Update Control Device for Post-Quantum Signature Verification Load Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing methods for updating software in in-vehicle electronic control systems face challenges with the migration to post-quantum cryptography, as they require higher processing performance and sufficient storage, leading to increased load on verification devices and potential delays in readiness for post-quantum cryptography.
Innovation Solution
An update control device that determines a verification device capable of verifying signatures from multiple electronic control units and assigns the verification task to it, allowing for efficient distribution of verification load and storage, thereby optimizing the use of available resources during the transition to post-quantum cryptography.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If signature verification is performed using post-quantum cryptography, then security is improved, but processing load and storage requirements increase
Solution Approach 1:
The patent divides the verification system into multiple verification devices (first verification device and second verification device) that share the verification load. The update control device determines which verification device performs verification based on the signature scheme type, distributing the computational burden across multiple devices rather than concentrating it on a single device.
Solution Approach 2:
The update control device acts as an intermediary that manages the verification process by determining which verification device should perform the verification based on the signature scheme. It coordinates between the distribution device, verification devices, and update target device, optimizing the verification workflow to reduce individual device load.
2Reliability
If signature verification is performed using post-quantum cryptography, then security is improved, but storage requirements increase
Solution Approach 1:
The patent segments the storage requirements across multiple verification devices. Each verification device stores verification keys appropriate for its designated signature scheme (e.g., RSA keys or post-quantum keys), distributing the storage burden rather than requiring every device to store all possible key types.
Solution Approach 2:
Each verification device is configured with specific verification capabilities matched to its role in the system. The update control device assigns verification tasks based on the signature scheme type, ensuring that devices store and process only the relevant key types needed for their specific verification function.
3Adaptability or versatility
If all electronic control units are prepared for post-quantum cryptography, then future readiness is improved, but system complexity and preparation time increase
Solution Approach 1:
The system dynamically adapts to different signature schemes based on the update being installed. The update control device determines the appropriate verification device based on the signature scheme of the incoming update, allowing the system to handle both traditional and post-quantum cryptography without requiring all devices to be uniformly prepared for both.
Solution Approach 2:
The verification system is designed to handle multiple signature schemes through a unified architecture. The update control device can direct verification to appropriate devices based on whether the update uses RSA, ECDSA, or post-quantum signature schemes, creating a universal verification pathway that supports multiple cryptographic standards.
Data Source
AI summary
An update control device is configured to obtain an update file for updating a software and a signature from a distribution device, transmit the update file to a device to be updated, determine a verification device verifying the signature from electronic control units on a basis of a scheme of the signature, and transmit the signature and a verification instruction instructing verification of the signature to the verification device.