In-Vehicle Secure Data Transfer via Triggered Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securely updating motor vehicle software are impractical in unattended power states or locations along the supply chain where vehicles are not accessible to service centers, such as ports or transport apparatuses, due to security concerns with compromised communication channels.
Innovation Solution
An in-vehicle device with a processor and wireless communication system establishes a secure communication channel with a remote device, such as a secure Wi-Fi access point, to perform automatic secure data transfers without human intervention, using predefined trigger events like proximity to a geofence or predetermined times, and employs strong encryption to protect against security threats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If the motor vehicle is in an unattended power state at locations along the supply chain (ports, transport apparatuses), then the vehicle can be updated without human intervention, but security concerns arise due to compromised communication channels
Solution Approach 1:
The patent segments the update process into two distinct phases: (1) a secure authentication phase using a first communication channel with strong encryption, and (2) a data transfer phase using a second communication channel. This segmentation allows the system to maintain security during authentication while enabling automated updates during data transfer, resolving the contradiction between automation and security.
Solution Approach 2:
The system performs preliminary authentication and establishes a secure communication channel before executing the actual software update. By pre-establishing security credentials and authentication mechanisms while the vehicle is still attended, the system enables subsequent automated updates without requiring human intervention during the critical security setup phase.
2Area of stationary object
If the motor vehicle is secured to a transport apparatus or arranged very close together, then space is optimized, but the vehicle becomes inaccessible to service centers for traditional update schemes
Solution Approach 1:
The patent enables the motor vehicle to perform updates autonomously without requiring service center personnel or physical access to service centers. The vehicle establishes communication channels and executes updates automatically, allowing it to update itself even when secured to transport apparatuses or tightly arranged in storage, thus resolving the accessibility issue while maintaining space optimization.
3Reliability
If a portable electronic device is used for secure updates at service centers, then security is maintained through controlled environments, but the process requires human intervention and physical presence at service centers
Solution Approach 1:
The patent introduces an authenticated communication channel as an intermediary between the vehicle and the update source. This intermediary channel provides the security previously achieved through controlled service center environments, while enabling automated updates without requiring human operators or physical presence at service centers, thus resolving the contradiction between security and automation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In an example, an in-vehicle electronic device to operate in a motor vehicle in an unattended power state may include a wireless interface to communicate with a remote secure network resource; a memory to store one or more values to specify a predefined trigger event for coupling the motor vehicle in the unattended power state to the remote secure network resource; and a processor configured to: recognize an occurrence of a predefined trigger event by checking first data obtained responsive to monitoring the a resource against the one or more values; in responsive to a recognition of the occurrence of a predefined trigger event, identify second data suitable for coupling the in-vehicle electronic device to the remote secure network resource; and establish a communication channel to the remote secure network resource via the wireless interface using the second data, the second communication channel for transmission of third data.