Method and system for improving the data security during a communication process

Patent metadata

Field	Value
Publication number	US-10680816-B2
Application number	US-201515119170-A
Country	US
Kind code	B2
Filing date	Mar 25, 2015
Priority date	Mar 26, 2014
Publication date	Jun 9, 2020
Grant date	Jun 9, 2020

Abstract

A system for improving the data security during a communication process, including at least one processor and a hardware security module. The communication data is authenticated prior to a transmission process, and the authenticity of the communication data is checked upon being received. The authentication is carried out by the processor, and the authentication check is carried out by the hardware security module, wherein the communication data is car-to-X messages. The processor and the hardware security module are linked via a common secret element such that at least the hardware security module cannot be coupled to another processor.

First claim

The invention claimed is:

1. A vehicle executed method for improving data security in a communication process in vehicle-to-X communication, comprising:
in response to an outgoing message from a vehicle:
1) signing, by a processor of the vehicle, the outgoing message to produce an authenticated outgoing message by hashing the outgoing message and encrypting the hashed outgoing message, and
2) transmitting, by the processor, the authenticated outgoing message and an outgoing certificate having an outgoing public key; and

in response to receiving from a sender, by the processor, an unencrypted incoming message containing communication data, an encrypted first hash and an incoming certificate having an incoming public key, and a hardware security module as a dedicated integrated circuit of the vehicle separate from the processor, being electrically coupled to the processor in order to check an authenticity of the unencrypted incoming message:
1) hashing, by the processor, the unencrypted incoming message to create a second hash,
2) sending, by the processor, the encrypted first hash and the incoming public key to the hardware security module,
3) decrypting, by the hardware security module, the encrypted first hash using the incoming public key to create a decrypted first hash,
4) sending, by the hardware security module, the decrypted first hash to the processor, and
5) authenticating, by the processor, the unencrypted incoming message when the decrypted first hash matches the second hash,

wherein the processor is configured to perform a boot procedure.

2. The method as claimed in claim 1 , wherein the communication data are vehicle-to-X messages.

3. The method as claimed in claim 2 , wherein the processor and the hardware security module each comprise a true random number generator (TRNG) or a key generator module.

4. The method as claimed in claim 1 , wherein the processor and the hardware security module each comprise a true random number generator (TRNG) or a key generator module.

5. The method as claimed in claim 1 , wherein the processor and the hardware security module are linked via a shared secret such that at least the hardware security module cannot be linked to any other processor.

6. The method as claimed in claim 1 , further comprising the step of executing, by the processor, software that performs a secure boot procedure.

7. The method as claimed in claim 1 , further comprising the step of executing, by the processor, software that opens debugging interfaces only after successful authentication of the communication partners.

8. The method as claimed in claim 1 , wherein the processor comprises a special secure RAM, further comprising using the special secure RAM solely by a security module assigned to the processor.

9. The method as claimed in claim 1 , further comprising the step of performing, by an advanced encryption standard (AES) module of the processor, the encryption.

10. The method as claimed in claim 9 , wherein a key of the AES module is stored in security fuses of the processor.

11. The method as claimed in claim 1 , further comprising the step of executing, by the processor, software that performs a hardware-assisted secure boot procedure.

12. A system for improving the data security in a communication process in vehicle-to-X communication, comprising:
a processor of a vehicle; and
a hardware security module as a dedicated integrated circuit of the vehicle separate from the processor,
wherein in response to an outgoing message from the system:
1) the processor is configured to sign the outgoing message to produce an authenticated outgoing message by hashing the outgoing message and encrypting the hashed outgoing message, and
2) the processor is configured to transmit the authenticated outgoing message and an outgoing certificate having an outgoing public key, and

wherein in response to receiving from a sender, by the processor, an unencrypted incoming message containing communication data, an encrypted first hash and an incoming certificate having an incoming public key, and the hardware security module being electrically coupled to the processor in order to check an authenticity of the unencrypted incoming message:
1) the processor is configured to hash the unencrypted incoming message to create a second hash,
2) the processor is further configured to send the encrypted first hash and the incoming public key to the hardware security module,
3) the hardware security module is configured to decrypt the encrypted first hash using the incoming public key to create a decrypted first hash,
4) the hardware security module is further configured to send the decrypted first hash to the processor, and
5) the processor is further configured to authenticate the unencrypted incoming message when the decrypted first hash matches the second hash,

wherein the processor is configured to perform a boot procedure.

13. The system of claim 12 ,
wherein the processor is further configured to forward the authenticated message, and the processor and hardware security module are linked via a shared secret such that the hardware security module cannot be linked to any other processor.

14. The system as claimed in claim 13 , wherein the processor is configured to execute only software that performs a secure boot procedure.

15. The system as claimed in claim 14 , wherein the processor is configured to execute software that opens debugging interfaces only after successful authentication of the communication partners.

16. The system as claimed in claim 13 , wherein the processor is configured to execute software that opens debugging interfaces only after successful authentication of the communication partners.

17. The system as claimed in claim 13 , wherein the processor is configured to execute only software that performs a hardware-assisted secure boot procedure.

Assignees

• Continental Teves Ag & Co Ohg

Inventors

• Antoni Henrik
• Martin Torsten
• Römmele Stefan
• Menzel Marc

Classifications

• H04L9/0897 Primary

  involving additional devices, e.g. trusted platform module [TPM], smartcard or USB · CPC title

• H04W12/06

  Authentication · CPC title

• H04L63/0485

  Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up · CPC title

• H04W4/40

  for vehicles, e.g. vehicle-to-pedestrians [V2P] · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title