Communications of the ACM
Secure Updates For Navigation Systems & Co
Researchers at the Fraunhofer Research Institution for Applied and Integrated Security (AISEC) have developed a way to enable a vehicle navigation system to automatically download updates of map material after receiving instructions from the driver.
Manufacturers currently store cryptographic keys on each device, which is used to download updates or communicate with other control units, and when a request is made a device must first use the right key to prove that it is entitled to receive one.
"We have developed a trust anchor--a device that securely stores cryptographic keys," says AISEC researcher Alexander Kiening. "Control units can use these keys, whether to request manufacturer updates or to communicate with one another."
To demonstrate that the request is really coming from the navigation system and prove that it has not been manipulated, the trust anchor checks whether the software in the device matches the valid version. When a query is successful, the navigation system will receive the key and can then use it to establish a secure virtual private network data channel to the manufacturer.
From Fraunhofer-Gesellschaft
View Full Article
No entries found