Vehicle Network Authentication with Rolling Shared Key IDs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle network security systems are vulnerable to hacking, particularly when pre-shared key (PSK) technology is compromised, allowing unauthorized access and control of vehicles.
Innovation Solution
Implement a method involving controllers that increment and update shared key IDs after successful authentication, verify key IDs using random numbers, and activate a protection mode upon consecutive authentication failures to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If pre-shared key (PSK) technology is used for vehicle authentication, then authentication can be performed, but security is compromised when the pre-shared key is cracked allowing unauthorized access
Solution Approach 1:
The patent implements dynamic key management where shared key IDs are automatically incremented after each successful authentication. This transforms the static PSK system into a dynamic one where keys change over time, preventing attackers from using cracked keys for repeated unauthorized access attempts.
Solution Approach 2:
The system performs preliminary validation by comparing the received shared key ID with the stored shared key ID before allowing authentication. This preliminary check prevents unauthorized access attempts using cracked keys from progressing further into the authentication process.
2Object-affected harmful factors
If shared key ID is incremented after authentication to enhance security, then security against repeated hacking is improved, but key management complexity increases
Solution Approach 1:
The authentication system automatically performs key ID incrementing and updating without requiring external intervention. The controller autonomously manages the key lifecycle by incrementing the shared key ID in both the authentication request and storage after successful authentication, simplifying the overall key management process despite the enhanced security measures.
3Reliability
If validation of shared key ID is performed by comparing with stored key ID, then authentication security is enhanced, but authentication process time increases
Solution Approach 1:
The system performs a focused validation by comparing only the critical shared key ID parameter rather than verifying the entire authentication data set. This partial verification approach provides sufficient security validation while minimizing the time required for the authentication process.
Data Source
AI summary
A vehicle includes a first controller that requests a first authentication process by transmitting a previously stored first shared key ID, and a second controller that verifies validity of a shared key ID by comparing a previously stored second shared key ID with the first shared key ID according to the request for the first authentication process, and performs the first authentication process using the shared key ID of which validity has been verified, in which, when an identity is authenticated through the first authentication process, the first controller increments a value of the first shared key ID by a preset value and stores the value of the first shared key ID and the second controller increments a value of the second shared key ID by the preset value and stores the value of the second shared key ID.