Granted Patent B2

US 8,499,154 · App. 12/360,266 · Granted Jul 30, 2013

Inventors: Fred W. Huntzicker (Ann Arbor, MI); Ansaf I. Alrabady (Livonia, MI); David Racklyeft (Troy, MI)

Assignee: GM Global Technology Operations LLC

Abstract

Claims (42)

1. A method for establishing a secure connection between a remote device and a vehicle communication system deployed onboard a vehicle, the vehicle communication system (VCS), the method comprising:

receiving, at the VSC, a root certificate and a quasi-private key generated by a trusted entity, the quasi-private key mathematically corresponding to a quasi-public key;

storing the root certificate and the quasi-private key on a memory of the vehicle communication system, the quasi-private key are also stored on a plurality of other vehicles in addition to the vehicle on which the vehicle communication system is deployed;

generating, by the VSC, an asymmetric key pair including a vehicle public key and a vehicle private key mathematically corresponding to the vehicle public key;

providing, by the VSC, the generated vehicle public key and descriptive data uniquely identifying the vehicle communication system to the trusted entity during production of the vehicle, wherein the vehicle public key and the descriptive data are associated and stored in a vehicle public key database accessible by other devices;

generating, by the VSC, a vehicle public key certificate comprising the vehicle public key and a digital signature signed using the quasi-private key;

performing a mutual authentication procedure by

receiving a public key certificate, issued by the trusted entity, from the remote device;

verifying, by the VSC, the received public key certificate using the public key of the trusted entity extracted from the root certificate;

in response to the public key certificate is authenticated, transmitting, by the VSC, the vehicle public key certificate to the remote device allowing the remote device to verify the digital signature included in the vehicle public key certificate using the quasi-public key and allowing the remote device to further authenticate the VCS by ensuring that the vehicle public key corresponds to the descriptive data uniquely identifying the VCS; and

generating, by the VSC, a digital signature by singing a predetermined message using the vehicle private key; and

transmit the generated digital signature to the remote device allowing the remote device to verify the generated digital signature using the vehicle public key.

2. A method for establishing a secure connection between a remote device and a vehicle communication system (VCS) deployed onboard a vehicle, the method comprising:

receiving, at the VCS, a root certificate and a quasi-private key generated by a trusted entity, the quasi-private key mathematically corresponding to a quasi-public key and stored on a plurality of other vehicles in addition to the vehicle on which the vehicle communication system is deployed;

storing the root certificate and the quasi-private key on a memory of the VCS;

generating, by the VCS, an asymmetric key pair including a vehicle public key and a vehicle private key mathematically corresponding to the vehicle public key;

providing, by the VCS, the generated vehicle public key and descriptive data uniquely identifying the vehicle communication system to the trusted entity during production of the vehicle to enable storage of the vehicle public key and the descriptive data in a vehicle public key database accessible by other devices;

generating, by the VCS, a vehicle public key certificate comprising the vehicle public key and a digital signature signed using the quasi-private key; and

establishing a secure connection between the remote device and the vehicle communication system by, at least in part, transmitting the vehicle public key certificate to the remote device to allow the remote device to verify the digital signature included in the vehicle public key certificate using the quasi-public key and to further allow the remote device to authenticate the VCS by ensuring that the vehicle public key.

3. The method according to claim 2 , wherein the vehicle public key certificate is transmitted to the remote device as part of a Transport Layer Security handshake procedure.

4. The method according to claim 2 , further comprising:

generating, by the VCS, a digital signature by signing a predetermined message using the vehicle private key; and

transmitting, from the VCS, the generated digital signature to the remote device allowing the remote device to verify the generated digital signature using the vehicle public key.

5. The method according to claim 2 , further comprising:

receiving, at the VCS, a public key certificate from the remote device; and

verifying, by the VCS, the received public key certificate using the public key of the trusted entity extracted from the root certificate.

6. A vehicular communication system (VSC) for establishing a secure connection with a remote device, the vehicular communication system comprising:

a wireless transceiver configured to communicate with the remote device;

an electronic memory; and

a processor coupled to the wireless transceiver and to the electronic memory, the processor configured to perform the steps of:

receiving, at the VCS, a root certificate and a quasi-private key generated by a trusted entity, the quasi-private key mathematically corresponding to a quasi-public key and stored on a plurality of other vehicles in addition to the vehicle on which the vehicle communication system is deployed;

storing the root certificate and the quasi-private key on the memory of the VCS;

generating, by the VCS, an asymmetric key pair including a vehicle public key and a vehicle private key mathematically corresponding to the vehicle public key;

providing, by the VCS, the generated vehicle public key and descriptive data uniquely identifying the vehicle communication system to the trusted entity during production of the vehicle to enable storage of the vehicle public key and the descriptive data in a vehicle public key database accessible by other devices;

generating, by the VCS, a vehicle public key certificate comprising the vehicle public key and a digital signature signed using the quasi-private key; and

establishing a secure connection between the remote device and the vehicle communication system by, at least in part, transmitting the vehicle public key certificate via the wireless transceiver to the remote device to allow the remote device to verify the digital signature included in the vehicle public key certificate using the quasi-public key and to further allow the remote device to authenticate the VCS by ensuring that the vehicle public key corresponds to the descriptive data uniquely identifying the VCS, as stored in the vehicle public key database.

7. The vehicular communication system according to claim 6 , wherein the processor is further configured to digitally sign a message with the vehicle private key and to transmit the message and the digital signature to the remote device during the authentication procedure.

8. The vehicular communication system according to claim 6 , wherein:

the electronic memory further stores a root certificate generated by a trusted certificate authority and comprising a first public key mathematically corresponding to a first private key stored on the trusted certificate authority;

and wherein, during the authentication procedure, the processor is further configured to:

receive a public key certificate from the remote device comprising a second public key mathematically corresponding to a second private key stored on the remote device and a second digital signature generated using the first private key; and

authenticate the public key certificate using the second digital signature and the first public key.

Assignments (10)

Continuity (1)