Vehicle Controller Key Derivation for Secure In-Vehicle Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Vehicle security systems face vulnerabilities due to shared keys among vehicles, making them susceptible to hacking and attacks, as a compromised key can affect multiple vehicles.
Innovation Solution
A vehicle system that generates a unique key for each vehicle using a vehicle identification number (VIN) and a shared key, employing a key derivation function (KDF) to ensure each vehicle has a distinct key for secure communication among controllers and with a server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the same key is shared among multiple vehicles for communication, then communication efficiency and simplicity are improved, but security vulnerability increases as key exposure in one vehicle compromises all vehicles
Solution Approach 1:
The patent segments the single shared key into multiple unique keys, where each vehicle possesses a distinct key derived from its own identification information. This segmentation eliminates the security vulnerability of shared keys while maintaining communication efficiency through the use of vehicle-specific authentication credentials.
Solution Approach 2:
The patent implements local quality by assigning different key characteristics to different vehicles based on their individual identification information. Each vehicle's key is locally adapted to its specific identity, ensuring that key exposure in one vehicle does not compromise others, while still enabling efficient vehicle-to-vehicle and vehicle-to-server communication.
2Reliability
If a unique key is generated for each vehicle using vehicle identification information, then security is improved by preventing replay and brute force attacks, but system complexity increases due to key management requirements
Solution Approach 1:
The patent implements self-service by enabling each vehicle to autonomously generate its unique key using its own identification information and a shared secret stored in its controller. This eliminates the need for complex centralized key distribution systems, as each vehicle independently creates its own security credentials without requiring external intervention.
Solution Approach 2:
The patent applies preliminary action by pre-storing a shared secret key in the vehicle controller during manufacturing. This preliminary setup enables the vehicle to later derive its unique operational key using its identification information, simplifying the key management process while maintaining strong security without requiring complex real-time key distribution infrastructure.
Data Source
AI summary
A vehicle system, a server, and a vehicle communication security method are provided. The vehicle system includes a first controller that transmits vehicle identification information from other controllers in a vehicle and a second controller and a third controller among the other controllers that generates and stores a unique key of the vehicle using the vehicle identification information received from the first controller and a previously stored shared key. The second controller and the third controller perform communication based on the unique key.