Dynamic Encryption Key Management for Lock Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing lock devices with encrypted keys face challenges in maintaining long-term security due to static key lists, which can be compromised if not regularly updated, and require manual intervention for key modifications, posing risks of security breaches and inefficient management.

Innovation Solution

A method for dynamically updating encryption keys in lock devices by generating and transmitting encrypted messages containing new keys or key modification identifiers, using a common key and algorithm selection, and updating these within the secured module, ensuring secure and automatic key substitution or addition without manual intervention.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If static key lists are used in lock devices, then the device complexity is reduced and ease of operation is improved, but long-term security is compromised and reliability deteriorates

Engineering Contradiction:
Improvelong-term securityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements dynamic key lists that are automatically updated through encrypted messages transmitted from a remote site. The key management system transitions from static to dynamic, allowing keys to be added, removed, or modified remotely without manual intervention, thereby maintaining security while reducing operational complexity

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The lock device autonomously manages its key list by receiving encrypted update messages and automatically processing key modifications. The system performs self-updating without requiring manual key distribution or physical access to the device, enhancing both security and ease of operation

Inventive Principle:
Principle #25Self-service

2Productivity

If manual key updates are performed, then device complexity is reduced, but security breaches risk increases and productivity decreases

Engineering Contradiction:
Improvekey management efficiencyVSAvoidsecurity breach risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent replaces manual mechanical key distribution and update processes with an automated electronic system. Encrypted messages are transmitted through communication networks, and the lock device automatically processes key updates, eliminating the need for physical key distribution and reducing security risks associated with manual handling

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system introduces an encrypted message as an intermediary carrier for key updates. This intermediary transmits key modification information securely through communication networks, eliminating direct manual key distribution and reducing the risk of security breaches during key management operations

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If frequent key updates are implemented, then reliability is improved, but use of energy increases and device complexity worsens

Engineering Contradiction:
Improvesecurity levelVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system implements periodic key updates triggered by receiving encrypted messages at convenient moments, such as when the lock device is already active for unlocking operations. This periodic updating maintains security without requiring continuous energy expenditure, as updates occur only when naturally triggered by system usage or scheduled intervals

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS9258281B2Secured method for controlling the opening of lock devices from messages implementing a symmetrical encryption
Publication Date: 2016.02.09 MYFOX
  • US9258281B2 patent drawing
  • US9258281B2 patent drawing

AI summary

A management site (10) generates an encrypted message by a public-key symmetrical encryption algorithm, the algorithm and the key being selected by the management site among a memorized list. The message (DKE), which includes an identifier of the encryption algorithm and key used, is transmitted to a portable device (16), which stores it. For the use, the message is transmitted to a secured module (20) that decrypts it, checks its compliance with an internal reference, and generates a digital accreditation controlling the unlocking of a lock device (18). The decryption is operated with the algorithm and the key recognized based on the identifiers of the message, selected among a list memorized by the secured module.