Secure Key Update Protocol for On-Vehicle Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data transfer systems in on-vehicle networks face challenges in ensuring secure key management and forward secrecy, particularly in preventing falsified packet re-transmission attacks and coping with packet loss and errors due to noise or apparatus failures.
Innovation Solution
A data transfer protocol that employs a Hardware Security Module (HSM) with pseudo random number generation, encryption/decryption, and signature issuance/verification processing units to securely generate, update, and store session keys, using alternation buffers for efficient key management and error handling, ensuring forward secrecy and resistance to falsification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a shared key is transmitted through a network, then key updating is enabled, but the system becomes vulnerable to falsified packet re-transmission attacks and packet loss
Solution Approach 1:
The patent introduces an intermediary verification mechanism where a signature is generated for the encrypted new shared key and verified by the receiving apparatus before key storage. This intermediary signature verification acts as a mediator that ensures the authenticity of the transmitted key, preventing falsified packet attacks while enabling secure key updating over the network.
Solution Approach 2:
The patent applies preliminary action by performing signature generation and verification before the actual key storage operation. The receiving apparatus verifies the signature of the encrypted new shared key before storing it, ensuring that any falsified packets are detected and rejected prior to compromising the key storage, thus preventing attacks in advance.
2Reliability
If signature verification is implemented, then security against falsification is improved, but processing time increases due to additional verification steps
Solution Approach 1:
The signature is generated and attached to the encrypted new shared key in advance during the transmission phase. This preliminary preparation allows the receiving apparatus to perform verification efficiently without requiring complex real-time computation, reducing the time loss associated with verification processing.
3Reliability
If key storage is prohibited upon verification failure, then security is maintained, but key updating functionality is reduced
Solution Approach 1:
The patent implements a feedback mechanism where the verification result directly controls the key storage operation. When signature verification succeeds, the encrypted new shared key is stored; when verification fails, storage is prohibited. This feedback-based control ensures that key updating functionality is maintained under normal conditions while automatically preventing security compromises, thus balancing security maintenance with updating success rate.
Data Source
AI summary
To securely realize updating of a key shared between an apparatus on a transmission side and an apparatus on a reception side. A second apparatus encrypts a new shared key by an encryption processing unit, issues a signature for the encrypted new shared key from a signature processing unit, and transmits the signature and the encrypted new shared key to a first apparatus. When a signature processing unit fails in verifying the signature, the first apparatus performs control to prohibit at least one of processing executed after reception of the encrypted new shared key and required to store the new shared key into a storage unit.