Vehicle Controller Cross-Authentication Using Dynamic Session Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional vehicle controller authentication methods rely on secret seed key algorithms, which can compromise security if analyzed, and do not allow for cross-authentication independent of seed values.
Innovation Solution
A method and apparatus for cross-authentication using a pre-shared secret key, where a random number is generated and used to create session keys and response keys, enabling authentication independent of seed values, with dynamic security level control through variable repeat counts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional seed key algorithm is used for authentication, then authentication can be performed between vehicle controller and tester, but security is jeopardized if the algorithm is opened or analyzed
Solution Approach 1:
The patent extracts the secret algorithm from the authentication system and replaces it with public-key cryptography. The vehicle controller and external device perform authentication using publicly known cryptographic protocols rather than a secret shared algorithm, eliminating the security vulnerability while maintaining authentication reliability
Solution Approach 2:
The patent replaces the mechanical/algorithmic secret-sharing system with a cryptographic system based on mathematical problems. Instead of relying on a secret algorithm that must be kept hidden, the system uses public-key infrastructure where security is based on mathematical difficulty rather than algorithm secrecy
2Adaptability or versatility
If seed value-based authentication is used, then authentication can be performed, but cross-authentication independent of seed values cannot be achieved
Solution Approach 1:
The patent implements a universal authentication mechanism using public-key cryptography that can be applied across different vehicle controllers and external devices. The same cryptographic protocol enables mutual authentication between any paired devices, providing cross-authentication capability independent of device-specific seed values
Solution Approach 2:
The patent performs preliminary key pair generation and certificate establishment before authentication operations. External devices obtain authentication certificates in advance from a certification authority, enabling them to authenticate with multiple vehicle controllers without requiring seed value exchange or reconfiguration
Data Source
AI summary
A method of performing cross-authentication in a vehicle controller interworking with an external device includes: generating a random number S and transmitting the random number S to the external device according to an authentication request message received from the external device; generating a variable i using a first function having the random number S as a parameter; generating a first session key Ks using a second function having the variable i and a pre-stored secret key K as parameters; receiving a first response key from the external device; generating a second response key using a third function having the random number S, the variable i and the first session key Ks as parameters; and authenticating the external device based on whether the first response key is equal to the second response key.