Vehicle Secret Code Reconstruction via Segmented Volatile Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In vehicle security systems, attackers can gain access to both the decryption key and cryptographic algorithm if they obtain both from a shared memory location, posing a significant security risk as the key is typically stored in non-volatile memory, making it difficult to keep safe.
Innovation Solution
A method where a secret code is constructed by combining portions stored in both a portable security unit and a processing unit, with mutual authentication and temporary storage in volatile memory, ensuring the key and code are kept separate to deter simultaneous access by an attacker.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If the decryption key and cryptographic algorithm are stored in the same memory location, then the system is simpler to implement, but the security is compromised as attackers can access both simultaneously
Solution Approach 1:
The secret code is divided into multiple portions and stored in different memory locations. The first portion is stored in non-volatile memory while the second portion is stored in volatile memory, ensuring that an attacker cannot access the complete secret code from a single memory location.
Solution Approach 2:
The decryption key is extracted from the volatile memory and deleted after the secret code is reconstructed and used. This ensures that the key is not permanently stored in the volatile memory, preventing attackers from retrieving it after accessing the system.
2Ease of operation
If the decryption key is stored in non-volatile memory for easy retrieval, then the ease of operation is improved, but the security is worsened as attackers can obtain the key from the same storage device
Solution Approach 1:
The secret code is segmented into portions stored in different memory types. The first portion resides in non-volatile memory for persistent storage, while the second portion is temporarily stored in volatile memory during operation, achieving both ease of retrieval and security.
Solution Approach 2:
The decryption key is temporarily loaded into volatile memory for use, then discarded (deleted) after the secret code is reconstructed and the secure operation is completed. This allows easy operational use while preventing permanent storage that would compromise security.
3Productivity
If the complete secret code is stored in one location for quick access, then the productivity is improved, but the security is compromised as both key and code are vulnerable to simultaneous access
Solution Approach 1:
The secret code is divided into portions stored in different memory locations. The first portion is stored in non-volatile memory and the second portion in volatile memory, allowing quick access during operations while maintaining security through physical separation.
Solution Approach 2:
The separate portions of the secret code stored in different memory locations are combined in volatile memory during secure operations to reconstruct the complete secret code, enabling fast access when needed while maintaining security through distributed storage.
Data Source
AI summary
A method is provided for constructing a secret code in a processing unit when in communication with a portable security unit. Mutual authentication messages are exchanged between a linked portable security unit and processing unit. A first portion of the secret code is communicated to the processing unit. The processing unit combines the first portion and a second portion of the secret code stored in the non-volatile memory of the processing unit. The secret code is stored in a volatile memory of the processing unit. A secure operation is performed using the secret code. The portable security unit is de-linked from the processing unit. At least a portion of the secret code is deleted from the volatile memory of the processing unit.