Symmetric Key Distribution for Vehicle Component Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing public key infrastructure (PKI) systems for serviceable electronic components in software-defined vehicles lack efficient methods for authenticating and securely communicating between components, particularly in scenarios where internet connectivity is not available.
Innovation Solution
The method involves identifying electronic components in communication with each other, establishing them as trusted devices through a certificate history of signed public keys, and using Diffie-Hellman key exchange to distribute symmetric keys for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional PKI systems are used for authenticating electronic components in vehicles, then security and authentication capability are improved, but system complexity and dependency on internet connectivity increase
Solution Approach 1:
The patent segments the PKI system into two distinct parts: (1) asymmetric key infrastructure for initial authentication and trust establishment, and (2) symmetric key infrastructure for efficient secure communication. This segmentation allows the system to use complex asymmetric cryptography only when needed for authentication, while relying on simpler symmetric cryptography for ongoing communication, thereby reducing overall system complexity while maintaining security.
Solution Approach 2:
The patent implements preliminary action by establishing asymmetric key pairs and certificate histories before secure communication begins. Electronic components pre-generate their public-private key pairs and store certificate histories containing signed public keys of trusted manufacturers. This preliminary setup enables components to authenticate each other using lightweight symmetric key exchange without requiring internet connectivity during operation.
2Reliability
If asymmetric key exchange is used for all communications between electronic components, then security is improved, but communication efficiency and processing speed deteriorate
Solution Approach 1:
The patent applies dynamics by transitioning from static asymmetric key usage to dynamic key management. After initial authentication using asymmetric keys, the system dynamically generates symmetric session keys for each communication session or message exchange. This dynamic approach allows the system to leverage the security of asymmetric cryptography only when needed for authentication, while using faster symmetric cryptography for the bulk of communication operations.
Solution Approach 2:
The patent changes cryptographic parameters from always using asymmetric keys to conditionally using asymmetric keys only for authentication, then switching to symmetric keys for data communication. This parameter change optimizes performance by using computationally intensive asymmetric cryptography minimally, while employing efficient symmetric cryptography for actual message encryption and authentication during normal operation.
3Adaptability or versatility
If serviceable electronic components are allowed to be replaced or upgraded, then adaptability and maintenance capability are improved, but security risks from untrusted components increase
Solution Approach 1:
The patent implements preliminary action by pre-configuring serviceable electronic components with certificate histories containing signed public keys of authorized manufacturers during the manufacturing process. When a component is replaced or upgraded, the new component's authenticity is verified by checking its public key against the pre-stored certificate history, enabling secure replacement without requiring internet connectivity or complex verification infrastructure.
Solution Approach 2:
The patent introduces certificate histories as an intermediary mechanism that mediates between component replaceability and security trust. The certificate history acts as a local trusted reference that enables verification of replacement components' authenticity without requiring continuous connection to external authentication services, thus facilitating maintenance while maintaining security.
4Ease of operation
If symmetric keys are distributed through centralized servers requiring internet connectivity, then key management simplicity is improved, but system operational independence and reliability in offline scenarios worsen
Solution Approach 1:
The patent implements self-service by enabling electronic components to autonomously generate their own asymmetric key pairs and create certificate histories containing signed public keys of trusted manufacturers during manufacturing. This self-provisioning eliminates dependency on centralized key distribution servers, allowing components to independently establish secure communication channels without requiring internet connectivity or external key management infrastructure.
Data Source
AI summary
A method and system for public key infrastructure (PKI) in software defined vehicles enables secure communication between electronic components. The method includes establishing trust between multiple electronic components through a certificate history comprising signed public keys stored on each component. Once trust is established through attestation between components, the method utilizes signed Diffie-Hellman key exchange to securely distribute symmetric keys to the trusted components. These symmetric keys enable authenticated communication between the components to control vehicle systems and functions. The system operates locally without requiring internet connectivity or specialized service tools, allowing for secure field replacement and upgrading of components while maintaining system security through verification of component authenticity and prevention of counterfeit hardware.