Vehicle Remote Command Validity Control for Secure Operation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing remote operation systems for vehicles lack adequate security measures, allowing unauthorized access to unencrypted data and potential unintended vehicle operations due to communication failures or system malfunctions.
Innovation Solution
A service providing apparatus that includes a microprocessor and memory to manage remote operation instructions with validity periods and access locks, ensuring secure and timely execution of commands by in-vehicle terminals, and an authentication unit to verify the validity of the instructions and manage access locks and access keys to ensure secure and timely execution of the instructions and manage access to the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted with a predetermined encryption key, then security is improved, but access control and authentication complexity increase
Solution Approach 1:
An authentication server is introduced as an intermediary between the terminal device and the data processing system. The authentication server manages encryption keys and validates authentication information, thereby improving security without increasing the complexity at the terminal device level. The server acts as a mediator that handles the cryptographic operations and key management centrally.
Solution Approach 2:
The authentication and key management functions are extracted from the terminal device and relocated to a dedicated authentication server. This separation allows the terminal device to focus on its primary function while the server handles the complex authentication logic, improving security without burdening the terminal with excessive complexity.
2Ease of operation
If remote operation instructions are transmitted without validity period limits, then ease of operation is improved, but reliability deteriorates due to potential unintended operations
Solution Approach 1:
A validity period is predetermined and attached to each remote operation instruction before transmission. This preliminary action ensures that instructions automatically expire after a specified time, preventing unintended operations while maintaining ease of use during the valid period. The validity period is set in advance based on the operation type and requirements.
Solution Approach 2:
The validity period of remote operation instructions is made dynamic rather than static. Different operation types receive different validity periods based on their risk levels and requirements. High-risk operations have shorter validity periods, while low-risk operations have longer validity periods, optimizing both safety and convenience.
3Reliability
If processing state information is continuously monitored, then reliability is improved, but energy consumption increases
Solution Approach 1:
Instead of continuous monitoring, the system uses periodic monitoring at key checkpoints. The terminal device monitors processing state information at predetermined intervals or at specific events (e.g., when processing completes or encounters an error). This periodic approach maintains reliability for detecting processing failures while significantly reducing energy consumption compared to continuous monitoring.
Solution Approach 2:
The system enables self-service monitoring where the terminal device autonomously determines when monitoring is necessary based on processing state changes. The device monitors itself for critical events without requiring constant external supervision, reducing energy consumption while maintaining reliability for detecting processing failures.
Data Source
AI summary
A service providing apparatus includes a microprocessor and memory coupled to the microprocessor. The microprocessor performs: receiving operation instruction information transmitted from a user terminal and including an instruction of a remote operation for a vehicle; determining a validity period of the instruction, based on a type of the instruction included in the operation instruction information; and transmitting vehicle instruction information including the operation instruction information and validity period information to the in-vehicle terminal. The memory stores processing state information indicating a progress situation of processing performed by the in-vehicle terminal, based on the vehicle instruction information. The microprocessor further performs, unless processing result information indicating a result of the processing performed based on the vehicle instruction information from the in-vehicle terminal within the instruction validity period is received, updating the processing state information to information indicating that performing the processing is stopped.