In-Vehicle Gateway Cryptographic Session Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In-vehicle networks, such as CAN, are inherently insecure, especially when connected to external infrastructure, retail, or people, as they lack protection against unauthorized access and physical attacks, which can lead to data integrity and security breaches.
Innovation Solution
A secure communication protocol that uses cryptographic security parameters to establish a secure session key exchange between electronic control units and a gateway, employing a root of trust to ensure data integrity and authenticity, utilizing cryptographic operations like Elliptic Curve Menezes-Qu-Vanstone cipher suites and hash-based message authentication codes to secure data transmission across the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic security parameters and protocols are implemented to secure data transmission, then data security and integrity are improved, but device complexity and processing overhead increase
Solution Approach 1:
The patent performs cryptographic key exchange and session establishment before actual data transmission begins. The secure session key is negotiated in advance through a predefined protocol between the gateway and electronic control units, so that when data needs to be transmitted, the security framework is already in place and operational
Solution Approach 2:
The gateway serves as a cryptographic intermediary that facilitates secure communication between electronic control units. It manages the cryptographic primitives, performs key exchange operations, and establishes secure sessions on behalf of the ECUs, reducing the cryptographic burden on individual units
2Reliability
If cryptographic operations are performed to prevent unauthorized access, then security against attacks is improved, but processing time and energy consumption increase
Solution Approach 1:
The cryptographic session key exchange is performed in advance before data transmission occurs. This preliminary cryptographic handshaking establishes the security framework upfront, so that subsequent data transmission can proceed more efficiently without repeated cryptographic operations for each data packet
Solution Approach 2:
The patent employs elliptic curve cryptography which provides equivalent security to traditional cryptographic methods but with smaller key sizes and faster computation. By changing the cryptographic parameters to use elliptic curve-based primitives, the system achieves strong security with reduced processing time and lower computational overhead
Data Source
AI summary
A system and method for securing communication across an in-vehicle bus, includes establishing a connection between a gateway in a vehicle and the in-vehicle bus; generating a session key at the gateway within the vehicle; transmitting a public key certificate and ephemeral key to the gateway and an electronic control unit of the vehicle; generating a shared secret at the gateway and the electronic control unit, respectively; encrypting the session key with the shared secret at the gateway; receiving the encrypted session key through the in-vehicle bus at the electronic control unit; and decrypting the encrypted session key based on the shared secret generated at the electronic control unit.