Secure Vehicle Gateway Configuration With Signed Requests
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle systems face challenges in efficiently and securely configuring a plurality of gateway controllers due to limitations in extending and flexibly utilizing communication interfaces of central gateway controllers.
Innovation Solution
A method and system for securely configuring multiple gateway controllers by using client and server interfaces to exchange signed reception and transmission requests, verifying with private and public keys, and configuring routing tables based on confirmation messages, enabling automated, flexible, and secure communication setup.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If manual configuration methods are used for gateway controllers, then configuration can be performed with existing tools, but the process is time-consuming and prone to manipulation errors
Solution Approach 1:
The gateway controllers perform self-configuration by automatically exchanging reception requests and transmission offers with neighboring gateways, verifying cryptographic signatures, and populating routing tables without manual intervention. This self-service mechanism eliminates manual configuration errors and accelerates deployment while maintaining security through cryptographic verification.
Solution Approach 2:
Cryptographic key pairs are pre-configured in each gateway controller before deployment. These preliminary cryptographic preparations enable automatic verification of transmission offers and reception requests during the configuration process, ensuring security is built-in from the start rather than added later.
2Adaptability or versatility
If the communication interfaces of the central gateway controller are extended, then more flexible utilization is possible, but the device complexity increases
Solution Approach 1:
The gateway controllers use standardized Ethernet interfaces that can universally communicate with various bus systems (CAN, LIN, FlexRay) through protocol adaptation. This multi-functionality approach allows a single gateway controller design to handle multiple communication protocols without increasing physical interface complexity, achieving flexibility through software-based protocol handling rather than hardware proliferation.
Data Source
AI summary
A method is disclosed for securely configuring a plurality of gateway controllers of a vehicle. A reception request is received from a client interface of a first gateway controller, signed with a private key of a server interface of a second gateway controller, and a transmission offer is transmitted from the server interface of the second gateway controller to the client interface of the first gateway controller. The transmission offer includes a signed reception request that is verified. A confirmation message is received from the client interface of the first gateway controller. The confirmation message is signed and includes a confirmation/rejection of the transmitted transmission offer. The signed confirmation message is verified with a public key of the client interface of the first gateway controller. A routing table of the second gateway controller is configured depending on the received confirmation message when the signed confirmation message was successfully verified.