Vehicle Authentication via Dynamic Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Communications from vehicles to remote assistance units are vulnerable to hacking and compromise, particularly in unfavorable or hostile territories, due to lack of effective authentication mechanisms.
Innovation Solution
A system and method utilizing a connectivity module in vehicles, with a security device and security cloud unit that employ asymmetric encryption and dynamically generated complementary keys for authentication, eliminating static credential storage and ensuring secure communication through multiple network channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If static credential storage is used for authentication, then authentication simplicity is improved, but security against hacking and compromise deteriorates
Solution Approach 1:
The patent implements dynamic credential generation where authentication keys are created temporarily for each authentication session rather than using static stored credentials. The security device and remote assistance unit generate matching authentication keys on-demand, ensuring that even if one credential is compromised, it cannot be reused. This dynamic approach maintains authentication simplicity while dramatically improving security against hacking and replay attacks.
Solution Approach 2:
The system changes the temporal parameter of credentials from static (permanent) to dynamic (temporary/session-based). Authentication keys have limited validity periods and are regenerated for each session, transforming the credential lifecycle parameters to eliminate the security vulnerability of static storage while preserving ease of use through automated key management.
2Reliability
If dynamic credential generation is implemented, then security against theft is improved, but device complexity increases
Solution Approach 1:
The patent introduces a key generation server as an intermediary that facilitates secure credential generation between the security device and remote assistance unit. This mediator handles the complex cryptographic operations and coordination required for dynamic key generation, allowing the endpoint devices to remain relatively simple while achieving high security through the centralized coordination of the intermediary server.
Solution Approach 2:
The security device and remote assistance unit autonomously generate and manage their own authentication credentials without requiring manual configuration or complex external management. The devices perform self-authentication using dynamically generated keys, reducing operational complexity while maintaining strong security through automated cryptographic operations.
3Reliability
If multiple network channels are used for authentication, then authentication security is improved, but communication complexity increases
Solution Approach 1:
The patent segments the authentication process into distinct communication phases using different network channels: initial device identification over one channel, credential generation requests over another channel, and final authentication verification over a third channel. This segmentation isolates security-critical operations to specific channels, improving overall security while managing complexity through structured multi-channel communication rather than unstructured complexity.
Data Source
AI summary
A system for authenticating communications from a vehicle to a remote assistance unit includes a connectivity module (CM) installed in the vehicle. A security device is adapted to transmit messages when the security device is within a predefined proximity of the CM. A security cloud unit is configured to validate the security device based in part on a first pair of complementary keys, including a first factory key stored by the security device and a second factory key stored by the security cloud unit. The first pair of complementary keys is configured for asymmetric encryption such that the first factory key is solely decryptable with the second factory key. The remote assistance unit is configured to authenticate an integrity of the CM based in part on a second pair of complementary keys which are dynamically generated by the security cloud unit.