External Hash Verification for Unauthorized Rewrite Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing devices, such as those in vehicles, face challenges in detecting unauthorized rewrites to programs and data stored in their storage units, particularly in shared or rental vehicle scenarios, where malicious users can modify software, and current solutions like high-level authentication and encryption increase costs and are not entirely effective.
Innovation Solution
A rewrite detection system that uses seed information transmission and hash value calculation to determine if unauthorized rewrites have occurred, involving a rewrite detection device that sends seed information to the information processing device, which calculates and transmits a hash value based on the stored program or data, allowing for detection of unauthorized changes without significantly increasing the device's cost or complexity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If high-level authentication function or encryption function is mounted on information processing device, then unauthorized rewrite prevention capability is improved, but device cost increases
Solution Approach 1:
The patent introduces a rewrite detection device as an intermediary component that performs hash value determination externally. Instead of embedding complex authentication or encryption functions within the information processing device, the system uses an external device to calculate and verify hash values, thereby achieving unauthorized rewrite detection without increasing the complexity or cost of the information processing device itself.
2Reliability
If high-level authentication function or encryption function is mounted on information processing device, then unauthorized rewrite prevention capability is improved, but implementation difficulty increases
Solution Approach 1:
The patent simplifies implementation by introducing an external rewrite detection device that handles the complex hash value calculation and determination logic. The information processing device only needs to provide basic hash value calculation functionality, while the externally connected rewrite detection device performs the sophisticated verification, making the overall system easier to manufacture and implement.
3Reliability
If complete unauthorized rewrite prevention is implemented, then security reliability is improved, but device complexity and cost increase significantly
Solution Approach 1:
The patent uses hash values as simplified copies or representations of the actual program or data content. Instead of protecting the entire program or data directly through complex authentication or encryption mechanisms, the system creates hash value copies that can be easily calculated and verified externally, achieving security without requiring complex internal protection mechanisms.
Data Source
AI summary
A rewrite detection system, a rewrite detection device and an information processing device can detect unauthorized rewrite to a program or data stored in a storage unit of the information processing device. A rewrite detection device generates a random seed and transmits it to an ECU and a server device. The ECU calculates a hash value using a predetermined hash function on the basis of the received random seed and the storage content of the storage unit, and transmits the hash value to the rewrite detection device. The server device transmits an expectation in response to an inquiry from the rewrite detection device. The rewrite detection device determines whether unauthorized rewrite to a program or data in the ECU has been performed or not in accordance with whether the expectation received from the server device and the hash value received from the ECU coincide with each other or not.