Motor Vehicle Authentication Using Dynamic Key Storage

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing authentication monitoring systems for motor vehicles, particularly those using uni-directional communication channels like BTLE and NFC, are vulnerable to hacker attacks due to insufficient key storage security in integrated switching circuits, which may not be adequately secured against unauthenticated access.

Innovation Solution

Incorporating storage means within communication apparatus to store digital keys and information from past communications, allowing for secure authentication monitoring by using BTLE and NFC standards, where the information changes with each communication, enabling secure access only within a specific time frame and updating keys dynamically after successful authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If integrated switching circuits are used for authentication and encryption in motor vehicles, then device complexity is reduced and ease of manufacture is improved, but security against unauthenticated access deteriorates

Engineering Contradiction:
Improveease of manufactureVSAvoidsecurity
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The system separates authentication and encryption functions into distinct modules: integrated switching circuits handle communication protocols while separate authentication means and encryption means handle security functions. This segmentation allows each component to be optimized independently - the integrated circuits for ease of manufacture and the separate security modules for enhanced protection against unauthenticated access.

Inventive Principle:
Principle #1Segmentation

2Reliability

If stronger encryption algorithms like AES are used, then security is improved, but device complexity and manufacturing difficulty increase

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication means and encryption means are designed as universal components that can implement multiple encryption algorithms including AES. These multi-functional security modules can adapt to different security requirements without requiring separate hardware for each algorithm, thus maintaining security while controlling device complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Device complexity

If digital keys are stored in integrated switching circuits, then device complexity is reduced, but security against unauthenticated access deteriorates

Engineering Contradiction:
Improvedevice complexityVSAvoidsecurity
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

Digital keys are extracted from the integrated switching circuits and stored in separate, dedicated storage means within the authentication module. This extraction isolates the keys from general-purpose circuitry that may be vulnerable to unauthenticated access, while the dedicated storage can implement specialized security measures such as secure enclaves or hardware security modules.

Inventive Principle:
Principle #2Taking out (Extraction)

4Reliability

If information from past communications is stored and validated, then security is improved, but loss of time due to validation checks increases

Engineering Contradiction:
ImprovesecurityVSAvoidloss of time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

Information from past communications is pre-processed and stored in an accessible format during the communication itself. Validation of this stored information is performed as a quick reference check rather than intensive real-time analysis, allowing security verification to occur with minimal time overhead while still providing enhanced security through historical communication validation.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8923514B2Apparatus and method for authentication for motor vehicles
Publication Date: 2014.12.30 HELLA GMBH & CO KGAA
  • US8923514B2 patent drawing
  • US8923514B2 patent drawing
  • US8923514B2 patent drawing

AI summary

An arrangement on monitoring of authentication, in particular for motor vehicles, includes a first communication apparatus and at least a second communication apparatus, between which a wireless communication channel can be set up. The communication apparatus items have means for authentication and encryption, with which the exchangeable data may be encrypted via the communication channel. The items of communication apparatus have storage means in which one of the digital keys usable for authentication and encryption can be stored, and in that in the storage device there is either in addition to the digital key and/or in the individual key at least one piece of information regarding at least one past communication between the first communication apparatus and the second apparatus that can be stored in memory.