Vehicle Update Access Keys for Secure Data Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data update methods for vehicles lack sufficient security measures, allowing unauthorized access to unencrypted data, which poses a risk to the integrity and safety of the system.
Innovation Solution
A data update method involving a management server that creates and distributes access locks and keys with validity periods, ensuring secure data distribution by validating access requests from in-vehicle terminals using access keys that can unlock these locks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted with a predetermined encryption key and decrypted with a decryption key distributed from a key management server, then data security is improved, but the system complexity increases due to key management requirements
Solution Approach 1:
The patent extracts the key management functionality from the data distribution system by using a separate key management server that independently manages decryption keys. This separation allows the data distribution apparatus to focus on data delivery while the key management server handles security, reducing overall system complexity.
Solution Approach 2:
The key management server acts as an intermediary between the data distribution apparatus and the in-vehicle terminals. It mediates the key distribution process by receiving decryption key generation requests, generating the keys, and distributing them only to authorized terminals, thereby simplifying the security architecture.
2Reliability
If access control mechanisms are implemented using encryption keys, then unauthorized access is prevented, but the ease of operation decreases due to additional authentication steps
Solution Approach 1:
The in-vehicle terminal automatically performs authentication by presenting its terminal ID to the key management server and receiving the appropriate decryption key without user intervention. This self-service mechanism maintains security while simplifying the user experience.
Solution Approach 2:
The terminal ID is pre-configured in each in-vehicle terminal during system setup. This preliminary action enables automatic authentication without requiring users to manually input credentials, thus maintaining ease of operation while ensuring security.
3Productivity
If update data is distributed to multiple vehicles, then system productivity is improved, but the risk of unauthorized access increases with more distribution points
Solution Approach 1:
Each in-vehicle terminal receives a unique decryption key tailored to its specific terminal ID. This local quality approach ensures that even if multiple terminals access the data distribution system, each has its own authenticated access credentials, preventing unauthorized access while enabling widespread distribution.
Data Source
AI summary
A data update method includes: a step of creating, by a management server, an access lock valid for a predetermined period and an access key capable of unlocking the access lock; a step of transmitting the access key to each of in-vehicle terminals of the plurality of vehicles, which are communicably connected with the management server; a step of making, by each of the in-vehicle terminals, a distribution request to a data distribution apparatus for distributing the update data by using the access key; and a step of determining by the data distribution apparatus, whether the access key used for the distribution request is capable of unlocking the access lock, and when determining that the access key is capable of unlocking the access lock, distributing the update data to an in-vehicle terminal having issued the distribution request.