In-Vehicle Communication System Using Segmented Symmetric Authentication Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing in-vehicle communication systems face challenges in preventing insider attacks while minimizing data usage and avoiding time delays in message verification, especially in scenarios where public key infrastructure (PKI) is not feasible due to cost constraints and high computing loads.
Innovation Solution
A communication system utilizing symmetric key-based cryptography, where a sender transmits messages with both cyclic authentication codes and group authentication codes, allowing receivers to verify the messages in a preset order, thereby enhancing security against insider attacks without significant computational overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key infrastructure (PKI) is used for security authentication, then security strength is improved, but computational load and data usage increase significantly
Solution Approach 1:
The authentication code is segmented into two distinct parts: a cyclic authentication code (first code) generated using a cyclic function with a first key, and a group authentication code (second code) generated using a group key. This segmentation allows the system to distribute computational load and use different key types appropriately, reducing overall computational complexity compared to pure PKI while maintaining security.
Solution Approach 2:
The system changes the cryptographic parameters by using symmetric key-based authentication codes instead of asymmetric PKI certificates. The cyclic authentication code uses a cyclic function with reduced computational requirements, and the group authentication code enables efficient verification. This parameter change from asymmetric to symmetric cryptography resolves the contradiction between security strength and computational load.
2Reliability
If PKI is implemented for preventing insider attacks, then security against insider attacks is improved, but system complexity and data transmission requirements increase
Solution Approach 1:
The authentication mechanism is segmented into two verification stages: first verifying the cyclic authentication code using the cyclic function and first key, then verifying the group authentication code using the group key. This segmented approach provides robust insider attack protection while keeping each verification step relatively simple, avoiding the need for complex PKI infrastructure.
Solution Approach 2:
The cyclic authentication code acts as an intermediary verification layer between the message and the final group authentication verification. This intermediary code provides an additional security checkpoint that helps prevent insider attacks without requiring the full complexity of a PKI system, as it uses a simpler cyclic function-based approach.
3Ease of operation
If traditional authentication methods are used, then implementation simplicity is maintained, but vulnerability to insider attacks increases
Solution Approach 1:
The authentication system is segmented into two independent code generations and verifications, which maintains implementation simplicity through modular design while enhancing security. The cyclic authentication code provides a first layer of verification that is simple to implement using cyclic functions, and the group authentication code provides a second layer, together defending against insider attacks without complicating the overall system architecture.
Solution Approach 2:
The cyclic authentication code is generated and verified in advance as a preliminary security check before the final group authentication verification. This preliminary action adds a security layer against insider attacks while maintaining implementation simplicity, as the cyclic function-based approach is computationally lightweight and easy to integrate into existing systems.
Data Source
AI summary
A communication system between a plurality of in-vehicle electronic devices protected using a symmetric key method is disclosed. The communication system includes a sender configured to transmit a message including a cyclic authentication code and a group authentication code, and a plurality of receivers configured to separately verify the message based on the cyclic authentication code and the group authentication code at a preset order.