Storage Device Dual Encryption Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a challenge in ensuring the integrity and authenticity of vehicle-related data during autonomous driving, as it is difficult to prevent data forgery or manipulation by manufacturers or third parties, which can compromise the accuracy of accident investigations and vehicle operation monitoring.
Innovation Solution
A storage device with a controller that generates and encrypts vehicle data using a first encryption key, further encrypts the key with a second encryption key, and stores both encrypted data and key, ensuring secure transmission and integrity by excluding unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored without encryption, then access and processing are simple and fast, but data security and integrity are compromised allowing forgery or manipulation
Solution Approach 1:
The encryption system is segmented into multiple independent components: a first encryption key for encrypting vehicle data, a second encryption key for encrypting the first key, and separate storage locations for encrypted data and encrypted keys. This segmentation allows the system to achieve high security through layered encryption while maintaining manageable complexity by dividing the encryption process into distinct, modular steps that can be independently implemented and verified.
2Reliability
If strong encryption is used to prevent data forgery, then data security is improved, but processing speed and power consumption increase
Solution Approach 1:
The patent applies partial encryption action by using different encryption keys for different data elements. The first encryption key encrypts only the vehicle data, while the second encryption key encrypts only the first encryption key. This selective, partial encryption approach provides sufficient security for data integrity verification without requiring excessive encryption operations on all data, thereby reducing overall power consumption while maintaining data integrity protection.
3Reliability
If multiple encryption layers are implemented, then prevention of data counterfeiting is enhanced, but system complexity increases
Solution Approach 1:
The system performs preliminary action by pre-establishing two encryption keys before data storage: a first encryption key for data encryption and a second encryption key for key encryption. The encrypted first encryption key is stored alongside the encrypted data in advance. When authentication is needed, the system can directly use the pre-stored encrypted key without requiring complex real-time key generation or management, thereby enhancing authentication accuracy while keeping the system relatively simple through advance preparation.
Data Source
AI summary
A storage device inventive concepts includes a controller configured to receive data and generate a first encryption key; and a memory storing a second encryption key, wherein the controller may be further configured to encrypt the data with the first encryption key, encrypt the first encryption key with the second encryption key, and store the encrypted data and the encrypted first encryption key in the memory.