Security Chip Key Installation Using Public-Key Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing method of generating and delivering chip private keys for security chips involves risks of key leakage during transmission, compromising information security.

Innovation Solution

A key filling method where a verification public key generated by a server is filled into a security chip, enabling encryption without transmitting private keys, using asymmetric encryption algorithms to ensure secure key exchange and verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If chip private keys are transmitted from server to electronic device for filling into security chips, then key filling can be completed, but the risk of private key leakage increases during transmission

Engineering Contradiction:
Improvekey filling capabilityVSAvoidprivate key leakage risk
Core Design Contradiction:
Ease of manufactureVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the private key from the transmission process entirely. Instead of transmitting the chip private key from server to electronic device, the system generates a verification key pair where only the verification public key is transmitted. The chip private key remains exclusively in the security chip, eliminating the transmission vulnerability while maintaining key filling functionality.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a verification public key as an intermediary element. This verification public key serves as a mediator that enables the server to verify the security chip without requiring direct transmission of the chip private key. The intermediary verification key pair mechanism allows secure key filling while preventing private key exposure during transmission.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If verification public key is used instead of private key for transmission, then information security is enhanced, but the complexity of key management increases

Engineering Contradiction:
Improveinformation securityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies asymmetry by using asymmetric encryption algorithms to generate verification key pairs with distinct verification public keys and verification private keys. This asymmetric key structure enables secure transmission of only the public verification key while the private verification key remains secured, enhancing information security through the inherent asymmetric properties of cryptographic key pairs.

Inventive Principle:
Principle #4Asymmetry

Solution Approach 2:

The security chip performs self-verification by using its chip private key to decrypt the authentication code and generate authentication information. The chip's internal mechanisms handle the complex cryptographic operations autonomously, reducing the burden on external systems while maintaining security. The chip serves itself in verifying its identity and capabilities without requiring complex external key management infrastructure.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP4216091B1Key installation method, system, apparatus, device, and storage medium
Publication Date: 2025.07.23 TENCENT TECHNOLOGY (SHENZHEN) CO LTD
  • EP4216091B1 patent drawingFigure 1
  • EP4216091B1 patent drawingFigure 2
  • EP4216091B1 patent drawingFigure 3

AI summary

Provided is a key installation method, comprising: (301) transmitting first installation information to a server, the first installation information being used for indicating an installation permission of an electronic device with respect to a security chip; (302) acquiring second installation information, which comprises a verification public key generated by the server and is installation information transmitted to the electronic device by the server insofar as the electronic device is determined, on the basis of the first installation information, as having the installation permission with respect to the security chip; and (303) installing the verification public key into the security chip, the verification public key being used for encrypting information, and a verification private key corresponding to the verification public key being used for decrypting the encrypted information.