METHOD FOR SECURE TRANSMISSION OF A VIRTUAL KEY AND METHOD FOR AUTHENTICATION OF A MOBILE TERMINAL

• US 20170330402A1
• Filed: 12/22/2015
• Published: 11/16/2017
• Est. Priority Date: 12/23/2014
• Status: Active Grant

• Current Assignee: Valeo Comfort And Driving Assistance
• Original Assignee: Valeo Comfort And Driving Assistance
• Inventors: Menard, Eric, Chalochet, Aymeric, Masson, Fabienne
• Granted Patent: US 10,529,157 B2
• Time in Patent Office: Days
• CPC Class Codes: B60R 2325/108 Encryption
• CPC Class Codes: B60R 2325/205 Mobile phones
• CPC Class Codes: B60R 25/01 operating on vehicle systems or fittings, e.g. on doors, seats or windscreens
• CPC Class Codes: B60R 25/209 Remote starting of engine
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: B60R 25/241 whereby access privileges are related to the identifiers
• CPC Class Codes: E05B 81/54 Electrical circuits for locking several wings simultaneously E05B77/48
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/0042 the transmitted data signal containing a code which is changed
• CPC Class Codes: G07C 2009/00428 periodically after a time period
• CPC Class Codes: G07C 2009/00865 remotely by wireless communication
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00857 where the code of the data carrier can be programmed
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/086 using security domains

Abstract

The invention relates to a method for transmission of a secure virtual key (VK) from a server (50, S) to a mobile terminal (20, T) capable of communicating with the server (50, S), comprising the steps of: a) reception by the server (50, S) of a certification request from the mobile terminal (20, T), b) provision and downloading on the mobile terminal (20, T), by the server (50, S), of a user application (25), and c) provision of the mobile terminal (20, T), by the server (50, S), with a virtual key (VK), and d) downloading and securing of the virtual key (VK) in a security element (27) of the mobile terminal (20, T), characterised in that said security element is formed by an encrypting software environment (27).

Claims

1. A method for secure transmission of a virtual key from a server to a mobile terminal for communicating with the server, the method comprising:

a) receiving, by the server, a certification request for the mobile terminal;

b) providing and downloading, by the server, a user application to the mobile terminal;

c) providing, by the server, a virtual key to the mobile terminal; and

d) downloading and securing the virtual key in a security element of the mobile terminal (204),

wherein said security element is formed by an encryption software environment.

2. The transmission method as claimed in claim 1, wherein the security element is integrated into the user application downloaded in the step b), and wherein in the step d), said securing includes an operation of encrypting and storing the virtual key via said encryption software environment.

3. The transmission method as claimed in claim 1, wherein

prior to the step d), there is provided a step of the server providing, to the mobile terminal, said encryption software environment, and a step of the mobile terminal downloading said encryption software environment, and

in the step d), said securing includes an operation of encrypting and storing the virtual key, via said encryption software environment.

4. The transmission method as claimed in claim 2, wherein said encryption software environment operates using a white-box cryptography technique.

5. The transmission method as claimed in claim 1, wherein said encryption software environment includes a unique algorithm, developed specifically for said mobile terminal.

6. The transmission method as claimed in claim 1, wherein, in the step a), said certification request includes an identification number associated with said mobile terminal.

7. The transmission method as claimed in claim 6, wherein the server providing said encryption software environment comprises an operation of sending to the mobile terminal, by the identification number associated therewith, a message for access to said encryption software environment.

8. The transmission method as claimed in claim 1, further comprising securing, in said encryption software environment, an interface application for communicating with a user application which is stored in the mobile terminal, outside said encryption software environment.

9. The transmission method as claimed in claim 1, wherein regular steps for updating by the server are provided for the input key for said encryption software environment.

10. The transmission method as claimed in claim 1, wherein, in the step b), the virtual key is developed from a root key and from at least one public derivation parameter.

11. The transmission method as claimed in claim 1, wherein since the virtual key has a predetermined expiry date, there are provided, after the step c), regular steps of updating the virtual key and of providing the virtual terminal, via the server, with said updated virtual key.