US 12,463,828 B2
Method and device for installing certificate on basis of encryption and decryption of contract certificate private key
Min Ho Shin, Yongin-si (KR)
Assigned to Hyundai Motor Company, Seoul (KR); Kia Corporation, Seoul (KR); and Myongji University Industry and Academia Cooperation Foundation, Yongin-si (KR)
Appl. No. 18/025,452
Filed by HYUNDAI MOTOR COMPANY, Seoul (KR); KIA CORPORATION, Seoul (KR); and Myongji University Industry and Academia Cooperation Foundation, Yongin-si (KR)
PCT Filed Sep. 7, 2021, PCT No. PCT/KR2021/012135
§ 371(c)(1), (2) Date Mar. 9, 2023,
PCT Pub. No. WO2022/055222, PCT Pub. Date Mar. 17, 2022.
Claims priority of application No. 10-2021-0118599 (KR), filed on Sep. 6, 2021.
Prior Publication US 2023/0327886 A1, Oct. 12, 2023
Int. Cl. H04L 9/32 (2006.01); H04L 9/06 (2006.01); H04L 9/08 (2006.01)
CPC H04L 9/3263 (2013.01) [H04L 9/0631 (2013.01); H04L 9/0643 (2013.01); H04L 9/088 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A certificate installation method based on encryption and decryption of a contract certificate private key for an electric vehicle communication controller, the certificate installation method comprising:
transmitting, by the electric vehicle communication controller and to a secondary actor, a certificate installation request message signed with a private key associated with a manufacturer provisioning certificate; and
receiving, from the secondary actor, a certificate installation response message signed with a private key associated with a leaf certificate of a certificate provisioning service,
wherein the certificate installation response message includes a contract certificate data packet including a signed installation data element, the signed installation data element includes a contract certificate chain element and an encrypted private key element, and the encrypted private key element stores a private key belonging to a new contract certificate encrypted for the electric vehicle communication controller without a trusted platform module,
wherein the private key belonging to the new contract certificate is encrypted using an advanced encryption standard (AES)-Galois/counter mode (GCM) based on an encryption key which is generated from a public key of the manufacturer provisioning certificate and the private key of the secondary actor through elliptic-curve Diffie-Hellman (ECDH) protocol, and the private key encrypted using the AES-GCM is included as a ciphertext or an encrypted private key field in 528 bits or 448 bits following a 96-bit or 128-bit initialization vector (IV) in the contract certificate data packet, and
wherein the initialization vector is included in the encrypted contract private key structure and is used as input to the AES-GCM decryption process together with the encryption key derived via ECDH, to decrypt the encrypted private key.