In-Vehicle Computer Log Authentication via Secure Element
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing in-vehicle control systems face challenges in safely collecting logs from Electronic Control Units (ECUs) due to security and data integrity concerns.
Innovation Solution
A vehicle information collection system that includes an in-vehicle computer with an interface for data transmission and an encryption processor generating message authentication codes, which are verified by a vehicle information collection device using a generated signature key, ensuring secure log collection and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If logs are transmitted from in-vehicle computers without encryption and authentication, then data transmission is simple and fast, but data integrity and security cannot be ensured
Solution Approach 1:
The patent applies preliminary action by generating message authentication codes (MACs) in advance for log data before transmission. The in-vehicle computer generates MACs using a signature key stored in a secure element, and these pre-computed authentication codes are attached to log data before sending to the external device. This preliminary authentication preparation ensures data integrity without requiring complex real-time verification protocols during transmission.
Solution Approach 2:
The patent uses an intermediary approach by introducing a secure element as a trusted intermediary component within the in-vehicle computer. This secure element stores signature keys and public keys, acting as a mediator that enables authentication without exposing private keys. The secure element intermediates between the log generation process and the external verification process, ensuring that security operations are performed in a protected environment while maintaining system simplicity.
2Speed
If encryption keys are stored in the in-vehicle computer for authentication, then verification speed improves, but security against key extraction attacks deteriorates
Solution Approach 1:
The patent applies the nested doll principle by embedding the signature key storage functionality within a secure element that is nested inside the in-vehicle computer system. The secure element acts as a nested security module that contains the private signature key, allowing the main system to benefit from fast local verification while the critical key material remains protected in the nested secure element structure. This nested architecture enables verification speed without exposing keys to extraction attacks.
Solution Approach 2:
The secure element serves as an intermediary that holds the signature key without exposing it to the main processor or external interfaces. The intermediary secure element performs the cryptographic operations locally, enabling fast verification while maintaining security isolation. The key never leaves the secure element, eliminating key extraction risk while maintaining verification performance through local cryptographic processing.
3Reliability
If message authentication codes are generated and verified for each log, then data security is enhanced, but processing time and computational load increase
Solution Approach 1:
The patent applies local quality by making authentication optional and location-specific rather than universal. The system generates message authentication codes for log data that requires high security (such as sensitive operational logs), while potentially skipping authentication for less critical logs. The secure element locally generates MACs using stored signature keys, and the external device verifies only when needed, creating localized security applications that reduce overall processing overhead while maintaining security where required.
Data Source
AI summary
An in-vehicle computer generates a message authentication code about its own log using its own signature key and thereby transmits a log annotated with its message authentication code to a vehicle information collection device. The vehicle information collection device generates the signature key of the in-vehicle computer, verifies the message authentication code, which is included in the log annotated with its message authentication code received from the in-vehicle computer, using generated signature key, and thereby stores the log relating to the successfully verified message authentication code on storage media.