Vehicle Server Identity Verification via Disconnect Callback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current server identity authentication methods in vehicle wireless communications systems are not 100% reliable, as hackers can potentially masquerade as authorized servers, posing a risk of malicious software downloads or other nefarious activities.
Innovation Solution
The system requires the server to disconnect and wait for a vehicle-initiated callback within a predetermined time window to confirm its identity, ensuring that only a valid server can perform requested functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptography is used to authenticate server identity, then authentication capability is provided, but reliability is not 100% (hackers can masquerade as authorized servers)
Solution Approach 1:
The vehicle performs preliminary actions by requesting the server to disconnect before executing any service function. This preliminary disconnect request creates a verification opportunity where the vehicle can confirm server identity through a callback mechanism before allowing the potentially harmful service to execute, thus preventing hacker masquerade even if cryptographic authentication is compromised.
Solution Approach 2:
The system implements feedback by having the server wait for a callback from the vehicle within a predetermined time window after disconnecting. This feedback mechanism allows the vehicle to verify the server's identity through the callback process, and the server must respond appropriately to confirm its authorized status, thereby eliminating unreliable authentication methods.
2Reliability
If the vehicle calls back the server to confirm identity, then server identity verification reliability is enhanced, but communication time is increased
Solution Approach 1:
The vehicle sends a preliminary disconnect request before executing the service function, creating a time window for verification. This preliminary action allows the vehicle to initiate the callback verification process without delaying the actual service execution, as the verification occurs in parallel during the disconnect transition period.
Solution Approach 2:
The system uses a predetermined time window for the callback verification rather than requiring continuous verification throughout the entire communication process. This partial verification approach ensures reliability for the critical authentication moment while minimizing overall communication time by not extending verification beyond what is necessary for security.
Data Source
AI summary
A system and method for providing server identification to accept a server request in a vehicle wireless communications system. If the server wishes to send a request for a certain function to the vehicle, it will transmit the request and the vehicle will receive the request. If the vehicle receives a valid vehicle identification number, the vehicle will then ask the server to disconnect the communications link. The server will disconnect the communications link, and wait for the vehicle to call the server directly within a predetermined time window to confirm that it was in fact a valid server making the request. If the server confirms that it was the one making the initial request, the vehicle will perform the function.