Remote Railway Updates with Device-Specific Key Release
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Ensuring the correct installation of software updates in decentralized railway automation systems while maintaining integrity and confidentiality, and avoiding disruptions to operation.
Innovation Solution
The method involves encrypting software updates with a symmetric key, which can only be decrypted by the target device using a device-specific certificate, controlling the update timing through encrypted symmetric key transmission, and coordinating updates to ensure compatibility and availability of devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If software updates are transmitted to decentralized devices, then device functionality is improved, but security and control over update timing are compromised
Solution Approach 1:
The update process is segmented into distinct phases: update package transmission, encrypted symmetric key transmission, and update execution. The symmetric key is kept separate from the update package and is only transmitted when the target device is available, allowing the system to maintain security control while enabling efficient update deployment.
Solution Approach 2:
The update package is transmitted and stored in advance on the target device, but the decryption capability (symmetric key) is withheld until the device is available. This preliminary action allows the update to be prepared without compromising security or causing operational disruptions.
2Speed
If updates are installed immediately upon receipt, then update speed is improved, but system availability and operational continuity are compromised
Solution Approach 1:
The update package is downloaded and stored in advance, but the actual installation is postponed until the device is available. The encrypted symmetric key is transmitted only when the device is available, triggering immediate decryption and installation, thus maintaining speed while ensuring availability.
Solution Approach 2:
The update installation process is made dynamic by conditionally triggering it based on device availability. The system continuously monitors device availability and automatically initiates the update process when conditions are favorable, optimizing both speed and availability.
3Measurement precision
If manual update management is used, then control precision is improved, but labor costs and process time are increased
Solution Approach 1:
The system automatically monitors device availability, determines optimal update timing, transmits encrypted keys, and triggers update installation without human intervention. This self-service approach maintains precise control over update timing while eliminating manual management overhead.
Solution Approach 2:
The system implements feedback mechanisms where target devices report their availability status to the provisioning device. Based on this feedback, the system automatically adjusts update transmission timing, ensuring precise control while operating autonomously without manual intervention.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention describes a method for remotely updating a target device (GZ1 ... GZ3) in a network, in particular a railway automation system. The steps of encrypting an update for the software of the target device (GZ1 ... GZ3) are computer-aided, wherein a symmetric key (SKEY) is created, the update is encrypted with the symmetric key (SKEY), the symmetric key (SKEY) is encrypted with a public asymmetric key (SKEY) of the target device (GZ1 ... GZ3), the encrypted update is transmitted to the target device (GZ1 ... GZ3), the encrypted symmetric key (SKEY) is transmitted to the target device (GZ1 ... GZ3), and the symmetric key (SKEY) is decrypted with a private asymmetric key (PKEY) in the target device (GZ1 ... GZ3).The process involves the following steps: the update is decrypted using the decrypted symmetric key (SKEY) on the target device (GZ1 ... GZ3), and finally, the update is installed on the target device (GZ1 ... GZ3). This allows for advantageous control of the update installation by transmitting the encrypted symmetric key only at the time of the update. Furthermore, the invention comprises a network, a computer program, and a deployment device for such a program.