Management device, management system, key generation device, key generation system, key management system, vehicle, management method, key generation method, and computer program

1. A management device including a secure element configured to communicate with a plurality of on-board computers, each of which is configured to store an identifier and a corresponding initial key in advance, via a communication interface in a vehicle, the management device comprising:

a key storage configured to store a master key; and

a key generator configured to generate the initial key of the on-board computer among the plurality of on-board computers by use of the master key and the identifier of the on-board computer, which is received from the on-board computer via the communication interface,

wherein the key storage is configured to store the initial key of the on-board computer in association with the identifier of the on-board computer, thus causing the secure element to share the initial key with the on-board computer.

2. A management system, comprising: a management server equipment and a management device configured to communicate with a plurality of on-board computers, each of which is configured to store an identifier and a corresponding initial key in advance, via a communication interface in a vehicle, wherein the management server equipment includes a storage medium configured to store a master key, and a key generator configured to generate the initial key of the on-board computer among the plurality of on-board computers by use of the master key and the identifier of the on-board computer that is received via the management device through a wireless communication network, wherein the management device comprises a secure element to implement: (i) transmitting the identifier of the on-board computer to the management server equipment through the wireless communication network; (ii) receiving a pair of the initial key of the on-board computer and the identifier of the on-board computer from the management server equipment through the wireless communication network; and (iii) storing on a key storage the initial key of the on-board computer in association with the identifier on the on-board computer, thus causing the secure element to share the initial key with the on-board computer.

3. A management device configured to communicate with a plurality of on-board computers, each of which is configured to store an identifier and a corresponding initial key in advance, is a communication interface in a vehicle, the management device comprising:

a secure element to implement

(i) transmitting the identifier of the on-board computer among the plurality of on-board computers to a management server equipment through a wireless communication network;

(ii) receiving the initial key of the on-board computer from the management server equipment through the wireless communication network, wherein the initial key of the on-board computer is generated using the identifier of the on-board computer and a master key; and

(iii) storing on a key storage the initial key of the on-board computer in association with the identifier of the on-board computer, thus causing the secure element to share the initial key with the on-board computer.

4. A management method adapted to a management device including a secure element configured to communicate with a plurality of on-board computers, each of which is configured to store an identifier and a corresponding initial key in advance, via a communication interface in a vehicle, comprising:

storing a master key; receiving the identifier of the on-board computer among the plurality of on-board computers through the communication interface; generating the initial key of the on-board computer by use of the master key and the identifier of the on-board computer; and storing the initial key of the on-board computer in association with the identifier of the on-board computer, thus causing the secure element to share the initial key with the on-board computer.

5. A management method adapted to a management system including a management server equipment and a management device configured to communicate with the management server equipment through a wireless communication network and including a secure element configured to communicate with a plurality of on-board computers, each of which is configured to store an identifier and a corresponding initial key in advance, via a communication interface in a vehicle, the management method comprising:

storing a master key with the management server equipment;

receiving, via the management server equipment, the identifier of the on-board computer from the management device;

generating, via the management server equipment, the initial key of the on-board computer among the plurality of on-board computers by use of the master key and the identifier of the on-board computer;

transmitting, via the management server equipment, to the management device the initial key of the on-board computer together with the identifier of the on-board computer;

receiving, via the management device, from the management server equipment through the wireless communication network the initial key of the on-board computer and the identifier of the on-board computer; and

storing, via the management device, the initial key of the on-board computer in association with the identifier of the on-board computer, thus causing the secure element to share the initial key with the on-board computer.

6. A non-transitory computer-readable storage medium having a stored computer program causing a computer of a management device including a secure element configured to communicate with a plurality of on-board computers, each of which is configured to store an identifier and a corresponding initial key in advance, via a communication interface in a vehicle, thus implementing: storing a master key; receiving the identifier of the on-board computer among the plurality of on-board computers; generating the initial key of the on-board computer among the plurality of on-board computers by use of the master key and the identifier of the on-board computer; and storing the initial key of the on-board computer in association with the identifier of the on-board computer, thus causing the secure element to share the initial key with the on-board computer.

7. A non-transitory computer-readable storage medium having a stored computer program causing a computer of a management server equipment configured to communicate with a management device including a secure element configured to communicate with a plurality of on-board computers, each of which is configured to store an identifier and a corresponding initial key in advance, via a communication network in a vehicle, through a wireless communication network, thus implementing:

storing a master key;

receiving the identifier of the on-board computer among the plurality of onboard computers from the management device through the wireless communication network;

generating the initial key of the on-board computer among the plurality of on-board computers by use of the master key and the identifier of the on-board computer; and

transmitting to the management device the initial key of the on-board computer in association with the identifier of the on-board computer, thus causing the secure element to share the initial key with the on-board computer.

8. A non-transitory computer-readable storage medium having a stored computer program causing a computer of a management device including a secure element, configured to communicate with a plurality of on-board computers, each of which is configured to store an identifier and a corresponding initial key in advance via a communication interface in a vehicle, thus implementing:

transmitting the identifier of the on-board computer among the plurality of on-board computers to a management server equipment through a wireless communication network, in which the management server equipment is configured to generate an initial key of the on-board computer using a master key and the identifier of the on-board computer;

receiving, from the management server equipment through the wireless communication network, the initial key of the on-board computer, and the identifier of the on-board computer; and

storing the initial key of the on-board computer in association with the identifier of the on-board computer, thus causing the secure element to share the initial key with the on-board computer.