ITS ECU Message Filtering With Secure Sender Lists
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current electronic control units (ECUs) in intelligent transport systems (ITS) face challenges in processing high volumes of C2X messages due to the computational demands of digital signature verification, leading to bottlenecks and increased energy consumption, size, and cost, without effectively managing message reception and storage.
Innovation Solution
Incorporating a secure element with blacklists and whitelists to directly reject or record messages without authentication, utilizing hardware-secure non-volatile memory and timestamp data to manage message storage efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic verification of ECDSA_256 signatures is executed for each incoming message, then message authentication and security are improved, but processing speed decreases and system blockage occurs at high message volumes
Solution Approach 1:
The secure element pre-stores lists of trusted and untrusted senders (whitelists and blacklists) before message reception. When messages arrive, the system first checks against these pre-prepared lists to make rapid authentication decisions without performing full cryptographic verification for all messages, thus preventing system blockage while maintaining security for known trusted sources
Solution Approach 2:
The invention extracts the authentication function for known trusted senders from the main cryptographic verification process. By separating the handling of messages from trusted sources (whitelisted) or untrusted sources (blacklisted) from the general cryptographic verification process, the system can rapidly process these messages without executing resource-intensive ECDSA_256 signature verification, thereby resolving the bottleneck
2Productivity
If processing capacity of electronic control units is increased to meet high bandwidth requirements, then message reception capability is improved, but energy consumption, size, and cost of integrated circuits increase
Solution Approach 1:
The invention applies different processing qualities to different message types. Messages from whitelisted senders receive rapid direct recording without full authentication, messages from blacklisted senders are immediately rejected, and only messages from unknown senders undergo full cryptographic verification. This localized differentiation of processing intensity allows the system to achieve high message reception capability while minimizing energy consumption on unnecessary verification operations
Data Source
AI summary
The electronic control unit includes a communication circuit adapted to receive intelligent transport system messages, an authentication circuit designed to authenticate the received messages, a non-volatile memory configured to record the authenticated received messages, and a secure element. The secure element includes a blacklist of automatically excluded senders and is configured to directly reject a received message from a sender on the blacklist without authentication using the authentication circuit. Alternatively, the secure element includes a whitelist of automatically allowed senders and is configured to directly record a received message from a sender on the whitelist in the non-volatile memory without authentication using the authentication circuit.