Railway Software Startup Seal Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for remote software updates in safety-critical systems fail to ensure that the correct software version is installed on the correct computer and maintained in a secure state, risking unsafe operation.
Innovation Solution
A method using a startup seal comprising a linked value of a key and identification numbers to decrypt encrypted software components, ensuring decryption is successful before allowing system operation, with the key being extracted only if both software and computer-specific identification numbers match.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software is stored encrypted on the computer, then system security is improved, but the ability to operate safety-relevant outputs and conduct secure communication is lost until decryption is successful
Solution Approach 1:
The software is pre-encrypted with a startup seal before being stored on the computer. The startup seal contains an encrypted key that will be decrypted using identification numbers to enable software execution. This preliminary encryption action ensures security is established before the system operates, allowing the computer to remain secure while still enabling controlled access when needed.
2Ease of operation
If remote software updates are implemented, then software can be updated without physical access is improved, but the risk of incorrect software being installed on incorrect computers increases
Solution Approach 1:
The system uses identification numbers (software-specific and computer-specific) that must match for successful decryption. This creates a feedback mechanism where the computer verifies the software identity against its own identity, ensuring that only the correct software can be activated on the correct computer. The matching process provides immediate feedback on whether the software-update pairing is valid.
Solution Approach 2:
The startup seal acts as an intermediary between the encrypted software and the computer. It contains the encrypted key and identification information that mediates the verification process. The startup seal enables remote updates by carrying the necessary decryption information while ensuring that the software is only activated when the identification numbers match, thus preventing incorrect software installation.
3Reliability
If the computer operates in a secure state without additional decryption information, then system security is maintained, but the software cannot be activated for controlling the technical system
Solution Approach 1:
The key is extracted from the startup seal by using the software-specific identification number and computer-specific identification number. This extraction process separates the decryption key from the encrypted software, allowing the key to be used for decryption without compromising the overall security structure. The key is taken out only when the identification numbers match, enabling software activation while maintaining security through controlled extraction.
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
A method for executing software on a computer for controlling a technical system, particularly for railway control, comprises the following steps. A startup seal is used. The startup seal consists of a linked value derived from a key and a software-specific identification number and/or a computer-specific identification number. The startup seal key is extracted using a software-specific identification number of software stored on the computer and/or a computer-specific identification number stored on the computer. At least one encrypted part of the software is decrypted based on the extracted key. The decrypted part of the software is used to control the technical system.