Autonomous Vehicle Cyber-Security Protocol for Replay Attack Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Autonomous vehicles face security vulnerabilities in message transmission due to the susceptibility of black channel protocols to certain types of attacks, which can compromise the authenticity and integrity of sensor data used for navigation and operation.
Innovation Solution
Implementing a keying operation where devices exchange randomly generated numbers to generate encryption keys, incorporating message sequence counters and hashes in messages to ensure authentication and prevent replay attacks, thereby enhancing the security of communications between devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If black channel protocols are used for message transmission, then communication simplicity is maintained, but security vulnerability increases due to susceptibility to replay attacks
Solution Approach 1:
The system performs preliminary keying operations before message transmission, where devices exchange randomly generated numbers and generate encryption keys in advance. This preliminary action establishes security credentials that protect subsequent communications without complicating the message transmission process itself.
Solution Approach 2:
The patent introduces message sequence counters and cryptographic hashes as intermediary elements that mediate between the simple black channel protocol and security requirements. These intermediaries validate message authenticity without requiring complex protocol changes.
2Reliability
If message sequence counters are implemented to prevent replay attacks, then security is improved, but message structure complexity increases
Solution Approach 1:
The message structure is segmented into distinct components: a message sequence counter field, a hash field, and the payload data. This segmentation allows each component to serve a specific function (sequencing, authentication, information) while keeping the overall structure organized and manageable.
Solution Approach 2:
The system changes parameters of existing messages by appending or embedding sequence counters and hash values rather than fundamentally redesigning the message format. This parameter-based approach adds security functionality with minimal structural disruption.
3Reliability
If encryption keys are generated using randomly generated numbers, then key security is enhanced, but key generation complexity increases
Solution Approach 1:
The patent merges multiple functions into the keying operation: random number generation, key derivation, and initial authentication all occur in a single integrated keying process. This combining of functions enhances security through randomness while avoiding the need for separate complex procedures.
Solution Approach 2:
The keying operation is self-service in that devices autonomously generate their own random numbers and derive their own encryption keys without requiring external key distribution infrastructure. This self-service approach enhances security while maintaining operational simplicity.
Data Source
AI summary
This disclosure describes a cyber-security protocol for validating messages being exchanged between two devices of an autonomous vehicle. The protocol includes the independent generation of multiple encryption or session keys by both devices. The encryption keys are generated based on a random number provided by each device. In some embodiments, the random numbers can be accompanied by a shared secret key installed on both devices that can help prevent an unauthorized device from creating a shared set of encryption keys with one of the devices. Including a hash generated using one of the encryption keys and a message sequence counter value in each message can help prevent the injection of previously transmitted messages as a means of disturbing operation of the autonomous vehicle.