V2X Security Session Establishment Using IEEE 1609.2 Hybrid Cryptography
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current V2X technologies face challenges in providing secure and anonymous services to diverse users, including vehicles and pedestrians, due to inefficiencies in establishing and maintaining security sessions, particularly in broadcast communication environments where traditional protocols like TLS are not optimized for V2X communication.
Innovation Solution
The proposed method employs IEEE 1609.2 certificates for confidentiality, authentication, and certificate management, using a symmetric key for encryption after an initial asymmetric key-based session establishment, reducing computational overhead and system complexity, and enabling quick security session setup.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional TLS protocols are used for V2X communication, then security can be provided, but computational overhead and system complexity increase
Solution Approach 1:
The patent changes the cryptographic parameters by using IEEE 1609.2 certificates with asymmetric keys for initial authentication, then switching to symmetric keys for ongoing encryption. This parameter change reduces computational complexity while maintaining security requirements for V2X communications.
Solution Approach 2:
The security protocol is segmented into two distinct phases: initial asymmetric key-based authentication using IEEE 1609.2 certificates, followed by symmetric key-based encryption for data transmission. This segmentation allows each phase to use the most appropriate cryptographic method, reducing overall system complexity.
2Reliability
If traditional TLS protocols are used for V2X communication, then security can be provided, but session establishment time increases
Solution Approach 1:
The patent implements preliminary action by pre-establishing security sessions using IEEE 1609.2 certificates before actual V2X data transmission begins. The asymmetric key authentication and symmetric key exchange are completed in advance, allowing rapid encrypted communication once the session is established.
Solution Approach 2:
The patent changes cryptographic parameters from continuous asymmetric key operations to initial asymmetric authentication followed by efficient symmetric key operations, significantly reducing session establishment time while maintaining security.
3Reliability
If asymmetric key encryption is used continuously, then security can be maintained, but computational burden increases
Solution Approach 1:
The patent changes the encryption parameter from continuous asymmetric key usage to a hybrid approach: asymmetric keys for initial authentication only, then symmetric keys for all subsequent encryption operations. This parameter change dramatically reduces computational burden while maintaining security.
Solution Approach 2:
The patent extracts the computationally intensive asymmetric key operations from the continuous communication process, limiting them to initial session establishment only. The ongoing communication uses lighter symmetric key operations, reducing overall computational burden.
Data Source
AI summary
Provided is a device establishing a security session for a vehicle-to-everything (V2X) service. The device transmits a ping request message requesting establishment of the security session to a V2X server. The ping request message includes a certificate based on the Institute of Electrical and Electronics Engineers (IEEE) 1609.2 and a session identifier (ID) for the security session. The device receives, from the V2X server, a ping response message as a response to the ping request message.