Immobilizer Token Update Using Temporary Keys in Digital Key Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Digital keys in mobile devices are vulnerable to security risks such as hacking, necessitating secure management and update of immobilizer tokens to ensure authorized access and control of electronic devices.
Innovation Solution
A method and device for updating immobilizer tokens in a digital key sharing system, involving the generation and use of temporary encryption key pairs to securely access and update immobilizer tokens in a confidential mailbox, allowing direct communication between devices for token issuance and storage without pre-existing authority.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital key technology is implemented in mobile devices, then user convenience and accessibility are improved, but security vulnerabilities such as hacking risks increase
Solution Approach 1:
The system segments the digital key functionality by separating the key storage (in secure element of mobile device) from the immobilizer token storage (in confidential mailbox of target device). This segmentation allows the mobile device to provide convenient access while the target device maintains secure token management, thus resolving the contradiction between user convenience and security.
Solution Approach 2:
The patent introduces an intermediary update mechanism where the mobile device acts as a mediator to trigger and facilitate the secure update of immobilizer tokens in the target device. The intermediary process uses temporary encryption key pairs to establish secure communication channels, allowing the convenient mobile device to update security credentials in the target device without compromising security.
2Ease of operation
If immobilizer tokens are stored in mobile devices for digital key access, then access convenience is improved, but the device becomes vulnerable to hacking and security breaches
Solution Approach 1:
The system segments critical security functionality by keeping the immobilizer token stored in the confidential mailbox of the target device rather than in the mobile device. The mobile device only holds a digital key that can trigger updates, but cannot directly access or extract the immobilizer token. This segmentation maintains both access convenience and security reliability.
Solution Approach 2:
The system performs preliminary actions by pre-configuring the confidential mailbox in the target device with secure storage capabilities and pre-establishing the update mechanism. When a digital key is introduced, the system proactively updates the immobilizer token before any potential security breach can occur, ensuring security reliability is maintained while preserving access convenience.
3Reliability
If a secure update mechanism is implemented for immobilizer tokens, then security is improved, but the complexity of the system increases
Solution Approach 1:
The target device performs self-service by autonomously generating temporary encryption key pairs and managing its own confidential mailbox for immobilizer token storage. The device automatically executes the update process when a digital key is introduced, without requiring external complex verification systems. This self-service approach enhances security while minimizing system complexity.
Solution Approach 2:
The system uses parameter changes in the form of temporary encryption key pairs that are dynamically generated during the update process. These temporary parameters enable secure communication without requiring permanent complex authentication mechanisms. The parameter-based approach simplifies the system architecture while maintaining high security standards.
4Productivity
If direct communication between devices is enabled for token issuance, then update efficiency is improved, but the risk of unauthorized access increases
Solution Approach 1:
The system performs preliminary actions by pre-configuring the confidential mailbox and establishing the update mechanism before actual token issuance occurs. The target device is prepared in advance to receive and securely process immobilizer tokens, enabling efficient direct communication while maintaining security through pre-established secure channels and authentication protocols.
Solution Approach 2:
The digital key acts as an intermediary that facilitates secure direct communication between the mobile device and target device during token issuance. The intermediary digital key enables the target device to verify the authenticity of the update request and establish secure communication channels, thus improving update efficiency while preventing unauthorized access through the mediation of authenticated digital keys.
Data Source
AI summary
The disclosure relates to a method of updating an immobilizer token. A target device according to various embodiments of the disclosure may generate a first temporary encryption key pair for encryption and decryption of an immobilizer token, may transmit, to an immobilizer token issuance device, an immobilizer token issuance request including a first temporary public encryption key of the generated first temporary encryption key pair, may receive, from the immobilizer token issuance device, an encrypted immobilizer token and a second temporary public encryption key generated by the immobilizer token issuance device, may decrypt the encrypted immobilizer token by using the second temporary public encryption key and a first temporary private encryption key of the first temporary encryption key pair, and may store the decrypted immobilizer token in a confidential mailbox of the digital key in a secure element.