Apparatus and method for preventing falsification of black box data

• US 8,527,778 B2
• Filed: 05/27/2010
• Issued: 09/03/2013
• Est. Priority Date: 10/14/2009
• Status: Active Grant

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Kim, Moo Seop
• Primary Examiner(s): Darrow, Justin T
• Application Number:
  US12/788,526
• Publication Number:
  US 20110087893A1
• Time in Patent Office: 1,195 Days
• Field of Search: 713/170, 713/189
• US Class Current: 713/189
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures

Abstract

Provided are an apparatus and method for preventing falsification of black box data. The apparatus for preventing falsification of black box data includes a driving information storage module and a falsification prevention module. The driving information storage module stores a driving information data which is collected by a black box. The falsification prevention module encrypts the driving information data to generate a falsification determination data through a predetermined encryption mechanism, and stores the falsification determination data.

Claims

1. An apparatus for preventing falsification of black box data, comprising:

a driving information storage module storing driving information data which is collected by a black box;

a falsification prevention module encrypting the driving information data to generate falsification determination data through a predetermined encryption mechanism, and storing the falsification determination data; and

a falsification determination module verifying integrity of the stored driving information data to determine whether the stored driving information data is falsified, wherein the falsification determination module encrypts the stored driving information data through the predetermined encryption mechanism, and compares the encrypted driving information data and the falsification determination data to determine whether the stored driving information data is falsified.

2. The apparatus of claim 1, wherein the falsification prevention module performs encryption in real time or at predetermined intervals, and performs encryption when a user'"'"'s request is inputted or an external impulse is recognized.

3. The apparatus of claim 1, wherein the falsification prevention module stores the encrypted driving information data in the driving information storage module or a separate memory.

4. The apparatus of claim 1, wherein the falsification prevention module uses at least one encryption mechanism of a hash function, a keyed-Hash Message Authentication Code (HMAC), a symmetric key and a public key.

5. The apparatus of claim 1, wherein the falsification prevention module uses a unique number of the black box or a stored time of the driving information data when generating the falsification determination data.

6. The apparatus of claim 1, wherein the black box is disposed in a mobile object which comprises a vehicle, a ship and an airplane.

7. A falsification prevention module for black box data, comprising:

a key management unit providing a predetermined encryption mechanism;

an encryption processing unit encrypting driving information data, which is collected by a black box, through the encryption mechanism to generate falsification determination data;

a determination data storage unit storing the falsification determination data; and

a falsification verification module verifying integrity of the driving information data to check whether the driving information data is falsified, wherein the falsification verification module encrypts the driving information data through the predetermined encryption mechanism, and compares the encrypted driving information data and the falsification determination data to determine whether the stored driving information data is falsified.

8. The falsification prevention module of claim 7, wherein:

the falsification prevention module further comprises a separate storage unit storing the driving information data which is collected by the black box, or the determination data storage unit is divided into a first region storing the driving information data which is collected by the black box and a second region storing the falsification determination data.

9. The falsification prevention module of claim 7, wherein the determination data storage unit provides a tampering prevention function.

10. The falsification prevention module of claim 7, wherein the falsification verification module uses the encryption processing unit when verifying the integrity of the driving information data.

11. The falsification prevention module of claim 7, wherein the encryption processing unit reads out and encrypts the driving information data, which is collected in the black box, in predetermined capacity unit or predetermined interval unit.

12. A method for preventing falsification of black box data, the method comprising:

encrypting driving information data which is collected by a black box to generate falsification determination data through a predetermined encryption mechanism;

storing the falsification determination data;

providing an encryption mechanism for verifying integrity of the driving information data, when an authenticated user requests use of the driving information data, comprising;

encrypting the driving information data through the predetermined encryption mechanism;

comparing the falsification determination data and the encrypted driving information data; and

determining the driving information data as not being falsified when the falsification determination data is the same as the encrypted driving information data.

13. The method of claim 12, wherein the encrypting of a driving information data is performed in real time, at predetermined certain time or whenever a predetermined certain capacity is stored.

14. The method of claim 12, wherein the providing of an encryption mechanism comprises:

receiving request for use of the driving information data;

checking whether the request was sent from the authenticated user; and

providing the encryption mechanism when the request was sent from the authenticated user.

15. The method of claim 12, further comprising determining the driving information data as being falsified when the falsification determination data is not the same as the encrypted driving information data.

16. The method of claim 12, wherein the generating of a falsification determination data, a stored time of the driving information data and a unique number of the black box are used.