Secure-World Blockchain Storage for ECU Falsification Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing techniques for securing in-vehicle ECUs using encryption keys are vulnerable to data falsification when the encryption key is leaked, as they lack effective countermeasures against installing false ECUs.
Innovation Solution
Implementing a data storage system that utilizes a blockchain with a normal world and a secure world, where access from the normal world is restricted, and includes a block generation unit, storage unit, and data hash generation unit to update final block hash values at specific timings, generating data hash values based on acquired data and block hash values.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption keys are assigned to in-vehicle ECUs for authentication, then ECU authentication is improved, but data falsification vulnerability increases when the encryption key is leaked
Solution Approach 1:
The patent divides the authentication system into two independent components: ECU authentication using encryption keys and data integrity verification using blockchain hash values. This segmentation ensures that even if the encryption key is leaked and ECU authentication is compromised, the blockchain-based data integrity verification remains independent and can still detect falsification.
Solution Approach 2:
The patent introduces blockchain technology as an intermediary between data storage and verification. The blockchain stores hash values of acquisition data in a decentralized and immutable manner, acting as a neutral mediator that neither relies on the encryption key nor can be tampered with easily, thus providing an additional layer of security against data falsification.
2Object-affected harmful factors
If blockchain technology is implemented with normal world and secure world separation, then data falsification resistance is improved, but system complexity increases
Solution Approach 1:
The patent segments the system into a normal world for general data processing and a secure world for storing critical blockchain hash values. This segmentation allows the complex blockchain functionality to be isolated in the secure world, while the normal world continues to operate with simpler logic, thereby managing system complexity through spatial separation of concerns.
Solution Approach 2:
The patent implements preliminary action by pre-storing the final block hash value in the secure world before data acquisition begins. This preliminary setup of the blockchain anchor in the secure world simplifies subsequent data verification operations, as the secure world already contains the trusted reference point needed for hashing and comparison operations.
3Measurement precision
If final block hash values are updated at each update timing in the secure world, then detection of falsification is improved even if previous values are leaked, but storage operations become more frequent
Solution Approach 1:
The patent implements periodic action by updating the final block hash value in the secure world at regular update timings rather than continuously. This periodic update approach ensures that falsification detection remains accurate by frequently refreshing the trusted hash reference, while avoiding the inefficiency of continuous updates by operating at discrete, scheduled intervals.
Data Source
AI summary
An acquisition data acquired by a mobile object is stored using a blockchain with defining a normal world and a secure world. A new block to be connected to the blockchain is generated based on at least a block hash value generated from a previous block. A final block hash value stored at a previous update timing is updated by storing the final block hash value based on a final block connected to an end of the blockchain in a storage area of the secure world at each update timing. A data hash value based on the acquisition data and the final block hash value is generated at least for each update timing.