Electronic Key Registration Using Dynamic Encryption Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic key registration systems face challenges in securely registering an electronic key to a controller without requiring the controller and electronic key to be shipped together, which complicates additional registrations and can lead to unauthorized key registration.
Innovation Solution
An electronic key registration method that involves storing unique identification information in the controller and an encryption key generation code in the electronic key, allowing the encryption key to be generated and stored in the controller, with associated information stored in a database, enabling easy and secure registration while preventing registration on other controllers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the controller and electronic key are shipped together with pre-stored identification information and encryption keys, then security is ensured through verified association, but the system complexity increases and additional registration becomes inhibited
Solution Approach 1:
The patent segments the registration process into two distinct phases: initial production (where only identification information is pre-stored) and initial registration (where encryption keys are dynamically generated and associated). This segmentation allows the controller and electronic key to be shipped separately while maintaining security, as the encryption key generation occurs only during the controlled registration process.
Solution Approach 2:
The patent performs preliminary storage of identification information in the controller during production, but delays the critical encryption key generation until the registration process. This preliminary action enables separate shipping while ensuring that security-critical operations only occur when proper association is verified, thus reducing system complexity without compromising security.
2Ease of operation
If the controller and electronic key are shipped separately to allow additional registration, then ease of operation is improved, but security risk increases due to potential unauthorized registration
Solution Approach 1:
The patent introduces an intermediary verification process using identification information that is pre-stored in the controller and must be matched by the electronic key during registration. This intermediary mechanism acts as a security gatekeeper, allowing separate shipping and additional registrations while preventing unauthorized key registration, thus maintaining security without compromising ease of operation.
Solution Approach 2:
The controller is pre-configured with identification information during production, which serves as a preliminary security measure. This preliminary action enables the controller to verify the authenticity of electronic keys during the registration process, ensuring that only authorized keys can be registered even when shipped separately, thus maintaining security while enabling ease of operation.
3Speed
If the encryption key is stored in both the controller and electronic key from factory, then verification speed is improved, but manufacturing complexity increases and flexibility for additional registration is reduced
Solution Approach 1:
The patent performs preliminary storage of only identification information in the controller during factory production, and stores only the encryption key generation code in the electronic key. The actual encryption key is generated dynamically during the registration process. This approach maintains verification speed by ensuring the encryption key is available in both devices after registration, while significantly reducing manufacturing complexity and enabling flexible additional registrations.
Solution Approach 2:
The patent changes the state of the encryption key from a pre-stored value to a dynamically generated value during registration. The electronic key initially contains only an encryption key generation code, which is transformed into the actual encryption key through a generation process that uses the pre-stored identification information. This parameter change enables flexible manufacturing and additional registration while maintaining verification performance.
4Reliability
If the identification information is stored in both controller and electronic key from factory, then authentication reliability is improved, but the risk of unauthorized registration increases when the vehicle ID is tampered with
Solution Approach 1:
The patent uses identification information as an intermediary that is pre-stored in the controller and must be correctly matched by the electronic key during registration. This intermediary mechanism ensures that even if the vehicle ID is tampered with, unauthorized registration cannot occur because the electronic key must contain the correct identification information to generate a valid encryption key. This maintains authentication reliability while preventing unauthorized registration.
Solution Approach 2:
The controller is pre-configured with identification information during factory production, serving as a preliminary security measure. This preliminary action enables the controller to verify the authenticity of electronic keys during registration by checking if they contain the correct identification information. This ensures that only authorized keys can be registered, preventing unauthorized registration even when vehicles are shipped separately.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
An electronic key registration method that registers an electronic key (2) capable of controlling a communication target, to a control device (6) being the communication target, said method comprising: an initial production step that saves to the control device (6) identification information (VID-A) unique to the communication target, and saves to the electronic key an encryption key generating code (SC-1) unique to the electronic key (2), and an encryption key (K-1) used for verifying the electronic key; and an initial registration step in which the identification information (VID-A) saved to the control device is written to the electronic key, the encryption key generating code (SC-1) is obtained from the electronic key, the encryption key (K-1) is generated using encryption key generating logic (f) that uses the encryption key generating code, that encryption key is saved to the control device, and the encryption key information relating to the encryption key (K-1) is associated to the identification information (VID-A) and saved to a database (9).