Virtual Key Time Synchronization for Secure Vehicle Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current vehicle keyless start and entry systems lack sufficient security, particularly against unauthorized access and clock malfunctions, which can lead to fraudulent use, especially in car-sharing scenarios where devices are not always specifically assigned to vehicles and may be prone to hacking or clock manipulation.

Innovation Solution

A system and method utilizing a portable electronic device and a backend device to manage virtual keys, where the device sends a request for time updates and compares predefined time validity, ensuring secure access by only allowing access when the virtual key is valid, and updating internal clocks through network time protocol servers to prevent deviations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If virtual keys are used for keyless access, then ease of operation is improved, but security is worsened due to potential unauthorized access and clock manipulation

Engineering Contradiction:
Improvekeyless accessVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary time synchronization before validating the virtual key. The portable device requests time information from the backend device, and the object requests time updates from the portable device before checking key validity. This preliminary time verification prevents unauthorized access even if the virtual key is compromised, as the time-based validity check serves as an additional security layer that must be satisfied before access is granted.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If time-based validity checks are implemented, then security is improved, but device complexity is worsened due to clock synchronization requirements

Engineering Contradiction:
ImprovesecurityVSAvoidclock synchronization
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The backend device serves as an intermediary time authority that provides centralized time information to both the portable device and the object. Instead of requiring direct time synchronization between the portable device and the object, or maintaining complex time synchronization protocols between all components, the backend device acts as a trusted mediator that supplies time information to both parties, simplifying the overall system architecture while maintaining security.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If multiple time verification steps are added, then security is improved, but loss of time is worsened due to additional communication rounds

Engineering Contradiction:
ImprovesecurityVSAvoidaccess time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The time synchronization process is performed preliminarily and cached by the portable device. When access is requested, the portable device already has current time information from its previous synchronization with the backend device, allowing it to immediately respond to the object's time request without initiating a new backend communication round. This preliminary caching significantly reduces the time penalty of multiple verification steps.

Inventive Principle:
Principle #10Preliminary action

4Productivity

If virtual keys with predefined time periods are used, then productivity is improved through automated access management, but device complexity is worsened due to time validation mechanisms

Engineering Contradiction:
Improveaccess managementVSAvoidtime validation
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The object performs self-service time validation by receiving time information from the portable device and autonomously comparing it with its own internal clock to determine virtual key validity. The portable device similarly performs self-service by maintaining time synchronization with the backend and providing time information to the object. This distributed self-validation approach eliminates the need for a centralized real-time validation server, reducing overall system complexity while maintaining automated access management capabilities.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11386728B2System and method for granting access to or for starting an object
Publication Date: 2022.07.12 CONTINENTAL AUTOMOTIVE TECHNOLOGIES GMBH
  • US11386728B2 patent drawing
  • US11386728B2 patent drawing
  • US11386728B2 patent drawing

AI summary

Disclosed is a system comprising a portable electronic device, and a backend device, wherein the portable electronic device is configured to, upon occurrence of a triggering event, send a first request message to the backend device, the backend device, upon receipt of the first request message, is configured to read an internal device clock and send a first response message to the portable electronic device, wherein the first response message comprises information about the present internal device time. The portable electronic device, upon receipt of the first response message, is further configured to at least one of update an internal clock of the portable electronic device with the present internal device time, and send a second response message to an object, wherein the second response message comprises an information about the present internal device time.