Secure Hardware Engine for Asynchronous CAN Message Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing in-vehicle communication systems lack secure messaging protocols to prevent malicious messages from compromising safety in automated driving systems, particularly in Controller Area Network (CAN) systems where message priority arbitration can lead to unintended vehicle operations.
Innovation Solution
A secure messaging system utilizing a decoupled, parallel message authentication process on a secure hardware engine asynchronously with regular processors, employing a request-mark-sweep mechanism and callback functionality to prioritize and authenticate messages, reducing contention and ensuring real-time processing without blocking other system functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If centralized processing or event-driven non-prioritized processing is used for secure messages, then system complexity is reduced, but message authentication throughput and real-time processing capability deteriorate
Solution Approach 1:
The patent divides the secure message processing system into two independent segments: a processor that generates authentication requests and a separate secure hardware engine that performs the actual authentication. This segmentation allows parallel processing of multiple messages without centralized bottlenecks, improving throughput while maintaining manageable complexity through clear separation of concerns.
Solution Approach 2:
The patent introduces an intermediary request queue and callback mechanism that decouples the processor from the secure hardware engine. The processor places requests in the queue and continues execution, while the secure hardware engine processes messages independently and uses callbacks to notify completion. This intermediary layer enables asynchronous parallel processing without requiring complex centralized coordination.
2Device complexity
If synchronous message authentication is used on the regular processor, then message processing is simplified, but other system functions are blocked and overall system throughput deteriorates
Solution Approach 1:
The patent extracts the time-consuming message authentication function from the regular processor and relocates it to a dedicated secure hardware engine. This extraction allows the processor to continue executing other critical vehicle control functions without being blocked by authentication operations, thereby maintaining simple processing logic on the processor while dramatically improving overall system throughput through parallel execution.
Solution Approach 2:
The secure hardware engine operates autonomously to authenticate messages, managing its own processing queue and execution flow without requiring continuous processor intervention. The engine services authentication requests independently and notifies the processor only when authentication completes via callback, enabling the processor to perform other tasks simultaneously and improving overall system productivity.
3Reliability
If priority queue management is implemented for message requests, then real-time constraints are met, but queue management complexity increases
Solution Approach 1:
The patent implements a dynamic priority queue management system where message priorities can be adjusted based on real-time vehicle operating conditions and message criticality. The queue automatically reprioritizes messages as new information becomes available, ensuring that time-critical authentication requests are processed first while maintaining manageable complexity through event-driven priority adjustments rather than static complex scheduling algorithms.
Data Source
AI summary
A secure messaging communication system. A communication bus communicates messages between transmitting nodes. A secure hardware engine of a controller authenticates messages from requesting entities. A processor of the controller initially receives messages from the requesting entities. The processor includes a message request queue prioritizing received messages. The processor communicates a prioritized message from the request queue and associated authentication information to the secure hardware engine. The secure hardware engine authenticates the messages in response to receiving the prioritized messages and associated authentication information from the processor. The secure hardware engine communicates the authenticated messages to the processor for storage in a results queue.