T-Box ECU Secure Communication via XOR Session Key
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing communication between T-Box and ECU devices in Internet of Vehicles (IoV) systems lacks security, as it uses plaintext CAN bus communication without authentication or encryption, making it vulnerable to hacking and data interception.
Innovation Solution
A method and device for secure communication between T-Box and ECU devices using a negotiated security session key, generated through a process involving XOR operations with random numbers and a master key hash, enabling encryption and bidirectional authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing secure communication technologies (SSL, IPSec, S-HTTP) are used for T-Box and ECU communication, then communication security is improved, but device complexity and computational burden increase significantly
Solution Approach 1:
The patent uses lightweight cryptographic algorithms that consume minimal computational resources, allowing secure communication on resource-constrained embedded devices without requiring complex cryptographic infrastructure. The session key mechanism creates temporary, disposable security credentials for each communication session.
Solution Approach 2:
The patent changes the cryptographic parameters by using simplified hash functions and XOR operations instead of complex asymmetric encryption algorithms. This reduces computational complexity while maintaining security through proper key management and session-based authentication.
2Reliability
If bidirectional authentication with complex encryption algorithms is implemented, then communication security is improved, but processing time and energy consumption increase
Solution Approach 1:
The master key is pre-shared between T-Box and ECU during device provisioning, eliminating the need for complex key exchange protocols during runtime. This preliminary setup enables fast authentication using simple hash and XOR operations without time-consuming cryptographic computations.
Solution Approach 2:
The patent extracts only the essential authentication functionality needed for T-Box-ECU communication, removing unnecessary cryptographic overhead from standard protocols. This selective approach keeps only the critical security elements (hash, XOR, session key) while discarding complex infrastructure requirements.
3Device complexity
If plaintext CAN bus communication is used between T-Box and ECU, then device complexity is reduced, but security against interception and hacking is compromised
Solution Approach 1:
The patent introduces cryptographic intermediaries (hash functions, XOR operations, session keys) that transform plaintext communication into secure encrypted communication. These intermediaries add minimal complexity to the CAN bus system while providing essential security against interception and hacking.
Data Source
AI summary
The objective of the present disclosure is to provide a method and device for communicating securely between a T-Box device and an ECU device in an Internet of Vehicles system. Specifically, sending, by a T-Box device, a first piece of information to a corresponding ECU device; generating, by the ECU device, a second piece of information; generating, by the T-Box device, a third piece of information; generating, by the T-Box device, a first key; encrypting, by the T-Box device, a to-be-issued instruction based on the first key; generating, by the ECU device, a second key; and decrypting, by the ECU device, the encrypted instruction based on the second key to obtain the instruction. Compared with the prior art, the present disclosure achieves the secure communication between the T-Box device and the ECU device.