Secure Message Reproduction for Fast ECU Testing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
New encryption and authentication algorithms in bus communication standards, such as AUTOSAR and FIBEX, prevent simple reproduction of secure messages for testing control devices, as the counter value and authenticator cannot be easily replaced, leading to issues with deserialization and decoding of serialized messages.
Innovation Solution
A method and reproduction unit that process serialized secure messages by identifying the position of payload data and authenticators, removing the obsolete counter and authenticator values, and generating new values using a communication description and data interpretation algorithm, allowing for efficient serialization and sending of updated secure messages to a receiver device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complete deserialization and decoding of serialized secure messages is performed to identify and replace counter values and authenticators, then the message reproduction can be achieved, but the time consumption and computing power requirements increase significantly
Solution Approach 1:
The patent extracts only the essential portions of the serialized message (counter value and authenticator fields) without performing complete deserialization. By identifying and extracting only these specific fields using pattern matching or position-based methods, the solution achieves message reproduction while avoiding the time-consuming full decoding process.
Solution Approach 2:
Instead of performing complete deserialization and decoding of the entire message, the patent applies partial action by processing only the necessary parts (counter and authenticator fields). This partial processing approach maintains reproduction accuracy while significantly reducing computational overhead and time consumption.
2Reliability
If complete deserialization and decoding of serialized secure messages is performed to identify and replace counter values and authenticators, then the message reproduction can be achieved, but the computing power requirements increase significantly
Solution Approach 1:
The patent extracts only the essential portions of the serialized message (counter value and authenticator fields) without performing complete deserialization. By identifying and extracting only these specific fields using pattern matching or position-based methods, the solution achieves message reproduction while avoiding the time-consuming full decoding process.
Solution Approach 2:
Instead of performing complete deserialization and decoding of the entire message, the patent applies partial action by processing only the necessary parts (counter and authenticator fields). This partial processing approach maintains reproduction accuracy while significantly reducing computational overhead and time consumption.
3Adaptability or versatility
If the counter value and authenticator are replaced in secure messages for testing purposes, then the messages can be reproduced for control device testing, but the security protection against replay attacks is compromised
Solution Approach 1:
The patent segments the secure message into distinct parts: the payload data (which remains unchanged and maintains security), and the counter/authenticator fields (which are replaced for testing). This segmentation allows selective modification of only the necessary fields while preserving the security-integrity relationship of the payload.
Solution Approach 2:
The patent introduces an intermediary processing step that handles the counter and authenticator replacement separately from the secure payload. This intermediary approach allows testing functionality to be implemented without directly compromising the security mechanisms, as the payload integrity remains preserved.
Data Source
AI summary
A method for sending registered secure messages via a messaging system to a receiver device that is to be tested includes: supplying first secure and still serialized messages from message packages for processing in a reproduction unit; in the first messages, reducing the data volume of the serialized messages; deserializing the reduced first messages and creating second secure messages by adding a second counter value in each case or, where applicable, by replacing a first counter value with the second counter value, and creating and adding a second authenticator in each case by using the second counter value, the encryption information, and the key, and by using the communication description or the information obtained by applying a data interpretation algorithm; and serializing the second secure messages and sending corresponding message packages to the receiver device to be tested.