Vehicle Communication Key Rotation for Cracked-Key Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Encrypted communication systems using common encryption keys are vulnerable to security breaches if the common key is cracked, compromising the security of vehicle communication systems.

Innovation Solution

A communication system where both devices can change their encryption keys based on common conditions, ensuring that even if the common key is cracked, the encryption keys are updated, thereby enhancing security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encrypted communication using a common encryption key is used between terminal and in-vehicle device, then communication security is improved, but if the common key is cracked, security deteriorates

Engineering Contradiction:
Improvecommunication securityVSAvoidsecurity vulnerability to key cracking
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements dynamic key management by enabling both the terminal and in-vehicle device to change their encryption keys independently when specific conditions are met. This dynamic key rotation mechanism ensures that even if one key is compromised, the system can update to new keys, making the security system adaptive rather than static.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent establishes preliminary key change conditions that are set in advance for both devices. These pre-defined conditions (such as communication failure detection, time-based triggers, or event-based triggers) enable the system to proactively change keys before a potential security breach can be exploited, rather than reacting after compromise is detected.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If encryption keys are changed frequently to improve security, then security against cracked keys is improved, but system complexity increases

Engineering Contradiction:
Improvesecurity against key compromiseVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent incorporates feedback mechanisms where both the terminal and in-vehicle device monitor communication status and independently determine when key changes are necessary. Each device has the autonomy to detect communication failures or security risks and trigger key changes based on predefined conditions, eliminating the need for complex centralized key management while maintaining security.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

Both the terminal and in-vehicle device are equipped with self-service capabilities to independently change their own encryption keys when conditions are satisfied. This self-service approach allows each device to manage its own security credentials without requiring complex coordination protocols or centralized authority, reducing overall system complexity while enhancing security responsiveness.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11838416B2Communication system and control device
Publication Date: 2023.12.05 KK TOKAI RIKA DENKI SEISAKUSHO
  • US11838416B2 patent drawing
  • US11838416B2 patent drawing
  • US11838416B2 patent drawing

AI summary

[Object] To provide a communication system that makes it possible to improve security.[Solution] Provided is a communication system including: a first device configured to transmit encrypted information that is encrypted by using a first encryption key; and a second device configured to execute a predetermined process based on the encrypted information obtained from the first device, and a second encryption key that is common to the first encryption key. The first device includes a first change section configured to change the first encryption key in the case where a first condition is satisfied. The second device includes a second change section configured to change the second encryption key in the case where a second condition is satisfied, the second condition being common to the first condition.