One-way key fob and vehicle pairing
AssigneeTexas Instruments Incorporated
InventorJin-Meng Ho
Life of this patent
Estimating the term…
Abstract
Key fob and vehicle control unit identifiers (IDs) are used for entity authentication or trust transfer to achieve a secured initial pairing. The key fob is capable of transmitting only (not receiving) and is paired with a control unit in a vehicle or with any other control device. Use of the key fob and control unit IDs prevents unauthorized pairing and access to the operation key (OpKey) that is later used for communications between the devices. Elliptical curve cryptography (ECC) is used for strong security and efficient implementation. In the pairing process, device IDs are used for entity authentication and public key cryptography is used for easy key management. Symmetric encryption is used for fast normal operation and to accommodate key fob addition or revocation after key fob loss.
Claims15
A system comprising:
- a first device comprising:
- a first memory to store an operation key, a public key, and a private key, each of the operation key, public key, and private key being associated with the first device;
- a first processor operable to:
- encrypt the operation key using the private key to produce a private key-encrypted operation key;
- use an encryption based on the Advanced Encryption Standard (AES) to compute an AES-encrypted value of the operation key;
- and
- a first transmitter to transmit a message, the message including the private key-encrypted operation key and verification bits that are selected first bits extracted from the AES-encrypted value of the operation key;
- and
- a second device comprising:
- a receiver to receive the message;
- a second memory to store the public key;
- and
- a second processor operable to:
- decrypt the private key-encrypted operation key using the public key to recover the operation key;
- compute an AES-encrypted value of the recovered operation key;
- compare selected second bits of the AES-encrypted value of the recovered operation key to the verification bits received in the message to determine whether the selected second bits match the verification bits, wherein the positions of the selected second bits in the AES-encrypted value of the recovered operation key correspond to the positions of the selected first bits extracted from the AES-encrypted value of the operation key;
- and
- pair the first device with the second device when the selected second bits match the verification bits.
A system comprising:
- a first device comprising:
- a first memory to store an operation key, a public key, and a private key, each of the operation key, public key, and private key being associated with the first device;
- a first processor operable to:
- encrypt the operation key using the private key to produce a private key-encrypted operation key;
- use a first encryption type to compute an encrypted value of the operation key;
- and
- a first transmitter to transmit a message that includes the private key-encrypted operation key and verification bits that are selected first bits extracted from the encrypted value of the operation key;
- and
- a second device comprising:
- a receiver to receive the message;
- a second memory to store the public key;
- and
- a second processor operable to:
- decrypt the private key-encrypted operation key using the public key to recover the operation key;
- compute an encrypted value of the recovered operation key using the first encryption type;
- compare selected second bits of the encrypted value of the recovered operation key to the verification bits received in the message to determine whether the selected second bits match the verification bits, wherein the positions of the selected second bits in the encrypted value of the recovered operation key correspond to the positions of the selected first bits extracted from the encrypted value of the operation key;
- and
- pair the first device with the second device when the selected second bits match the verification bits.
Dependencies are inferred from the claim text.