Vehicle Ethernet Security Communication Protocol Simplification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing Transport Layer Security (TLS) technology is overly complex and computationally intensive for vehicle communication networks, requiring 10 steps in its handshake procedure, which is not suitable for the vehicle environment due to the large number of electronic control units (ECUs) and the need for unique asymmetric keys, leading to unnecessary delays and key management challenges.
Innovation Solution
A simplified TLS-based communication method for vehicle Ethernet networks that reduces the handshake procedure to three message exchanges, using pre-shared symmetric keys and random numbers to generate a session key for encryption, eliminating the need for asymmetric key exchange and certificate transmission, thereby simplifying key management and reducing computational load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the standard TLS handshake procedure with 10 steps is used, then security is ensured through asymmetric key exchange and certificate transmission, but the complexity and computational load increase significantly
Solution Approach 1:
The patent extracts and removes the asymmetric key exchange and certificate transmission steps from the standard TLS handshake, retaining only the essential symmetric key exchange and session key generation steps. This reduces the handshake from 10 steps to a simplified procedure suitable for vehicle ECUs, maintaining security through pre-shared symmetric keys while eliminating unnecessary complexity.
2Reliability
If the standard TLS handshake procedure with 10 steps is used, then comprehensive security verification is performed, but the communication delay increases
Solution Approach 1:
The patent applies preliminary action by pre-configuring symmetric keys in the ECUs before communication begins. These pre-shared keys eliminate the need for time-consuming asymmetric key exchange and certificate verification during the handshake, allowing immediate secure communication while maintaining security verification through the pre-established key pairs.
3Reliability
If asymmetric keys are assigned to each ECU for secure communication, then individual security is ensured, but key management becomes challenging
Solution Approach 1:
The patent applies homogeneity by using uniform symmetric keys across all ECUs in the vehicle network instead of unique asymmetric key pairs for each ECU. This standardized approach simplifies key management while maintaining security, as all ECUs follow the same key exchange procedure using pre-configured symmetric keys, eliminating the complexity of managing diverse asymmetric key pairs.
Data Source
AI summary
A security communication method of a client ECU included in a vehicle Ethernet network includes transmitting a first message generated based on a first random number generated by the client ECU, first security version information of the client ECU, and a symmetric key pre-shared with a server ECU, to the server ECU, receiving a second message generated based on a second random number generated by the server ECU, second security version information of the server ECU, and the symmetric key in response to the first message, from the server ECU, when successfully verifying the second message, storing the second random number in a memory of the client ECU, transmitting a third message to the server ECU and generating a session key based on the first random number, the second random number, and the symmetric key, and transmitting a fourth message encrypted using the session key to the server ECU.