Method for secure transmission of a virtual key and method for authentication of a mobile terminal

• US 10,529,157 B2
• Filed: 12/22/2015
• Issued: 01/07/2020
• Est. Priority Date: 12/23/2014
• Status: Active Grant

• Current Assignee: Valeo Comfort And Driving Assistance
• Original Assignee: Valeo Comfort And Driving Assistance
• Inventors: Menard, Eric, Chalochet, Aymeric, Masson, Fabienne
• Primary Examiner(s): Kim, Tae K
• Application Number:
  US15/531,156
• Publication Number:
  US 20170330402A1
• Time in Patent Office: 1,477 Days
• CPC Class Codes: B60R 2325/108 Encryption
• CPC Class Codes: B60R 2325/205 Mobile phones
• CPC Class Codes: B60R 25/01 operating on vehicle systems or fittings, e.g. on doors, seats or windscreens
• CPC Class Codes: B60R 25/209 Remote starting of engine
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: B60R 25/241 whereby access privileges are related to the identifiers
• CPC Class Codes: E05B 81/54 Electrical circuits for locking several wings simultaneously E05B77/48
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/0042 the transmitted data signal containing a code which is changed
• CPC Class Codes: G07C 2009/00428 periodically after a time period
• CPC Class Codes: G07C 2009/00865 remotely by wireless communication
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00857 where the code of the data carrier can be programmed
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/086 using security domains

Abstract

The invention relates to a method for transmission of a secure virtual key (VK) from a server (50, S) to a mobile terminal (20, T) capable of communicating with the server (50, S), comprising the steps of: a) reception by the server (50, S) of a certification request from the mobile terminal (20, T), b) provision and downloading on the mobile terminal (20, T), by the server (50, S), of a user application (25), and c) provision of the mobile terminal (20, T), by the server (50, S), with a virtual key (VK), and d) downloading and securing of the virtual key (VK) in a security element (27) of the mobile terminal (20, T), characterised in that said security element is formed by an encrypting software environment (27).

Claims

1. A method for secure transmission of a virtual key from a server to a mobile terminal for communicating with the server, the method comprising:

receiving, by the server, a certification request for the mobile terminal and a VIN for a motor vehicle;

providing and downloading, by the server to the mobile terminal, an encryption software environment forming a security element of the mobile terminal, wherein the security element is associated an input key stored in the server;

generating, by the server subsequent to detecting that the security element is downloaded to the mobile terminal, the virtual key for providing to the mobile terminal to access the motor vehicle; and

downloading and securing the virtual key and an interface application in the security element of the mobile terminal,

wherein content stored in the security element is accessed by a user application, installed on the mobile terminal, via the interface application, and

wherein the virtual key and the interface application are encrypted using the input key for sending via a secured Internet connection to the mobile terminal and storing in said security element, and

wherein the user application is stored in the mobile terminal, outside said encryption software environment, and wherein the security element is stored in the mobile terminal, outside of any physical security element of the mobile terminal.

2. The transmission method as claimed in claim 1,

wherein the security element is integrated into the user application downloaded to the mobile terminal, and

wherein said securing the virtual key in the security element of the mobile terminal includes an operation of encrypting and storing the virtual key via the encryption software environment.

3. The transmission method as claimed in claim 1, wherein

prior to said downloading and securing the virtual key in the security element of the mobile terminal, there is provided

a step of the server providing, to the mobile terminal, the user application, and

a step of the mobile terminal downloading the user application, and

wherein the certification request is sent to the server from the mobile terminal using the user application.

4. The transmission method as claimed in claim 1, wherein said encryption software environment operates using a white-box cryptography technique.

5. The transmission method as claimed in claim 1, wherein said encryption software environment includes a unique algorithm, developed specifically for said mobile terminal.

6. The transmission method as claimed in claim 3, wherein said certification request includes an identification number associated with said mobile terminal.

7. The transmission method as claimed in claim 6, wherein the server providing said encryption software environment comprises an operation of sending to the mobile terminal, by the identification number associated therewith, a message for access to said encryption software environment.

8. The transmission method as claimed in claim 1, wherein the user application is stored in the mobile terminal, outside said encryption software environment, and wherein the security element is stored in the mobile terminal, outside of any physical security element of the mobile terminal.

9. The transmission method as claimed in claim 1, further comprising updating, by the server, the input key for said encryption software environment.

10. The transmission method as claimed in claim 1, wherein the virtual key is developed from a root key and from at least one public derivation parameter.

11. The transmission method as claimed in claim 1, further comprising:

updating the virtual key and providing the mobile terminal, via the server, said updated virtual key, wherein the virtual key has a predetermined expiry date.