Vehicle Gateway Dynamic Key Generation for Secure Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Recent vehicles face security threats due to hacking through communication ports other than the OBD port, particularly with the integration of IP technologies, as existing cryptographic techniques are not sufficient to prevent unauthorized access and data wiretapping.
Innovation Solution
A method and system that dynamically generates a new public key for each network and a new ID for each controller upon vehicle startup, using a vehicle gateway to encrypt messages and maintain secure communication by updating routing tables and using ghost messages to randomize ID allocation, thereby enhancing security without altering message priorities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If symmetric cryptographic techniques are used for communication between controllers, then operation speed is improved, but security is worsened due to vulnerability to hacking through communication ports
Solution Approach 1:
The patent implements dynamic key generation where cryptographic keys are continuously changed based on ignition cycles and message counters. Instead of using static symmetric keys, the system generates new public key pairs for each ignition cycle and updates encryption keys with each message transmission, making the cryptographic system adaptive and resistant to wiretapping while maintaining communication speed through efficient key management.
Solution Approach 2:
The patent changes cryptographic parameters dynamically by generating different key pairs for each ignition cycle and updating encryption keys based on message counters. The system transitions from fixed cryptographic parameters to variable ones that change with each communication session, thereby enhancing security while preserving operational efficiency through structured key rotation.
2Reliability
If authentication procedures are implemented for external diagnostic devices, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent creates a universal authentication framework that handles multiple authentication scenarios (external diagnostic devices, controller-to-controller communication, gateway authentication) through a single standardized public key infrastructure. This multi-functional authentication system manages different authentication requirements using consistent cryptographic principles, reducing overall system complexity despite enhanced security capabilities.
3Adaptability or versatility
If communication ports are expanded for enhanced functionality, then versatility is improved, but security is worsened due to increased hacking vulnerability
Solution Approach 1:
The patent segments the communication system into multiple isolated networks (CAN, LIN, Ethernet, FlexRay) with dedicated gateways for each. Each network segment has its own cryptographic key pairs and authentication mechanisms, preventing lateral movement of attackers. This segmentation allows diverse communication functionalities while containing security risks within individual network segments.
Solution Approach 2:
The patent introduces gateways as intermediary devices that mediate communication between different networks and external devices. These gateways implement authentication and encryption, acting as security buffers that protect the internal vehicle network while enabling versatile external communication through standardized interfaces.
Data Source
AI summary
A method of controlling secure vehicle communication in a vehicle gateway includes: detecting whether a vehicle is started; generating a new public key for each network connected to the vehicle gateway for message encryption upon detecting that the vehicle is started; transmitting a first message including the new public key; allocating a new identification (ID) to each controller connected to the vehicle gateway with reference to a stored routing table for message routing between controllers upon detecting that the vehicle is started; and transmitting a second message including the new ID.