Method and system for verifying software platform of vehicle

• US 8,327,153 B2
• Filed: 08/10/2010
• Issued: 12/04/2012
• Est. Priority Date: 12/04/2009
• Status: Active Grant

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Lee, Jeong-Woo, Lee, Shin Kyung, Kwon, Oh Cheon
• Primary Examiner(s): DADA, BEEMNET W
• Application Number:
  US12/853,672
• Publication Number:
  US 20110138188A1
• Time in Patent Office: 847 Days
• Field of Search: 713/176, 713/180, 713/187, 713/193, 713/194, 726/26, 726/30
• US Class Current: 713/187
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A system for verifying a software platform of a vehicle including at least one electronic control unit receives a first final confirmation value corresponding to a hash value of software measured in the electronic control unit from an integrated security apparatus inside the vehicle and extends a hash value of normally operated software received from a software manufacturer of the electronic control unit to generate a second final confirmation value. Next, the system verifies the software platform of the vehicle based on results obtained by comparing the first final confirmation value with the second final confirmation value.

Claims

1. A method for verifying a software platform of a vehicle including at least one electronic control unit, comprising:

receiving a first final confirmation value corresponding to a hash value of software measured in the electronic control unit from an integrated security apparatus inside the vehicle;

extending a hash value of normally operated software received from a software manufacturer of the electronic control unit based on an initial value and data processing sequence input by a driver of the vehicle to generate a second final confirmation value;

verifying the software platform of the vehicle based on results obtained by comparing the first final confirmation value with the second final confirmation value, and

encrypting the initial value and the data processing sequence input by the driver of the vehicle and transmitting them to the integrated security apparatus, prior to the receiving, wherein the first final confirmation value is generated by extending the measured hash value of software with the initial value and the data processing sequence in a trusted platform module included in the integrated security apparatus.

2. The method of claim 1, wherein:

the verifying includes

determining that the software of the electronic control unit inside the vehicle is changed when the first final confirmation value is not equal to the second final confirmation value; and

informing the driver that the software is changed.

3. The method of claim 1, wherein:

the verifying includes

determining that the software of the electronic control unit inside the vehicle is normally operated when the first final confirmation value is equal to the second final confirmation value.

4. The method of claim 1, wherein:

the data processing sequence corresponds to a sequence extending the hash value of software in the integrated security apparatus.

5. A system for verifying a software platform of a vehicle including at least one electronic control unit, comprising:

a trusted platform module that extends a hash value of normally operated software in the electronic control unit to generate a reference confirmation value; and

an integrity verification module that receives a final confirmation value corresponding to a hash value of software measured in the electronic control unit from an integrated security apparatus inside the vehicle and verifies the software platform of the vehicle based on results obtained by comparing the final confirmation value with the reference confirmation value,

wherein the integrated security apparatus includes an integrity verification processing module that collects the hash value of software measured in the electronic control apparatus and requests the extension of the collected hash value, and a trusted platform module that extends the hash value based on an initial value and a data processing sequence that are input by the driver of the vehicle to generate the final confirmation value.

6. The system of claim 5, wherein:

the integrity verification module

determines that the software of the electronic control unit inside the vehicle is changed when the final confirmation value is not equal to the reference confirmation value.

7. The system of claim 5, wherein:

the integrity verification module

determines that the software of the electronic control unit inside the vehicle is normally operated when the first final confirmation value is equal to the second final confirmation value.

8. The system of claim 5, wherein:

the trusted platform module

includes a register that stores results verifying integrity of the software platform.

9. The system of claim 5, wherein:

the electronic control unit

includes an integrity measurement agent that measures a hash value of software.

10. The system of claim 5, wherein:

the data processing sequence corresponds to a sequence that extends the hash value of software according to a request from the integrity verification processing module to the trusted platform module.

11. The system of claim 5, wherein:

the reference confirmation value corresponds to a hash value of normally operated software provided from a software manufacturer of the electronic control unit.