System for key control for in-vehicle network

Patent metadata

Field	Value
Publication number	US-11418328-B2
Application number	US-201916695962-A
Country	US
Kind code	B2
Filing date	Nov 26, 2019
Priority date	Nov 26, 2018
Publication date	Aug 16, 2022
Grant date	Aug 16, 2022

Abstract

Disclosed is a system for performing key management of an in-vehicle network. The key management system of the in-vehicle network includes a reception unit configured to receive a shared secret key of a central gateway and a domain gateway, a memory configured to store a program for performing key management of the in-vehicle network using the shared secret key, and a processor configured to execute the program. The processor generates a secret key to be stored in a node of the in-vehicle network using the shared secret key and a unique ID of the node.

First claim

What is claimed is:

1. A key management system of an in-vehicle network, the key management system comprising:
a reception unit configured to receive a shared secret key of a central gateway and a domain gateway;
a memory configured to store a program for performing key management of the in-vehicle network using the shared secret key; and
a processor configured to execute the program,
wherein the processor generates a secret key to be stored in a node of the in-vehicle network using the shared secret key and a unique ID of the node, and
wherein the processor issues a temporary message ID and performs communication during a registration or update process for the node.

2. The key management system of claim 1 , wherein the shared secret key is generated using a master key of the central gateway and a unique ID of the domain gateway.

3. The key management system of claim 1 , wherein the processor generates the temporary message ID using registration or update time information.

4. The key management system of claim 3 , wherein the processor generates an encryption/decryption key using the time information, the shared secret key, and the unique ID of the node, encrypts the temporary message ID using the generated encryption/decryption key, and transmits the encrypted temporary message ID to the node.

5. The key management system of claim 4 , wherein the processor encrypts a message ID to be processed by the node, information regarding a node ID matching the message ID, and time required for registration or update of the node using the encryption/decryption key and then transmits the encrypted message ID, node ID information, and required time.

6. The key management system of claim 4 , wherein the node generates an encryption/decryption key using the temporary message ID, the unique ID of the node, and information regarding time at which the registration or update is complete.

7. A key management system of an in-vehicle network, the key management system comprising:
a central gateway configured to generate a master key;
a domain gateway configured to receive a shared secret key from the central gateway and generate a secret key to be stored in nodes constituting the in-vehicle network; and
a node connected to the domain gateway over a legacy network or an Ethernet network,
wherein the domain gateway issues a temporary message ID using registration/update request message generation time information for the node and performs communication using the issued temporary message ID during a registration or update process for the node.

8. The key management system of claim 7 , wherein the central gateway generates the shared secret key using unique ID information of the domain gateway and the master key.

9. The key management system of claim 7 , wherein the domain gateway generates the secret key using a unique ID of the node and the shared secret key.

10. The key management system of claim 7 , wherein the domain gateway generates an encryption/decryption key using the time information, the shared secret key, and a unique ID of the node, encrypts the temporary message ID, and transmits the encrypted temporary message ID to the node.

11. The key management system of claim 10 , wherein the node generates a key using the time information, the secret key, and the unique ID of the node and checks the temporary message ID using the generated key.

12. The key management system of claim 10 , wherein the domain gateway encrypts a message ID to be processed by the node, information regarding a node ID matching the message ID, and information regarding time required for the registration or update process for the node using the encryption/decryption key and then transmits the encrypted message ID, node ID information, and time information to the node.

13. The key management system of claim 12 , wherein the node generates an encryption/decryption key using the temporary message ID, unique ID information of the node matching the temporary message ID, and information regarding time at which the registration or update process is complete and performs inter-node communication.

Assignees

• Electronics & Telecommunications Res Inst

Inventors

• Ju Hong Il
• Kim Dae Won
• Lee Jin Yong
• Jeon Boo Sun
• Chung Bo Heung
• Choi Byeong Cheol

Classifications

• H04L9/0822 Primary

  using key encryption key · CPC title

• H04L9/0891

  Revocation or update of secret information, e.g. encryption key update or rekeying · CPC title

• H04W4/48

  for in-vehicle communication · CPC title

• H04L9/0847

  involving identity based encryption [IBE] schemes · CPC title

• H04L9/0872

  using geo-location information, e.g. location data, time, relative position or proximity to other entities · CPC title