Moving Body Secure Boot Control for Tampering Without Operation Loss
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional secure boot techniques in moving bodies, such as vehicles, risk false detection of tampering, leading to unnecessary interruption of operations and user inconvenience.
Innovation Solution
A moving body control device and method that includes secure boot processing with tampering recognition and response mechanisms, allowing continued use of essential functions until the moving body enters a standby state, and disabling functions only after entering standby, with adjusted detection criteria based on activation state and function type.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure boot processing is performed frequently to verify software tampering, then software reliability is improved, but false detection of tampering increases leading to unnecessary operation interruptions
Solution Approach 1:
The patent applies dynamics by making the secure boot processing frequency adaptive rather than static. The control device dynamically adjusts whether to perform secure boot processing based on the operational state of the moving body. Specifically, secure boot processing is performed when the moving body is in a standby state but suppressed when in an activated state, optimizing the balance between reliability verification and operational continuity.
Solution Approach 2:
The patent changes the parameter of processing frequency based on operational state. By transitioning the secure boot processing from a continuous or fixed-interval operation to a state-dependent operation (performed only in standby state), the system adjusts the verification frequency parameter to match operational requirements, reducing false detections while maintaining security.
2Reliability
If secure boot processing is performed during activated state to detect tampering immediately, then traffic safety is improved, but false detections cause unnecessary function disabling and user inconvenience
Solution Approach 1:
The patent applies preliminary action by performing secure boot processing in advance during the standby state, before the moving body enters the activated state. This timing strategy allows security verification to be completed beforehand, so that when the moving body activates, any detected tampering has already been identified and addressed, ensuring safe operation without interrupting function availability.
Solution Approach 2:
The patent skips secure boot processing during the activated state to avoid interrupting critical operations. By selectively omitting the verification step during high-priority operational periods and performing it only during standby periods, the system rushes through the activation process without security verification delays, while still maintaining security through prior verification.
3Measurement precision
If tampering detection threshold is set low to ensure security, then false negatives are reduced, but false positives increase causing unnecessary operation stoppage
Solution Approach 1:
The patent applies local quality by implementing different detection thresholds or verification strictness levels for different operational states. During standby state, a lower threshold may be applied with full verification, while during activated state, the system either skips verification or applies a higher threshold, creating localized quality adjustments that match the risk profile of each operational phase.
Data Source
AI summary
A moving body control device includes a tampering recognition part that executes secure boot processing of verifying presence or absence of tampering with software stored in a storage provided in a moving body, to recognize the tampering with the software, and a tampering responding part that executes tampering response pending processing of maintaining a state in which a predetermined function of the moving body is usable until the moving body enters a standby state, when the tampering recognition part executes the secure boot processing in an activated state of the moving body and the tampering recognition part recognizes the tampering with software related to the predetermined function, the tampering responding part disabling the use of the predetermined function, after the moving body enters the standby state.