NFC Authentication Key Pre-establishment for Vehicle Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security authentication mechanisms for vehicles require multiple bidirectional interactive negotiation keys, leading to high data transmission rate requirements and compatibility issues with LIN and CAN buses, resulting in increased time delays and risks from malicious power consumption due to NFC-Key encryption and decryption behaviors triggered by fake messages.
Innovation Solution
A security authentication method that reduces the interaction process by using a single request end to establish a near-field communication connection with an NFC-Controller, generating a session key based on provided information, and encrypting control instructions and sensitive data using a symmetric key, thereby minimizing the need for three-way handshake negotiations and reducing time delays and malicious power consumption risks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple bidirectional interactive negotiation keys are used for security authentication, then authentication security is improved, but data transmission rate requirements increase and time delays increase
Solution Approach 1:
The patent pre-establishes key pairs between the NFC-Key and NFC-Controller before authentication occurs. During actual authentication, these pre-established keys are directly used without requiring multiple rounds of key negotiation, thereby reducing time delays while maintaining security.
Solution Approach 2:
The patent extracts the key negotiation process from the authentication flow by using pre-established keys. This separates the time-consuming key establishment phase from the actual authentication phase, allowing authentication to proceed quickly using the extracted pre-shared secrets.
2Reliability
If multiple bidirectional interactive negotiation keys are used for security authentication, then authentication security is improved, but device complexity increases
Solution Approach 1:
The complex key pair establishment is performed once in advance during device pairing or initialization. This preliminary action simplifies the ongoing authentication process, as subsequent authentications only require using the pre-established keys without re-negotiating them.
Solution Approach 2:
The patent uses cryptographic key pairs where the public key can be freely shared while the private key remains secret. This copying mechanism allows the NFC-Key to share its public key with the NFC-Controller without compromising security, simplifying the authentication mechanism compared to requiring multiple secret key exchanges.
3Reliability
If NFC-Key performs encryption and decryption behaviors for authentication, then security is improved, but power consumption increases and risk of malicious power consumption increases
Solution Approach 1:
Encryption keys are pre-established and stored in the NFC-Key before authentication occurs. During authentication, the NFC-Key only needs to perform a single encryption operation with the pre-shared key rather than engaging in multiple rounds of encryption and decryption negotiations, thereby reducing power consumption.
Solution Approach 2:
The NFC-Key uses its pre-established private key to sign authentication messages, and the NFC-Controller verifies these signatures using the NFC-Key's public key. This asymmetric cryptography approach allows the NFC-Key to perform minimal cryptographic operations (signing rather than full encryption/decryption cycles), reducing its power consumption while maintaining security.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
Disclosed are a security authentication method and an apparatus thereof, and an electronic device. The method includes: sending a verification request to a verification end; receiving a first data packet and acquiring third preset data, fourth preset data, second time data, a control instruction, and fifth preset data, the first data packet being determined by the verification end in response to the verification request; generating a key based on the third preset data, the fourth preset data, the second time data, and the first data packet; encrypting the control instruction and the fifth preset data based on the key to generate first encrypted data; and sending the first encrypted data to the verification end, so that the verification end sends the control instruction and the fifth preset data to an execution end, and the execution end executes the control instruction based on the following method: determining whether the fifth preset data is the same as internal preset data; and if so, executing the control instruction. The present invention can reduce interaction process, improve the time delay experience, and reduce a risk of malicious power consumption due to NFC-Key encryption and decryption behaviors triggered by fake messages of a card reader.