Electronic Key System Authentication Integration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic key systems for vehicles and devices can be compromised, allowing unauthorized access and operation by circumventing the authentication process, leading to security risks such as theft or misuse.

Innovation Solution

Integrating the authentication process with the decoding process of the program, ensuring that the program execution device only activates when the program is decoded with valid information from a corresponding electronic key, and utilizing component information to prevent unauthorized decoding and execution, including irreversible changes to the program to prevent further misuse.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the authentication process is separated from the program decoding process, then the ease of operation is improved, but the security is worsened because the authentication can be omitted by unauthorized means

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent merges the authentication process with the program decoding process into a single integrated operation. The program execution device only executes the program after successfully authenticating the electronic key, which simultaneously triggers the decoding and execution authorization. This integration ensures that authentication cannot be bypassed while maintaining operational simplicity for authorized users.

Inventive Principle:
Principle #5Merging (Combining)

2Device complexity

If the program is not encrypted, then the device complexity is reduced, but the security is worsened because unauthorized execution becomes possible

Engineering Contradiction:
Improvedevice complexityVSAvoidsecurity
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent applies preliminary encryption to the program before execution. The program is stored in encrypted form in the program execution device, and the decryption occurs automatically as part of the authentication process. This preliminary protective measure ensures that even if unauthorized access is attempted, the encrypted program cannot be executed without proper authentication, while the encryption is transparent to authorized operations.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If the authentication process is simplified, then the ease of operation is improved, but the security is worsened because circumvention becomes easier

Engineering Contradiction:
Improveease of operationVSAvoidvulnerability to circumvention
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent combines multiple security verification steps into a single integrated authentication process that simultaneously validates the electronic key, decrypts the program, and authorizes execution. This merging maintains simplicity for authorized users while creating multiple interdependent security barriers that are difficult to circumvent, as each step depends on the successful completion of the others.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent introduces the program decoding process as an intermediary step between authentication and execution. Even if authentication is compromised, the encrypted program serves as an additional barrier that prevents unauthorized execution. This intermediary layer adds security without significantly impacting the user experience for authorized operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2305927B1Electronic key system
Publication Date: 2018.07.18 NTI
  • EP2305927B1 patent drawingFigure 1
  • EP2305927B1 patent drawingFigure 2
  • EP2305927B1 patent drawingFigure 3

AI summary

Provided is an electronic key system that is safe and reduces the possibility of unauthorized execution of a program through a circumvention of authentication. A program execution device 1 placed in automobile includes an engine control device 14 that controls an engine 3 and a program X that makes the engine control device 14 to control the engine 3. The program X recorded in the program execution device 1 is encrypted. Decoding information Y is required for decoding the program X. The decoding information Y is recorded in an electronic key 2 and is transmitted to the program execution device 1 if the program X is to be decoded. The program execution device 1 decodes the program X by using the received decoding information Y and then executes the program X to start up the engine. If the electronic key 2 does not contain the correct decoding information Y, it cannot decode the program X.