Vehicle Command Security via Push Server Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle-oriented service systems lack the ability to securely transmit commands to vehicles at any timing, and current solutions do not adequately address unauthorized access and control issues, compromising security and user experience.
Innovation Solution
A vehicle-oriented service providing system that includes an in-vehicle device, a vehicle information server, and a push information server, where commands are encrypted based on a security level and transmitted through a push information server, ensuring that only authorized commands are executed, thereby enhancing security and flexibility in command transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If commands are transmitted from information center to vehicle at any timing, then responsiveness and timeliness of service is improved, but security risk from unauthorized access increases
Solution Approach 1:
A push information server is introduced as an intermediary between the vehicle information server and the in-vehicle device. This mediator receives commands from the vehicle information server, manages push notifications, and forwards them to the in-vehicle device, thereby enabling asynchronous command transmission while maintaining security through centralized control and authentication mechanisms.
Solution Approach 2:
Security levels are predetermined and assigned to each command type before transmission. The in-vehicle device stores multiple security levels in advance, and when a command is received, the device compares the command's security level with the predetermined levels to determine whether to execute. This preliminary preparation of security criteria enables rapid, secure decision-making without compromising real-time responsiveness.
2Reliability
If security level verification is performed for each command, then unauthorized operations are prevented, but processing time and system complexity increase
Solution Approach 1:
The security mechanism uses parameter-based verification where each command is associated with a security level parameter. The in-vehicle device stores multiple predetermined security level parameters and simply compares the command's security level parameter against these stored values. This parameter-based approach simplifies the verification process compared to complex authentication protocols, reducing processing time while maintaining security.
3Adaptability or versatility
If multiple security levels are predetermined and stored in in-vehicle device, then flexible security control is achieved, but memory requirement and device complexity increase
Solution Approach 1:
Different security levels are assigned to different command types based on their specific security requirements. Critical commands (e.g., vehicle operation control) are assigned higher security levels, while less critical commands (e.g., information inquiry) receive lower security levels. This localized security approach ensures that only the necessary amount of security data is stored and processed for each specific function, optimizing memory usage while maintaining appropriate security control.
Data Source
AI summary
A vehicle-oriented service providing system includes an in-vehicle device and configured to receive commands applied to a control device inside the vehicle, a vehicle information server configured to transmit the commands to the in-vehicle device, and a push information server configured to mediate the transmission of the commands from the vehicle information server to the in-vehicle device. In the commands, a security level prescribed in advance for each of the commands is set. The vehicle information server performs encryption corresponding to the security level on the commands, and requests the push information server for transmission. The in-vehicle device is configured to wait for commands from the push information server. The in-vehicle device is configured to decrypt the received encrypted commands, and solely when encryption corresponding to a security level equal to or higher than the security level set in advance in the commands is performed, execute the commands.