Watchdog Enclave Monitoring for Trusted Driving Event Chains
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies lack efficient methods for monitoring components of semi-automated driving functions in motor vehicles, which are vulnerable to manipulation and require robust security measures to ensure the integrity and correctness of data and processes.
Innovation Solution
Implementing a watchdog with an enclave to generate and verify certificates for components in the event chain, using cryptographic protection to ensure the trustworthiness of output data and trigger security actions if manipulations are detected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional monitoring methods are used for components in semi-automated driving functions, then the system structure remains simple, but the system becomes vulnerable to manipulation and lacks sufficient security
Solution Approach 1:
The system is divided into isolated enclave components that operate independently within the watchdog. Each enclave generates and verifies certificates for specific components in the event chain, creating segmented security domains that prevent manipulation while maintaining modular system structure
Solution Approach 2:
The watchdog acts as an intermediary between components and the monitoring system. It receives output data from components, verifies certificates generated by enclaves, and triggers security actions when manipulations are detected, thereby enhancing security without requiring direct complex interactions between all system components
2Reliability
If cryptographic protection is implemented for all components, then data integrity is ensured, but computational overhead and processing time increase
Solution Approach 1:
Certificates are generated by enclaves in advance and attached to output data before verification. This preliminary cryptographic preparation allows for efficient batch verification by the watchdog, reducing the computational overhead during real-time processing compared to on-demand cryptographic operations
Solution Approach 2:
Cryptographic verification is applied selectively to critical components in the event chain rather than uniformly to all data. The watchdog focuses verification efforts on safety-relevant outputs where manipulation would have severe consequences, optimizing the balance between security and processing efficiency
Data Source
AI summary
A method for monitoring a component of an event chain for an at least semi-automated driving function of a motor vehicle using a watchdog in which an enclave is implemented. The method includes: generating a first certificate for the component of the event chain with the aid of the first enclave, outputting the first certificate to the component with the aid of the watchdog, receiving output data output by the component with the aid of the watchdog, checking the output data on the basis of the first certificate with the aid of the first enclave in order to output a first check result, triggering a security action with the aid of the watchdog based on the first check result. A device, a computer program, and a machine-readable memory medium are also provided.