TPMS Central Unit Authentication Using Server-Issued Encrypted Proof
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for authenticating central units to perform sensitive operations on peripheral units in tire-pressure monitoring systems face challenges in ensuring high security and confidentiality without overloading the server with large data exchanges.
Innovation Solution
A method using a secure external server with a database of peripheral unit identifiers and shared symmetric encryption keys, where the central unit authenticates with the server and generates a session code for secure communication and encryption key management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used for sensitive operations on peripheral units, then security and confidentiality can be ensured, but the server becomes overloaded with large data exchanges
Solution Approach 1:
The authentication process is segmented into multiple steps: initial authentication, session code generation, and encrypted proof exchange. This divides the large data exchange into smaller, manageable segments that reduce server load while maintaining security.
Solution Approach 2:
The central unit performs preliminary authentication and obtains encrypted proof of authentication before actual sensitive operations. This preliminary action prevents unnecessary data exchanges during the operational phase, reducing server load.
2Productivity
If simple authentication methods are used, then server load is reduced, but security and confidentiality are compromised
Solution Approach 1:
An encrypted proof of authentication acts as an intermediary that carries security credentials without requiring continuous server involvement. This mediator maintains security while allowing efficient peer-to-peer authentication.
Solution Approach 2:
The system changes the parameter of authentication from continuous server verification to one-time encrypted proof exchange. This parameter change reduces server load while maintaining security through cryptographic guarantees.
3Reliability
If encryption keys are stored in the server for each peripheral unit, then authentication security is improved, but the database size and complexity increase
Solution Approach 1:
The system extracts the authentication proof from the server database and stores it locally in the central unit as an encrypted token. This extraction reduces database complexity while maintaining authentication security through local verification.
Data Source
AI summary
A method for authenticating the rights of a central unit communicating with peripheral units carrying out measurements on the tires of the wheels of a motor vehicle to carry out sensitive operations thereon, using a secure external server that possesses their identifier. Each peripheral unit generating a random session code transmitted to the server with its identifier, the identifier of the peripheral unit and the session code, the server performs an encryption with a dynamic encryption key shared with the peripheral unit to form a dynamic first encryption key, then performs a second encryption with the identifier of the central unit to give encrypted central-unit information transmitted to the peripheral unit, which performs the same encryption to form a temporary second encryption key, then an inverse decryption giving a decrypted identifier, then compares this decrypted identifier with the identifier of the central unit with a view to granting its authentication.