Vehicle Digital Key Certificate Chains for Cascade Delegation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current digital key standards only support one level of sharing, limiting the ability to grant access rights to vehicles, and do not allow for multi-level cascade delegation, which is necessary in scenarios involving corporate entities or multiple users.
Innovation Solution
A cascaded key delegation system that issues public key certificates to enable delegation rights, allowing for multi-level delegation by using a cloud delegation service with multiple delegator devices, where each device can grant access rights to subsequent devices, ultimately endorsing access rights to end-user devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If current digital key standards are used, then vehicle access control is achieved, but multi-level cascade delegation is not supported
Solution Approach 1:
The patent segments the digital key functionality into multiple hierarchical levels: owner level, intermediary level, and end-user level. Each level has its own certificate and delegation capabilities, allowing the system to support multi-level cascade delegation while maintaining clear separation of responsibilities and access rights.
Solution Approach 2:
The patent introduces a hierarchical dimension to the previously flat digital key structure by implementing a multi-level certificate system. This adds depth to the key sharing structure, enabling cascaded delegation through multiple intermediate parties while maintaining security through certificate chains that verify each level's authority.
2Ease of operation
If physical key hand-off is used, then access rights are transferred, but coordination difficulty increases
Solution Approach 1:
The patent replaces the mechanical physical key hand-off system with a digital certificate-based system. Instead of physically transferring keys or key fobs, the system uses electronic certificate delegation through a cloud service, eliminating the need for physical coordination and enabling remote, instantaneous access rights transfer.
Solution Approach 2:
The patent introduces a cloud-based delegation service as an intermediary that facilitates certificate issuance and validation. This intermediary enables seamless coordination between owners, intermediaries, and end-users by automatically managing the delegation process, eliminating the need for direct coordination between all parties.
3Ease of operation
If digital key sharing is enabled, then convenience is improved, but delegation rights are limited to one level
Solution Approach 1:
The patent implements a nested hierarchical structure where certificates are embedded within certificate chains. Each certificate contains references to parent certificates, creating a nested structure that allows unlimited levels of delegation while maintaining a clear chain of trust. The owner's certificate nests the intermediary's certificate, which in turn nests the end-user's certificate, enabling deep cascade delegation.
Data Source
AI summary
A method for sharing a digital key associated with a vehicle by a cascaded key delegation system includes issuing, by a requestor device, a public key certificate to an initial delegator device that is part of a cloud delegation service. The public key certificate enables the initial delegator device to grant delegation rights the vehicle. The method also includes issuing, by the initial delegator, an intermediate public key certificate to a subsequent delegator that is part of the cloud delegation service. The intermediate public key certificate grants the delegation rights to the subsequent delegator.