Lightweight remote vehicle key identity authentication and key updating mechanism
By using elliptic curve cryptography for lightweight authentication and key updates, the security vulnerabilities and flexibility issues of traditional remote car key authentication are resolved, achieving efficient and secure remote car key authentication and key management.
Patent Information
- Application Number
- CN202511078423.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-08-01
- Publication Date
- 2025-10-28
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
Traditional remote car key authentication mechanisms have security vulnerabilities, such as being susceptible to man-in-the-middle attacks, having inflexible key updates, being unable to cope with user changes and multi-user access control, and failing to meet the security requirements of the Internet of Vehicles environment.
The system employs lightweight elliptic curve cryptography for authentication and updates the key when preset conditions are met, including generating and distributing new encryption keys. It leverages the security and lightweight nature of elliptic curve cryptography, combined with digital signature verification and timestamp challenge mechanisms.
It provides strong security protection, resists man-in-the-middle attacks, reduces computational complexity and energy consumption, supports dynamic key updates, enhances system robustness and adaptability, and achieves the best balance between performance and resource utilization.
Smart Images
Figure 0B2818F7-E75A-4CD9-AA6C-E0A53A3A744A 
Figure IMAGE_0B73DD2D-7303-4897-A56D-E4364BA98A5E 
Figure IMAGE_B525FDDB-5DD9-4E6A-B67A-433AC49184F8
Abstract
Description
Technical Field
[0001] This invention relates to the field of car key authentication technology, specifically a lightweight remote car key authentication and key update mechanism. Background Technology
[0002] With the rapid development of intelligent vehicles and vehicle-to-everything (V2X) technology, the security of remote car keys, as a key component for realizing functions such as keyless entry and start, vehicle status monitoring, and remote control, has become particularly important. However, traditional remote car key authentication mechanisms have some significant security vulnerabilities and technical limitations: 1. Traditional identity authentication mechanisms based on symmetric encryption algorithms are vulnerable to man-in-the-middle attacks. Since symmetric encryption relies on both parties sharing the same key, once the key is leaked or guessed, the security of the entire system will be seriously threatened. 2. In existing technologies, the key update process is often not flexible enough and cannot cope with frequent changes, such as user changes or vehicle ownership transfers. In addition, the lack of an effective key update mechanism may increase the risk of long-term exposed keys, affecting the long-term security of the system. 3. Current identity authentication mechanisms fail to fully consider the specific needs of different application scenarios, such as multi-user access control in car-sharing services and secure communication between devices in a vehicle-to-everything (V2X) environment. These scenarios require more efficient, flexible, and easily integrated security solutions. Summary of the Invention
[0003] (a) Technical problems to be solved To address the shortcomings of existing technologies, this invention provides a lightweight remote car key authentication and key update mechanism to solve the problems mentioned in the background art.
[0004] (II) Technical Solution To achieve the above objectives, the present invention provides the following technical solution: a lightweight remote car key authentication method, comprising the following steps: After receiving a user trigger signal, the remote car key generates a one-time authentication request containing its own unique identifier and a first random number; The remote car key sends the authentication request to the target vehicle via a wireless communication interface; After receiving the authentication request, the vehicle verifies whether the identity identifier exists in the authorization list; If the identity identifier is valid, the vehicle generates a second random number and generates a challenge response based on the first and second random numbers using a predefined lightweight encryption algorithm; The vehicle will return the challenge response to the remote car key; The remote car key decrypts and verifies the received challenge response. If the verification is successful, it confirms that the two-way identity authentication between the vehicle and the remote car key is complete, allowing the execution of vehicle control operations.
[0005] Preferably, the lightweight encryption algorithm employs elliptic curve cryptography, where elliptic curves are typically defined over finite fields and have a general equation of the following form: ; in and It is a constant that satisfies certain conditions to ensure that the curve has no singularities. In cryptography, the set of points on this curve forms an Abelian group, which supports operations such as point addition and scalar multiplication.
[0006] Preferably, the point addition is: given two distinct points and Find a third point on a straight line that passes through these two points and intersects the curve. Then take that point about The point of symmetry of the axis is used as As a result, let , Let the sum of two points on an elliptic curve be... for: .
[0007] Preferably, the scalar multiplication is performed given a point on an elliptic curve. and an integer The formula for scalar multiplication is: .
[0008] A key update mechanism for vehicles, applied to the aforementioned authentication method, is characterized by comprising the following steps: The vehicle generates a new encryption key when preset conditions are met; The vehicle terminal sends the new key to the remote car key through an established secure communication channel; After receiving and verifying the validity of the new key, the remote car key replaces the original key with the new key and uses the new key for encryption and decryption operations in subsequent communications.
[0009] Preferably, the preset conditions include key lifecycle expiration, detection of potential security threats or abnormal access behavior, change of vehicle ownership, user-initiated key update request, and remote car key re-pairing or binding.
[0010] Preferably, the encryption key is the public key in an asymmetric key pair, and the generation of the public key includes curve parameters such as: finite field. Base point ; Private key It is a random integer, the public key The result was obtained through scalar multiplication: .
[0011] Preferably, the secure communication channel is established based on an authentication process implemented using pre-shared keys or elliptic curve cryptography.
[0012] Preferably, after receiving a new key, the remote car key verifies the legitimacy of the key's origin through digital signature verification.
[0013] Preferably, a timestamp or random number challenge mechanism is introduced during the key update process.
[0014] Beneficial effects Compared with existing technologies, this invention provides a lightweight remote car key authentication and key update mechanism, which has the following advantages: 1. This invention provides strong security by using elliptic curve cryptography. Elliptic curve cryptography has high security because it is based on the discrete logarithm problem of elliptic curves. At the same time, it requires a short key length and can effectively resist a variety of security threats, including man-in-the-middle attacks.
[0015] 2. This invention employs lightweight encryption algorithms, such as point addition and scalar multiplication in elliptic curve cryptography, which significantly reduces computational complexity and energy consumption while ensuring security.
[0016] 3. The present invention simplifies the implementation process with its predefined encryption algorithm and is optimized for specific application scenarios, thereby achieving the best balance between performance and resource utilization.
[0017] 4. This invention provides an effective key update mechanism that allows the vehicle to generate and distribute a new encryption key to the remote car key when preset conditions are met. This mechanism not only supports dynamic updates but also prevents replay attacks, further enhancing the robustness and adaptability of the system. Attached Figure Description
[0018] The accompanying drawings, which are included to provide a further understanding of the invention and form part of this application, illustrate exemplary embodiments of the invention and, together with their description, serve to explain the invention and do not constitute an undue limitation thereof. In the drawings: Figure 1 This is a flowchart of the lightweight remote car key authentication method of the present invention. Detailed Implementation
[0019] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0020] Specific implementation examples are given below.
[0021] Example 1: Please see Figure 1 This invention provides a lightweight remote car key authentication method, the steps of which include: After receiving a user trigger signal, the remote car key generates a one-time authentication request containing its own unique identifier and a first random number; The remote car key sends the authentication request to the target vehicle via a wireless communication interface; After receiving the authentication request, the vehicle verifies whether the identity identifier exists in the authorization list; If the identity identifier is valid, the vehicle generates a second random number and generates a challenge response based on the first and second random numbers using a predefined lightweight encryption algorithm; The vehicle will return the challenge response to the remote car key; The remote car key decrypts and verifies the received challenge response. If the verification is successful, it confirms that the two-way identity authentication between the vehicle and the remote car key is completed, allowing the execution of vehicle control operations. Lightweight encryption algorithms employ elliptic curve cryptography, where elliptic curves are typically defined over finite fields and have a general equation of the following form: ; in and It is a constant that satisfies certain conditions to ensure that the curve has no singularities. In cryptography, the set of points on this curve forms an Abelian group, which supports operations such as point addition and scalar multiplication. Specifically, by using elliptic curve cryptography, this mechanism provides strong security. Elliptic curve cryptography is highly secure because it is based on the discrete logarithm problem of elliptic curves, and at the same time, it requires a short key length, which can effectively resist a variety of security threats, including man-in-the-middle attacks.
[0022] Point addition: Given two distinct points and Find a third point on a straight line that passes through these two points and intersects the curve. Then take that point about The point of symmetry of the axis is used as As a result, let , Let the sum of two points on an elliptic curve be... for: ; Scalar multiplication: Given a point on an elliptic curve and an integer The formula for scalar multiplication is: ; Specifically, lightweight encryption algorithms, such as point addition and scalar multiplication in elliptic curve cryptography, are used to significantly reduce computational complexity and energy consumption while ensuring security. Predefined encryption algorithms simplify the implementation process and are optimized for specific application scenarios, thereby achieving the best balance between performance and resource utilization.
[0023] A key update mechanism for vehicles, applied in the authentication method as described in claims 1-4, characterized by comprising the following steps: The vehicle generates a new encryption key when preset conditions are met; The vehicle terminal sends the new key to the remote car key through an established secure communication channel; After receiving and verifying the validity of the new key, the remote car key replaces the original key with the new key and uses the new key for encryption and decryption operations in subsequent communications; Preset conditions include key lifecycle expiration, detection of potential security threats or abnormal access behavior, change of vehicle ownership, user-initiated key update request, and remote car key re-pairing or binding; The encryption key is the public key in an asymmetric key pair. The generation of this public key involves curve parameters including: a finite field. Base point ; Private key It is a random integer, the public key The result was obtained through scalar multiplication: ; Secure communication channels are established based on authentication processes implemented using pre-shared keys or elliptic curve cryptography. After receiving a new key, the remote car key verifies the legitimacy of the key's origin through digital signature verification. Introduce a timestamp or random number challenge mechanism during the key update process; Specifically, an effective key update mechanism is provided, which allows the vehicle to generate and distribute new encryption keys to the remote car key when preset conditions are met. This mechanism not only supports dynamic updates but also prevents replay attacks, further enhancing the robustness and adaptability of the system.
[0024] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The embodiments and descriptions in the specification are merely illustrative of the principles of the invention. Various changes and modifications can be made to the invention without departing from its spirit and scope, and all such changes and modifications fall within the scope of the claimed invention.
Claims
1. A lightweight remote car key authentication method, characterized by the following steps: include: After receiving a user trigger signal, the remote car key generates a one-time authentication request containing its own unique identifier and a first random number; The remote car key sends the authentication request to the target vehicle via a wireless communication interface; After receiving the authentication request, the vehicle verifies whether the identity identifier exists in the authorization list; If the identity identifier is valid, the vehicle generates a second random number and generates a challenge response based on the first and second random numbers using a predefined lightweight encryption algorithm; The vehicle will return the challenge response to the remote car key; The remote car key decrypts and verifies the received challenge response. If the verification is successful, it confirms that the two-way identity authentication between the vehicle and the remote car key is complete, allowing the execution of vehicle control operations.
2. The lightweight remote car key authentication and key update mechanism according to claim 1, characterized in that, The lightweight encryption algorithm employs elliptic curve cryptography, where elliptic curves are typically defined over finite fields and have a general equation of the following form: ； in and It is a constant that satisfies certain conditions to ensure that the curve has no singularities. In cryptography, the set of points on this curve forms an Abelian group, which supports operations such as point addition and scalar multiplication.
3. The lightweight remote car key authentication and key update mechanism according to claim 2, characterized in that, The point addition: given two distinct points and Find a third point on a straight line that passes through these two points and intersects the curve. Then take that point about The point of symmetry of the axis is used as As a result, let , Let the sum of two points on an elliptic curve be... for: 。 4. The lightweight remote car key authentication and key update mechanism according to claim 2, characterized in that, The scalar multiplication: given a point on an elliptic curve and an integer The formula for scalar multiplication is: 。 5. A key update mechanism for vehicles, applied in the authentication method as described in claims 1-4, characterized in that, Includes the following steps: The vehicle generates a new encryption key when preset conditions are met; The vehicle terminal sends the new key to the remote car key through an established secure communication channel; After receiving and verifying the validity of the new key, the remote car key replaces the original key with the new key and uses the new key for encryption and decryption operations in subsequent communications.
6. A key update mechanism for vehicles according to claim 5, characterized in that, The preset conditions include key lifecycle expiration, detection of potential security threats or abnormal access behavior, change of vehicle ownership, user-initiated key update request, and remote car key re-pairing or binding.
7. A key update mechanism for vehicles according to claim 5, characterized in that, The encryption key is the public key in an asymmetric key pair. The generation of the public key involves curve parameters including: finite field. Base point ; private key It is a random integer, the public key The result was obtained through scalar multiplication: 。 8. A key update mechanism for vehicles according to claim 5, characterized in that, The secure communication channel is established based on an authentication process implemented using pre-shared keys or elliptic curve cryptography.
9. A key update mechanism for vehicles according to claim 5, characterized in that, Upon receiving a new key, the remote car key verifies the legitimacy of the key's origin through digital signature verification.
10. A key update mechanism for vehicles according to claim 5, characterized in that, Introduce a timestamp or random number challenge mechanism during the key update process.