In-Vehicle Gateway Key Update Timing Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In vehicles, key updates for secure communication with centers are challenging due to power off or communication range issues, leading to decryption failures and ECU malfunction during OTA updates.
Innovation Solution
An in-vehicle gateway system that determines the progress of decrypting update data and controls the timing for key update confirmation, ensuring secure and convenient key management through a key management server and OTA server communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If key update confirmation is executed at regular intervals to maintain security, then security strength is improved, but decryption failures occur when the vehicle is powered off or out of communication range, causing ECU malfunction
Solution Approach 1:
The system checks whether decryption processing is already in progress before executing key update confirmation. This preliminary check prevents timing conflicts where key updates would interrupt ongoing decryption operations, thereby avoiding ECU malfunction while maintaining security updates when appropriate
Solution Approach 2:
The system monitors the state of decryption processing and uses this feedback information to control the timing of key update confirmation. By detecting whether decryption is in progress and adjusting key update timing accordingly, the system resolves the contradiction between maintaining security and avoiding operational disruptions
2Reliability
If key update timing is synchronized between vehicle and center, then security is maintained, but key updates fail when vehicle communication status changes (power off, out of range)
Solution Approach 1:
The system dynamically adjusts key update confirmation timing based on the current state of decryption processing rather than using fixed periodic updates. This dynamic approach allows the system to adapt to changing communication conditions while maintaining proper key synchronization
Solution Approach 2:
The system performs a preliminary check to prevent key update confirmation from executing during ongoing decryption processing. This preemptive measure avoids the harmful effect of timing conflicts that would cause decryption failures and ECU malfunction
Data Source
Figure 1
Figure 2
Figure 3
AI summary
When updating a key to guarantee security, updating the key during decryption of update data causes an ECU to stop functioning due to a decryption failure. Therefore, an in-vehicle gateway or a key management device of the present invention includes: an update data acquisition unit that receives, from outside a vehicle, update data encrypted with a predetermined key; a key acquisition unit that receives a key from outside the vehicle; a key storage unit in which the key received by the key acquisition unit is stored; and a decryption unit that decrypts the update data acquired by the update data acquisition unit based on the key stored in the storage unit, in which the update data acquisition unit transmits a key acquisition request signal after completion of decryption of the update data by the decryption unit.