V2X Security Module GBA-Based Initial Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing initial security provisioning methods for Vehicle-to-Everything (V2X) terminal devices lack a specific scheme, leading to unreliable message transmission and information security risks due to the absence of a defined process for initial security provisioning, particularly in Chinese domestic auto brands which face high costs and challenges in creating a secure production environment.
Innovation Solution
An initial security provisioning method and security module that utilize the Generic Bootstrapping Architecture (GBA) to establish a secure channel between the V2X terminal device and the Enrollment Certificate Authority (ECA) server, using the Universal Subscriber Identity Module (USIM) for identity authentication and key generation, enabling secure configuration without relying on a pre-configured secure production environment, thereby reducing costs and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the manner of filling on production line is used for initial security provisioning, then the security of key and certificate configuration is improved, but the production cost and complexity increase significantly
Solution Approach 1:
The V2X terminal device performs self-provisioning of security parameters by autonomously establishing a TLS secure channel with the ECA server and obtaining certificates without external intervention. The device uses GBA authentication to securely obtain session keys and completes the entire certificate acquisition process independently, eliminating the need for manual filling operations on production lines.
Solution Approach 2:
The ECA server acts as an intermediary between the V2X terminal device and the certificate authority. It receives certificate application requests from devices, verifies them through GBA authentication, and issues certificates securely. This intermediary mechanism enables automated secure provisioning without requiring complex production line infrastructure.
2Ease of manufacture
If the 5GAA GBA solution is used for initial security provisioning, then the production cost is reduced by avoiding production line filling, but the information security reliability deteriorates due to lack of specific implementation scheme
Solution Approach 1:
The patent specifies concrete parameter settings and cryptographic algorithms for the GBA-based provisioning process, including defining the TLS protocol version, cipher suites, and key derivation functions. By standardizing these parameters, the solution transforms the abstract 5GAA concept into a reliable implementable process that maintains both low cost and high security.
Solution Approach 2:
The V2X terminal device pre-configures necessary security parameters and establishes GBA authentication credentials before the actual certificate application process. This preliminary preparation ensures that when the device needs to obtain certificates, it can immediately establish secure channels without requiring complex real-time security infrastructure.
3Device complexity
If TLS secure channel ends in HSM on V2X terminal device, then the security provisioning process is simplified, but security risks increase due to potential leakage of session keys
Solution Approach 1:
The patent extracts the session key generation and storage function from the HSM and places it in the USIM card. The TLS secure channel now ends in the USIM rather than the HSM, separating the key management function from the general security module. This extraction reduces the attack surface and prevents potential leakage of session keys that would occur if the HSM were compromised.
Solution Approach 2:
The solution uses ephemeral session keys generated through GBA authentication that are short-lived and discarded after use. Rather than relying on long-term keys stored in HSM, the system uses temporary keys for each TLS connection, reducing the impact of potential key leakage and eliminating the need for complex key management in the HSM.
Data Source
Figure 1~3
Figure 4~5
Figure 6A
AI summary
The present disclosure provides an initial security configuration method, a security module, and a terminal. The initial security configuration method, applied to a security module, comprising: when GBA authentication between a terminal and a network side device is completed, receiving a certificate application request sent from the terminal, the certificate application request carrying identification information of the terminal; performing encryption and/or integrity protection on a certificate application request message on the basis of a session key negotiated by GBA authentication; feeding back a certificate application response to the terminal, the certificate application response carrying the certificate application request message subjected to encryption and/or integrity protection; wherein the security module is configured to implement the function of a USIM.