Telematics Multimedia Unit Command Validation for Hacking Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Telematics remote control vehicles are vulnerable to external hacking due to insecure data channels and networks, allowing unauthorized access and control, despite existing security measures focusing on vehicle components and authentication.
Innovation Solution
A method and system where a telematics multimedia unit (TMU) receives remote control commands, determines their appropriateness through communication with a telematics server, and resets or initializes internal devices if the command is not valid, using a microcomputer and CPU to prevent unauthorized control by external elements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If telematics remote control is implemented using vehicle networks, then user convenience and remote control capability are improved, but vehicle security vulnerability to external hacking increases
Solution Approach 1:
The system performs preliminary validation of remote control commands by checking authorization information against a whitelist of permitted commands before executing any control actions. This preventive measure ensures that only authorized commands can control vehicle functions, blocking potential hacking attempts before they can cause harm.
Solution Approach 2:
The patent introduces an intermediary validation mechanism that acts as a mediator between the received remote control command and the vehicle control system. The validation unit serves as a security gateway that filters and verifies commands, preventing direct unauthorized access to vehicle control networks while allowing legitimate remote control operations.
2Reliability
If security validation of remote control commands is implemented, then vehicle security against hacking is improved, but system complexity and processing time increase
Solution Approach 1:
The validation system is segmented into distinct functional modules: a validation unit that checks command authorization, a whitelist management unit that maintains permitted commands, and an execution unit that carries out validated commands. This modular segmentation allows the security validation to be integrated without overwhelming system complexity, as each module has a specific, manageable function.
Solution Approach 2:
The system applies validation selectively to remote control commands based on a whitelist of permitted operations. Rather than validating every possible command or implementing comprehensive security checks for all vehicle functions, the system focuses validation resources on the specific remote control commands that require authorization, reducing unnecessary processing complexity.
3Reliability
If comprehensive command validation is performed for all remote control operations, then security against unauthorized control is improved, but processing speed and response time decrease
Solution Approach 1:
The validation mechanism performs partial validation by checking only against a predefined whitelist of authorized remote control commands. This approach validates security-critical commands while avoiding excessive validation of routine operations, maintaining fast response times for legitimate commands while ensuring security for controlled functions.
Solution Approach 2:
The whitelist of authorized commands is prepared and stored in advance before runtime operations. During remote control operations, the system performs quick lookup validations against this pre-prepared whitelist rather than performing complex real-time analysis, significantly improving command processing speed while maintaining security validation.
Data Source
AI summary
A method for preventing a telematics remote control vehicle from being externally hacked includes receiving a remote control command by a telematics multimedia unit (TMU). When the remote control command is received, whether the remote control command is appropriate or not is determined by the TMU. When the remote control command is appropriate the remote control command is transmitted to a corresponding device by the TMU. When the remote control command is not appropriate, an internal device related to transception of the remote control command is reset and initialized by the TMU.