Digital Key Pairing via Fleet Certificates Without Pairing Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing method for creating a digital key in a fleet management system requires the vehicle user to input a vehicle pairing code, necessitating possession of other vehicle keys, leading to complexity and low efficiency in vehicle delivery and user experience.
Innovation Solution
A method involving a fleet pairing public-private key pair is introduced, allowing the vehicle user to create a digital key without inputting a vehicle pairing code by using a terminal public key certificate and vehicle public key certificate, ensuring mutual trust and secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the vehicle user inputs a vehicle pairing code through the central control screen, then the digital key creation process can be completed with mutual trust authorization, but the vehicle user must possess other vehicle keys which increases process complexity and reduces efficiency
Solution Approach 1:
The fleet management system pre-establishes a fleet pairing public-private key pair for each vehicle and stores the fleet pairing public key in the vehicle and the fleet pairing private key in the cloud. This preliminary cryptographic infrastructure enables direct digital key creation without requiring the user to first possess other vehicle keys or go through complex pairing code verification, thus reducing process complexity while maintaining security
Solution Approach 2:
The patent introduces a cloud-based fleet management system as an intermediary that issues terminal public key certificates to users. Instead of requiring direct peer-to-peer key exchange between user device and vehicle, the cloud acts as a trusted mediator that verifies user identity and issues certificates, simplifying the overall process while ensuring mutual trust authorization
2Reliability
If the vehicle user must possess other vehicle keys to create a digital key, then security is maintained through verification, but vehicle delivery efficiency and user experience deteriorate
Solution Approach 1:
The cloud-based fleet management system serves as a trusted intermediary that issues terminal public key certificates without requiring users to possess physical vehicle keys. The cloud verifies user identity and issues cryptographic credentials that enable direct digital key creation, maintaining security while eliminating the requirement for other vehicle keys and thus improving vehicle delivery efficiency
Solution Approach 2:
The patent replaces the mechanical requirement of possessing physical vehicle keys with a cryptographic system based on terminal public key certificates. Instead of requiring users to have physical keys to initiate the pairing process, the system uses cloud-issued digital certificates, substituting mechanical key possession with cryptographic authentication, thereby improving efficiency while maintaining security
3Productivity
If a fleet pairing public-private key pair is introduced for direct digital key creation, then vehicle delivery efficiency and user convenience are improved, but the cryptographic system complexity increases
Solution Approach 1:
The patent extracts the complex cryptographic operations to the cloud-based fleet management system, keeping the vehicle and user device sides relatively simple. The cloud handles key pair generation, certificate issuance, and verification, while the vehicle only needs to store and verify fleet pairing public keys. This extraction of complexity to a centralized system improves delivery efficiency while managing cryptographic complexity in a controllable manner
Solution Approach 2:
The fleet pairing public-private key pair serves multiple functions: it enables the cloud to issue terminal public key certificates, allows verification of user credentials, and facilitates direct digital key creation without requiring other vehicle keys. This multi-functionality of the cryptographic system justifies the increased complexity by providing comprehensive security and efficiency improvements across multiple operations
Data Source
Figure 1~3
Figure 4~5
Figure 6~7
AI summary
A method for creating a digital key includes: receiving (S501) a terminal public key certificate sent by a target terminal, in which the terminal public key certificate is obtained by signing a terminal public key of the target terminal by using a fleet pairing private key in a fleet pairing public-private key pair associated with the target vehicle; performing (S502) a signature verification on the terminal public key certificate by using a fleet pairing public key in the fleet pairing public-private key pair; sending (S503) a vehicle public key certificate of the target vehicle to the target terminal in a case that the terminal public key is obtained after the signature verification is successful; and determining (S504) that a digital key corresponding to the target terminal for controlling the target vehicle is successfully created in response to receiving a successful signature verification notice sent by the target terminal.