Sensor Data Signing for Secure Vehicle Transmission

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The secure transmission of sensor data from vehicles to external systems, such as for traffic or weather analysis, is costly due to the need for securing multiple communication nodes, and existing methods do not effectively prevent manipulation by third parties without restricting data usage.

Innovation Solution

A method where sensor data is signed using a securely stored certificate, which is then transmitted through a network, with the certificate being replaced via software updates to ensure authenticity and protect against unauthorized access, using a tamper-proof memory and efficient signature calculation methods like MACs based on ChaCha20/12 to maintain data integrity and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple communication nodes are secured for transmitting sensor data from vehicle to backend, then data security is improved, but transmission costs increase significantly

Engineering Contradiction:

Improvedata securityVSAvoidtransmission costs

Core Design Contradiction:

ReliabilityVSLoss of energy

Solution Approach 1:

The sensor is pre-configured with a certificate during manufacturing that enables it to sign measurement values locally before transmission. This preliminary setup allows the sensor to autonomously secure its own data without requiring external security infrastructure at each communication node, thereby maintaining security while reducing the cost of securing multiple nodes

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The sensor performs self-authentication by signing its own measurement values using its embedded certificate. This self-service capability eliminates the need for external authentication services at each communication node, allowing the sensor to independently ensure data integrity and authenticity throughout the transmission chain

Inventive Principle:

Principle #25Self-service

2Reliability

If certificate is stored in sensor memory for signing measurement values, then data authenticity is improved, but vulnerability to unauthorized access increases

Engineering Contradiction:

Improvedata authenticityVSAvoidunauthorized access risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system implements periodic certificate replacement through software updates. Certificates have limited validity periods and are automatically renewed or replaced, ensuring that even if a certificate is compromised, the window of vulnerability is limited to its validity period. This periodic refresh mechanism maintains data authenticity while mitigating long-term security risks

Inventive Principle:

Principle #19Periodic action

Solution Approach 2:

The system changes the certificate parameter over time through software updates. By replacing certificates periodically and managing their validity periods, the system dynamically adjusts security parameters to balance authenticity requirements with protection against unauthorized access, ensuring that compromised certificates are eventually invalidated

Inventive Principle:

Principle #35Parameter changes

3Reliability

If signature calculation is performed for each measurement value, then data integrity is improved, but computational overhead increases

Engineering Contradiction:

Improvedata integrityVSAvoidcomputational overhead

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system uses efficient, lightweight signature calculation methods (such as MACs based on ChaCha20/12) that are computationally inexpensive compared to traditional digital signatures. These lightweight cryptographic operations provide sufficient data integrity protection while consuming minimal computational resources and energy, making them suitable for resource-constrained sensor devices

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

4Reliability

If certificate is replaced via software update, then security against manipulation is improved, but system complexity increases

Engineering Contradiction:

Improvesecurity against manipulationVSAvoidcertificate management complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system uses standard software update mechanisms that serve multiple functions: delivering bug fixes, feature updates, and certificate replacements simultaneously. This multi-functionality allows certificate management to be integrated into existing update infrastructure, avoiding the need for separate complex certificate management systems and reducing overall system complexity

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentEP3556071B1Method, device, and computer-readable storage medium comprising instructions for signing measurement values of a sensor

Publication Date: 2023.08.09 VOLKSWAGEN AG

Figure 1~2
Figure 3~4
Figure 5

AI summary

The invention relates to a sensor for detecting measurement values, a method, a device, and a computer-readable storage medium having instructions for processing measurement values. In a first step, a measurement value is detected (10) by a sensor. The detected measurement value is then signed (11) using a certificate assigned to the sensor and forwarded (12) to a network. The signed measurement value is transmitted (13) via the network to a receiver (59). Finally, the authenticity of the measurement value is checked (14) by the receiver (59) using the certificate.