Certificate-based pairing of key fob device and control unit

• US 10,005,429 B2
• Filed: 03/29/2017
• Issued: 06/26/2018
• Est. Priority Date: 07/17/2012
• Status: Active Grant

• Current Assignee: Texas Instruments, Inc.
• Original Assignee: Texas Instruments, Inc.
• Inventors: Peeters, Eric, Ho, Jin-Meng
• Primary Examiner(s): Zaidi, Syed
• Application Number:
  US15/472,629
• Publication Number:
  US 20170203720A1
• Time in Patent Office: 454 Days
• Field of Search: 713168
• CPC Class Codes: B60K 2360/23 using reflectors
• CPC Class Codes: B60K 2360/25 using filters
• CPC Class Codes: B60K 2360/27 using semi-transparent optical elements
• CPC Class Codes: B60K 2360/31 Virtual images
• CPC Class Codes: B60K 2360/334 Projection means
• CPC Class Codes: B60K 2360/349 Adjustment of brightness
• CPC Class Codes: B60K 2360/77 Instrument locations other than the dashboard
• CPC Class Codes: B60K 2370/1529 Head-up displays
• CPC Class Codes: B60K 2370/23 using reflectors
• CPC Class Codes: B60K 2370/25 using filters
• CPC Class Codes: B60K 2370/334 Projection means
• CPC Class Codes: B60K 35/00 Instruments specially adapted for vehicles; Arrangement of instruments in or on vehicles
• CPC Class Codes: B60K 35/213 Virtual instruments
• CPC Class Codes: B60K 35/23 Head-up displays [HUD] optical aspects of head-up displays G02B27/01
• CPC Class Codes: B60K 35/60 Instruments characterised by their location or relative disposition in or on vehicles arrangements of lighting devices on dashboards B60Q3/10
• CPC Class Codes: B60K 37/02 Arrangement of instruments arrangement of lighting devices for dashboards B60Q3/10
• CPC Class Codes: B60R 2325/108 Encryption
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: G02B 2027/0118 comprising devices for improving the contrast of the display / brillance control visibility
• CPC Class Codes: G02B 26/0833 the reflecting element being a micromechanical device, e.g. a MEMS mirror, DMD G02B26/0825 takes precedence; micromechanical devices in general B81B
• CPC Class Codes: G02B 27/01 : Head-up displays
• CPC Class Codes: G02B 27/0101 : characterised by optical features G02B27/0172 takes precedence
• CPC Class Codes: G02B 5/30 : Polarising elements light-modulating devices with active elements G02F1/00
• CPC Class Codes: G06K 7/10227 : loading programming parameters or programs into the interrogator, e.g. for configuring the interrogator
• CPC Class Codes: G07C 2009/00769 : with data transmission performed by wireless means
• CPC Class Codes: G07C 9/00309 : operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: H01S 5/4012 : Beam combining, e.g. by the use of fibres, gratings, polarisers, prisms
• CPC Class Codes: H01S 5/4093 : Red, green and blue [RGB] generated directly by laser action or by a combination of laser action with nonlinear frequency conversion
• CPC Class Codes: H04L 2209/24 : Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 2209/80 : Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/84 : Vehicles
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 : for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 9/0822 : using key encryption key
• CPC Class Codes: H04L 9/0838 : Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0844 : with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/0861 : Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0897 : involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/14 : using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3013 : involving the discrete logarithm problem, e.g. ElGamal or Diffie-Hellman systems
• CPC Class Codes: H04L 9/3066 : involving algebraic varieties, e.g. elliptic or hyper-elliptic curves
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3268 : using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3271 : using challenge-response
• CPC Class Codes: H04N 9/3129 : scanning a light beam on the display screen scanning a light beam on a screen in displays other than projection devices G09G3/02; scanning systems in general G02B26/10; projectors using laser light sources in general H04N9/3161
• CPC Class Codes: H04N 9/3155 : for controlling the light source light source control per se H05B35/00 – H05B47/00; control of an illumination source for displays in general G09G3/3406
• CPC Class Codes: H04N 9/3167 : for polarizing the light beam polarizing optical systems per se G02B27/28
• CPC Class Codes: H04W 12/04 : Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 : Secure pairing of devices
• CPC Class Codes: H05B 47/11 : by determining the brightness or colour temperature of ambient light
• CPC Class Codes: H05B 47/14 : by determining electrical parameters of the light source
• CPC Class Codes: Y02B 20/40 : Control techniques providing energy savings, e.g. smart controller or presence detection

Abstract

A key fob device, in one embodiment, includes a transceiver that receives and sends signals, a memory that stores a public key and a certificate of authenticity associated with the key fob device, and a processor coupled to the transceiver and memory. The processor is configured to execute instructions causing the key fob device to transmit the public key and the certificate of authenticity, execute a public key agreement protocol to generate a common secret encryption key, and receive an operation key encrypted with the common secret encryption key.

Claims

1. A key fob device, comprising:

a transceiver that receives and transmits signals;

a memory that stores a public key and a certificate of authenticity, both of which are associated with the key fob device, and instructions; and

a processor coupled to the transceiver and the memory, wherein the processor is configured to execute the instructions stored in the memory to cause the key fob device to;

transmit the public key and the certificate of authenticity;

after transmitting the public key and the certificate, execute a public key agreement protocol to generate a common secret encryption key; and

receive an operation key encrypted with the common secret encryption key.

2. The key fob device of claim 1, wherein the public key and the certificate of authenticity are transmitted from the key fob device, via the transceiver, to a pairing device.

3. The key fob device of claim 1, wherein the key fob device receives, via the transceiver, the operation key encrypted with the common secret encryption key from a control unit.

4. The key fob device of claim 3, wherein receiving the operation key encrypted with the common secret encryption key from the control unit pairs the key fob device with the control unit.

5. The key fob device of claim 3, wherein the public key agreement protocol is executed with the control unit.

6. The key fob device of claim 1, wherein the public key agreement protocol is based on elliptical curve Diffie-Hellman (ECDH) encryption.

7. The key fob device of claim 1, wherein the public key agreement protocol is based on elliptical curve cryptography (ECC).

8. The key fob device of claim 1, wherein the processor is configured to execute instructions that decrypt the operation key with the common secret encryption key.

9. The key fob device of claim 1, wherein the certificate of authenticity is signed by a certificate authority.

10. The key fob device of claim 9, wherein the certificate authority is a vehicle manufacturer.

11. A key fob device, comprising:

a transceiver that receives and transmits signals;

a memory that stores a public key and a certificate of authenticity, both of which are associated with the key fob device, and instructions; and

a processor coupled to the transceiver and the memory, wherein the processor is configured to execute the instructions stored in the memory to cause the key fob device to;

transmit, using the transceiver, the public key and the certificate of authenticity from the key fob device to a second device;

execute a public key agreement protocol with a third device to generate a common secret encryption key that is shared between the key fob device and the third device; and

receive, using the transceiver, an operation key encrypted with the common secret encryption key from the third device, wherein the key fob device becomes paired with the third device upon receiving the operation key encrypted with the common secret encryption key.

12. The key fob device of claim 11, wherein the second device is a pairing device.

13. The key fob device of claim 12, wherein the third device is a control unit of a vehicle.

14. A system comprising:

a pairing device;

a control unit;

a key fob device that comprises;

a transceiver that receives and transmits signals;

a memory that stores a first public key and a first certificate of authenticity, both of which are associated with the key fob device, and instructions; and

a processor coupled to the transceiver and memory, wherein the processor is configured to execute the instructions stored in the memory to cause the key fob device to;

transmit, using the transceiver, the first public key and the first certificate of authenticity from the key fob device to the pairing device;

execute a first public key agreement protocol with the control unit to generate a first common secret encryption key that is shared between the key fob device and the control unit; and

receive, using the transceiver, an operation key encrypted with the first common secret encryption key from the control unit, wherein the key fob device becomes paired with the control unit upon receiving the operation key encrypted with the first common secret encryption key.

15. The system of claim 14, wherein:

the pairing device comprises;

a transceiver that receives and transmits signals; and

a memory that stores instructions and a second certificate of authenticity;

a processor coupled to the transceiver and the memory,

wherein the processor is configured to execute the instructions stored in the memory to cause the pairing device to;

verify the first certificate of authenticity received from the key fob device;

after verifying the first certificate of authenticity, transmit, using the transceiver, a second certificate of authenticity associated with the pairing device to the control unit;

execute a second public key agreement protocol with the control unit to generate a second common secret encryption key that is shared between the pairing device and the control unit;

encrypt the first public key using the second common secret encryption key; and

transmit, using the transceiver, the first public key encrypted with the second common secret encryption key to the control unit; and

the control unit comprises;

a transceiver that receives and transmits signals; and

a memory that stores instructions;

a processor coupled to the transceiver and the memory,

wherein the processor is configured to execute the instructions stored in the memory to cause the control device to;

use the second common secret encryption key to decrypt the first public key encrypted with the second common secret encryption key received from the pairing device to recover the first public key;

generate the first common secret encryption key in response to first public key agreement protocol after the first public key is recovered by the control unit;

generate an operation key;

encrypt the operation key using the first common secret encryption key; and

transmit, using the transceiver, the operation key encrypted with the first common secret encryption key to the key fob device.