Vehicle Virtual Key Generation and Network-Free Unlocking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for unlocking vehicles with mobile phones rely on network connectivity, which is unreliable in scenarios like underground garages, and lack personalized authorization and secure key management.
Innovation Solution
A method and system for generating and using a virtual key that allows secure, network-independent unlocking, enabling personalized authorization and differentiated permissions for vehicle owners, relatives, friends, and service personnel, using asymmetric encryption and a telematics service provider to manage and verify virtual key usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network-based remote control method is used for vehicle unlocking, then vehicle access control can be implemented, but the system fails when network is unavailable (e.g., underground garage)
Solution Approach 1:
The system segments the key management functionality by generating separate virtual keys for different users (owner, relatives, friends, service personnel) with differentiated permissions. Each virtual key is independently managed and can operate autonomously without network dependency during the unlocking process.
Solution Approach 2:
The virtual key is generated and stored in the mobile terminal in advance through a one-time setup process involving the backend system. This preliminary key generation enables the terminal to perform unlocking operations independently without real-time network connection, resolving the contradiction between reliability and network adaptability.
2Adaptability or versatility
If centralized key management is used, then security can be maintained, but personalized authorization and differentiated permissions cannot be implemented
Solution Approach 1:
The system implements local quality by assigning different permission levels and access rights to different virtual keys based on user roles. The backend system configures specific permissions (e.g., trunk access, driving permissions, time restrictions) for each user type, allowing personalized authorization while maintaining centralized security management.
Solution Approach 2:
The key management system dynamically adapts to different user needs by generating virtual keys with customized permission sets. The system can flexibly adjust authorization levels, valid time periods, and operational constraints based on the specific requirements of each user without requiring complex manual configuration.
3Reliability
If virtual key transmission is performed without encryption, then transmission speed is fast, but the key can be monitored, tampered, copied, or subjected to replay attacks
Solution Approach 1:
The system replaces physical key transmission with encrypted digital data transmission. The virtual key is transmitted as encrypted information between the backend system and mobile terminal, eliminating the need for physical key exchange while providing superior security against tampering, copying, and replay attacks.
Solution Approach 2:
The encryption mechanism uses composite security approaches by combining multiple protection layers including data encryption, authentication protocols, and timestamp validation. This multi-layered security approach comprehensively addresses various attack vectors while maintaining efficient key transmission.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method and system for generating and using a virtual key of a vehicle. The method comprises: presetting relevant keys and/or certificates in an onboard communication control module, a vehicle owner's terminal and a TSP; determining, by the TSP, whether a request of the vehicle owner's terminal for a virtual key is valid, and returning a URL of the virtual key to an authorization terminal if the request is valid, the authorization terminal invoking the virtual key from the TSP based on the URL of the virtual key; encrypting, by the authorization terminal, the virtual key, and sending the encrypted virtual key to the onboard communication control module; and reading, decrypting and verifying, by the onboard communication control module, the virtual key, and executing an instruction related to the virtual key when the verification succeeds. According to the invention, a vehicle owner can use a virtual key without relying on a network during an unlocking process, or authorize relatives and friends to use virtual keys and grant them certain permissions, or it is also possible for a TSP to authorize a service person to perform a permission-customizing operation within a specific time period.