Vehicle Control Module Hybrid Memory for Secure Manufacturing Test
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle control module testing technologies face challenges in balancing supplier production and quality processes with cybersecurity objectives, as unsecured or insufficiently secured manufacturing test software can be accessed by unauthorized entities, potentially leading to reverse engineering or modification of ECU performance.
Innovation Solution
A vehicle control module with a hybrid memory system that includes application memory, boot memory for storing low-risk RMTS code, and ephemeral test memory for high-risk RMTS code, which is temporarily accessible only from the low-risk code, ensuring secure execution and erasure of high-risk functions before vehicle delivery, and utilizing a processor to manage access and integrity checks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If manufacturing test software is made accessible for supplier production and quality processes, then productivity and manufacturing capability are improved, but security risks increase due to potential unauthorized access by unprivileged entities
Solution Approach 1:
The patent segments the RMTS functionality into two distinct code portions: first RMTS code stored in persistent boot memory with basic manufacturing functions, and second RMTS code stored in ephemeral test memory with high-risk functions. This segmentation allows the system to maintain productivity by keeping essential manufacturing capabilities permanently available while eliminating security risks by ensuring high-risk functions are temporarily available only during controlled manufacturing processes and are automatically erased afterward.
Solution Approach 2:
The patent implements preliminary actions by erasing the ephemeral test memory containing the second RMTS code before the vehicle control module is installed in a vehicle or delivered to a customer. This preliminary erasure ensures that high-risk functions are removed in advance, preventing any potential unauthorized access or misuse after the module leaves the manufacturing environment, while still allowing complete testing and manufacturing operations to occur beforehand.
2Ease of operation
If high-risk RMTS functions are permanently stored in the vehicle control module, then ease of operation for manufacturing is improved, but reliability of cybersecurity is worsened due to persistent security vulnerabilities
Solution Approach 1:
The patent applies dynamics by making the availability of the second RMTS code temporary and conditional rather than permanent. The second RMTS code is loaded into ephemeral test memory during manufacturing processes and is automatically erased after use or before vehicle delivery. This dynamic approach ensures that high-risk functions are easily accessible when needed for manufacturing operations while eliminating persistent security vulnerabilities that would exist if the same functions were permanently stored in the vehicle control module.
3Duration of action of stationary object
If all RMTS code is stored in persistent memory, then duration of action is improved (continuous availability), but loss of information increases due to retained sensitive data after manufacturing
Solution Approach 1:
The patent implements discarding and recovering by automatically erasing the second RMTS code from the ephemeral test memory after it has served its manufacturing purpose. The first RMTS code remains permanently stored in boot memory for continuous availability of basic manufacturing functions, while the second RMTS code with sensitive high-risk functions is discarded after use. This approach maintains necessary code availability while preventing loss of sensitive information through automatic erasure of high-risk functions after manufacturing processes are complete.
Data Source
AI summary
A vehicle control module is provided and includes a hybrid memory and a processor. The hybrid memory includes: application memory that stores application code; boot memory that stores a first RMTS code, where the first RMTS code includes first risk functions; and ETM that temporarily stores a second RMTS code. The second RMTS code includes second risk functions. The processor: based on an operating mode of the vehicle control module, executes the application, first RMTS and second RMTS codes; erases the ETM prior to installation of the vehicle control module in a vehicle or delivery of the vehicle; and based on the first RMTS code, permits execution of the first RMTS code prior to and subsequent to installation of the vehicle control module in the vehicle and the second RMTS code prior to installation of the vehicle control module in the vehicle or delivery of the vehicle.