Remote Keyless Entry Message Authentication Using Segmented Cryptographic Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional remote keyless entry systems face challenges in balancing message security with message length, as security measures often increase the length of messages, which can reduce the key fob's range and battery life.
Innovation Solution
The system generates secure messages with a plaintext and ciphertext space, using a key fob to create an encrypted authentication tag and transmit a shorter secured message, allowing vehicles to authenticate the key fob based on authorized identifiers and counter values, thereby maintaining security while conserving message length.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security measures are implemented in remote keyless entry systems, then authentication reliability is improved, but message length increases
Solution Approach 1:
The authentication message is segmented into two distinct parts: a plaintext space containing an authentication tag generated from a cryptographic hash function, and a ciphertext space containing encrypted counter values. This segmentation allows the system to maintain security through cryptographic mechanisms while keeping the overall message length optimized for transmission efficiency.
Solution Approach 2:
The system changes the parameter of message structure by using a fixed-length cryptographic hash output for the authentication tag regardless of the input data size. This ensures that the authentication component has a consistent, optimized length while still providing reliable authentication through cryptographic principles.
2Length of moving object
If message length is reduced to extend key fob range, then transmission distance is improved, but authentication security may be compromised
Solution Approach 1:
The system extracts the essential authentication elements into a compact format by using cryptographic hash functions that produce fixed-length outputs. The authentication tag is derived from hashing the counter value and key fob identifier, extracting only the necessary security information into a condensed form that maintains security while reducing message length.
Solution Approach 2:
Instead of transmitting the entire counter value and authentication data in plaintext, the system creates a cryptographic copy (hash) of the authentication data. This cryptographic copy maintains the security properties needed for authentication while occupying significantly less space, thereby extending the key fob's effective range.
3Reliability
If longer authentication messages are transmitted, then authentication integrity is maintained, but battery energy consumption increases
Solution Approach 1:
The authentication message is segmented into efficient components that minimize transmission length. The plaintext space contains a compact authentication tag while the ciphertext space contains encrypted counter values, allowing the system to maintain authentication integrity through cryptographic verification of these segmented parts rather than transmitting lengthy plaintext authentication data.
Solution Approach 2:
The system changes the parameter of data representation by using cryptographic hash functions that convert variable-length input data into fixed-length hash outputs. This parameter change ensures that authentication integrity is maintained through the cryptographic properties of the hash function while significantly reducing the energy required to transmit the authentication message.
Data Source
AI summary
Method and apparatus are disclosed for remote keyless entry authentication. An example remote keyless entry system includes a key fob and a vehicle. The key fob generates a secured message with a plaintext space and a ciphertext space. The vehicle (i) determines whether the key fob may be authorized based on first information in the plaintext space, (ii) decrypts an encrypted value in the ciphertext space based on a predicted full counter value, and (iii) determines whether the key fob is authorized based on second information in the encrypted value.