Vehicle Measurement Data Encryption With Campaign-Specific Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for collecting measurement data from motor vehicles using cloud storage allow unauthorized access to sensitive data, compromising privacy and security, as service providers can decrypt and analyze data across multiple campaigns.
Innovation Solution
A method and system that uses campaign-specific cryptographic keys generated locally in each vehicle, encrypting measurement data symmetrically before transmission, and decrypting it centrally using campaign-specific keys, ensuring data isolation and security across different campaigns.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If measurement data is stored centrally in cloud storage for analysis, then data availability for analysis is improved, but data security and privacy are worsened as service providers can access and analyze the data
Solution Approach 1:
The patent segments the data storage system into distributed edge storage nodes rather than centralized cloud storage. Each edge device stores measurement data locally, eliminating the single point of access that enables unauthorized analysis by service providers. This segmentation maintains data availability for authorized analysis while preventing unauthorized access to the entire dataset.
Solution Approach 2:
The patent introduces encrypted data containers as an intermediary layer between the measurement data and storage infrastructure. These containers use cryptographic keys to protect the data, allowing authorized access while preventing unauthorized providers from analyzing the raw data. The intermediary encryption layer preserves data availability for legitimate purposes while blocking harmful unauthorized access.
2Quantity of substance
If measurement data from multiple campaigns is stored together in mass storage, then storage efficiency is improved, but data isolation between campaigns is worsened allowing cross-campaign data access
Solution Approach 1:
The patent segments stored data into distinct encrypted containers, each associated with a specific measurement campaign. While physically stored together in the same storage infrastructure for efficiency, each container is cryptographically isolated. This allows high storage efficiency through shared infrastructure while maintaining logical and security-based isolation between different campaigns' data.
Solution Approach 2:
The patent applies different cryptographic keying to different data containers, giving each campaign's data unique local security properties. Data from different campaigns can be stored together efficiently, but each container can only be accessed by operators with the specific cryptographic keys for that campaign, ensuring data isolation is maintained despite physical co-location.
3Device complexity
If a single cryptographic key is used for all measurement campaigns, then system complexity is reduced, but security is worsened as operators can access data from campaigns they shouldn't access
Solution Approach 1:
The patent segments the cryptographic keying system into campaign-specific keys rather than using a single master key. Each measurement campaign has its own cryptographic key, which is managed separately. This increases cryptographic complexity slightly but dramatically improves security by ensuring that operators authorized for one campaign cannot access data from other campaigns, as each key is independently controlled.
4Productivity
If measurement data is transmitted via communication channels, then data collection capability is improved, but data security during transmission is worsened allowing potential interception and analysis
Solution Approach 1:
The patent introduces encrypted data containers as intermediaries that wrap the measurement data before transmission. These containers use cryptographic protection to prevent interception and analysis during communication between edge devices and central systems. The intermediary encryption layer maintains data collection productivity while blocking harmful interception attempts.
Solution Approach 2:
The patent applies encryption to measurement data before transmission occurs, as a preliminary protective action. By encrypting data in advance at the source before it enters the communication channel, the system maintains full data collection capability while preventing any potential interception or analysis during transmission, as the data is already protected before exposure to communication risks.
Data Source
Figure 1
Figure 2
AI summary
The invention relates to a method for carrying out measurement campaigns by means of motor vehicles (12). A respective key derivation module (43) is operated by a respective local computer system (14) in the respective motor vehicle (12), which key derivation module generates a campaign-specific cryptographic key (44) for the respective measurement campaign, and control software (15) is provided in the motor vehicles (12), which control software is executed in the local computer system (14) and is set up a) for carrying out measurements (16) of measurement data (17) in accordance with campaign configuration data (26) of the respective measurement campaign and b) for encrypting the measured measurement data (17) in the local computer system (14) by means of the campaign-specific cryptographic key (44) using a predetermined symmetrical encryption method (45) and c) for transmitting the encrypted measurement data (17) to a central computer system (11).