Device and method for updating immobilizer token in digital key sharing system

Patent metadata

Field	Value
Publication number	US-12556374-B2
Application number	US-202017424080-A
Country	US
Kind code	B2
Filing date	Jan 16, 2020
Priority date	Jan 21, 2019
Publication date	Feb 17, 2026
Grant date	Feb 17, 2026

Abstract

The disclosure relates to a method of updating an immobilizer token. A target device according to various embodiments of the disclosure may generate a first temporary encryption key pair for encryption and decryption of an immobilizer token, may transmit, to an immobilizer token issuance device, an immobilizer token issuance request including a first temporary public encryption key of the generated first temporary encryption key pair, may receive, from the immobilizer token issuance device, an encrypted immobilizer token and a second temporary public encryption key generated by the immobilizer token issuance device, may decrypt the encrypted immobilizer token by using the second temporary public encryption key and a first temporary private encryption key of the first temporary encryption key pair, and may store the decrypted immobilizer token in a confidential mailbox of the digital key in a secure element.

First claim

The invention claimed is:

1 . A method performed by a target device for updating an immobilizer token, the method comprising:
receiving a request of performing a storing process with respect to the immobilizer token, from an owner device or from an electronic device, wherein a digital key for the target device is allowed by the owner device, the electronic device is controlled by the digital key, and wherein the request of performing the storing process with respect to the immobilizer token is associated with an updating process of the immobilizer token; generating a first temporary encryption key pair for encryption and decryption of the immobilizer token, wherein the first temporary encryption key pair is associated with an access to a confidential mailbox of the digital key; generating an encryption key attestation including a first temporary public encryption key and a value obtained by signing the first temporary public encryption key with a private key of the target device, wherein the encryption key attestation is associated with an authentication that the first temporary encryption key pair is for the access to the confidential mailbox of the digital key; transmitting, to an immobilizer token issuance device, an immobilizer token issuance request comprising the first temporary public encryption key, wherein the first temporary public encryption key is included in a form of the encryption key attestation, and wherein the signing in the encryption key attestation is verified by the immobilizer token issuance device; receiving, from the immobilizer token issuance device, an encrypted immobilizer token and a second temporary public encryption key generated by the immobilizer token issuance device; decrypting the encrypted immobilizer token by using the second temporary public encryption key and a first temporary private encryption key of the generated first temporary encryption key pair; and updating the immobilizer token based on the first temporary encryption key pair by storing the decrypted immobilizer token in the confidential mailbox of the digital key.

2 . The method of claim 1 ,
wherein the immobilizer token issuance device is the owner device, and wherein the request of performing the storing process with respect to the immobilizer token is received from the owner device.

3 . The method of claim 2 ,
wherein the receiving of the request of performing the storing process with respect to the immobilizer token comprises:
receiving, from the owner device, an updated digital key attestation indicating an updated entitlement of the digital key and the request of performing the storing process with respect to the immobilizer token, and
the method further comprises storing the updated digital key attestation, and
wherein the updated digital key attestation comprises a public key of the target device, updated entitlement information of the digital key, and a signature of the owner device.

4 . The method of claim 2 , wherein the receiving of the request of performing the storing process with respect to the immobilizer token comprises:
receiving, from the owner device, a request of performing a process of updating an entitlement of the digital key which comprises the request of performing the storing process with respect to the immobilizer token, and the transmitting of the immobilizer token issuance request comprises transmitting, to the owner device, the immobilizer token issuance request along with an issuance request of an updated digital key attestation indicating an updated entitlement of the digital key.

5 . The method of claim 4 ,
wherein the receiving of the encrypted immobilizer token and the second temporary public encryption key comprises:
receiving, from the owner device, the updated digital key attestation along with the encrypted immobilizer token and the second temporary public encryption key, and
the method further comprises storing the updated digital key attestation, and
wherein the updated digital key attestation comprises a public key of the target device, updated entitlement information of the digital key, and a signature of the owner device.

6 . The method of claim 1 ,
wherein the immobilizer token issuance device is one of service provision servers related to the owner device and the electronic device, and wherein the receiving of the request of performing the storing process with respect to the immobilizer token comprises receiving, from the electronic device, information about the immobilizer token issuance device along with the request of performing the storing process with respect to the immobilizer token.

7 . The method of claim 6 ,
wherein the transmitting of the immobilizer token issuance request comprises transmitting the immobilizer token issuance request to the immobilizer token issuance device, based on the information about the immobilizer token issuance device, and wherein the immobilizer token issuance request comprises an identifier (ID) of the digital key.

8 . A method performed by an immobilizer token issuance device for updating an immobilizer token, the method comprising:
receiving, from a target device, a request of issuing the immobilizer token comprising a first temporary public encryption key of a first temporary encryption key pair generated by the target device; wherein the first temporary encryption key pair is associated with an access to a confidential mailbox of a digital key of the target device, wherein the first temporary public encryption key is included in a form of an encryption key attestation, wherein the encryption key attestation includes the first temporary public encryption key and a value obtained by signing the first temporary public encryption key with a first temporary private encryption key, and wherein the encryption key attestation is associated with an authentication that the first temporary encryption key pair is for the access to the confidential mailbox of the digital key of the target device; verifying the signing in the encryption key attestation; generating a second temporary encryption key pair for encryption and decryption of the immobilizer token; encrypting the immobilizer token by using the first temporary public encryption key received from the target device and a second temporary private encryption key of the generated second temporary encryption key pair, the immobilizer token being decrypted by the target device using a second temporary public encryption key and the first temporary private encryption key of the generated first temporary encryption key pair and stored in the confidential mailbox of the digital key and updated based on the first temporary encryption key pair; and transmitting, to the target device, the encrypted immobilizer token and a-the second temporary public encryption key of the second temporary encryption key pair.

9 . The method of claim 8 ,
wherein the immobilizer token issuance device is an owner device that has issued the digital key to the target device, wherein the method further comprises transmitting a request of performing a storing process with respect to an immobilizer token corresponding to the digital key, and wherein the immobilizer token issuance request is received from the target device, in response to the transmitted request of performing the storing process with respect to the immobilizer token.

10 . The method of claim 9 , further comprising generating an updated digital key attestation indicating an updated entitlement of the digital key, and
wherein the transmitting of the request of performing the storing process with respect to the immobilizer token comprises transmitting, to the target device, the updated digital key

Assignees

• Samsung Electronics Co Ltd

Inventors

• Jung Sooyeon
• Shin Inyoung
• LEE Jonghyo

Classifications

• H04L9/3228

  One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key · CPC title

• H04L9/3213 Primary

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title

• H04L9/0877

  using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM] · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title