Biometric authenticated vehicle start with paired sensor to key intrustion detection
A system for secure sensor operation is provided. A sensor circuit includes a smart controller configured to provide trusted data. An operational circuit includes an operational controller configured to, responsive to receipt of a request from the sensor circuit, perform an identity verification using a cryptographic challenge to authenticate the sensor circuit before utilizing the trusted data.
1. A system for secure sensor operation, comprising:
a sensor circuit including a biometric sensor and a biometric controller configured to provide trusted data, including to:
receive biometric data of a user from the biometric sensor responsive to a user press of a button signaling a body control module, and
send a start request responsive to the biometric data matching to learned biometric data stored to a secure enclave of the biometric controller, wherein the biometric data remains localized to the biometric sensor and biometric controller and is not provided in the start request; and
a key circuit, connected to the sensor circuit via an internal connector, the key circuit including an operational controller configured to
responsive to receipt of the start request to start a vehicle over the internal connector from the biometric controller, send a challenge word over the internal connector to the sensor circuit to validate a pairing of the sensor circuit to the key circuit,
receive an encryption result from the sensor circuit over the internal connector based on the challenge word and a private key previously provided to the sensor circuit in a pairing mode, and
authenticate the start request as being received from the paired sensor circuit responsive to the encryption result to confirm according to a copy of the private key maintained by the key circuit that the sensor circuit has not been swapped out, thereby validating that the start request was received from the sensor circuit that is paired to the key circuit.
2. A non-transitory computer-readable medium comprising instructions for secure biometric-authenticated start of a vehicle that, when executed, cause a key controller of a key circuit and a biometric controller of a sensor circuit connected over an internal connector to:
in a pairing mode, generate a private key by the biometric controller of the sensor circuit and send the private key to the key controller;
store the private key to a secure enclave of the sensor circuit;
store a copy of the private key to a secure enclave of the key circuit;
in a consumer mode, receive biometric data from a biometric sensor responsive to a user press of a button signaling a body control module to start the vehicle;
send a start request, over the internal connector from the biometric controller to the key controller, responsive to the biometric data matching to learned biometric data stored to the secure enclave of the key circuit;
responsive to receipt of the start request over the internal connector from the biometric controller to the key controller, send a challenge word over the internal connector to the sensor circuit to validate a pairing of the sensor circuit to the key circuit;
receive an encryption result over the internal connector from the sensor circuit based on the challenge word and the private key previously provided to the sensor circuit in the pairing mode; and
authenticate the start request as being received from the paired sensor circuit responsive to the encryption result to confirm according to the copy of the private key maintained by the key circuit that the sensor circuit has not been swapped out, thereby validating that the start request was received from the sensor circuit that is paired to the key circuit.
3. The medium of claim 2 , further comprising instructions that, when executed, cause the key controller and the biometric controller to:
encrypt the private key by the biometric controller for transport to the key controller using an encryption key known to the key controller; and
decrypt the private key by the key controller using the encryption key.
4. The medium of claim 2 , further comprising instructions that, when executed, cause the biometric controller to encrypt the challenge word using the private key as stored to the sensor circuit to generate the encryption result, wherein to encrypt the challenge word includes to perform a bitwise operation on the challenge word using bits of the private key as a one-time pad.
5. The system of claim 1 , wherein the biometric controller is further configured to, in a programming mode, generate the private key and send the private key over the internal connector to a key controller of the key circuit, and the key controller is configured to, in a diagnostic mode, receive and store the private key.
6. The system of claim 5 , wherein the biometric controller is further configured to encrypt the private key for transport over the internal connector to the key controller using an encryption key known to the key controller, and the key controller is further configured to decrypt the private key using the encryption key.
7. The system of claim 1 , wherein the sensor circuit is further configured to encrypt the challenge word using the private key as stored to the sensor circuit to generate the encryption result.
8. The system of claim 7 , wherein to encrypt the challenge word includes to perform a bitwise operation on the challenge word using bits of the private key as a one-time pad.
9. The system of claim 7 , wherein the key circuit is further configured to one or more of:
confirm the encryption result by performing a decryption operation using the private key on the encryption result to generate a decrypted value and comparing the decrypted value to the challenge word; or
encrypt the challenge word using the private key as stored to the key circuit to determine a second result, and confirm the encryption result by comparing the encryption result to the second result.
10. A method for secure biometric-authenticated start of a vehicle using a key circuit connected to a sensor circuit via an internal connector, comprising:
responsive to receipt of a start request to start the vehicle over the internal connector from a biometric controller of the sensor circuit to a key controller of the key circuit, sending a challenge word over the internal connector to the sensor circuit to validate a pairing of the sensor circuit to the key circuit;
receiving an encryption result from the sensor circuit based on the challenge word and a private key previously provided to the sensor circuit in a pairing mode; and
authenticating the start request as being received from the paired sensor circuit responsive to the encryption result to confirm according to a copy of the private key maintained by the key circuit that the sensor circuit has not been swapped out, thereby validating that the start request was received from the sensor circuit that is paired to the key circuit.
11. The method of claim 10 , further comprising:
storing the private key to a secure enclave of the sensor circuit;
storing the copy of the private key to a secure enclave of the key circuit;
receiving biometric data from a biometric sensor responsive to a user press of a button signaling a body control module; and
sending the start request over the internal connector responsive to the biometric data matching to learned biometric data stored to the secure enclave of the key circuit,
wherein the biometric data remains localized to the biometric sensor and biometric controller and is not provided in the start request.
12. The method of claim 11 , further comprising, in the pairing mode, generating the private key by the biometric controller of the sensor circuit and sending the private key over the internal connector to the key controller.
13. The method of claim 12 , further comprising:
encrypting the private key by the biometric controller for transport over the internal connector to the key controller using an encryption key known to the key controller; and
decrypting the private key by the key controller using the encryption key.
14. The method of claim 11 , further comprising encrypting the challenge word using the private key as stored to the sensor circuit to generate the encryption result.
15. The method of claim 14 , wherein to encrypt the challenge word includes to perform a bitwise operation on the challenge word using bits of the private key as a one-time pad.
16. The method of claim 14 , further comprising confirming the encryption result by one of:
performing a decryption operation using the private key on the encryption result to generate a decrypted value and comparing the decrypted value to the challenge word; or
encrypting the challenge word using the private key as stored to the key controller to determine a second result and confirming the encryption result by comparing the encryption result to the second result.
17. The medium of claim 2 , further comprising instructions that, when executed, cause the key controller to confirm the encryption result by one of to:
perform a decryption operation using the private key on the encryption result to generate a decrypted value and comparing the decrypted value to the challenge word; or
encrypt the challenge word using the private key as stored to the key controller to determine a second result and confirming the encryption result by comparing the encryption result to the second result.