Vehicle Diagnostic Tool Challenge-Response Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle diagnostic systems face security threats due to unfettered access to electronic systems, particularly as vehicles become increasingly connected, necessitating measures to restrict access to important data and control systems while ensuring access for local, authorized individuals.

Innovation Solution

A challenge-response authentication scheme is implemented, where a vehicle diagnostic tool must locally authenticate with the vehicle by presenting a user with a challenge, such as an alphanumeric code or local action, and receiving a response to grant access to the communication bus, ensuring only authorized physical devices can interface with the vehicle's systems.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If wireless communication protocols are used to allow remote diagnostic tools to communicate with the vehicle, then diagnostic service accessibility is improved, but security vulnerability increases

Engineering Contradiction:
Improvediagnostic service accessibilityVSAvoidsecurity vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a challenge-response authentication mechanism as an intermediary between the diagnostic tool and vehicle systems. The vehicle's master controller acts as a mediator that verifies the authenticity of diagnostic tools before granting communication bus access, preventing unauthorized remote access while maintaining legitimate diagnostic services

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If unfettered access is provided to electronic systems for diagnostic purposes, then diagnostic capability is improved, but system security deteriorates

Engineering Contradiction:
Improvediagnostic capabilityVSAvoidsystem security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent implements differentiated access control where different levels of access are granted based on authentication status. Authorized diagnostic tools receive full access to read and write vehicle systems, while unauthorized devices are completely blocked. This local quality approach ensures diagnostic capability for legitimate users while maintaining security against unauthorized access

Inventive Principle:
Principle #3Local quality

3Reliability

If authentication mechanisms are implemented to restrict access to vehicle systems, then security is improved, but access complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidaccess complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The challenge-response authentication system is fully automated and self-service oriented. The vehicle's master controller automatically generates challenges, verifies responses, and grants or denies access without requiring manual intervention from technicians or administrators. This automation maintains high security while minimizing the perceived complexity for end users

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS8832825B2Challenge-response methodology for securing vehicle diagnostic services
Publication Date: 2014.09.09 GM GLOBAL TECHNOLOGY OPERATIONS LLC
  • US8832825B2 patent drawing
  • US8832825B2 patent drawing

AI summary

A method for locally authenticating a vehicle diagnostic tool with a vehicle using a challenge-response authentication scheme includes: receiving a pairing request from the vehicle diagnostic tool; presenting a user with a challenge through at least one of an audio system and an LCD display associated with the vehicle; receiving a response to the challenge from a user; and authenticating the vehicle diagnostic tool if the response from the user is identical to an expected response.