Zone-Master ECU Authentication for Fast Vehicle Security Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security verification methods for vehicle ECUs are sequential, leading to prolonged verification times, delayed startup, and reduced coverage of critical ECUs, potentially compromising vehicle security.
Innovation Solution
The in-vehicle network is partitioned into predefined zones with zone master ECUs that authenticate primary ECUs using pre-allocated signed unique cryptographic key shares, computing a unique signature with (K−1) shares for parallel verification, followed by secondary ECU authentication after startup.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sequential security verification is applied to ECUs, then verification thoroughness is improved, but verification time increases and startup is delayed
Solution Approach 1:
The in-vehicle network is divided into multiple predefined zones (e.g., driver zone, passenger zone, engine zone, chassis zone), each with its own zone master ECU. This segmentation allows parallel verification of ECUs across different zones, reducing total verification time while maintaining thoroughness through zone-level aggregation of verification results.
Solution Approach 2:
The patent introduces a hierarchical verification dimension: individual ECU verification results are aggregated to zone-level signatures, which are then aggregated to vehicle-level security validation. This multi-dimensional approach enables parallel processing at the zone level while ensuring comprehensive security coverage through hierarchical aggregation.
2Reliability
If sequential security verification is applied to ECUs, then each ECU is verified in detail, but startup speed decreases and user experience degrades
Solution Approach 1:
Cryptographic key shares are pre-allocated to each ECU during manufacturing or system initialization, before the vehicle startup phase. This preliminary action eliminates the need for key distribution during startup, allowing immediate parallel verification of all ECUs and significantly reducing startup time while maintaining security accuracy.
Solution Approach 2:
The patent merges individual ECU verification processes into zone-level batch verification. Multiple ECUs within a zone are verified simultaneously, and their collective authenticity is confirmed through a single zone-level signature validation, thereby accelerating startup while preserving verification accuracy.
3Reliability
If more ECUs are verified during startup, then security coverage is improved, but verification time increases beyond minimal startup requirements
Solution Approach 1:
ECUs are organized into functional zones (e.g., safety-critical zone, infotainment zone, powertrain zone), allowing prioritized verification. Critical zones can be verified first during minimal startup time, while non-critical zones are verified subsequently, achieving both high security coverage and fast startup through time-based segmentation.
Solution Approach 2:
The verification process is made dynamic and adaptive: the system can adjust the scope and depth of verification based on operational context. During cold startup, only essential zones are verified to meet minimal startup time; during warm startup or security-sensitive operations, comprehensive verification of all zones is performed, optimizing the balance between coverage and time.
Data Source
AI summary
Cryptography is used to validate the security of a vehicle. An authentication system integrated in a zone master Electronic Control Unit (ECU) of a predefined zone requests pre-allocated signed unique cryptographic key shares from each of multiple primary ECUs associated with the zone master ECU, when there is an authentication requirement. Thereafter, the authentication system computes a first unique signature of the predefined zone using a predefined number of the key shares and verifies the validity of the computed first unique signature using a public key. Finally, the verified first unique signature is provided to a vehicle master ECU associated with the zone master ECU, to enable it to activate safety functionalities associated with the primary ECUs. Thereafter, the same method is repeated for multiple secondary ECUs. In this way, achievement of fast, non-sequential, and single step validation of vehicle security is enabled.