Secure Vehicle Network Key Generation for ECU Communications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Communications between electronic control units (ECUs) on a vehicle data bus can be accessed and modified by unauthorized parties, compromising vehicle safety.
Innovation Solution
Implementing a secure network that uses public key cryptography and a shared message key, with no external database of secrets to reduce intrusion points, allowing authorized ECUs to join and communicate securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key cryptography and shared message keys are implemented for secure communications, then security against unauthorized access is improved, but device complexity increases
Solution Approach 1:
The system performs preliminary key establishment and controller authentication before allowing communications. Authorized controllers are pre-configured with public keys and the network key is established before data transmission begins, preventing unauthorized access from the outset
Solution Approach 2:
The network key acts as an intermediary that enables all authorized controllers to derive identical symmetric encryption keys without directly sharing secret information. This mediator approach simplifies the key management complexity while maintaining strong security
2Reliability
If no external database of secrets is used, then security is improved by eliminating intrusion points, but key management complexity increases
Solution Approach 1:
Each controller independently generates its own public key and uses it to derive the symmetric encryption key locally using the network key. The system serves itself by distributing the network key to authorized controllers, who then autonomously establish secure communication channels without requiring centralized secret management
Solution Approach 2:
The cryptographic system is segmented into public key components (stored in each controller) and a shared network key (distributed to authorized controllers). This segmentation eliminates the need for a centralized secret database while distributing security responsibilities across multiple independent components
Data Source
AI summary
In an example embodiment, a system includes a first controller configured to generate a network key and transform the network key and a second controller configured to obtain the transformed network key and form a network with the first controller, each of the first controller and the second controller being configured to generate a same symmetric key using the network key and values from the other of the first controller and second controller.