Vehicle ECU Authentication Using Dynamic Trip Counters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle communication networks are vulnerable to injection attacks where unauthorized sources can inject false data, leading to incorrect vehicle operations, as some authentication techniques are susceptible to attacks by intruder devices that know the message authentication code algorithm.
Innovation Solution
A system that increments global and reset counters at vehicle startup and during operations to generate unique message authentication codes, and upon detecting a new ECU, updates the global trip counter to prevent intruder devices from determining the message authentication code, ensuring authentic data communication between ECUs and the vehicle computer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional message authentication codes are used in vehicle communication networks, then data authentication is provided, but the system becomes vulnerable to injection attacks by intruder devices that know the authentication algorithm
Solution Approach 1:
The patent applies dynamics by making the message authentication code dynamic through the incorporation of trip counters. Instead of using a static authentication mechanism, the system dynamically generates unique authentication codes for each message by combining the authentication algorithm with incrementing trip counter values. This dynamic approach prevents intruder devices from predicting or reproducing authentication codes even if they know the algorithm, thereby resolving the vulnerability to injection attacks while maintaining reliable data authentication.
2Reliability
If trip counters are synchronized across ECUs to prevent injection attacks, then security is improved, but device complexity increases due to counter synchronization requirements
Solution Approach 1:
The patent applies segmentation by dividing the authentication system into independent ECU units, each maintaining its own trip counter. Rather than requiring centralized synchronization across all ECUs, each ECU independently generates authentication codes using its local counter. This segmentation approach maintains security through unique authentication codes while avoiding the complexity of inter-ECU synchronization mechanisms.
Solution Approach 2:
The system applies self-service by enabling each ECU to independently manage its own trip counter and generate its own message authentication codes without requiring external synchronization. Each ECU autonomously increments its counter and uses it to authenticate its messages, eliminating the need for complex centralized coordination while maintaining security against injection attacks.
Data Source
AI summary
A vehicle communication network is monitored to detect a plurality of electronic control units (ECUs). Upon identifying a new ECU in the plurality of ECUs, a highest ECU trip counter is determined from the plurality of ECUs. A global trip counter stored in the memory is updated based on the highest ECU trip counter. The updated trip global trip counter is greater than the highest ECU trip counter. Then a replacement synchronization message is provided to the plurality of ECUs on the vehicle communication network. The replacement synchronization message includes the updated global trip counter.