Method and system for symmetric key distribution between electronic vehicle components
A method and system for public key infrastructure (PKI) in software defined vehicles enables secure communication between electronic components. The method includes establishing trust between multiple electronic components through a certificate history comprising signed public keys stored on each component. Once trust is established through attestation between components, the method utilizes signed Diffie-Hellman key exchange to securely distribute symmetric keys to the trusted components. These symmetric keys enable authenticated communication between the components to control vehicle systems and functions. The system operates locally without requiring internet connectivity or specialized service tools, allowing for secure field replacement and upgrading of components while maintaining system security through verification of component authenticity and prevention of counterfeit hardware.
1. A method for public key infrastructure for serviceable electronic components, the method comprising:
identifying a plurality of electronic components in electronic communication with each other;
establishing that each of the plurality of electronic components is a trusted device according to a certificate history including a plurality of signed public keys stored upon the respective electronic component;
utilizing signed Diffie-Hellman key exchange to distribute symmetric keys to each of the plurality of electronic components, wherein utilizing the Diffie-Hellman key exchange to distribute symmetric keys to each of the plurality of electronic components includes establishing a shared secret between the plurality of electronic components and establishing the shared secret includes:
iteratively signing public keys of the plurality of electronic components with private keys of the plurality of electronic components to create signed public keys; and
defining the shared secret based upon the signed public keys of the plurality of electronic components; and
communicating between the plurality of electronic components with the symmetric keys to achieve tangible functions that may be provided by the plurality of electronic components.
2. The method of claim 1 , wherein establishing that each of the plurality of electronic components is the trusted device according to the certificate history includes creating and storing upon the respective electronic component a signed public key of an end product manufacturer, a signed public key of a component manufacturer, and a signed public key of the electronic component.
3. The method of claim 2 , wherein creating and storing upon the respective electronic component the signed public key of the end product manufacturer, the signed public key of the component manufacturer, and the signed public key of the electronic component includes:
the end product manufacturer self-signing the public key of the end product manufacturer;
the end product manufacturer signing the public key of the component manufacturer; and
the component manufacturer signing the public key of the device.
4. The method of claim 1 , wherein the plurality of electronic components is installed to a vehicle; and
wherein communicating between the plurality of electronic components includes providing electronic commands to a system of the vehicle affecting operation of the vehicle.
5. The method of claim 4 , wherein the system of the vehicle includes one of a navigation system, a braking system, a system controlling an electric motor, and an infotainment system.
6. The method of claim 1 , wherein establishing that each of the plurality of electronic components is the trusted device includes utilizing attestation between the plurality of electronic components.
7. The method of claim 6 , wherein utilizing the attestation includes each of the electronic components challenging each other to provide responses signed by private keys and determining authenticity of the devices based upon validity of the responses.
8. The method of claim 6 , wherein the plurality of electronic components are each connected to a central compute unit providing the electronic communication;
wherein a first component of the plurality of electronic components is established as trusted by being soldered to the central compute unit; and
wherein utilizing the attestation includes the first component of the plurality of electronic components challenging a second component of the plurality of electronic components and defining the second component as trusted based upon a reply from the second component.
9. A method for public key infrastructure for serviceable electronic components in a vehicle, the method comprising:
identifying a plurality of electronic components in electronic communication with each other;
establishing that each of the plurality of electronic components is a trusted device according to a certificate history including a plurality of signed public keys stored upon the respective electronic component, wherein establishing that each of the plurality of electronic components is the trusted device according to the certificate history includes creating and storing upon the respective electronic component a signed public key of an end product manufacturer, a signed public key of a component manufacturer, and a signed public key of the electronic component and creating and storing upon the respective electronic component the signed public key of the end product manufacturer, the signed public key of the component manufacturer, and the signed public key of the electronic component includes:
the end product manufacturer self-signing the public key of the end product manufacturer;
the end product manufacturer signing the public key of the component manufacturer; and
the component manufacturer signing the public key of the device;
utilizing Diffie-Hellman key exchange to distribute symmetric message authentication codes to each of the plurality of electronic components; and
communicating between the plurality of electronic components with the symmetric message authentication codes to achieve tangible functions in a system of the vehicle affecting operation of the vehicle that may be provided by the plurality of electronic components.
10. The method of claim 9 , wherein establishing that each of the plurality of electronic components is the trusted device includes utilizing attestation between the plurality of electronic components.
11. The method of claim 10 , wherein utilizing the attestation includes each of the electronic components challenging each other to provide responses signed by private keys and determining authenticity of the devices based upon validity of the responses.
12. The method of claim 10 , wherein the plurality of electronic components are each connected to a central compute unit providing the electronic communication; and
wherein a first component of the plurality of electronic components is established as trusted by being soldered to the central compute unit; and
wherein utilizing the attestation includes the first component of the plurality of electronic components challenging a second component of the plurality of electronic components and defining the second component as trusted based upon a reply from the second component.
13. The method of claim 9 , wherein utilizing the Diffie-Hellman key exchange to distribute symmetric message authentication codes to each of the plurality of electronic components includes establishing a shared secret between the plurality of electronic components.
14. The method of claim 13 , wherein establishing the shared secret includes:
iteratively signing public keys of the plurality of electronic components with private keys of the plurality of electronic components to create signed public keys; and
defining the shared secret based upon the signed public keys of the plurality of electronic components.
15. A system for public key infrastructure for serviceable electronic components, the system comprising:
a plurality of electronic components in electronic communication with each other;
wherein each of the plurality of electronic components have been identified as trusted devices according to a certificate history including a plurality of signed public keys; and
wherein each of the plurality of electronic components are configured for utilizing a Diffie-Hellman key exchange to distribute symmetric message authentication codes, wherein utilizing the Diffie-Hellman key exchange to distribute symmetric keys to each of the plurality of electronic components includes establishing a shared secret between the plurality of electronic components and establishing the shared secret includes:
iteratively signing public keys of the plurality of electronic components with private keys of the plurality of electronic components to create signed public keys; and
defining the shared secret based upon the signed public keys of the plurality of electronic components.
16. The system of claim 15 , wherein the plurality of electronic components are located on a vehicle.
17. The system of claim 15 , wherein establishing that each of the plurality of electronic components is the trusted devices includes utilizing attestation between the plurality of electronic components.
18. The system of claim 17 , wherein utilizing the attestation includes each of the electronic components challenging each other to provide responses signed by private keys and determining authenticity of the devices based upon validity of the responses.