Vehicle Encryption Communication Using Instruction Structure Key
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicle systems face security issues due to exposure of data during communication between electronic control units and Smart Key Systems, primarily using the Controller Area Network (CAN) method, which lacks effective encryption.
Innovation Solution
A vehicle system employing encryption communication using a processor-generated Instruction Structure Key (ISK) based on a pin code, with hashing through Secure Hash Algorithm 256, and involving multiple processors for secure data transmission and reception, ensuring that only matching random numbers determine the encryption key for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If CAN communication method is used for data transmission between ECUs and Smart Key System, then communication simplicity and ease of operation are improved, but data security and protection against exposure are worsened
Solution Approach 1:
The patent introduces an encryption intermediary layer that mediates between the CAN communication bus and the data being transmitted. The encryption module encrypts data before transmission and decrypts received data, acting as a security mediator that maintains communication simplicity while ensuring data protection. This resolves the contradiction by adding security without complicating the communication protocol itself.
Solution Approach 2:
The patent changes the parameter of data representation by applying encryption algorithms to transform plaintext into ciphertext. This parameter change occurs at the data level rather than the communication protocol level, maintaining CAN bus simplicity while fundamentally altering the data state to provide security. The encryption/decryption process changes data parameters without affecting communication structure.
2Reliability
If encryption communication is implemented using multiple processors and key generation algorithms, then data security is improved, but device complexity and manufacturing difficulty are worsened
Solution Approach 1:
The patent implements a universal encryption module that can be integrated into existing ECU architectures without requiring completely separate security systems. The same encryption framework is applied across multiple ECUs and communication channels, allowing a single security solution to serve multiple functions and reduce overall system complexity despite the added security capabilities.
Solution Approach 2:
The system performs self-service through automatic key generation and management. The ECUs automatically generate encryption keys and manage cryptographic operations without requiring external security infrastructure or manual configuration. This self-service capability reduces the need for additional external security devices and simplifies deployment despite the cryptographic complexity.
3Use of energy by moving object
If power consumption is reduced during momentary power supply shortages, then energy efficiency is improved, but communication capability and system functionality are worsened
Solution Approach 1:
The patent implements periodic communication cycles with active and dormant phases. During normal operation, communication occurs at regular intervals. During power supply shortages, the system transitions to a dormant phase with reduced or suspended communication, consuming minimal power. This periodic action allows the system to balance communication needs with power conservation requirements.
Solution Approach 2:
The communication system dynamically adjusts its operation based on power availability. When power supply is sufficient, full communication functionality is maintained. When power shortages occur, the system dynamically reduces communication activity to minimal essential operations. This dynamic adaptation allows the system to optimize between communication capability and power consumption in real-time based on power conditions.
Data Source
AI summary
A vehicle includes: at least one memory configured to store at least one default Instruction Structure Key (ISK), a generated ISK, and a pin code of the vehicle; and at least one processor. The at least one default ISK may include a first default ISK and a second default ISK. The processor may generate a random number using the first default ISK, receive the second default ISK encrypted with the generated ISK generated based on the pin code, and determine the generated ISK as an encryption key for encryption communication of the vehicle when the generated random number and the random number corresponding to the second default ISK are the same.