Secure communication for a key exchange
AssigneeMicron Technology, Inc.
InventorsAntonino Mondello, Alberto Troia
Life of this patent
Estimating the term…
Abstract
The present disclosure includes apparatuses, methods, and systems for secure communication for a key replacement. An embodiment includes a processing resource, memory having a first operator's key, and a vehicular communication component. The vehicular communication component can be configured to provide, to a server, a public key generated along with a private key and decrypt, in response to receipt of a second operator's key (e.g., received in response to providing the public key to the server) encrypted using the public key, the second operator's key using the private key. The vehicular communication component can be configured to replace, in response to decrypting the encrypted second operator's key, the first operator's key with the second operator's key.
Claims18
An apparatus, comprising:
- a processing resource;
- memory having a first operator's key and instructions executable by the processing resource;
- and
- a hardware vehicular communication component coupled to the processing resource, the hardware vehicular communication component configured to:
- provide, to a server, a public key generated along with a private key;
- decrypt, in response to receipt of a second operator's key encrypted using the public key, the second operator's key using the private key, wherein the second operator's key is received in response to providing the public key to the server;
- and
- replace, in response to decrypting the encrypted second operator's key, the first operator's key with the second operator's key;
- wherein the hardware vehicular communication component is configured to generate, along with the public key, a public identification and a certificate of the apparatus based on a unique secret key of the apparatus such that the public identification and the certificate are provided, along with the public key, to the server;
- wherein an identity of the apparatus is verified based on a comparison among the public identification, the certificate, and the public key of the apparatus;
- and
- wherein the first operator's key is the unique secret key utilized to generate the public identification and the certificate previously provided to the server.
A method, comprising:
- generating a first public key, a first public identification, and a first certificate of a server, wherein the first public identification and the first certificate are generated based on a unique secret key of a server;
- providing, along with the first public key, the first public identification, and the first certificate, a request to replace a first operator's key stored in a vehicle with a second operator's key to the vehicle, wherein:
- an identity of the server is verified based on a comparison among the first public key, the first public identification, and the first certificate;
- and
- the second operator's key is the unique secret key of the server utilized to generate the first public identification and the first certificate;
- encrypting, in response to receiving a second public key from the vehicle, the second operator's key using the second public key received from the vehicle, wherein the second public key is received from the vehicle;
- and
- providing the encrypted second operator's key to the vehicle such that the second operator's key is replaced with the first operator's key in response to the second operator's key being decrypted using the second public key.
A system, comprising:
- a hardware vehicular component comprising a first operator's key;
- and
- a server computing system configured to:
- generate a first public identification and a first certificate based on a unique secret key of the server computing system;
- and
- provide, to the hardware vehicular component, a request to replace the first operator's key with a second operator's key along with a first public key, the first public identification, and the first certificate, wherein:
- the first public key is generated at the server computing system along with a first private key;
- and
- the second operator's key is the unique secret key of the server computing system utilized to generate the first public identification and the first certificate;
- wherein the hardware vehicular component is configured to, in response to receipt of the request and the first public key from the server computing system:
- verify an identity of the server computing system based on a comparison among the first public key, the first public identification, and the first certificate received from the server computing system;
- generate, in response to verifying the identity of the server computing system, a second public key along with a second private key;
- and
- provide the second public key to the server computing system;
- wherein the server computing system is configured to:
- encrypt the second operator's key using the second public key received from the hardware vehicular component;
- and
- provide the encrypted second operator's key to the hardware vehicular component;
- wherein the hardware vehicular component is configured to replace, in response to decrypting the second operator's key received from the server computing system and encrypted using the second public key, the first operator's key with the second operator's key.
Dependencies are inferred from the claim text.