In-Vehicle OTA Communication With Temporary Keys and Node Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current in-vehicle network communication lacks identity authentication and encryption for master and sub nodes, making it vulnerable to illegal OTA activities and compromising vehicle security.
Innovation Solution
Implementing a method that generates temporary communication keys using random numbers and a root key for encrypted communication between a main processor and sub-processor, with integrity checks using MAC values to ensure identity authentication and secure data exchange.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If identity authentication and encryption are implemented between master node and sub nodes, then communication security is improved, but communication complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-distributing root keys to the master node and sub nodes before communication begins. This allows the system to establish security credentials in advance, so that when actual communication occurs, the authentication and encryption processes can proceed efficiently using these pre-established keys, reducing the complexity of on-the-fly key generation and distribution.
Solution Approach 2:
The patent uses temporary communication keys as intermediaries between the root keys and actual communication data. These temporary keys are derived from the root keys through a key derivation function and are used specifically for encrypting communication sessions. This intermediary layer isolates the sensitive root keys from direct exposure during communication, enhancing security while maintaining manageable complexity through structured key management.
2Reliability
If temporary communication keys are generated and invalidated after each session, then security against replay attacks is improved, but key management complexity increases
Solution Approach 1:
The patent applies dynamics by making communication keys temporary and session-specific rather than static. Each communication session generates a new temporary key that is automatically invalidated after use, creating a dynamic key management system. This temporal validity ensures that even if a key is compromised, its lifespan is limited to a single session, preventing replay attacks while the systematic key rotation manages complexity through automated processes.
Solution Approach 2:
The patent changes the parameter of key validity from permanent to temporary by introducing session-based key lifecycles. Keys transition from a static state to a dynamic state with defined creation and invalidation timestamps. This parameter change enables the system to automatically manage key validity periods, reducing the need for manual key management while enhancing security through time-limited credentials.
3Productivity
If all service interaction data is transmitted in plain text, then communication efficiency is maintained, but vulnerability to illegal OTA activities increases
Solution Approach 1:
The patent extracts sensitive information from plain text transmission by separating data into encrypted and unencrypted portions. Only non-sensitive metadata such as packet lengths and identifiers are transmitted in plain text, while the actual content requiring security (commands, upgrade packages, progress data) is encrypted. This extraction approach maintains communication efficiency for structural information while protecting vulnerable data elements.
Solution Approach 2:
The patent applies local quality by selectively encrypting only the portions of data that require protection rather than encrypting entire communication streams. Sensitive fields such as OTA commands and package contents receive encryption treatment, while structural metadata remains in plain text for efficient processing. This localized application of encryption maintains overall communication efficiency while providing targeted security where needed.
Data Source
AI summary
Disclosed are an in-vehicle network OTA security communication method and apparatus, a vehicle-mounted system. According to the present disclosure, the temporary key is generated through the random numbers and the root key in the in-vehicle network, integrity check is performed with the MAC value, the master node and each child node of the in-vehicle network need to be subjected to identity authentication before performing OTA service, and the OTA service may be started only after the authentication succeeds. During the service process, data that needs to be exchanged between the master node and each child node, including various commands, upgrade package content, upgrade progress transmission and other data, may be encrypted, the key for each encryption is randomly generated, and the OTA service is different each time, thereby avoiding key leakage and replay attacks, ensuring the security of in-vehicle network OTA communication.