Vehicle Electronic Key Invalidation During Ownership Transfer

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

When transferring a vehicle equipped with an electronic key system, the old owner may still access the vehicle if the electronic key is not properly changed and erased, compromising security.

Innovation Solution

An information processing apparatus that communicates with the vehicle to acquire use situations of electronic keys and invalidates authentication for old mobile apparatuses based on predetermined conditions, such as changes in key usage or vehicle location, ensuring only authorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the electronic key is not changed at the time of transferring a vehicle, then the transfer process is simple, but the old owner can still access the vehicle compromising security

Engineering Contradiction:
ImprovesecurityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by monitoring key usage patterns before the actual transfer occurs. It detects changes in usage situations (such as geographic location, usage frequency, or authorized user changes) and proactively invalidates the old electronic key before the transfer is completed, ensuring security is maintained without requiring manual key revocation

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback mechanisms by continuously monitoring the usage situations of electronic keys and comparing them against predefined conditions. When the monitoring system detects that usage patterns indicate a vehicle transfer (such as the key being used in a new geographic region or by a different user), it automatically triggers key invalidation, creating a closed-loop security system that responds to actual usage data

Inventive Principle:
Principle #23Feedback

2Reliability

If the electronic key is invalidated based on usage monitoring, then security is improved, but the system complexity increases

Engineering Contradiction:
Improveaccess control securityVSAvoidmonitoring system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The electronic key system performs self-service by autonomously monitoring its own usage patterns and automatically invalidating itself when transfer conditions are detected. The key contains embedded logic that tracks usage situations and triggers its own revocation without requiring external intervention from the vehicle owner or manufacturer, simplifying the overall system architecture while maintaining security

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system monitors changes in usage parameters (such as geographic location, time of day, frequency of use, or associated mobile device) and invalidates the key when parameter changes exceed predefined thresholds. This parameter-based approach allows the system to distinguish between normal variations in key usage and actual transfer events, enabling automated security responses without complex decision logic

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11904808B2Information processing apparatus, information processing method and non-transitory storage medium
Publication Date: 2024.02.20 TOYOTA JIDOSHA KK
  • US11904808B2 patent drawing
  • US11904808B2 patent drawing
  • US11904808B2 patent drawing

AI summary

The present disclosure causes security at the time of transferring a vehicle to be improved, in a vehicle system using an electronic key. The present disclosure relates to an information processing apparatus capable of communicating with a vehicle configured to perform authentication for a mobile apparatus based on an electronic key acquired from the mobile apparatus. Use situations of the electronic keys issued to the two or more mobile apparatuses are acquired; and the authentication performed for any of the two or more mobile apparatuses is invalidated when the use situations satisfy predetermined conditions.