In-Vehicle Device Challenge-Response Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle control systems allow unintended switching of operation modes for electronic keys due to copied commands being used without user intent, compromising security and convenience.
Innovation Solution
An in-vehicle device and vehicle control method that uses encryption collation processing and signal generation to authenticate terminals and ensure that operation mode switching occurs only based on the latest predetermined value, preventing unauthorized mode changes by using a predetermined value updated each time a switching request is made.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If command copying is not prevented, then communication simplicity is maintained, but security deteriorates due to unauthorized mode switching
Solution Approach 1:
The system performs preliminary actions by establishing a challenge-response authentication mechanism before allowing mode switching. The in-vehicle device sends a challenge signal containing random data, the terminal generates a response based on this challenge, and only then is mode switching permitted. This preliminary authentication prevents copied commands from being executed unauthorizedly.
Solution Approach 2:
The system changes parameters by using dynamic random values in challenge-response pairs instead of static authentication credentials. Each authentication attempt uses different random data, making copied commands invalid for subsequent attempts. This parameter dynamicity enhances security without requiring complex cryptographic protocols.
2Reliability
If challenge-response authentication is implemented, then security is improved, but communication time increases
Solution Approach 1:
The system performs a simplified challenge-response authentication that uses basic random data generation and comparison rather than full cryptographic verification. This partial authentication approach provides sufficient security against command copying while minimizing communication overhead and time loss.
3Reliability
If random challenge data is used, then command copying is prevented, but processing complexity increases
Solution Approach 1:
The terminal device generates its own response to the challenge using its internal random number generator and pre-stored authentication data. This self-service approach allows the terminal to participate actively in the authentication process without requiring complex verification infrastructure at the in-vehicle device, thereby limiting processing complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An in-vehicle device (10) that is configured to perform communication with a terminal (20) to control a vehicle comprises: a transmission unit (11), configured to transmit, to the terminal (20), a wake signal to activate the terminal (20), a reception unit (12), configured to receive, from the terminal (20), an acknowledgement signal as a response to the wake signal, and a signal generation unit (14), configured to generate a first signal for confirming whether or not the terminal that returns the acknowledgement signal is an authorized terminal. The transmission unit (11) is further configured to transmit the first signal to the terminal (20). The in-vehicle device (10) further comprises a mode switching controller (15), configured to, when there is a need to switch the operation mode of the terminal (20), instruct the signal generation unit (14) to generate the first signal including a request for switching the operation mode of the terminal (20). The transmission unit (11) is configured to, when there is a need to switch the operation mode of the terminal (20), transmit the first signal including the request for switching the operation mode to the terminal (20).