Multi-Target Key Authentication for Secure Sensor Sessions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing secure communication sessions between multiple sensors in advanced driver assistance systems (ADAS) and autonomous vehicles (AVs) is resource-intensive due to the need for independent key authentication processes with each sensor, which increases computational and memory requirements.
Innovation Solution
A method for a first entity to participate in a single asymmetrical key authentication process with multiple second entities, generating a response message for all, followed by establishing unique symmetric keys for secure sessions, reducing the need for separate authentication processes and resource consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the processor independently establishes secure communication sessions with each sensor, then security is ensured, but resource consumption increases with the number of sensors
Solution Approach 1:
The patent combines multiple independent authentication processes into a single group authentication mechanism. Multiple sensors are authenticated simultaneously through one group authentication process, generating a shared secret that all sensors in the group can use. This merging approach maintains security while dramatically reducing the number of authentication operations required.
Solution Approach 2:
The patent creates a universal authentication mechanism where a single group authentication process serves multiple sensors simultaneously. The processor establishes one secure communication channel that can be used by multiple sensors, making the authentication system multi-functional rather than requiring separate dedicated authentication for each sensor.
2Reliability
If the processor independently establishes secure communication sessions with each sensor, then secure communication is achieved, but the complexity of the authentication process increases
Solution Approach 1:
The patent merges multiple separate authentication workflows into a single group authentication process. Instead of executing individual authentication sequences for each sensor, the system performs one unified authentication that establishes secure communication for the entire sensor group, thereby reducing process complexity.
Solution Approach 2:
The patent segments sensors into groups for authentication purposes. By organizing sensors into cohorts and authenticating them as units rather than individuals, the system reduces the overall complexity of the authentication architecture while maintaining secure individual communication channels.
3Reliability
If separate key authentication processes are performed with each sensor, then secure sessions are established, but the time required for authentication increases
Solution Approach 1:
The patent combines multiple sequential authentication operations into a single parallel group authentication process. Multiple sensors are authenticated simultaneously rather than sequentially, dramatically reducing the total time required to establish secure communication while ensuring each sensor receives proper authentication.
Solution Approach 2:
The patent performs preliminary grouping of sensors before authentication. By pre-organizing sensors into groups and preparing the group authentication structure in advance, the system eliminates the need for repeated authentication setup for each sensor, thereby reducing overall authentication time.
Data Source
AI summary
A method for secure communication, the method includes (a) receiving, by a first entity executable by a first circuit, challenges of second entities, the second entities are executable by second circuits; (b) generating a pair of asymmetrical keys, the pair includes a new public key and a new private key; (c) generating a response message that includes a representation of the challenges of the second entities and the new public key, wherein the response message is signed by the first entity; (d) sending the response message to the second entities; (e) for each second entity (e.1) determining a unique symmetrical key associated with the second entity; wherein the determining is based on the new private key and a verified public key of the second entity; and (e.2) securely communicating with the second entity using the unique symmetrical key associated with the second entity.