NFC-Enabled Vehicle Connector Lockout for EDR Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The vehicle's Diagnostic Link Connector (DLC) port is insecure, making it vulnerable to cybersecurity attacks, which can lead to unauthorized access and misuse of Event Data Recorder (EDR) data, particularly during and after a crash event, posing risks to privacy, safety, and security.
Innovation Solution
A cybersecurity service and NFC-enabled device with AES-128 bit encryption and tamper-proof NFC labels are embedded in the AUTOCYB vehicle connector lock, allowing real-time chain-of-custody verification using an NFC reader, ensuring secure access and integrity of EDR data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the DLC port is left accessible for diagnostic purposes, then ease of operation is improved, but security and reliability deteriorate due to unauthorized access and data theft risks
Solution Approach 1:
The patent implements preliminary locking of the DLC port using a lockout device that physically secures the connector before any diagnostic access can occur. The system pre-establishes security measures including encryption protocols and access authorization mechanisms before data access is attempted, preventing unauthorized access rather than reacting to it.
Solution Approach 2:
The patent introduces an intermediary lockout device and authentication system between the DLC port and any diagnostic tools. This intermediary layer verifies authorization, establishes secure communication channels, and controls access to EDR data, thereby maintaining security while allowing legitimate access.
2Reliability
If encryption and lockout mechanisms are implemented, then security and reliability are improved, but device complexity increases
Solution Approach 1:
The patent extracts the security functionality into a separate, dedicated lockout device that interfaces with the DLC port. By isolating security mechanisms from the main vehicle systems, the complexity is contained within a modular component that can be managed independently, reducing the burden on the overall vehicle system architecture.
Solution Approach 2:
The patent utilizes NFC technology and digital copies of authorization credentials to manage access control. Instead of complex physical key systems, the system uses digital representations of access rights that can be verified electronically, simplifying the authentication mechanism while maintaining security.
3Reliability
If the DLC port is secured with lockout devices, then security is improved, but ease of operation deteriorates due to restricted access
Solution Approach 1:
The patent implements a dynamic access control system where the DLC port lockout status can change based on authorization. Legitimate users with proper credentials can dynamically unlock the port for authorized operations, while unauthorized access attempts result in maintained or enhanced locking. This dynamic behavior allows the system to be restrictive by default yet flexible when needed.
Solution Approach 2:
The system incorporates feedback mechanisms that notify authorized users of the lockout status and guide them through the authorization process. The system provides real-time information about access states and responds to authentication attempts, enabling authorized users to easily operate the system while maintaining security against unauthorized access.
Data Source
AI summary
A system for and methods of securing vehicle electronic data is disclosed. For example, a vehicle data protection system for and methods of securing access to a vehicle's event data recorder (EDR) data are provided. In one embodiment, the method comprises scanning a label having a near field communication (NFC) tag using an NFC reader device, and then displaying on the NFC reader one or more vehicle data items associated with a vehicle profile. The vehicle data items may be stored and accessed from a cloud database, and may include any useful vehicle and/or vehicle owner information. The method may further include installing or granting permission for a service provider to install a vehicle connector lockout apparatus onto a diagnostic link connector of a vehicle, and establishing a chain of custody link for EDR data via an NFC tag on the vehicle connector lockout apparatus.