V2V Hash-Segment Verification for Secure Vehicle Data Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Vehicles are vulnerable to network security threats such as tampering and spoofing during Over The Air (OTA) software updates and high-precision map data transmission, compromising their integrity and safety.
Innovation Solution
A method for V2V-based collaborative data verification where a vehicle terminal generates a hash value for received data, requests and combines hash segments from surrounding vehicles to reconstruct a second hash value, and compares it with the first hash value to verify data integrity, ensuring matching hash values indicate uncompromised data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If integrity verification is performed using a single centralized server, then verification process is simple, but the system is vulnerable to server compromise and man-in-the-middle attacks
Solution Approach 1:
The patent segments the verification function by dividing the hash value into multiple hash segments and distributing them across multiple surrounding vehicles. Instead of relying on a single centralized server, the verification process is distributed among multiple vehicles that each hold portions of the hash value, making the system resistant to single-point failures and server compromise.
Solution Approach 2:
The patent introduces surrounding vehicles as intermediaries in the verification process. These vehicles act as mediators that store and provide hash segments to the target vehicle, enabling decentralized verification without direct reliance on the service providing server. This intermediary layer prevents man-in-the-middle attacks by eliminating the single communication path between client and server.
2Productivity
If hash value is transmitted directly from server to vehicle, then verification is efficient, but the transmission channel is vulnerable to tampering and spoofing
Solution Approach 1:
The patent segments the hash value into multiple hash segments that are distributed to different surrounding vehicles. The target vehicle reconstructs the full hash value by collecting segments from multiple sources, which prevents tampering during transmission since an attacker would need to compromise multiple independent transmission channels simultaneously rather than a single direct channel.
Solution Approach 2:
The patent transitions from a single-dimension verification approach (direct server-to-vehicle hash transmission) to a multi-dimensional approach by distributing hash segments across multiple spatial dimensions (different surrounding vehicles). This dimensional expansion creates multiple independent verification paths, making the system resistant to attacks on any single transmission path.
3Reliability
If multiple surrounding vehicles are used for hash segment collection, then data integrity is verified through collaboration, but communication overhead and verification complexity increase
Solution Approach 1:
The patent segments both the hash value and the verification process. The hash value is divided into segments distributed among vehicles, and the verification process is segmented into distinct phases: hash segment collection, reconstruction of the full hash value, and comparison with the received data hash. This segmentation makes the complex multi-vehicle verification process manageable and systematic.
Data Source
Figure 1
Figure 2
Figure 3(a)~3(d)
AI summary
Provided are a vehicle terminal for V2V-based collaborative data verification and a method performed by the same. The method comprises: receiving service data from a service providing server; generating a first hash value for the service data; requesting hash segments corresponding to the service data from surrounding vehicles; receiving the hash segments from the surrounding vehicles, wherein portions of a second hash value corresponding to the received hash segmetns are at least partially different; and verifying integrity of the service data based on the received hash segments and the first hash value. Each of the hash segments is a portion of the second hash value generated by a corresponding surrounding vehicle for the service data that has already been received from the service providing server, and may be combined by the vehicle terminal in order to reconstruct the second hash value.