Vehicle Data Communication Multicast Key Partitioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for communicating vehicle data face challenges in ensuring data integrity and real-time transmission, particularly for vehicles with low computing power, due to high computational requirements for encryption and key distribution, which can lead to delayed processing times and increased security risks.
Innovation Solution
A method that generates a multicast key for vehicles, allowing for the creation of hash and encryption keys based on unique identification information, enabling the partitioning and authentication of vehicle data using message authentication codes (MAC) and stream ciphers for efficient encryption and decryption, facilitating real-time communication even for vehicles with low computing power.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If block cipher encryption is applied to ensure high security, then encryption level is improved, but processing time increases and real-time transmission becomes difficult for vehicles with low computing power
Solution Approach 1:
The patent changes the encryption parameter from block cipher to stream cipher, which processes data continuously rather than in fixed blocks, significantly reducing processing time while maintaining security. This parameter change enables real-time encryption for vehicles with limited computing power without sacrificing encryption effectiveness.
Solution Approach 2:
The patent segments the encryption process by using lightweight cryptographic algorithms that divide the data processing into smaller, more manageable operations suitable for low-power devices. This segmentation allows the encryption to be performed efficiently on vehicles with constrained computational resources.
2Reliability
If multiple vehicles are connected to the external device with individual encryption keys, then security is improved, but key distribution time increases proportionally with the number of vehicles
Solution Approach 1:
The patent implements a universal key distribution mechanism where a single encryption key is distributed to multiple vehicles simultaneously. This external device generates one key that can be used by multiple vehicles, eliminating the need for individual key distribution to each vehicle while maintaining security through the key management system.
Solution Approach 2:
The patent merges the key distribution process by distributing a single encryption key to multiple vehicles at once rather than distributing separate keys to each vehicle. This combining of key distribution operations significantly reduces the time required for key management in multi-vehicle systems while preserving security through centralized key control.
3Power
If high computing power semiconductor devices are provided in vehicles for block cipher processing, then encryption capability is improved, but device complexity and cost increase
Solution Approach 1:
The patent employs lightweight cryptographic algorithms that can be implemented using simple, low-cost semiconductor devices with minimal computing power. These simplified encryption methods replace the need for complex, high-power processors, allowing vehicles to use more affordable and energy-efficient hardware while still achieving adequate security through the stream cipher approach.
Data Source
AI summary
There is provided a method of communicating vehicle data for vehicle control. The method includes (a) generating a multicast key and transmitting it to the vehicle in a multicast manner, (b) obtaining a hash key and an encryption key based on the multicast key and unique identification information of the vehicle, and (c) obtaining vehicle data by signal processing and combining first to n-th partition data of the vehicle data transmitted from the vehicle (“n” is an integer equal to or greater than 2). The i-th partition data includes i-th serial number information, an i-th MAC chaining value, i-th payload information, and an i-th MAC tag (“i” is an integer from 1 to n). The method further includes (c-1) receiving the i-th partition data, (c-2) authenticating the i-th partition data, and (c-3) decrypting the i-th payload information using the encryption key when the i-th partition data is authenticated.