Virtual Key Loading in Secure Element

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for controlling vehicle functionalities, such as door unlocking, require a trusted server to generate and distribute virtual keys, which is restrictive and inefficient.

Innovation Solution

A method for loading a virtual key in a user terminal that involves receiving an encrypted virtual key, transferring it to a secure element, and decrypting it using a communication key stored in the secure element, allowing secure key loading without relying on a trusted server for each key distribution, except for the initial communication key setup.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a trusted server is used to generate and distribute virtual keys, then security is improved, but system complexity and operational restrictions increase

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system segments the key management functionality by separating the trusted server (used only for initial communication key establishment) from the local secure element (used for all subsequent virtual key operations). This segmentation allows the system to maintain high security through the trusted server while reducing operational complexity by enabling local autonomous key generation and distribution.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The trusted server performs the preliminary action of establishing the communication key in the secure element during an initial setup phase. After this preliminary action, the system operates autonomously without requiring further trusted server involvement, thereby reducing operational complexity while maintaining security established in advance.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If a trusted server is used for each virtual key distribution, then security is improved, but operational efficiency deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidoperational efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The communication key is preliminarily established in the secure element during initial setup. This preliminary action enables all subsequent virtual key operations to be performed locally without repeated trusted server communications, dramatically improving operational efficiency while maintaining security through the pre-established cryptographic foundation.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The secure element performs self-service by autonomously generating and distributing virtual keys using the pre-stored communication key. This eliminates the need for continuous trusted server involvement in key distribution operations, improving operational efficiency while maintaining security through cryptographic verification.

Inventive Principle:
Principle #25Self-service

3Reliability

If encrypted virtual key transmission is implemented, then security is improved, but processing complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The secure element acts as an intermediary that simplifies the encryption/decryption process. It automatically handles the cryptographic operations using the stored communication key, transforming complex encrypted virtual key transmissions into simple local decryption operations without requiring complex processing in other system components.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP3348085B1Method for loading a virtual key in a user terminal and associated user terminal
Publication Date: 2023.03.08 VALEO COMFORT & DRIVING ASSISTANCE
  • EP3348085B1 patent drawingFigure 1~2
  • EP3348085B1 patent drawingFigure 3
  • EP3348085B1 patent drawingFigure 4

AI summary

The invention concerns a method for loading, in a user terminal (T), a virtual key (VK) for controlling at least one function of a vehicle. (V). Said method comprises the following steps: - receiving (E36), by the user terminal, the encrypted virtual key (VK); - transferring (E38) the encrypted virtual key (VK) to a secure element (SE) installed in the user terminal (T); - decrypting (E42) the virtual key (VK) by means of a communication key (CK) stored in the secure element (SE). An associated user terminal is also described.