Electronic key registration method, electronic key registration system, and controller

1. An electronic key registration method for registering a plurality of electronic keys to a controller of a communication subject through communication with a data center, wherein the electronic keys are capable of communicating with the controller, the electronic key registration method comprising:

storing communication subject identification information and a communication subject encryption key, which are unique to the communication subject, in the controller;

storing the communication subject identification information and the communication subject encryption key in the data center;

storing first key identification information and a first key encryption key, which are unique to a first electronic key, in the first electronic key;

storing second key identification information and a second key encryption key, which are unique to a second electronic key, in the second electronic key;

storing the first and second key identification information and the first and second key encryption keys in the data center;

acquiring the first key identification information from the first electronic key with the controller;

acquiring the second key identification information from the second electronic key with the controller;

transmitting both of the first and second key identification information together with the communication subject identification information from the controller to the data center;

generating a first encryption key generation code with the data center, wherein the first encryption key generation code is based on the communication subject encryption key and the first key encryption key;

generating a second encryption key generation code with the data center, wherein the second encryption key generation code is based on the communication subject encryption key and the second key encryption key;

obtaining both of the first and second encryption key generation codes from the data center with the controller;

generating the first key encryption key based on the first encryption key generation code with the controller;

generating the second key encryption key based on the second encryption key generation code with the controller; and

storing the first and second key encryption keys in the controller.

2. The electronic key registration method according to claim 1 , further comprising:

transmitting a challenge code used for challenge-response verification to the first electronic key from the controller after the acquiring the first key identification information from the first electronic key;

transmitting a first response code to the controller from the first electronic key, wherein the first response code is generated based on the first key encryption key and the challenge code by the first electronic key;

transmitting the challenge code to the second electronic key from the controller after the acquiring the second key identification information from the second electronic key;

transmitting a second response code to the controller from the second electronic key, wherein the second response code is generated based on the second key encryption key and the challenge code by the second electronic key;

generating a third response code based on the first key encryption key and the challenge code with the controller after the generating the first key encryption key with the controller;

generating a fourth response code based on the second key encryption key and the challenge code with the controller after the generating the second key encryption key with the controller;

verifying the first electronic key by comparing the first response code with the third response code; and

verifying the second electronic key by comparing the second response code with the fourth response code.

3. The electronic key registration method according to claim 1 , further comprising:

switching an operation mode of the controller to a registration mode with a registration tool; and

setting the quantity of registered electronic keys with the registration tool when switching to the registration mode.

4. An electronic key registration system comprising:

a plurality of electronic keys including first and second electronic keys, wherein

the first electronic key has first key identification information and a first key encryption key which are unique to the first electronic key, and

the second electronic key has second key identification information and a second key encryption key which are unique to the second electronic key;

a controller arranged in a communication subject, wherein the controller is capable of communicating with the electronic keys and has communication subject identification information and a communication subject encryption key which are unique to the communication subject; and

a data center, wherein the communication subject identification information, the communication subject encryption key, the first and second key identification information, and the first and second key encryption keys are stored in the data center, wherein

the controller includes a memory that stores commands executed by the controller and configured to have the controller:

acquire the first key identification information from the first electronic key,

acquire the second key identification information from the second electronic key,

transmit both of the first and second key identification information together with the communication subject identification information to the data center so that the data center generates a first encryption key generation code based on the communication subject encryption key and the first key encryption key and generates a second encryption key generation code based on the communication subject encryption key and the second key encryption key,

acquire the first encryption key generation code corresponding to the first electronic key together with the second encryption key generation code corresponding to the second electronic key from the data center,

generate the first key encryption key based on the first encryption key generation code,

generate the second key encryption key based on the second encryption key generation code, and

store the first and second key encryption keys in the controller.

5. A controller arranged in a communication subject, wherein the controller is capable of communicating with a data center and a plurality of electronic keys including a first electronic key and a second electronic key, the controller comprising:

a memory that stores commands executed by the controller and configured to have the controller:

acquire first key identification information from the first electronic key,

acquire second key identification information from the second electronic key,

transmit both of the first identification information and the second key identification information together with communication subject identification information to the data center so that the data center generates a first encryption key generation code based on the communication subject encryption key and a first key encryption key and generates a second encryption key generation code based on the communication subject encryption key and a second key encryption key,

acquire a first encryption key generation code corresponding to the first electronic key together with a second encryption key generation code corresponding to the second electronic key from the data center,

generate the first key encryption key based on the first encryption key generation code,

generate the second key encryption key based on the second encryption key generation code, and

store the first key encryption key and the second key encryption key in the controller,

wherein the first electronic key has the first key identification information and the first key encryption key which are unique to the first electronic key,

wherein the second electronic key has the second key identification information and the second key encryption key which are unique to the second electronic key,

wherein the controller has the communication subject identification information and a communication subject encryption key which are unique to the communication subject, and

wherein the data center has the communication subject identification information, the communication subject encryption key, the first key identification information and second key identification information, and the first key encryption key and second key encryption key.