Vehicle Software Updates Using Dual-Network Key Delivery

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle software update systems face challenges in ensuring secure and efficient delivery of encrypted updates over untrusted open wireless networks while maintaining the integrity and security of the update process, particularly during vehicle operations.

Innovation Solution

A method and system for receiving encrypted software updates over open wireless networks and decrypting them using a one-time key received over a closed wireless network, ensuring secure and timely software updates during vehicle operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If encrypted software updates are transmitted over open wireless networks, then update delivery efficiency is improved, but security is compromised

Engineering Contradiction:
Improveupdate delivery efficiencyVSAvoidsecurity
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The software update transmission process is segmented into two separate channels: encrypted update data is transmitted over open wireless networks for efficiency, while decryption keys are transmitted over closed wireless networks for security. This segmentation allows each channel to be optimized for its specific purpose without compromising the other.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A dual-network transmission mechanism acts as an intermediary between the update delivery requirement and security requirement. The system uses open networks for data transmission and closed networks for key transmission, with the processor coordinating between these two channels to ensure both efficiency and security are achieved.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If software updates are received while the vehicle is in motion, then operational continuity is maintained, but security risks increase

Engineering Contradiction:
Improveoperational continuityVSAvoidsecurity risks
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The update reception process is segmented into data reception over open networks and key reception over closed networks, allowing the vehicle to maintain operational continuity while receiving updates in motion, with security maintained through the separate key transmission channel.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system performs preliminary encryption of update data before transmission over open networks, and separately transmits decryption keys over closed networks. This preliminary security measure allows the vehicle to receive updates during motion without increasing security risks, as the encryption/decryption framework is already in place.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12585451B2Software updates based on transport-related actions
Publication Date: 2026.03.24 TOYOTA MOTOR NORTH AMERICA INC
  • US12585451B2 patent drawing
  • US12585451B2 patent drawing
  • US12585451B2 patent drawing

AI summary

An example operation includes one or more of receiving, by a transport, over an open wireless network an encrypted software update and receiving, by the transport, over a closed wireless network a one-time key to decrypt the encrypted software update, wherein the one-time key is received while the transport is in motion and about to perform an action related to the software update.