Three-Node Authentication for Secure Digital Car Key Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital car key authentication methods fail to prevent attacks on the digital key signal processing unit, allowing unauthorized access and control, leading to vehicle theft and safety risks.
Innovation Solution
Implement a three-node authentication system where the first node checks the source device's authorization before executing control requests, using shared keys, public keys, and time identifiers to verify authenticity, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the first node unconditionally executes control request information from the second node, then the operation speed is fast and the system is simple, but the security is poor and unauthorized access cannot be prevented
Solution Approach 1:
The patent applies preliminary action by implementing authentication checks before executing control requests. The first node performs verification of authorization information in advance, ensuring that only authenticated control requests are executed. This prevents unauthorized access while maintaining system security without requiring complex post-execution verification mechanisms.
Solution Approach 2:
The patent uses an intermediary approach by introducing an authentication module as a mediator between the second node (control request source) and the first node (execution target). This module verifies authorization information and determines whether to allow execution, acting as a security gateway that balances accessibility and protection without requiring complete system redesign.
2Reliability
If traditional two-node authentication is used between key device and digital key signal processing unit, then the authentication process is simple, but it cannot prevent attacks on the digital key signal processing unit
Solution Approach 1:
The patent applies segmentation by dividing the authentication system into three distinct nodes: the key device, the digital key signal processing unit, and the in-vehicle control unit. Each node has specific authentication responsibilities, creating a distributed security architecture that prevents single-point failures and blocks attack propagation paths that would exist in traditional two-node systems.
Solution Approach 2:
The patent implements preliminary anti-action by adding an authentication layer between the digital key signal processing unit and the in-vehicle control unit. This preliminary authentication check prevents malicious control requests from reaching the control unit, countering potential attacks before they can execute harmful actions on the vehicle system.
3Reliability
If multiple authentication layers are added to prevent attacks, then the security is improved, but the authentication time increases and system complexity increases
Solution Approach 1:
The patent applies preliminary action by performing authentication checks in advance during the control request transmission process. The first node verifies authorization information before executing the control request, ensuring that security validation is completed proactively rather than reactively, which minimizes authentication time overhead during critical operations.
Solution Approach 2:
The patent implements self-service authentication mechanisms where each node independently verifies authorization information using pre-shared cryptographic keys and digital signatures. This self-verified authentication approach eliminates the need for complex multi-step manual verification processes, reducing authentication time while maintaining strong security through cryptographic proof of authorization.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
An authentication method, apparatus, and system are provided. The method includes: A first node receives control request information from a second node. The control request information is used to request to perform a preset operation on a first device, and the first device includes the first node and the second node. The first node checks first check information. The first check information is used by the first node to check whether a source device of the control request information is authorized. When the check succeeds, the first node controls, based on the control request information, the first device to perform the preset operation. The authentication method in this application may be applied to an intelligent driving device such as a new energy vehicle or an electric vehicle, or may be applied to a three-node system such as a three-node system in the IT field or a three-node system in the industrial control field, to help improve security of the authentication system.