In-Vehicle Software Update Encryption Using Vehicle Identity Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key management methods for in-vehicle electronic devices require new devices for storing user secret keys, leading to risks of erroneous settings and increased management load due to limited storage capacity and the need for frequent key updates.
Innovation Solution
An information processing device that uses a unique number identifying a vehicle or in-vehicle electronic device as a decryption key, generating encrypted update software through attribute-based encryption, eliminating the need for additional storage and reducing key management load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a user secret key is stored in a separate device (e.g., IC card) for securing in-vehicle function access, then security is improved, but device complexity and key management load increase
Solution Approach 1:
The patent merges the user secret key storage function into the in-vehicle electronic device itself, eliminating the need for separate external devices like IC cards. The key is stored in a secure storage region within the electronic device, combining authentication and execution functions into a single integrated system, thereby reducing device complexity while maintaining security
Solution Approach 2:
The in-vehicle electronic device is designed to perform multiple functions: it serves as both the execution environment for in-vehicle functions and the secure storage location for user secret keys. This multi-functional design eliminates the need for dedicated separate key storage devices, reducing overall system complexity
2Reliability
If the user secret key is updated frequently to maintain security, then security is improved, but the risk of erroneous setting and key management load increase
Solution Approach 1:
The user secret key is pre-stored in the secure storage region of the in-vehicle electronic device before the actual in-vehicle function is activated. This preliminary setup eliminates the need for frequent key updates and reduces the risk of erroneous settings during operation, as the key is already in place and properly configured
Solution Approach 2:
The system performs self-verification by having the in-vehicle electronic device itself verify the user secret key stored in its secure storage region against the authentication information received. This self-service mechanism reduces reliance on external key management infrastructure and minimizes opportunities for erroneous settings
3Adaptability or versatility
If multiple keys are stored in the in-vehicle electronic device to support SOTA and new functions, then functionality is improved, but storage capacity is exceeded
Solution Approach 1:
The patent segments the key management approach by using different types of cryptographic keys for different purposes: a root key stored securely in the electronic device for verifying software authenticity, and separate encryption keys for SOTA updates. This segmentation allows efficient use of storage capacity while supporting multiple functions
Solution Approach 2:
The system changes the parameter of key storage by utilizing a secure storage region with specific capacity constraints, which drives the design toward more efficient key management. By carefully selecting and managing a minimal set of essential keys rather than storing multiple redundant keys, the system adapts to limited storage capacity while maintaining necessary functionality
Data Source
AI summary
An information processing device according to the present invention includes: a storage unit that stores a unique number that identifies a vehicle or an in-vehicle electronic device; a vehicle selection unit that selects a vehicle to which update software is applied; a key generation unit that generates a secret key using, as a public key, at least one of the unique number of the selected vehicle or the in-vehicle electronic device mounted on the vehicle; an encryption unit that generates encrypted update software by encrypting the update software using the secret key; and a distribution unit that distributes the encrypted update software to the vehicle.