Touch Input Encryption Switching for Secure Vehicle Infotainment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Touch inputs on motor vehicle infotainment systems are vulnerable to manipulation and unauthorized reading during data transfer, particularly when external applications are connected, making it difficult to protect sensitive information like passwords and PINs without complicating the retrofit of external control devices.

Innovation Solution

A method that uses a touch control unit to determine which application is in the foreground and activate encryption and signing of touch inputs only when necessary, allowing protected touch inputs to be transferred securely while enabling other applications to function without encryption capabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If global encryption is applied to the entire data traffic on the bus connection, then security against manipulation and unauthorized reading is improved, but the ease of retrofitting external applications and control devices deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidease of retrofitting
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent implements selective encryption where only specific touch input data requiring security (such as password or PIN inputs) is encrypted, rather than encrypting all data traffic globally. The touch control unit determines whether encryption is needed based on the current application context, applying encryption locally only when necessary for security-sensitive operations.

Inventive Principle:
Principle #3Local quality

2Reliability

If touch input data is encrypted, then protection against unauthorized reading is improved, but the device complexity increases

Engineering Contradiction:
ImproveprotectionVSAvoidcomplexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The encryption mechanism is made dynamic rather than static. The touch control unit dynamically determines whether to activate encryption based on real-time conditions, specifically whether the current application requires security protection for touch inputs. This dynamic approach allows the system to switch between encrypted and non-encrypted modes as needed, reducing overall complexity compared to permanent global encryption.

Inventive Principle:
Principle #15Dynamics

3Reliability

If encryption is activated for touch inputs, then security against manipulation is improved, but the ease of operation deteriorates due to additional complexity in data transfer

Engineering Contradiction:
ImprovesecurityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The touch control unit automatically determines whether encryption is required and activates it without requiring manual intervention from the user or external configuration. The system self-manages the encryption process by monitoring application requirements and automatically enabling or disabling encryption as needed, making the security feature transparent to users while maintaining ease of operation.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS12128767B2Method for operating a touch-sensitive input unit, and input unit and motor vehicle
Publication Date: 2024.10.29 AUDI AG
  • US12128767B2 patent drawing
  • US12128767B2 patent drawing
  • US12128767B2 patent drawing

AI summary

The present disclosure relates to a method for operating a touch-sensitive input unit of an operating device of a motor vehicle. A touch-sensitive control unit controls whether a protection session for encrypting or signing user inputs for respective applications should be activated by switching to the protection session if a message of a composition circuit confirms that the graphic user interface of the respective application is displayed in the foreground of a display and that the touch-sensitive control unit has received an activation message from the respective application.