Certificate-Based Digital Key Creation for Fleet Vehicle Pairing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing method for creating a vehicle-owner digital key in a fleet management system requires the user to input a vehicle pairing code on the vehicle's central control screen, necessitating prior possession of vehicle keys, leading to complexity and inefficiency in vehicle delivery and user experience.
Innovation Solution
A method and apparatus for creating a digital key using a fleet pairing public-private key pair, where a terminal public key certificate is signed and verified, followed by a vehicle public key certificate exchange, eliminating the need for manual input of vehicle pairing codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the existing method requiring vehicle pairing code input is used, then security verification is ensured, but vehicle delivery efficiency and user experience deteriorate due to complexity
Solution Approach 1:
The patent applies preliminary action by pre-establishing a fleet management public-private key pair for each vehicle before delivery. The fleet management private key is used to sign the vehicle public key, creating a vehicle public key certificate that is stored in the vehicle. This preliminary setup eliminates the need for complex pairing code verification during delivery, allowing terminal devices to directly authenticate and create digital keys through certificate-based verification, thereby improving vehicle delivery efficiency while maintaining security.
2Ease of operation
If the existing method requiring prior vehicle key possession is used, then trust establishment is ensured, but ease of operation deteriorates due to restrictive conditions
Solution Approach 1:
The patent introduces an intermediary mechanism by using certificate-based authentication as a mediator between the terminal device and the vehicle. Instead of requiring direct physical key possession or complex pairing code input, the terminal device authenticates to the vehicle by verifying the vehicle public key certificate (which was pre-signed by the fleet management private key). This intermediary certificate system enables first-time users to access vehicles conveniently without restrictive conditions, while maintaining trust through cryptographic verification.
3Reliability
If manual vehicle pairing code input is required, then authentication security is maintained, but loss of time increases due to additional verification steps
Solution Approach 1:
The patent replaces the mechanical interaction of manual pairing code input and verification with an automated cryptographic system. The terminal device automatically retrieves and verifies the vehicle public key certificate using the pre-established fleet management public key, eliminating the need for manual code entry. This substitution maintains authentication security through cryptographic verification while significantly reducing the time required for digital key creation, as the verification process is automated and does not require user interaction with physical interfaces.
Data Source
AI summary
A method for creating a digital key includes: receiving a terminal public key certificate sent by a target terminal, in which the terminal public key certificate is obtained by signing a terminal public key of the target terminal by using a fleet pairing private key in a fleet pairing public-private key pair associated with the target vehicle, performing a signature verification on the terminal public key certificate by using a fleet pairing public key in the fleet pairing public-private key pair, sending a vehicle public key certificate of the target vehicle to the target terminal in a case that the terminal public key is obtained after the signature verification is successful, and determining that a digital key corresponding to the target terminal for controlling the target vehicle is successfully created in response to receiving a successful signature verification notice sent by the target terminal.