Vehicle Control Unit Secure Programming Fallback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Programming control units in motor vehicles, especially during over-the-air updates, faces challenges when wireless connectivity is interrupted, leading to potential malfunction due to unverified new program codes, which may be malicious, and the inability to restore valid operation without external access.
Innovation Solution
A method where the previous program code is stored encrypted in a separate memory within the vehicle, allowing for decryption and reinstatement if the new code fails verification, ensuring a fallback option for secure operation without external logistics, using a separate control unit or external computing unit for wireless transmission and verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If new program code is transmitted via wireless connection for over-the-air programming, then programming convenience and accessibility are improved, but the risk of malicious software and inability to restore operation when connection is interrupted increases
Solution Approach 1:
The previous program code is encrypted and stored in a separate memory area before any programming operation occurs. This preliminary preparation ensures that a valid fallback program is already available in case the new program code fails verification or the wireless connection is interrupted, allowing restoration without external access.
Solution Approach 2:
An encrypted storage area acts as an intermediary between the control unit's execution memory and external programming sources. The previous program code is stored in encrypted form in this separate memory area, providing a secure buffer that protects against malicious software while enabling restoration capability.
2Object-affected harmful factors
If previous program code is stored encrypted in separate memory, then security against malicious software is improved, but memory usage and system complexity increase
Solution Approach 1:
The previous program code is extracted from the control unit's main memory and stored in a separate, encrypted memory area. This separation isolates the fallback program from potential attacks on the running system while maintaining security through encryption, without requiring complex hardware security modules.
Data Source
AI summary
A method for programming a control unit of a motor vehicle, a previous program code executed in the control unit being stored in a memory area, a new program code being written into the control unit, and a check of this new program code being carried out, the program code being executed by the control unit if the new program code is successfully verified in the course of the check, and the previous program code stored in the memory area being written from the memory area into the control unit and the previous program code being executed by the control unit if the new program code is not successfully verified in the course of the check.