Digital Key Authentication via Secure Element in Power-Off State

Solution Overview

Problem

Existing digital key systems cannot perform identity authentication when a terminal device is in a power-off state, leading to a security vulnerability.

Innovation Solution

A method that allows identity authentication of a digital key by pre-authenticating a user's identity and storing the authentication information in a secure element before the terminal device enters a power-off state, enabling verification even when the device is powered off.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If identity authentication is performed using the identity authentication system in the terminal device, then the security of the digital key is enhanced, but the digital key cannot be used when the terminal device is in a power-off state

Engineering Contradiction:

Improvesecurity of digital keyVSAvoidusability in power-off state

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent performs identity authentication in advance when the terminal device is in a working state, generates authentication information, and stores it in the secure element before power-off. This preliminary action ensures that authentication is already completed and stored, allowing the digital key to be used later even when the device is powered off, thus resolving the contradiction between security and usability in power-off state

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces a secure element as an intermediary component that can independently store authentication information and participate in authentication processes without requiring the main terminal device to be powered on. The secure element acts as a mediator between the digital key and the vehicle, enabling authentication to occur even when the terminal device is in a power-off state, thus resolving the contradiction between security and usability

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If identity authentication is not performed when the terminal device is in a power-off state, then the digital key can be used, but a security vulnerability exists allowing unauthorized access

Engineering Contradiction:

Improveusability in power-off stateVSAvoidsecurity of digital key

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent performs identity authentication in advance when the terminal device is in a working state, generates authentication information, and stores it in the secure element before power-off. This preliminary action ensures that authentication is already completed and stored, allowing the digital key to be used later even when the device is powered off, thus resolving the contradiction between security and usability in power-off state

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent prepares authentication information in advance and stores it in the secure element before the terminal device enters power-off state. This beforehand cushioning creates a security buffer that remains valid during power-off state, preventing security vulnerabilities while maintaining usability. The pre-prepared authentication information acts as a cushion that protects against security risks during the period when the device is powered off

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS12319229B2Method for authenticating identity of digital key, terminal device, and medium

Publication Date: 2025.06.03 HUAWEI TECH CO LTD

AI summary

A method for authenticating an identity of a digital key, a terminal, and a medium, where before a second terminal enters a preset operating state from a non-preset operating state, identity authentication is first performed on a user using an identity authentication system of the second terminal, and obtained identity authentication information is stored in a secure element of the second terminal. Then, when a digital key in the second terminal is to be used, the identity authentication information stored in the secure element of the second terminal is sent to a first terminal, and the first terminal may perform verification based on the identity authentication information to determine whether the user using the digital key in the second terminal is an authorized holder of the second terminal.