Electronic Control Device for Resuming Interrupted Encrypted Writes

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic control devices face challenges in securely resuming write processing for encrypted update data when the process is interrupted, particularly in over-the-air (OTA) systems, as the ECU cannot decrypt encrypted data blocks without the necessary preceding information.

Innovation Solution

The solution involves encrypting a first data block using a second data block, and upon interruption, re-acquiring both blocks for decryption, ensuring the ECU can resume write processing by using the re-acquired second data block to decrypt the first block.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encrypted data blocks are transmitted in OTA updates, then security is improved, but the ability to resume write processing after interruption is worsened because the ECU cannot decrypt encrypted data blocks without preceding information

Engineering Contradiction:
ImprovesecurityVSAvoidresume capability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent applies preliminary action by requiring the ECU to store not only the current encrypted data block but also the preceding encrypted data block in memory before the write operation completes. This preliminary storage of the preceding block enables the ECU to resume decryption later without needing to re-download the entire update data, thus maintaining security while enabling resume capability.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent uses the preceding encrypted data block as an intermediary element that serves dual purposes: it is part of the encrypted update data stream, and simultaneously serves as a key component for decryption when resuming the write operation. This intermediary block bridges the security requirement and the resume capability requirement.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If data is transferred little by little in the background during OTA updates, then other control operations are not affected, but the software rewriting time becomes long and interruption risk increases

Engineering Contradiction:
Improvecontrol operation continuityVSAvoidrewriting time
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by having the ECU prepare and store the preceding encrypted data block in memory before the actual write operation begins. This preparation work is done in advance during the data reception phase, so that when interruption occurs and resume is needed, the ECU can immediately proceed with decryption without waiting for additional data downloads, thus reducing the overall time loss from interruptions.

Inventive Principle:
Principle #10Preliminary action

3Quantity of substance

If the ECU stores only the current encrypted data block, then memory usage is minimized, but the ECU cannot decrypt data blocks when resuming write processing

Engineering Contradiction:
Improvememory usageVSAvoiddecryption capability
Core Design Contradiction:
Quantity of substanceVSReliability

Solution Approach 1:

The patent applies preliminary action by having the ECU store the preceding encrypted data block in memory as part of the normal data reception process, before the write operation completes. This preliminary storage ensures that when the write operation needs to resume, the necessary decryption information is already available in memory, eliminating the need for additional memory allocations during the resume phase.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12432062B2Electronic control device with secure resumption of interrupted write processing
Publication Date: 2025.09.30 ASTEMO LTD
  • US12432062B2 patent drawing
  • US12432062B2 patent drawing
  • US12432062B2 patent drawing

AI summary

An electronic control device according to the present invention for resuming an interrupted encrypted writing process, wherein a first data block included in the updated data is encrypted by using a second data block, and when the writing processing for writing the first data block to the storage unit is interrupted while in progress, updated data which includes both the first data block and the second data block is reacquired, after which the first data block is decoded again by using the reacquired second data block.