Wireless Firmware Updates for Electronic Locks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communications with electronic locks are often insecure, increasing the risk of unauthorized access due to inadequate authentication and encryption methods.
Innovation Solution
A method and device for wireless key management that employs a server-based authentication and encryption scheme using two keys, where one key is stored on the electronic locking device and the other on the user device, ensuring secure communication and authentication through a challenge-response process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If wireless communication is used to control electronic locks, then ease of operation is improved, but security is worsened due to inadequate authentication and encryption
Solution Approach 1:
The authentication system is segmented into multiple independent components: device identifiers, cryptographic keys, challenge-response protocols, and encrypted command structures. Each component operates independently to verify identity and authorize actions, preventing single-point failures and enhancing overall security against wireless attacks
Solution Approach 2:
A server acts as an intermediary between the mobile device and electronic lock, mediating the authentication process. The server verifies device identifiers, manages cryptographic key distribution, and validates challenge-response sequences, preventing direct unauthorized communication between the lock and unauthenticated devices
2Reliability
If authentication and encryption methods are enhanced, then security is improved, but device complexity increases
Solution Approach 1:
Complex cryptographic key management and authentication logic are extracted from the electronic lock and relocated to a centralized server. The lock retains only essential functions: storing device identifiers, generating challenges, and validating responses. This extraction reduces lock complexity while maintaining strong security through server-based key management
Solution Approach 2:
The server provides universal authentication services to multiple electronic locks and mobile devices, handling key generation, storage, and validation for the entire system. This multi-functional approach consolidates cryptographic complexity in a single platform, simplifying individual device designs while maintaining system-wide security
Data Source
AI summary
A method includes transmitting, by a user device, an encrypted user profile to a locking device, the encrypted user profile including a user key and encrypted by a server using a lock key; decrypting, by the locking device, the encrypted user profile using the lock key to generate a decrypted user profile and obtain the user key from the decrypted user profile; generating, by the user device, an encrypted firmware update command, the encrypted firmware update command encrypted using the user key of the user profile; transmitting, by the user device, the encrypted firmware update command to the locking device; decrypting, by the locking device, the encrypted firmware update command using the user key to generate a decrypted firmware update command; and installing, by the locking device, a firmware update in accordance with the decrypted firmware update command in response to successfully decrypting the encrypted firmware update command.