TW202133010A - Method for remotely activating a remote lock system using cryptography and the remote lock system for implementing the method - Google Patents

Abstract

The invention provides a method for remotely activating a remote lock system using cryptography with two-way verification mechanism between the key and the lock, and a remote lock system implementing the method. Accordingly, the key and the lock simultaneously encrypt via a hash function formula to verify the cryptography before executing the control command. In addition, the method for remotely activating a remote lock system using cryptography according to the invention further comprises a timed cryptographic attack prevention mode by increasing the command receipt time from the key for each time input wrong cryptography.

Description

Method for remotely starting remote key lock system using password and remote key lock system for executing the method

The present invention relates to a method for remotely starting a remote key lock system using a password and a two-way mechanism between the verification key device and the lock device, and a system for executing the method. The above-mentioned method and system are used in the technical field: wireless remote lock devices for various doors such as sliding doors, rolling doors, sky wells, gates, windows, sliding doors, etc., wireless such as radio frequency; used in automobiles and electric vehicles , Locomotives, electric locomotives, electric bicycles and other wireless remote lock devices; wireless remote control for electrical equipment (remote radio-triggered controller), where the electrical equipment is installed in a location or environment that is not conducive to direct switching, the aforementioned Location or ring, such as radiation environment, biological pollution environment; used for wireless remote control of equipment that needs to ensure safety and avoid wrong start, such as mining detonation equipment, etc.; used for anti-theft alarm device application; used for identification card device application, identification card device To replace various fixed passwords; to replace various microchip remote control (MicroChip KeeLoq). Various commands can be: off, on, start, stop, cancel, timing, etc.

The method of using a password to activate the lock device has been used for a long time. One of the common coding systems of this method is the rolling code (Rolling Code), which was published in 1993. It is a coding system with high security, in which the algorithm generates a different and non-repetitive code every time it is started ( code). However, there are security loopholes in rolling codes that can be exploited by bad guys. This has been announced and demonstrated by a security expert "Samy Kamkar" at the "DefCon23" conference in Paris in 2015.

Currently, the "keying of the car" service is publicly published on the Internet, but it has not been inspected by the source manufacturer or authorized by the national authority. According to the introduction of the public publication, the "key maker" uses a certain serial number generator (Keygen) as a device to crack the encryption system of the car manufacturer, and retain the code information for other purposes in the future.

Before the rolling code encoding system was published, some encoding systems were widely used by users as relatively inexpensive options. For example, "Fix Code", whose code is securely fixed by hardware circuits (switching circuits, welding, etc.) using specific integrated circuits (such as integrated circuits of model PT226x, PT227x, etc.); or "Learning Code", which is allowed The lock device learns the model of the key device with more encryption bits to improve the security capability. However, due to the fixed nature of the code, it is easy to be copied or easily attacked by exhaustive attacks.

In addition, some new smart key devices (Smart Key) will encounter the following situation: if the lock device receives multiple consecutive commands (such commands are to activate the wrong password or activate the junk packet), it may cause the lock device Stop, that is, it cannot work normally, for example, a car engine cannot start. This situation is called a distributed denial-of-service (DDoS) attack.

The previous generations of key devices all have a one-way communication mechanism, that is, only the key device sends a password, and the lock device receives the password and checks it. If the correct code is recorded, the password can be generated by various encryption functions ranging from simple to complex. The operating principle of this method is based on the assumption that only the key device paired with the lock device can transmit the correct code, without the need for re-authentication mechanism, which will cause major security weaknesses and make the method easy to be copied. In addition, general encryption functions have some unique mathematical properties, such as pseudo-randomness, to counter statistical attacks, and require simple enough functions to integrate with hardware. However, the number of this function is not large, so that the used encryption function can be tracked and reversed.

Therefore, in order to solve the above-mentioned problems, this case proposes a method of using a password to remotely activate the lock device, which has an improved encoding verification mechanism to prevent copying, cracking, and tracking of encrypted functions. These behaviors are password leaks, attacks, and hacks. The method has a time-based cryptographic-attacked prevention mode (time-based cryptographic-attacked prevention mode).

The purpose of the present invention is to prevent the behaviors of copying, cracking, and restoring encryption functions, which are the basis for password leakage, attack and hacking, and to prevent time-based cryptographic attacks.

In order to achieve the above-mentioned purpose, the present invention proposes a method for remotely starting a remote key lock system using a password. The method includes the following steps:

Step 1: Under a user's instruction, the key device sends an activation packet to the lock device to activate the lock device, and the activation packet has a control command code and a key identification code of the key device.

Wherein, the control instruction code can be any instruction assigned to a conventional keyword, and the instruction has a corresponding design value, so that its value set and bit reversed value set are disjoint, where The key identification code is defined by the product manufacturer using the key device.

Step 2: After receiving the activation packet of the key device, when the key identification code in the activation packet sent to the lock device does not match a lock identification code stored by the lock device, or is receiving the user's When one of the commands is not over for a predetermined time, the lock device does not respond.

When the key identification code in the activation packet sent to the lock device matches the lock identification code of the lock device, a lock processing chip of the lock device sends out any task that is not repeated with the previous activation at a preset time. A random value, the lock processing chip is embedded with a software.

The random value is sent to the key device through wireless communication.

The random value has a length of at least 24 bits, and the random value is randomly generated based on a time epoch (epoch-time) parameter and a constant of the random function space size representing the random function.

Step 3: While generating the random value (step 2), the lock processing chip of the lock device is based on a combination of the random value obtained in step 2, the control command code, the key identification code, and a cryptographic parameter The hash function is used for encryption.

Wherein, the cryptographic parameter is calculated according to a hash function composed of three components, the three components are the key identification code defined by the product manufacturer using the key device, one of the parameters defined by the master key manufacturer, and a person identification code (PIN), where the personal identification code is a string of random values automatically generated by the remote key lock system whenever the user requests to set the personal identification code.

After encryption (after step 3), the lock device generates a lock encryption result, and the lock encryption result is a lock encryption value.

Step 4: When the key device receives the random value generated by the lock device in step 2 through the wireless communication, a key processing chip of the key device loads the random value, and the key device according to the aforementioned step 3 The hash function of encrypts the random value and generates a key encryption result, where the key encryption result is a key encryption value.

Afterwards, the key device sends the key encryption result to the lock device through the wireless communication within a predetermined period.

Step 5: When the lock device receives the key encryption result from the key device, compare the key encryption result with the lock encryption result generated by the lock device in step 3.

When the key encryption result matches the lock encryption result, the lock processing chip of the lock device requires the actuator to execute a control command issued by the key device. At the same time, the lock processing chip adjusts the command receiving time of the key device when the lock device is activated next time to the minimum command receiving preset period.

When the key encryption result does not match the lock encryption result, the lock processing chip of the lock device will not execute the control command. At the same time, the lock device records this as an error activation, and the lock processing chip increases the command receiving time of the key device every time the error is activated until the maximum command reception preset period is reached, so as to avoid exhaustive attacks ( exhaust attack).

When no response from the key device is received within the predetermined period, the lock processing chip of the lock device will not execute the control command. At the same time, the lock device records this as an error activation, and the lock processing chip increases the command receiving time of the key device every time the error is activated until the maximum command receiving preset period is reached to avoid exhaustive attacks.

The system of the present invention for executing the method for remotely starting a lock device using a password includes:

The key device includes a plurality of buttons, and each of the first buttons corresponds to an instruction, for example, the instruction is on, off, up or down; the other button is used to set the personal identification code; a wireless transmitter; a wireless Receiver; a key processing chip with embedded software for encryption according to preset steps; and a power supply. In addition, the key device may also include a light display screen, a flashlight, and a microcontroller (Micro control unit, MCU).

The lock device includes a wireless transmitter, a wireless receiver, a lock processing chip and a power supply, wherein the lock processing chip is embedded with software to perform encryption according to preset steps, and the lock processing chip has a command execution mechanism . In addition, the lock device may include an auxiliary port connected to a manual on/off button that can be activated through the personal identification code; a small light display screen; a flashlight or a liquid-crystal display (LCD) for displaying Information; speakers or alarms; and wireless network module ports to connect with smart phones and auxiliary modules.

Wherein, the preset steps in the encryption software of the key device match the preset steps in the encryption software of the lock device.

The key device and the lock device are synchronized with each other through the cryptographic parameter, wherein the cryptographic parameter is calculated by the hash function composed of the three components, and the three components are the key identification code and the master key defined by the product manufacturer using the key device The parameter and the personal identification code defined by the manufacturer, where the personal identification code is the random string automatically generated by the remote key lock system whenever the user requests to set the personal identification code value.

Hereinafter, the present invention will be described in detail with specific embodiments. The specific embodiments of the present invention are presented with multiple examples to fully disclose the present invention to those with ordinary knowledge in the field. However, the present invention is not limited to these examples. Without departing from the scope and spirit of the present invention, the present invention includes all modifications, equivalents and alternatives.

It should be understood that, unless otherwise stated, the terms used in this case should be interpreted as terms commonly understood and widely used by persons with ordinary knowledge in the field. The terms used in the embodiments of this case are for describing specific embodiments, but not for limiting the terms. Terms such as "Random_token", "Keyword", "KeyID", "SerialNumber", "CypherKey", "MasterKey", and "PIN" are used to distinguish different password parameters, but the present invention is not limited thereto.

According to an embodiment of the present invention, the password method for activating the remote lock device in the two-way communication between the key device and the lock device is implemented by a radio frequency (RF) signal.

The method of using a password to remotely activate a remote key device of the present invention is realized through two main components, the two main components including a key device and a lock device.

There are multiple buttons on the key device, and each button corresponds to a command, such as on, off, up, down, etc.; one button is used to set the personal identification code; wireless transmitter; wireless receiver; and key processing The chip has embedded software to perform encryption according to preset steps. The default steps in the encryption software of the key device are the same as the default steps in the encryption software of the lock device.

The lock device has a wireless transmitter; a wireless receiver; and a lock processing chip, in which software is embedded to perform encryption according to preset steps, and the lock processing chip has a command execution mechanism. The default steps in the encryption software of the lock device are the same as the default steps in the encryption software of the key device.

The key device and the lock device are synchronized and paired with each other through a password parameter (CypherKey). The cryptographic parameters are calculated by the hash function composed of the three components, which are the key identification code defined by the product manufacturer using the key device, one of the parameters defined by the key maker, and the individual The personal identification code, where the personal identification code is a string of random values automatically generated by the remote key lock system whenever the user requests to set the personal identification code. The encryption function used is the SHA function, which is one-way encryption, so collecting ciphertext does not help reverse the parameters used to generate the password.

In a preferred embodiment, the cryptographic parameter CypherKey is established by the SHA1 hash function of the above three parameters, and the formula 1 is as follows:

SHA1 (MasterKey, SerialNumber, PIN)………………(Formula 1)

in:

SHA1(...) is the SHA1 hash function, and Masterkey is a parameter defined by the master key manufacturer.

KeyID or SerialNumber is the key identification code defined by the product manufacturer using the key device, such as the key identification code defined by the car manufacturer, rolling door manufacturer, etc. or any other third-party manufacturer for management purposes, and the key identification code is not It is not limited to the length of the number string.

PIN is a personal identification code, and it is a string of random values automatically generated by the system whenever a user requests to set a personal identification code, and the personal identification code is consistent between the lock device and the key device. The user can selectively reset the personal identification code by pressing the corresponding button on the key device. At the same time, the processor of the key device will send a random value to the lock device for storage and general use. According to the embodiment of the present invention, the user instructs a command to set the personal identification code without being notified of the personal identification code.

Among them, the formula for generating a personal identification code is as follows:

If the system is designed, the user does not need to remember the personal identification code, for example, as shown in formula 2~3:

PIN=[P ₀ .. P _{pin_length} ]…………(Equation 2), that is, PIN is equal _{to the matrix of P 0} to P _{pin_length} , where PIN is the personal identification code.

P _i =random(0~255)…………(Equation 3), where i is 0 to pin_length, where random(...) is a random function.

pin_length is the length of the personal identification code, which can be very long.

In a preferred embodiment, the length of the personal identification code is 112 bytes, and the user does not need to remember the personal identification code, so there is no need to store the personal identification code;

If the system is designed for other control purposes, the user can store the personal identification code, for example, as shown in formula 4 to formula 5:

PIN=[P ₀ .. P _{pin_length} ]…………(Equation 4), that is _{, the matrix of PIN equal to P 0} to P _{pin_length} , where PIN is the personal identification code.

P _i =random('a'~'z','A'~'Z', '0'~'9')………………(Equation 5), where i is 0 to pin_length, where random(. ..) is a random function.

pin_length is the length of the personal identification code, which can be very long.

In another preferred embodiment, the 256-character personal identification code includes numbers and letters distinguished between uppercase and lowercase. Among them, recording such personal identification codes for archiving requires the use of independent security methods to maximize the security of such storage, and this method does not belong to the scope of the present invention.

An example formula 6 for generating a password parameter CypherKey with specific parameters is as follows:

MasterKey = "56464e4c48105feedd10b652520b6bdcd0ad66b0", where MasterKey is a parameter defined by the master key manufacturer.

SerialNumber="0123456789ABCDEF", where SerialNumber is the key identification code defined by the product manufacturer using the key device.

PIN="42efda2d63c5b28d827b5173722185568e076522", where PIN is a personal identification code.

in:

CypherKey=SHA1(MasterKey, SerialNumber, PIN)

=SHA1("56464e4c48105feedd10b652520b6bdcd0ad66b00123456789ABCDEF42efda2d63c5b28d827b5173722185568e076522")

= "C677474d4adf3bcc2d7f2d41566462ae3dd47d72"...(Equation 6), where SHA1(...) is a function and CypherKey is a password parameter.

However, the present invention is not limited to this. In order to achieve higher security, any new function can be used, such as the SHA3 function or the Keccak function with a larger number of bits.

The present invention is implemented through the following steps:

Step 1: Under a user's instruction, the key device sends an activation packet to the lock device to activate the lock device, and the activation packet has a control command of the key device to be activated (close, open, stop, etc.) Code and a key identification code. Among them, the control command code is also called "Keyword", and the key identification code is also called "KeyID" or "SerialNumber". in particular:

Keyword (control command code), which is the command code to be activated to distinguish the commands to be executed. The present invention does not limit the maximum number of instruction codes.

KeyID or SerialNumber is the key identification code, which is defined by the product manufacturer using the key device.

According to a preferred embodiment, the startup packet is represented by the following function, as shown in Equation 7:

[Keyword][KeyID]………………(Equation 7)

Among them, Keyword is a control command code, which can be any command assigned to a regular keyword, as long as the control command code Keyword has been designed so that its value set {Keyword} and its bit-reversed value set {~ Keyword} If they do not intersect, the information processing in step 2 can be optimized. As shown in Table 2, Table 2 is an example of the control instruction code Keyword.

Table 2 name Keyword value Remark shut CLOSE 0xD0 It can also refer to: cancel start, cancel open OPEN 0xE0 It can also mean: start, start stop STOP 0xC0 superior UP 0xB0 Down DOWN 0xA0 Left LEFT 0x90 right RIGHT 0x80 Set personal identification code SetPIN 0xFE

It should be noted that the above table is not limited to the number of commands, the text of the control command code Keyword, and the value corresponding to the command.

According to an embodiment of the present invention, when the user selects the “OPEN” command, the command code to be sent may be “E0000001”.

Among them, "OPEN" is equal to "E0", and the key identification code KeyID is equal to "000001".

Step 2: When the activation packet of the key device is received, if the key identification code in the activation packet sent to the lock device does not match a lock identification code of the lock device, or the predetermined time has not expired after receiving the user's command When the lock device does not respond.

When the key identification code in the activation packet sent to the lock device matches the lock identification code of the lock device, a lock processing chip of the lock device (a software embedded in the lock processing chip) is issued for a preset time and is different from the previous activation. Repeat any random value random_token. The random value random_token is sent to the key device via wireless communication within the _{preset command receiving time T protect.}

For example, if the command receiving time T _protect is equal to 500ms (milliseconds), the lock device will respond when the key identification code in the packet matches the lock identification code of the lock device 500ms after the command is issued.

The length of the random value random_token is at least 24 bits, and it is randomly generated based on the time epoch parameter epoch_id and a constant epoch_size representing the random function space size.

According to an embodiment of the present invention, each generated random value random_token is not repeated, because each epoch is distinguished by a use date. The time epoch parameter epoch_id is numbered from the 12 bits corresponding to "0" ~ "4095" to encode dates from the start date to more than 11 years. For example, the token length token_length is 64 bits. The constant epoch_size of the random function space size is left with 52 bits (64 minus 12), that is, the value "0" to "2 ⁵³ -1 (that is, 2 ⁵³ minus 1)" is the random function space size of the random function.

The formula 8 for calculating the random value random_token is as follows:

random_token=epoch_id*epoch_size+random(epoch_size)... (Equation 8)

Among them, the time epoch parameter epoch_id is the reference number of the time epoch, and random(...) is a random function.

epoch_size is a constant used to represent the random function space of the random function. Specifically, the remaining size of the digital space after dividing tokens into epochs.

For example, as shown in formula 9~10:

The token length token_length is equal to 64 bits, divided into 4096 epochs (that is, 2 ¹² epochs), and each epoch is one day (day).

The time epoch parameter epoch_id is equal to 127, that is, the 127th day from the date of system operation.

epoch_size=2 ^(64-12) =2 ⁵² ……………… (Equation 9)

^{random_token = 127 * 2 52 + random} (0 ~ (2 52 - 1)) ............... ( Formula 10)

Following the example above, the random value random_token is, for example, "0x07FCC157341A7556| _HEX " or "575547432677045590| _DEC ".

According to the foregoing embodiment, only a small storage is needed. For example, when the epoch is distinguished according to the date, 256 button presses can be stored for each date without affecting the security of encryption.

The algorithm in the above formula does not limit the maximum number of bits of the random value random_token, but the length of the random value random_token should be selected according to the processing capacity of the system. According to the usage frequency of the epoch, the memory capacity required for the tokens used in the epoch is specified to avoid dictionary crawling attacks.

Step 3: The random value in step 2 is sent to the key device via wireless communication.

In the lock device, the random value is input to the chip of the lock device to be encrypted according to the hash function based on the asymmetric encryption. This hash function can be any of the following encodings: MD5, SHA1, SHA2, SHA3 (also known as Keccak512) and other types of Keccak encoding.

The hash function includes four components: the random value random_token obtained from step 2; the control command code Keyword; the key identification code (Key ID or SerialNumber); and the password parameter (CypherKey) described above.

In a preferred embodiment, the above-mentioned hash function is expressed by the following formula 11:

hash(random_token, Keyword, KeyID, CypherKey)………(Equation 11)

Examples of the hash function puzzle with specific parameters and the control script Keyword (which is equal to "E0") of the "OPEN" command are as follows:

random_token="0x07FCC157341A7556| _HEX ", where random_token is a random value.

Keyword="OPEN"="E0", KeyID="000001", where KeyID is the key identification code.

CypherKey="c677474d4adf3bcc2d7f2d41566462ae3dd47d72", where CypherKey is the password parameter.

At the same time, the calculation method of the hash function hash_lock of the lock device is as follows:

hash_lock=SHA1("07FCC157341A7556", "E0", "000001", "c677474d4adf3bcc2d7f2d41566462ae3dd47d72")

= "D0fba6adc7b6f7f8e7c1eb6275287ae26f90d064"...(Equation 12), where SHA1(...) is a function.

After encryption (after step 3), the lock device obtains a lock encryption result, which is an encryption value (lock encryption value).

Step 4: When the key device receives the random value generated by the lock device in step 2 through the wireless communication, a key processing chip of the key device loads the random value, and the key device according to the aforementioned step 3 The hash function of encrypts the random value and generates a key encryption result, where the key encryption result is a key encryption value. If transmission errors occur (for example, transmission errors caused by external interference), the key device may receive incorrect random values, and the key device will also generate an encoding result that does not meet the lock encryption result (such as step 5 below) The comparison).

Then, the key device transmits the key encryption result to the lock device within a _{predetermined period T answer through wireless communication.}

When the "on" command is activated, the response to the hash function hash_key calculated by the key device is as follows:

Example A is as follows:

All parameters are consistent with each other (the parameters used by the key device are consistent with those used by the lock device):

random_token="0x07FCC157341A7556| _HEX ", where random_token is a random value.

Keyword="OPEN"="E0", KeyID="000001", where KeyID is the key identification code, and Keyword is the control command code.

CypherKey="c677474d4adf3bcc2d7f2d41566462ae3dd47d72", where CypherKey is the password parameter.

That is, when the random value random_token received by the key device is "true", the "on" command is "E0", and the key device has a key identification code KeyID of "000001".

At this time, the hash function hash_key calculated by the key device is shown in the following equation 13:

hash_key=SHA1("07FCC157341A7556", "E0", "000001", "c677474d4adf3bcc2d7f2d41566462ae3dd47d72")

= "D0fba6adc7b6f7f8e7c1eb6275287ae26f90d064"...(Equation 13), where SHA1(...) is a function.

This is a correct result (the key encryption result matches the lock encryption result).

Example B is as follows:

The key identification code (KeyID/SerialNumber) of the key device does not match the key identification code (KeyID/SerialNumber) of the lock device:

random_token="0x07FCC157341A7556| _HEX ", where random_token is a random value.

Control command code Keyword="OPEN"="E0", the correct key identification code KeyID of the key device should be "000001", and the key identification code KeyID of the lock device is "000001".

CypherKey="c677474d4adf3bcc2d7f2d41566462ae3dd47d72", where CypherKey is the password parameter.

When the random value random_token received by the key device is "true" and the "open" command is "E0", but the key identification code KeyID of the key device is tampered with "000002", at this time, the hash_key function calculated by the key device , As shown in the following equation 14:

hash_key=SHA1(“07FCC157341A7556”, “E0”, “000002”, “c677474d4adf3bcc2d7f2d41566462ae3dd47d72”)

= "1f515d2cdd44d27bcdb9485a3a03b8b9835541f0"...(Equation 14), where SHA1(...) is a function.

This is an incorrect result (the key encryption result does not match the lock encryption result).

The aforementioned situation may occur when someone counterfeiting the key device's key identification code KeyID is "000002".

Example C is as follows:

The instruction code of the key device does not match the instruction code of the lock device:

random_token="0x07FCC157341A7556| _HEX ", where random_token is a random value.

The control command code of the key device Keyword=“CLOSE”=“D0”, KeyID=“000001”, the control command code of the lock device Keyword=“OPEN”=“E0”, where KeyID is the key identification code.

CypherKey="c677474d4adf3bcc2d7f2d41566462ae3dd47d72", where CypherKey is the password parameter.

That is, when the random value random_token received by the key device is "true", the key device has the key identification code KeyID "000001", but the command code is tampered with "close" ("CLOSE" and "D0") (in other words, change The control script Keyword of the key device is changed from "OPEN" and "E0" to "CLOSE" and "D0").

At this time, the hash_key function calculated by the key device is shown in Equation 15 below:

hash_key=SHA1(“07FCC157341A7556”, “D0”, “000001”, “c677474d4adf3bcc2d7f2d41566462ae3dd47d72”)

= "C17977e5696f3f91286111ee3403077dd8186467"...(Equation 15), where SHA1(...) is a function.

This is an incorrect result (the key encryption result does not match the lock encryption result).

This can happen when someone tries to fake the script code by replacing the "on" command with the "off" command.

Example D is as follows:

The password parameter CypherKey of the key device does not match the password parameter CypherKey of the lock device:

random_token="0x07FCC157341A7556| _HEX ", where random_token is a random value.

Control command code Keyword="OPEN"="E0", KeyID="000001", where KeyID is the key identification code.

The CypherKey of the key device = "c677474d4adf3bcc2d7f2d41566462ae3dd47d73", the CypherKey of the lock device = "c677474d4adf3bcc2d7f2d41566462ae3dd47d72", where CypherKey is the password parameter.

That is, when the random value random_token received by the key device is "true" and the "on" command is "E0", the key device has a key identification code KeyID of "000001", but the cryptographic parameter CypherKey of the key device is tampered with another number ,E.g:

CypherKey="c677474d4adf3bcc2d7f2d41566462ae3dd47d73", that is, it is slightly different (in other words, the cryptographic parameter CypherKey of the key device is tampered with from "c677474d4adf3bcc2d7f2d41566462ae3dd47d4627adf3dd4173dae.566.")

At this time, the hash function hash_key calculated by the key device is shown in Equation 16:

hash_key=SHA1("07FCC157341A7556", "E0", "000001", "c677474d4adf3bcc2d7f2d41566462ae3dd47d73")

= "F166b36c5f6545cf5cd164b25adc28115e8ce862"...(Equation 16), where SHA1(...) is a function.

This is an incorrect result (the key encryption result does not match the lock encryption result).

It should be noted that the above example is the value expressed in the Hexa system in the character area in text format. In computers and chips, these values are stored in storage units in a form that saves more storage units. However, the present invention is not limited to this.

For example: CypherKey="c677474d4adf3bcc2d7f2d41566462ae3dd47d72", which is a character string represented by 40 characters, which is stored in the computer as a 160-bit value, that is, 20 8-bit storage units.

Step 5: When the lock device receives the key encryption result from the key device, compare the key encryption result with the lock encryption result generated by the lock device in step 3.

When the key encryption result matches the lock encryption result, the lock processing chip of the lock device requires the actuator to execute a control command issued by the key device.

According to an embodiment of the present invention, when the key encryption result matches the lock encryption result, the lock processing chip _{adjusts the command receiving time T protect} of the key device when the lock device is activated next time to the minimum command receiving preset period T _{protect_min} , that is The command receiving time T _protect is equal to the minimum command receiving preset period T _{protect_min} .

For example, if the receiving time T _protect is 500ms and the minimum command receiving preset period T _{protect_min} is 500ms, when the key device is "true" (the key encryption result is the same as the lock encryption result), the command receiving time T _protect is equal to 500ms.

When the key encryption result and the lock encryption result do not match (different), the lock processing chip of the lock device will not execute the control command, and this will be recorded as a fault opening time at the same time.

When no response from the key device is received within the predetermined period T _answer , the lock processing chip of the lock device will not execute the control command, and at the same time, this will be recorded as an error activation.

The lock processing chip increases the command receiving time T _{protect of the} key device every time it is incorrectly activated to avoid exhaustive attacks. _{According to a preferred embodiment, the command receiving time T protect of the} key device is increased by 1 s (seconds) every time an error is started, until the maximum command receiving preset period T _{protect_max is reached} , that is, the command receiving time T _protect is equal to the maximum command receiving The preset period T _{protect_max} .

For example, if the command receiving time T _protect is 500ms and the maximum command receiving preset period T _{protect_max} is 10s, the command receiving time T _protect will increase by 1s until the command receiving time T _protect is equal to 10s every time an error is started.

For example, if you answer a cryptographic puzzle 10 times incorrectly, each subsequent input will not be accepted after 10s, and brute force attacks (BruteForce) and brute force attacks on SHA256 encoding are very difficult and almost impossible. _Yes , when the command receiving time T protect is 10s, this attack will be more difficult.

According to an embodiment of the present invention, the remote key lock system for executing the method of remotely starting the remote key lock system using a password includes:

The key device includes a plurality of buttons, and each of the first buttons corresponds to an instruction, for example, the instruction is on, off, up or down; the other button is used to set the personal identification code; a wireless transmitter; a wireless Receiver; a key processing chip with embedded software for encryption according to preset steps; and a power supply. In addition, the key device can also include a light display screen, a flashlight, and a microcontroller.

The lock device includes a wireless transmitter, a wireless receiver, a lock processing chip and a power supply, wherein the lock processing chip is embedded with software to perform encryption according to preset steps, and the lock processing chip has a command execution mechanism . In addition, the lock device may include an auxiliary port connected to a manual on/off button that can be activated through the personal identification code; a small light display screen; a flashlight or liquid crystal display for displaying information; a horn or alarm; and The wireless network module port is used to connect with smart phones and auxiliary modules.

The default steps in the encryption software of the key device match the default steps in the encryption software of the lock device.

The key device and the lock device are synchronized with each other through the cryptographic parameter CypherKey, where the cryptographic parameter CypherKey is calculated by the hash function composed of the three components, and the three components are the key identification code KeyID/SerialNumber, The parameter Masterkey and the personal identification code PIN defined by the master key manufacturer, where the personal identification code PIN is set by the remote key lock system whenever the user requests to set the personal identification code PIN This string of random values is automatically generated.

Advantageous effects of the present invention:

The invention helps to completely eliminate the security loopholes in the security method of rolling codes. Therefore, the method of replaying the code after wiretapping is useless. Because, every time the key device sends out an activation packet, the lock device will generate a random and non-repeated symbol to form a hash function puzzle, and this hash function puzzle requires the key device to answer for verification. If the lock device is blocked without receiving the activation packet, or the activation packet has been received and a problem is issued, but no reply is received within the predetermined period, the communication transmission between the key device and the lock device will be cancelled immediately. That is, monitoring and storing the information exchanged between the key device and the lock device does not help the monitor to interfere or invade in the future.

The method proposed by the present invention makes it impossible to counterfeit the key device. Each key device is synchronized with the lock device through the password parameter CypherKey. The encryption function using the password parameter CypherKey is the SHA function invented in early 1993. These functions are also called one-dimensional encryption. That is, collecting the ciphertext does not help reverse the parameters used to generate the password. That is, the cipher text can be publicly sent without worrying about leaking the password parameter CypherKey.

The composition of the three components of the password parameter CypherKey guarantees the ownership of the user. Because the personal identification code PIN is a very long value, it is randomly generated and the user does not know the personal identification code PIN, so the personal identification code PIN will not be leaked, and the key device manufacturer (key manufacturer) ) The manufacturer of the product using the key device must not forcibly interfere with the product that has been supplied to the customer. Even if the password parameter CypherKey is leaked by the product manufacturer using this method due to some reasons, it is unlikely to be tampered with. Furthermore, since the component of the personal identification code PIN is randomly generated by the system, the password parameter CypherKey cannot be repeated between the two products.

It is impossible for the key device to be copied without the authorization of the product manufacturer that uses the key device. Because the structure established by the key device includes three components, which allow the development of dedicated software separately, but cannot be copied at will if it is not authorized. This also allows the state (government) to establish a power and responsibility agency to control units and agents that provide key lock services.

The reason why the BruteForce exhaustive attack method does not work is the command receiving time T _protect , using the command receiving time T _protect from the minimum command receiving preset period T _{protect_min} to the maximum command receiving preset period T _{protect_max} to limit the continuity The time of access to the lock device, which acts as a firewall. In this way, it will prevent continuous trials of possible passwords (encodings), and make exhaustive attacks on the code space more difficult because it takes too much time.

The information transmitted in each docking is only used once and cannot be counterfeited. Therefore, when _{the counterattack mechanism of the command receiving time T protect} is used to prevent and invalidate exhaustive attacks (such as brute force attacks), the continuous attack on docking imitating packets can only be used Wrong result received.

The denial-of-service attack method has no effect because: for the control of the start packet, the bytes in the packet must be continuous over time, so that the lock device can filter out the unprocessed noise.

The present invention allows the hardware of the key device to be designed to operate in an energy-saving mode. The activation command is always issued by the key device to allow the key device to be set to the dormant state, that is, the maximum energy saving state, and only wake up and act when the user activates it.

The method proposed by the present invention will not damage the security of encryption over time. Unlike the synchronization method of certain types of tokens using timers, the token synchronization of the present invention uses the direct transmission method. When using a timer with quartz oscillation technology that is suitable for the cost of civilian equipment, the technology will accumulate errors over time, which can reach 1s after 1 year, that is, quickly reach the level of non-synchronization.

The method proposed by the present invention can be run on many different devices with different performances, and can be verified by commanding remote control.

Due to the use of a correction code (error correction code) and a protocol for re-sending messages when an error is received (retransmission protocol), the method proposed in the present invention allows the system to operate in a larger electromagnetic interference environment . Compared with the "repeating multiple codes method" currently used by various types of key devices in normal environments, the method of the present invention has the advantage that in an interference environment, it only needs to be accurately transmitted once to the destination. Instead of transmitting multiple times, the key device consumes more energy. The communication transmission of this method is better and more efficient than the repeated transmission of multi-segment codes.

The two-way communication docking protocol between the key device and the lock device of the present invention is disclosed. The formula of the hash function established by the public parameters can be copied and implemented in legal or illegal ways, but these public protocols and hash functions cannot compromise the lock system of the method for remotely starting a remote key lock device using a password of the present invention . This is very different from the "KeeLoq" algorithm used by the "Microchip" manufacturer.

1~5: steps

[Fig. 1] is a flow chart of using a password to remotely start the key lock system according to an embodiment of the present invention.

1~5: steps

Claims (13)

A method for remotely starting a remote key lock system using a password. The remote key lock system includes a lock device and a key device. The method includes: Under a user's instruction, the key device sends an activation packet to the lock device to activate the lock device, the activation packet having a control command code and a key identification code of the key device; The lock device receives the activation packet of the key device, and when the key identification code in the activation packet sent to the lock device does not match a lock identification code of the lock device, or is receiving one of the commands from the user When the scheduled time is not over, the lock device does not respond; When the key identification code in the activation packet sent to the lock device matches the lock identification code of the lock device, a lock processing chip with a software embedded in the lock device is sent for a preset time and is compared with the previous Activate any non-repeated random value, where the random value is sent to the key device via wireless communication; While generating the random value, the lock processing chip of the lock device performs encryption according to a hash function composed of the random value, the control instruction code, the key identification code, and a password parameter, wherein the password The parameters are calculated according to a hash function composed of three components. The three components are the key identification code defined by the product manufacturer using the key device, one of the parameters defined by the master key manufacturer, and a personal identification code (PIN), Wherein, the personal identification code is a string of random values automatically generated by the remote key lock system whenever the user requests to set the personal identification code; After encryption, the lock device generates a lock encryption result, and the lock encryption result is a lock encryption value; When the key device receives the random value generated by the lock device through the wireless communication, a key processing chip of the key device loads the random value, and the key device performs the random value according to the hash function of the foregoing step Encrypt and generate a key encryption result, where the key encryption result is a key encryption value; The key device sends the key encryption result to the lock device through the wireless communication within a predetermined period; When the lock device receives the key encryption result from the key device, compare the key encryption result with the lock encryption result generated by the lock device; When the key encryption result matches the lock encryption result, the lock processing chip of the lock device requires the actuator to execute a control command issued by the key device; and When the key encryption result does not match the lock encryption result, the lock processing chip of the lock device will not execute the control command; or When no response from the key device is received within the predetermined period, the lock processing chip of the lock device will not execute the control command. The method for remotely starting the remote key lock system using a password as described in claim 1, wherein the control command code is any command assigned to a conventional keyword, and the command has a corresponding design value, so The value set and the bit reversed value set are disjoint, and the key identification code is defined by the product manufacturer using the key device. The method for remotely activating the remote key lock system using a password according to any one of claim 1 or 2, wherein the random value has a length of at least 24 bits, and the random value is based on a time epoch (epoch -time) The parameter and a constant of the random function space size representing the random function are randomly generated. The method for remotely starting the remote key lock system using a password as described in any one of claim 1 or 2, wherein the hash function includes a SHA function, an MD function, and a Keccak function. The method for remotely starting the remote key lock system using a password as described in any one of request items 1 or 2, wherein the personal identification code is determined according to the following steps: PIN = [P ₀ .. P _{pin_length} ]; P _i = random(0~255), where i is from 0 to pin_length; where PIN is the personal identification code, P ₀ to P _{pin_length} are the operational parameters of PIN, random (0~255) is the random function, and pin_length is The length of the personal identification code. The method for remotely starting the remote key lock system using a password as described in claim 5, wherein the personal identification code has 112 bytes. The method for remotely activating the remote key lock system using a password according to any one of claim 1 or 2, wherein when the key encryption result matches the lock encryption result, the lock processing chip will start the remote key lock system next time When the lock device is locked, the command receiving time of the key device is adjusted to the minimum command receiving preset period. The method for remotely starting the remote key lock system using a password according to any one of claim 1 or 2, wherein when the key encryption result does not match the lock encryption result or when the lock device is in the predetermined When no response from the key device is received within the period, the lock device records this as an error activation. At the same time, the lock processing chip increases the command reception time of the key device every time the error is activated until the maximum command is reached Receive the preset period to avoid brute force attacks. The method for remotely activating the remote key lock system using a password as described in claim 5, wherein the lock processing chip increases the command receiving time of the key device by 1 second each time it is incorrectly activated, and the maximum command reception is preset The period is 10 seconds. A remote key lock system, which executes the method according to any one of claim 1 or 2, the remote key lock system includes: A key device includes a plurality of buttons, a wireless transmitter, a wireless receiver, a key processing chip and a power supply, wherein each button corresponds to a command, and the key processing chip is embedded with software to perform according to preset steps Encryption; and A lock device includes a wireless transmitter, a wireless receiver, a lock processing chip and a power supply, wherein the lock processing chip is embedded with software to perform encryption according to preset steps, and the lock processing chip has a command execution mechanism ； Wherein, the key device and the lock device are synchronized with each other through the cryptographic parameter, wherein the cryptographic parameter is calculated by the hash function composed of the three components, and the three components are the key identification code defined by the product manufacturer using the key device, The parameter and the personal identification code defined by the master key manufacturer, where the personal identification code is the one automatically generated by the remote key lock system whenever the user requests to set the personal identification code String of random values; Wherein, the preset steps in the encryption software of the key device match the preset steps in the encryption software of the lock device. The remote key lock system according to claim 10, wherein the key device further includes another button for setting the personal identification code. The remote key lock system according to claim 10, wherein the lock device further includes an auxiliary port connected to a manual on/off button activated by the personal identification code. The remote key lock system according to claim 10, wherein the lock device further includes an expansion port to connect to the network.

Images