In-Vehicle Remote Attestation for Memory Integrity Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Interdependent systems in vehicle electrical/electronic architectures are vulnerable to malicious interference, compromising the integrity and correct functioning of interconnected components, particularly in automotive applications with centralized computers.
Innovation Solution
Implementing a secure enclave with a Remote Attestation Key (RAK) and a Challenge-Response Protocol (CRP) to frequently check memory integrity, using hashing or error codes, and execute a Run-Time Integrity Check (RTIC) to ensure the memory contents have not been altered by adversaries, disabling the RAK if integrity is compromised, thereby failing the CRP and triggering safety measures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If centralized computers are used to reduce architectural complexity, then device complexity is reduced, but reliability of individual computers increases in importance
Solution Approach 1:
The system segments the centralized computer into multiple secure enclaves, each responsible for specific security functions. This segmentation allows the overall architecture to remain simple while individual security components maintain high reliability through dedicated functions and isolation.
2Adaptability or versatility
If systems are interconnected to enable communication, then adaptability increases, but vulnerability to malicious interference increases
Solution Approach 1:
The secure enclave acts as an intermediary between interconnected systems, verifying the integrity of communication partners through challenge-response protocols. This intermediary function enables systems to remain interconnected and adaptable while protecting against malicious interference through cryptographic verification.
Solution Approach 2:
The system performs preliminary integrity verification through challenge-response protocols before allowing communication or operations. This preliminary anti-action prevents malicious interference by detecting compromised systems before they can execute harmful operations.
3Reliability
If memory integrity checks are performed frequently to detect corruption, then reliability is improved, but use of energy increases
Solution Approach 1:
The system performs memory integrity checks periodically through frequent challenge-response protocols rather than continuously. This periodic action maintains high reliability for detecting memory corruption while reducing energy consumption compared to continuous monitoring.
Data Source
AI summary
A method for remote attestation over in-vehicle network includes generating an authentication token in a first Hardware Security Module (HSM) of a first system, wherein the authentication token identifies a data content of a memory. A Run-Time Integrity Check using the authentication token in the first HSM is executed to determine a state of the memory of the first system. A key usage flag of a key is modified in response to the state of the memory. A Challenge-Response Protocol (CRP) is executed between a first Remote Attestation (RA) module of the first HSM and a second RA module of a second HSM of the second system, wherein the first RA module is responsive to the key usage flag. A security measure is executed in response to a failed CRP.