In-Vehicle Device Challenge-Response Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle control systems allow unintended switching of operation modes for electronic keys due to copied commands being used without user intent, compromising security and convenience.

Innovation Solution

An in-vehicle device and vehicle control method that uses encryption collation processing and signal generation to authenticate terminals and ensure that operation mode switching occurs only based on the latest predetermined value, preventing unauthorized mode changes by using a predetermined value updated each time a switching request is made.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If command copying is not prevented, then communication simplicity is maintained, but security deteriorates due to unauthorized mode switching

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication protocol complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by establishing a challenge-response authentication mechanism before allowing mode switching. The in-vehicle device sends a challenge signal containing random data, the terminal generates a response based on this challenge, and only then is mode switching permitted. This preliminary authentication prevents copied commands from being executed unauthorizedly.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system changes parameters by using dynamic random values in challenge-response pairs instead of static authentication credentials. Each authentication attempt uses different random data, making copied commands invalid for subsequent attempts. This parameter dynamicity enhances security without requiring complex cryptographic protocols.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If challenge-response authentication is implemented, then security is improved, but communication time increases

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs a simplified challenge-response authentication that uses basic random data generation and comparison rather than full cryptographic verification. This partial authentication approach provides sufficient security against command copying while minimizing communication overhead and time loss.

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If random challenge data is used, then command copying is prevented, but processing complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The terminal device generates its own response to the challenge using its internal random number generator and pre-stored authentication data. This self-service approach allows the terminal to participate actively in the authentication process without requiring complex verification infrastructure at the in-vehicle device, thereby limiting processing complexity.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3623234B1In-vehicle device and vehicle control method
Publication Date: 2022.01.12 TOYOTA JIDOSHA KK
  • EP3623234B1 patent drawingFigure 1
  • EP3623234B1 patent drawingFigure 2
  • EP3623234B1 patent drawingFigure 3

AI summary

An in-vehicle device (10) that is configured to perform communication with a terminal (20) to control a vehicle comprises: a transmission unit (11), configured to transmit, to the terminal (20), a wake signal to activate the terminal (20), a reception unit (12), configured to receive, from the terminal (20), an acknowledgement signal as a response to the wake signal, and a signal generation unit (14), configured to generate a first signal for confirming whether or not the terminal that returns the acknowledgement signal is an authorized terminal. The transmission unit (11) is further configured to transmit the first signal to the terminal (20). The in-vehicle device (10) further comprises a mode switching controller (15), configured to, when there is a need to switch the operation mode of the terminal (20), instruct the signal generation unit (14) to generate the first signal including a request for switching the operation mode of the terminal (20). The transmission unit (11) is configured to, when there is a need to switch the operation mode of the terminal (20), transmit the first signal including the request for switching the operation mode to the terminal (20).