurs, thus maintaining security while enabling flexible software management.
Solution Approach 2:
The patent introduces a security verification mechanism as an intermediary between the version check unit and the rewriting unit. This intermediary layer evaluates security standards and acts as a gatekeeper, allowing downgrades only when security requirements are met, thus resolving the contradiction between flexibility and security.
3Reliability
If security verification is performed for all software updates, then system security is improved, but processing time deteriorates
Solution Approach 1:
The patent applies partial verification by performing security checks only when necessary (i.e., when downgrading software versions). For normal upgrades where the new version is higher than the current version, security verification is skipped. This partial application of security verification reduces processing time while maintaining security where needed.
Solution Approach 2:
The patent performs preliminary version comparison to determine whether security verification is needed. By checking version relationships first and only triggering security verification for downgrade scenarios, the system avoids unnecessary verification overhead, thus reducing processing time while maintaining security.
Data Source
AI summary
An electronic control device includes: a processing device; a storage device that stores rewritable software to be executed by the processing device; and a communication device that receives distribution software for rewriting the rewritable software. The processing device includes: a version check unit that checks a version of the rewritable software and a version of the distribution software; a security determination unit that determines whether the distribution software satisfies a security standard when the version of the distribution software is not newer than the version of the rewritable software; and a rewriting unit that rewrites the rewritable software to the distribution software when the security determination unit determines that the distribution software satisfies the security standard.