Vehicle-User BLE Pairing via Server-Mediated Key Exchange

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Vehicles allow unauthorized users to pair with Bluetooth connections, compromising security and access control.

Innovation Solution

Implement a system using public-private key pairs and a shared key to authenticate and establish secure communication channels between user devices and vehicles, leveraging Bluetooth Low Energy (BLE) and Internet connections, with a server acting as a trusted intermediary to manage cryptographic key exchanges.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If Bluetooth pairing is allowed without authentication, then ease of operation is improved, but security is worsened

Engineering Contradiction:

Improveease of pairingVSAvoidsecurity

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

A server acts as a trusted intermediary between the user device and vehicle. The server receives pairing requests, performs authentication of user credentials, and facilitates secure key exchange. This intermediary resolves the contradiction by enabling automatic pairing (improving ease of operation) while maintaining security through server-mediated authentication.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

User credentials and device identifiers are pre-registered and stored in the server before pairing occurs. When pairing is initiated, the server already has the necessary authentication data to verify the user's authorization. This preliminary preparation allows for seamless pairing while ensuring security through pre-established trust relationships.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If public-private key pairs are implemented for authentication, then security is improved, but device complexity is worsened

Engineering Contradiction:

ImprovesecurityVSAvoidcomplexity of key management

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The server serves as a key management intermediary that handles the generation, distribution, and storage of cryptographic key pairs. User devices and vehicles only need to store their respective key pairs and communicate through the server, which manages the complex key exchange protocols. This reduces the complexity burden on individual devices while maintaining strong security.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

Each user device and vehicle generates and manages its own key pair locally, performing self-service cryptographic operations. The server facilitates the exchange but does not centralize key storage, allowing devices to independently verify authentication codes and establish secure channels. This distributed approach balances security with manageable device complexity.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS12500775B2Managing communications between a vehicle and a user device

Publication Date: 2025.12.16 RIVIAN HOLDINGS LLC

AI summary

Systems and methods are provided to communicate, by a server, with a vehicle over a second communication path, where the vehicle is configured to communicate with a user device over a first communication path. The server may associate a user device with an authenticated user profile that is associated with the vehicle. The server may identify a public-private key pair associated with the user device and a public-private key pair associated with the vehicle. Processing circuitry may generate a shared key based on the public-private key pair associated with the user device and the public-private key pair associated with the vehicle, and the processing circuitry may establish a communication channel between the user device and the vehicle over the first communication path using the shared key.