Management device, key generating device, vehicle, maintenance tool, management system, management method, and computer program

Patent metadata

Field	Value
Publication number	US-10419220-B2
Application number	US-201515533751-A
Country	US
Kind code	B2
Filing date	Dec 14, 2015
Priority date	Dec 12, 2014
Publication date	Sep 17, 2019
Grant date	Sep 17, 2019

Abstract

An automobile is equipped with a management device including a communication part for communicating with an ECU mounted on an automobile, an encryption processor for generating an encrypted key by encrypting a key, a key generation part for generating the key, and a key storage unit for storing the key generated by the key generation part. The communication part transmits the encrypted key to the ECU, while the encryption processor encrypts the key generated by the key generation part.

First claim

The invention claimed is:

1. A management device configured to manage an on-board computer mounted on a vehicle, the management device comprising:
a communication part configured to communicate with the on-board computer mounted on the vehicle;
an encryption processor configured to encrypt a management key used to update a key used for authentication of the on-board computer and to thereby generate an encrypted management key;
a key generation part configured to generate the management key in connection with the key;
a key storage unit configured to store the management key in connection with the key;
an initially-delivered key storage unit configured to store a plurality of initially-delivered keys corresponding to candidates of initially-delivered keys held by the on-board computer; and
a verification part configured to verify encrypted data from the on-board computer via the communication part by use of an initially-delivered key among the plurality of initially-delivered keys stored on the initially-delivered key storage unit,
wherein the communication part transmits the encrypted management key to the on-board computer, and
wherein the encryption processor encrypts the management key by use of the initially-delivered key successfully verified by the verification part.

2. The management device according to claim 1 , further comprising a fixed-value encryption list storing part configured to store a list describing combinations of encrypted fixed values, which are produced by encrypting fixed values using the plurality of initially-delivered keys stored on the initially-delivered key storage unit, and the plurality of initially-delivered keys used for encryption of the encrypted fixed values,
wherein the verification part compares the encrypted fixed value from the on-board computer via the communication part with each of the encrypted fixed values described on the list so as to use the initially-delivered key included in each combination having matched the encrypted fixed value among combinations on the list for verification of the encrypted data.

3. The management device according to claim 1 , wherein the verification part verifies the encrypted data received from the on-board computer by:
transmitting a challenge to the on-board computer mounted on the vehicle,
receiving a response to the challenge which is generated by the on-board computer by encrypting the challenge using an initially-delivered key among the plurality of initially-delivered keys held by the on-board computer,
carrying out a response matching process to verify the response using the initially-delivered key among the plurality of initially-delivered keys stored on the initially-delivered key storage unit, and thereby
encrypting the management key using the initially-delivered key used for verifying the response in success.

4. The management device according to claim 1 ,
wherein the encryption processor encrypts the management key by use of the initially-delivered key identical to the initially-delivered key held by the on-board computer mounted on the vehicle among the initially-delivered keys stored on the initially-delivered key storage unit, thus encrypting the key using the management key.

5. The management device according to claim 4 , wherein the key generation part repeatedly generates the management key,
wherein the key storage unit stores a latest management key and its preceding management key preceding the latest management key among management keys, and
wherein the encryption processor encrypts the latest management key by use of the preceding management key.

6. The management device according to claim 1 , wherein the encryption processor encrypts an abandonment key,
wherein the communication part transmits an encrypted key, which is generated by encrypting the abandonment key, to the on-board computer having received an abandonment notification among the on-board computers mounted on the vehicle.

7. The management device according to claim 1 , further comprising a wireless communication part configured to communicate with a management server, wherein the encryption processor encrypts the management key stored on the key storage unit by use of a key shared with the management server, and
wherein the wireless communication part transmits the encrypted management key to the management server.

8. A management method adapted to a management device configured to manage an on-board computer mounted on a vehicle, the management method comprising:
communicating with an on-board computer mounted on the vehicle;
generating an encrypted management key by encrypting a management key used to update a key used for authentication of the on-board computer;
generating the management key in connection with the key;
storing the management key in connection with the key,
storing a plurality of initially-delivered keys corresponding to candidates of initially-delivered keys held by the on-board computer, and
verifying encrypted data received from the on-board computer by use of an initially-delivered key among the plurality of initially-delivered keys,
wherein the encrypted management key is transmitted to the on-board computer, and
wherein the management key is encrypted using the initially-delivered key succeeded in verification.

9. A non-transitory computer-readable storage medium having stored a program causing a computer mounted to implement the management method according to claim 8 .

10. The management method according to claim 8 , further comprising:
transmitting a challenge to the on-board computer,
receiving a response to the challenge which is generated by the on-board computer by encrypting the challenge using an initially-delivered key among the plurality of initially-delivered keys held by the on-board computer,
carrying out a response matching process to verify the response using the initially-delivered key among the plurality of initially-delivered keys stored on the initially-delivered key storing step, and thereby
encrypting the management key using the initially-delivered key used for verifying the response in success.

Assignees

• Kddi Corp
• Kiddi Corp

Inventors

• Takemori Keisuke
• Kawabata Hideaki

Classifications

• B60R25/00 Primary

  Fittings or systems for preventing or indicating unauthorised use or theft of vehicles (locks for vehicles E05B77/00-E05B85/00) · CPC title

• G06F2221/2103

  Challenge-response · CPC title

• H04L9/0891

  Revocation or update of secret information, e.g. encryption key update or rekeying · CPC title

• G06F21/575

  Secure boot · CPC title

• G06F21/445

  by mutual authentication, e.g. between devices or programs · CPC title