Escrow and Private Session Key Generation for Secure Vehicle Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption methods for secure data transfer between vehicles and mobile devices are inefficient and fail to distinguish between shared and private data, leading to potential unauthorized access by automakers or malicious users.
Innovation Solution
A system and method for generating two types of session keys: an escrow session key and a private session key, using Identity-Based Cryptography (IBC) and Identity-Based Encryption (IBE) schemes, where the escrow session key allows a trusted third party to decode shared data while the private session key ensures only the devices involved can access private data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a single session key is used for encoding digital communications between two devices, then the encryption process is simple, but the system cannot distinguish between shared data and private data, leading to potential unauthorized access
Solution Approach 1:
The patent divides the single session key into two distinct session keys: a first session key for shared data and a second session key for private data. This segmentation allows the system to differentiate between data types while maintaining separate access controls, resolving the contradiction between data classification capability and key management complexity.
Solution Approach 2:
The patent applies different security properties to different data: the first session key enables escrowed access for shared data while the second session key provides private access for sensitive data. This local quality approach allows tailored security mechanisms for different data categories without requiring a completely different encryption system.
2Reliability
If key escrow is implemented to allow trusted third party access, then shared data can be decoded by the third party, but private data may also be accessed by the third party
Solution Approach 1:
The patent segments the access rights by creating two separate session keys with different escrow properties. The first session key has escrow capability for shared data, while the second session key explicitly excludes third-party access for private data. This segmentation prevents unauthorized access to private data while maintaining reliable third-party access to shared data.
Solution Approach 2:
The patent applies different escrow properties locally to different data types: the first session key allows third-party decryption for shared data, while the second session key maintains local privacy for sensitive data. This local quality approach ensures that escrow functionality is available only where appropriate and does not compromise private data security.
3Productivity
If traditional encryption methods are used for data transfer, then data security is maintained, but the system is inefficient and cannot distinguish between shared and private data
Solution Approach 1:
The patent segments the encryption process into two parallel operations: one using the first session key for shared data and another using the second session key for private data. This segmentation enables efficient data transfer while maintaining the ability to differentiate data types, resolving the contradiction between productivity and adaptability.
Solution Approach 2:
The patent changes the encryption parameters by using different session keys for different data types. This parameter change allows the system to maintain encryption efficiency while adding data type differentiation capability, as each data type can be encrypted with the appropriate key without affecting other data.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This document describes a system and method for generating two types of session keys for encoding digital communications between two devices. In particular, the first type of session key possesses escrow properties whereby a trusted third party will be able to generate the first type of session key to decode the digital communications between the two devices while the second type of session key does not possess escrow properties.