On-Vehicle Secure Area Access Based on Vehicle Stop State
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing on-vehicle network systems are vulnerable to unauthorized access and packet rewriting during vehicle travel, compromising security and allowing potential remote control of devices inside the vehicle.
Innovation Solution
An on-vehicle device with a processing unit, determination unit, and secure area that acquires control information only when the vehicle is in a predetermined stop state, incorporating authentication and tamper-resistant storage to prevent unauthorized access and packet rewriting during travel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If control information is stored in an accessible area for external device control, then ease of operation is improved, but security against unauthorized access during vehicle travel deteriorates
Solution Approach 1:
The storage area is segmented into a first storage area (accessible during travel) and a second storage area (accessible only when stopped). Control information is divided and stored in these separate segments, allowing the system to provide different access levels based on vehicle state, thus maintaining ease of operation when needed while preventing unauthorized access during travel.
Solution Approach 2:
The accessibility of the storage area is made dynamic based on the vehicle's travel state. The storage area transitions between accessible and inaccessible states according to whether the vehicle is traveling or stopped. This dynamic adjustment allows the system to optimize both ease of operation and security depending on the current operational context.
2Productivity
If control information is made accessible during vehicle travel, then productivity is improved, but security against packet rewriting deteriorates
Solution Approach 1:
Control information is segmented and stored in two separate storage areas with different access policies. The first storage area handles non-critical operations during travel, while the second storage area protects critical control information until the vehicle is stopped. This segmentation allows the system to maintain productivity for non-critical functions while preventing packet rewriting attacks on critical control information.
Solution Approach 2:
The system performs preliminary checks of the vehicle's travel state before allowing access to control information. By determining the vehicle state in advance, the system can prevent packet rewriting attacks by blocking access to control information during travel, while still allowing productivity-critical operations to proceed when safe.
3Reliability
If a secure storage area is implemented with access restrictions, then security is improved, but device complexity increases
Solution Approach 1:
The storage area is divided into two distinct segments (first and second storage areas) with clearly defined access rules. This segmentation provides a structured approach to security that is easier to manage than a completely access-restricted system, as the first storage area remains accessible during travel for non-critical operations, reducing the overall complexity burden while maintaining security for critical information.
Solution Approach 2:
The access control mechanism is made dynamic based on vehicle state rather than being statically restrictive. This dynamic approach simplifies management by using the vehicle's operational state (traveling vs. stopped) as the control criterion, which is already tracked by the vehicle's existing systems, thereby reducing the additional complexity required for security management.
Data Source
AI summary
An on-vehicle device is mounted on a vehicle, and includes: a processing unit; a determination unit configured to determine whether or not the vehicle is in a predetermined stop state; and a secure area that is accessible from the processing unit when the processing unit has output predetermined information. The secure area has, stored therein, control information that allows an external device to control the on-vehicle device. When the determination unit has made a positive determination, the processing unit accesses the secure area and performs an acquisition process of acquiring the control information from the secure area.