Vehicle Control Device Authentication with Manipulation Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current authentication methods for control devices in vehicles are vulnerable to spoofing attacks, which can lead to manipulation of safety-critical systems, especially in highly automated driving scenarios, where redundancy systems may not detect failures extending beyond individual chips or subsystems.

Innovation Solution

A method for authentic data transmission between control devices using distinct cryptographic keys for each device, with a monitoring module sending status information to detect manipulation and diverting key access to prevent unauthorized communication, ensuring secure authentication and countermeasures against detected manipulations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication methods are used for control device communication, then data authenticity is improved, but vulnerability to spoofing attacks increases

Engineering Contradiction:

Improvedata authenticityVSAvoidspoofing attack vulnerability

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system segments authentication into multiple independent layers: message authentication codes for data integrity, digital signatures for sender verification, and certificate validation for identity confirmation. This multi-layered segmentation prevents single-point failure and blocks spoofing attacks at different levels of the authentication process.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system performs preliminary validation of digital certificates and public keys before establishing communication channels. By pre-verifying the authenticity of authentication credentials and checking them against trusted certificate authorities, the system prevents unauthorized devices from initiating spoofing attacks in the first place.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If redundancy systems are implemented for safety functions, then system reliability is improved, but detection of systematic manipulation decreases

Engineering Contradiction:

Improvesystem reliabilityVSAvoidmanipulation detection capability

Core Design Contradiction:

ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The system implements continuous feedback mechanisms where control devices monitor and verify each other's messages in real-time. Received messages are validated against expected patterns, and any deviations trigger alert signals to the monitoring system, enabling detection of systematic manipulations that affect multiple redundancy components.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The authentication system combines multiple cryptographic methods (message authentication codes, digital signatures, certificate validation) into a composite security framework. This composite approach enables the system to detect manipulations that would bypass individual authentication layers, providing comprehensive monitoring capability across the redundancy system.

Inventive Principle:

Principle #40Composite materials

3Reliability

If cryptographic authentication is implemented between control devices, then communication security is improved, but computing capacity requirements increase

Engineering Contradiction:

Improvecommunication securityVSAvoidcomputing capacity

Core Design Contradiction:

ReliabilityVSPower

Solution Approach 1:

The system applies different levels of cryptographic authentication to different communication scenarios. For routine communications between trusted devices, lighter authentication methods are used, while more rigorous authentication is applied only when needed for critical safety functions or unknown devices, optimizing the balance between security and computing resource consumption.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS12255985B2Method for authentic data transmission between control devices of a vehicle, arrangement with control devices, computer program, and vehicle

Publication Date: 2025.03.18 VOLKSWAGEN AG

AI summary

A method is disclosed for authentic data transmission between control devices of a vehicle in which messages which are sent from a first control device to a receiver control device and are provided with a first cryptographic key for authentication, and messages that are sent from a second control device to the receiver control device are provided with a second cryptographic key for authentication. First status information provided with a third cryptographic key is sent from a monitoring module of the first control device to the receiver control device and second status information provided with the second cryptographic key is sent from the second control device to the receiver control device. The first status information and second status information are received by the receiver control device. The received first and second status information is evaluated to detect a manipulation of the first control device.