Communication Key Replacement Using DI Wallet Credentials

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing communication devices face complex and costly PKI-based identity provisioning processes, especially when multiple secure elements are involved, leading to inefficient management and high part number tracking costs, and lack of user control over device identities.

Innovation Solution

Utilizing a Digital Identity (DI) Wallet to generate and provision identities for communication devices, leveraging ISO/IEC 18013-5, ISO/IEC 18013-7, or OpenID4VP protocols, allowing users to control key replacement through verifiable presentations and credentials, simplifying the process without PKI reliance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If PKI-based identity provisioning is used during manufacturing, then device identity security is improved, but process complexity and costs increase significantly

Engineering Contradiction:

Improvedevice identity securityVSAvoidprovisioning process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by pre-provisioning a first identity (first key pair) during manufacturing that can be easily replaced later. This initial identity serves as a placeholder that enables subsequent key replacement operations, allowing the device to undergo security enhancements without requiring complex PKI procedures at the time of initial provisioning.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent implements dynamics by making the device identity replaceable and updatable after manufacturing. The identity management system transitions from a static PKI-based model to a dynamic model where identities can be provisioned, replaced, and revoked flexibly, enabling the device to adapt its security credentials throughout its operational lifecycle.

Inventive Principle:

Principle #15Dynamics

2Reliability

If PKI-based identity provisioning is implemented, then cryptographic authentication strength is improved, but implementation and maintenance costs increase

Engineering Contradiction:

Improvecryptographic authentication strengthVSAvoidimplementation and maintenance cost

Core Design Contradiction:

ReliabilityVSEase of manufacture

Solution Approach 1:

The patent applies the disposable principle by using temporary or replaceable identity credentials. The first identity provisioned during manufacturing can be discarded and replaced with subsequent identities, avoiding the need for permanent PKI infrastructure and reducing long-term maintenance costs while maintaining strong cryptographic authentication.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The patent implements parameter changes by allowing the device to switch between different identity parameters (key pairs) based on operational needs. This flexibility enables the system to optimize between security strength and cost efficiency by selecting appropriate cryptographic parameters for different phases of the device lifecycle.

Inventive Principle:

Principle #35Parameter changes

3Reliability

If multiple secure elements are implemented in a single communication device, then security is improved, but key management complexity increases

Engineering Contradiction:

ImprovesecurityVSAvoidkey management complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies universality by creating a unified identity management approach that works across multiple secure elements. The key replacement mechanism provides a common interface and process that can manage identities stored in different secure elements, reducing the complexity of managing multiple security architectures simultaneously.

Inventive Principle:

Principle #6Universality (Multi-functionality)

4Reliability

If manufacturer-controlled identity provisioning is used, then device security is improved, but user control and privacy are reduced

Engineering Contradiction:

Improvedevice securityVSAvoiduser control over identity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent implements self-service by enabling end-users to perform key replacement operations on their own devices without requiring manufacturer intervention. Users can leverage their digital identity wallets to generate and install new key pairs, giving them direct control over their device identities while maintaining security through cryptographically verified processes.

Inventive Principle:

Principle #25Self-service

Data Source

PatentEP4457971B1Key replacement in a communication device

Publication Date: 2026.02.25 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)

Figure 1
Figure 2
Figure 3

AI summary

There is provided techniques for key replacement in a communication device (100). A method is performed by the communication device (100). The method comprises receiving (S104) a trigger for the communication device (100) to perform the key replacement. The method comprises providing (106) a request to a DI wallet entity (200) for a verifiable presentation for the communication device (100) to perform the key replacement. The method comprises receiving (S108) the verifiable presentation from the DI wallet entity (200). The verifiable presentation comprises attributes of one or more verifiable credentials. The method comprises obtaining (S110) a new key pair, and replacing an existing key pair with the new key pair upon the communication device (100) having successfully verified the verifiable presentation. The method comprises communicating (S116) with an SP entity (300). The new key pair is used as part of the communication device (100) communicating with the SP entity (300).