Secure Element Data Exchange During Vehicle Digital Key Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for data exchange between motor vehicles and user terminals lack security and reliability, particularly in authentication processes, and do not efficiently utilize secure elements for data storage and communication.
Innovation Solution
A method and device for secure data exchange between a motor vehicle and a user terminal using a digital access key, where data is exchanged during an authentication process, with data being stored in a secure element of the user terminal, ensuring secure and fail-safe communication, and allowing data transfer even when the terminal is off or low on battery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data exchange is performed during authentication process using digital key, then security and reliability of data exchange is improved, but device complexity increases due to integration of secure element and authentication protocols
Solution Approach 1:
The patent combines data exchange functionality with the authentication process. The secure element in the user terminal and the motor vehicle both perform authentication and data exchange functions simultaneously, merging two separate operations into one integrated process. This reduces the need for separate data transmission channels and simplifies the overall system architecture while maintaining high security standards.
Solution Approach 2:
The secure element acts as an intermediary component that handles both authentication credentials and data storage. By using the secure element as a mediator between the user terminal and motor vehicle, the system achieves reliable secure data exchange without requiring complex end-to-end encryption implementations in both devices, thus improving reliability while managing complexity.
2Reliability
If secure element is used for data storage in user terminal, then security of stored data is improved, but manufacturing cost and device complexity increase
Solution Approach 1:
The patent segments the user terminal into two distinct functional parts: the main processing unit and the secure element. The secure element is a separate, dedicated component that handles only security-critical functions such as storing authentication credentials and exchange data. This segmentation allows the main device to remain relatively simple while the secure element provides enhanced security, resolving the contradiction between security improvement and complexity increase.
Solution Approach 2:
The patent extracts the security-critical functions and data storage capabilities into a separate secure element component. By taking out the most security-sensitive operations from the main user terminal processor and placing them in a dedicated secure element, the system achieves high security for stored data while keeping the overall device architecture manageable and not excessively complex.
3Productivity
If authentication process includes data exchange, then efficiency of communication is improved, but authentication time increases due to additional data transmission steps
Solution Approach 1:
The patent performs preliminary actions by pre-storing exchange data in the secure element before the authentication process begins. The data is prepared and secured in advance, so that during the actual authentication, only the exchange and transfer of this pre-prepared data is required. This eliminates the need for complex real-time data generation or processing during authentication, thus improving communication efficiency without significantly increasing authentication time.
Data Source
AI summary
The present disclosure relates to a method and a device for data exchange between a motor vehicle and a user terminal, wherein the method comprises: determining data to be provided by a motor vehicle to a user terminal, detecting an approach of the user terminal to the motor vehicle, wherein the user terminal comprises a digital access key for the motor vehicle, and performing an authentication process between the user terminal and the motor vehicle in response to the approach to provide the digital access key to the motor vehicle, wherein the authentication process includes providing the determined data to the user terminal.