# US 2025/0219829 A1 · Control device, data transmission system and operation method thereof > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2025/0219829 A1 - Document ID: US20250219829A1 - Status: Published application - Kind: A1 - Application number: 18/797,766 - Filed: 2024-08-08 - Published: 2025-07-03 - Earliest claimed: 2023-12-28 - Assignees: Nuvoton Technology Corporation - Applicants: Nuvoton Technology Corporation - Inventors: Chi-Che MA - Web page: https://patentgrep.com/patent/US20250219829A1 ## CPC - H04L 9/14: using a plurality of keys or algorithms - H04L 9/0841: {involving Diffie-Hellman or related key agreement protocols} - H04L 9/3247: {involving digital signatures} - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A control device includes a storage unit, a key generation unit and a processing unit. The storage unit stores a control device certificate and a programming device certificate. The key generation unit generates a first private key. The key generation unit also generates a first public key according to the first private key. The processing unit receives the control device certificate and the programming device certificate according to the first public key and a device identification code. The processing unit stores the control device certificate and the programming device certificate in the storage unit. ## Claims ### Claim 1 A control device, comprising: a storage unit, configured to store a control device certificate and a programming device certificate; a key generation unit, configured to generate a first private key, and to generate a first public key according to the first private key; and a processing unit, configured to receive the control device certificate and the programming device certificate according to the first public key and a device identification code, and to store the control device certificate and the programming device certificate in the storage unit. ### Claim 2 (depends on 1) The control device as claimed in claim 1, wherein the processing unit is further configured to obtain a bootloader with a signature bootloader according to the device identification code, the processing unit is configured to execute the bootloader, the key generation unit is configured to generate a shared session key to the processing unit, the processing unit is configured to receive an encrypted application with the shared session key according to the shared session key, and the processing unit is configured to decrypt the encrypted application according to the shared session key to obtain an application and burn the application. ### Claim 3 (depends on 1) The control device as claimed in claim 1, wherein the processing unit is further configured to obtain a verification certificate and an application version according to the device identification code, the key generation unit is configured to generate a shared session key to the processing unit, the processing unit is configured to use the verification certificate to verify the control device certificate and is configured to use the application version to check the application, the processing unit is configured to receive an encrypted updating application with the shared session key according to the shared session key, and the processing unit is configured to decrypt the encrypted updating application according to the shared session key to obtain an updating application and to burn the updating application. ### Claim 4 (depends on 1) The control device as claimed in claim 1, wherein the storage unit is a one-time programmable memory. ### Claim 5 (depends on 1) The control device as claimed in claim 1, wherein the key generation unit comprises a key store configured to store the first private key. ### Claim 6 A data transmission system, comprising: a control device, configured to generate a first private key, generate a first public key according to the first private key, transmit the first public key and a device identification code, receive a control device certificate and a programming device certificate, and store the control device certificate and the programming device certificate; a programming device, configured to generate a second private key, generate a second public key according to the second private key, receive the first public key, generate a certificate signing request according to the first public key and the second public key, receive the control device certificate and the programming device certificate, store the programming device certificate, and transmit the control device certificate and the programming device certificate to the control device; and a server device, configured to receive the certificate signing request to generate the control device certificate and the programming device certificate. ### Claim 7 (depends on 6) The data transmission system as claimed in claim 6, wherein the control device is configured to transmit the device identification code to the programming device, the programming device is configured to transmit the device identification code to the server device, the server device is configured to generate a third private key, a third public key, a fourth public key and a fourth private key according to the device identification code, the server device is configured to sign a bootloader according to the third private key to generate a signature bootloader and the server device is further configured to sign an application according to the fourth private key to generate a signature application, the server device is configured to transmit the signature bootloader, the third public key, the signature application, the application, the bootloader and the fourth public key to the programming device, the programming device is configured to transmit the bootloader with the signature bootloader and the third public key to the control device, the control device is configured to execute the bootloader, the programming device and the control device are respectively configured to generate a shared session key to the programming device and the control device, the programming device is configured to attach the signature application and the fourth public key to the application and the programming device is configured to encrypt the application according to the shared session key to generate an encrypted application to the control device, and the control device is configured to decrypt the encrypted application according to the shared session key to obtain the application and to burn the application. ### Claim 8 (depends on 6) The data transmission system as claimed in claim 6, wherein the server device is configured to receive an updating application, the control device is configured to transmit the device identification code to the programming device, the programming device is configured to transmit the device identification code to the server device, the server device is configured to use a fourth private key to sign the updating application according to the device identification code to generate a signature updating application, the server device is configured to transmit the signature updating application, the fourth private key, the updating application, an application version, a verification certificate and a fourth public key to the programming device, the programming device and the control device are respectively configured to generate a shared session key to the programming device and the control device, the programming device is configured to transmit the application version and the verification certificate to the control device, the control device is configured to use the verification certificate to verify the control device certificate and the control device is further configured to check the application according to the application version, the programming device is configured to attach the signature updating application and the fourth public key to the updating application and the programming device is configured to encrypt the updating application according to the shared session key to generate an encrypted updating application to the control device, and the control device is configured to decrypt the encrypted updating application according to the shared session key to obtain the updating application and to burn the updating application. ### Claim 9 (depends on 6) The data transmission system as claimed in claim 6, wherein the control device and the programming device are configured to perform a data transmission using a first transmission protocol, the programming device and the server device are configured to perform a data transmission using a second transmission protocol, and the first transmission protocol is different from the second transmission protocol. ### Claim 10 (depends on 9) The data transmission system as claimed in claim 9, wherein the first transmission protocol uses an elliptic curve Diffie-Hellman protocol. ### Claim 11 (depends on 9) The data transmission system as claimed in claim 9, wherein the second transmission protocol uses a mutual transport layer security protocol. ### Claim 12 (depends on 6) The data transmission system as claimed in claim 6, wherein the control device comprises: a storage unit, configured to store the control device certificate and the programming device certificate; a key generation unit, configured to generate the first private key, and to generate the first public key according to the first private key; and a processing unit, configured to transmit the first public key and the device identification code, receive the control device certificate and the programming device certificate, and store the control device certificate and the programming device certificate in the storage unit. ### Claim 13 (depends on 6) The data transmission system as claimed in claim 6, wherein the programming device comprises: a storage unit, configured to store the programming device certificate; a key generation unit, configured to generate the second private key, and generate the second public key according to the second private key; and a processing unit, configured to receive the first public key, generate the certificate signing request according to the first public key and the second public key, receive the control device certificate and the programming device certificate, store the programming device certificate in the storage unit, and transmit the control device certificate and the programming device certificate to the control device. ### Claim 14 (depends on 6) The data transmission system as claimed in claim 6, wherein the server device comprises: a hardware security module, configured to receive the certificate signing request to generate the control device certificate and the programming device certificate; and a processing unit, configured to transmit the control device certificate and the programming device certificate to the programming device. ### Claim 15 An operation method of a data transmission device, comprising: using a control device to generate a first private key, generate a first public key according to the first private key, and transmit the first public key and a device identification code; using a programming device to generate a second private key, generate a second public key according to the second private key, receive the first public key, and generate a certificate signing request according to the first public key and the second public key; using a server device to receive the certificate signing request to generate a control device certificate and a programming device certificate; using the programming device to receive the control device certificate and the programming device certificate, store the programming device certificate, and transmit the control device certificate and the programming device certificate to the control device; and using the control device to receive the control device certificate and the programming device certificate, and store the control device certificate and the programming device certificate. ### Claim 16 (depends on 15) The operation method of the data transmission device as claimed in claim 15, further comprising: using the control device to transmit the device identification code to the programming device; using the programming device to transmit the device identification code to the server device; using the server device to generate a third private key, a third public key, a fourth public key and a fourth private key according to the device identification code; using the server device to sign a bootloader according to the third private key to generate a signature bootloader and to sign an application according to the fourth private key to generate a signature application, using the server device to transmit the signature bootloader, and using the server device to transmit the signature bootloader, the third public key, the signature application, the application, the bootloader and the fourth public key to the programming device; using the programming device to transmit the bootloader with the signature bootloader and the third public key to the control device; using the control device to execute the bootloader; using the programming device and the control device respectively to generate a shared session key to the programming device and the control device; using the programming device to attach the signature application and the fourth public key to the application and to encrypt the application according to the shared session key to generate an encrypted application to the control device; and using the control device to decrypt the encrypted application according to the shared session key to obtain the application and to burn the application. ### Claim 17 (depends on 15) The operation method of the data transmission device as claimed in claim 15, further comprising: using the server device to receive an updating application; using the control device to transmit the device identification code to the programming device; using the programming device to transmit the device identification code to the server device; using the server device to use a fourth private key to sign the updating application according to the device identification code to generate a signature updating application, and using the server device to transmit the signature updating application, the fourth private key, the updating application, an application version, a verification certificate and a fourth public key to the programming device; using the programming device and the control device respectively to generate a shared session key to the programming device and the control device; using the programming device to transmit the application version and the verification certificate to the control device; using the control device to use the verification certificate to verify the control device certificate and to check the application according to the application version; using the programming device to attach the signature updating application and the fourth public key to the updating application and to encrypt the updating application according to the shared session key to generate an encrypted updating application to the control device; and using the control device to decrypt the encrypted updating application according to the shared session key to obtain the updating application and to burn the updating application. ### Claim 18 (depends on 15) The operation method of the data transmission device as claimed in claim 15, wherein the control device and the programming device are configured to perform a data transmission using a first transmission protocol, the programming device and the server device are configured to perform a data transmission using a second transmission protocol, and the first transmission protocol is different from the second transmission protocol. ### Claim 19 (depends on 18) The operation method of the data transmission device as claimed in claim 18, wherein the first transmission protocol uses an elliptic curve Diffie-Hellman protocol. ### Claim 20 (depends on 18) The operation method of the data transmission device as claimed in claim 18, wherein the second transmission protocol uses a mutual transport layer security protocol.