Vehicle Controller Authentication via Public Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for managing vehicle controllers lack real-time security due to the exposure of identifiers during communication, making them vulnerable to malicious hacking and allowing non-genuine controllers to be used.
Innovation Solution
Implementing a method that uses public key encryption for authenticating controllers, where a gateway transmits a random number encrypted with the controller's public key, and the controller responds with an electronic signature, ensuring only genuine controllers can communicate by sharing a symmetric key that is periodically replaced.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key encryption algorithm is used to compel use of genuine controllers, then security is improved, but computational capability requirements exceed current vehicle controller capabilities
Solution Approach 1:
The authentication process is segmented into two distinct phases: (1) initial certificate exchange and public key distribution during controller installation, and (2) periodic lightweight authentication during normal operation using pre-shared symmetric keys. This segmentation allows heavy cryptographic operations to be performed only once during setup, while routine security checks use computationally lightweight methods.
Solution Approach 2:
The system performs preliminary authentication actions during controller installation and certification, where public keys and certificates are exchanged and stored. This preliminary setup enables subsequent authentication operations to use pre-computed cryptographic materials (symmetric keys derived from public keys), avoiding the need for repeated heavy public key operations during normal vehicle operation.
2Ease of operation
If identifier-based management method is used, then controller identification is simplified, but identifiers are exposed to malicious hackers during communication
Solution Approach 1:
The patent introduces cryptographic intermediaries (public keys and digital certificates) that mediate between the simple identifier concept and secure communication requirements. Instead of transmitting plain identifiers, the system uses public keys as intermediaries to establish secure channels, allowing identifiers to remain simple while adding a layer of cryptographic protection against exposure.
Solution Approach 2:
The system creates and uses digital copies of controller identity in the form of cryptographic certificates and public keys. These cryptographic copies serve as secure representations of the controller's identity, allowing the system to work with simple identifiers while the cryptographic copies protect against identifier exposure during communication.
3Reliability
If anti-theft system is used to prevent theft of controller, then controller security is improved, but system can be destroyed or disassembled requiring additional cost
Solution Approach 1:
The patent replaces mechanical/physical anti-theft mechanisms (which can be destroyed or disassembled) with cryptographic software-based authentication. Instead of relying on physical security features that can be tampered with, the system uses mathematical cryptography to verify controller authenticity, eliminating vulnerability to physical destruction while maintaining security.
Data Source
AI summary
The present disclosure relates to a method of managing a controller with reliability and, more particularly, to authentication and data exchange during installation/use/removal of a vehicle controller, a gateway and a tester using an encryption algorithm. A method of authenticating a controller by a gateway in a vehicle includes: transmitting a first message including a first random number to the controller when a first condition is satisfied; receiving, from the controller, a second message including the first random number to which an electronic signature has been attached through a private key of the controller; decrypting the first random number having the electronic signature attached thereto using a public key of the controller; and transmitting, to the controller, a symmetric key encrypted using the public key of the controller when the decryption has been successfully performed.