Post-Quantum Software Update Relay via Intermediary Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for updating software components in devices like automobiles and household appliances face challenges due to limited hardware capabilities and the complexity of validating post-quantum algorithm signatures, which are vulnerable to quantum computers, leading to security concerns and the need for hardware upgrades.
Innovation Solution
A method involving a first electronic device with sufficient capabilities to validate post-quantum algorithm signatures and relay only validated update information to a second electronic device, allowing for software updates without requiring significant hardware changes in the second device, enabling continued secure operation and agility in validation algorithms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If post-quantum algorithm signatures are used for validating update information, then security against quantum computers is improved, but device complexity and hardware requirements worsen
Solution Approach 1:
The validation function is segmented between different device types: first electronic devices with sufficient hardware capabilities perform the complex PQA signature validation, while second electronic devices with limited capabilities only receive and apply validated update information. This division allows security improvement without requiring all devices to have high hardware capabilities.
Solution Approach 2:
First electronic devices act as intermediaries that perform the computationally intensive validation of post-quantum signatures and then relay only the validated update information to second electronic devices. This intermediary approach enables secure updates for devices that would otherwise be too limited in hardware capability.
2Ease of operation
If first electronic devices validate PQA signatures and relay update information, then ease of operation for second devices is improved, but loss of time for validation process increases
Solution Approach 1:
The first electronic device performs the time-consuming PQA signature validation in advance before the second electronic device needs to apply the update. By completing the complex validation work beforehand, the second device can quickly and easily apply the update without experiencing the time delay of the validation process itself.
Data Source
AI summary
A method for updating a software component. The method includes providing a first electronic device and a second electronic device that are connected in a first network, receiving update information for the second electronic device via the first electronic device, the update information being provided with a signature that is generated with the aid of a post-quantum algorithm (PQA) signature, checking the update information by validating the signature by the first electronic device, relaying the update information to the second electronic device if the update information is deemed to be valid, and updating a software component of the second electronic device using the update information.