Challenge-response methodology for securing vehicle diagnostic services

1. A method for locally authenticating a vehicle diagnostic tool with a vehicle using a challenge-response authentication scheme, the method comprising:

receiving a pairing request from the vehicle diagnostic tool;

presenting a user with a challenge through at least one of an audio system and an LCD display associated with the vehicle, wherein the challenge includes at least one of an alphanumeric code displayed to the user through the LCD display and a requested local action, wherein the requested local action includes a requested actuation of at least one of a button and a toggle switch of the vehicle;

receiving a response to the challenge from the user, wherein the response includes at least one of a representation of an entered alphanumeric code from the vehicle diagnostic tool and a sequence of user actions within the vehicle, wherein the sequence of user actions includes an actuation of the at least one of the button and the toggle switch of the vehicle; and

authenticating the vehicle diagnostic tool if the response from the user is identical to an expected response.

2. The method of claim 1 , wherein the alphanumeric code is a randomly generated number.

3. The method of claim 1 , wherein the alphanumeric code includes an odometer reading, a trip meter reading, an average fuel economy reading, or an active radio station.

4. The method of claim 1 , wherein authenticating the vehicle diagnostic tool includes granting the vehicle diagnostic tool write-access to a communication bus of the vehicle.

5. The method of claim 4 , wherein granting the vehicle diagnostic tool write-access to a communication bus of the vehicle includes broadcasting a write-access message on the communication bus;

the method further comprising authenticating the write-access message to a master controller on the communication bus.

6. A system comprising:

a vehicle diagnostic tool including a display and an input device;

a vehicle in wireless communication with the vehicle diagnostic tool, the vehicle including:

a plurality of vehicle control systems;

an LCD display;

a master controller in networked communication with each of the plurality of vehicle control systems over a communication bus;

wherein the master controller is configured to:

receive a pairing request from the vehicle diagnostic tool;

present a user with a challenge through the LCD display in response to the pairing request, wherein the challenge includes at least one of an alphanumeric code displayed to the user through the LCD display and a requested local action, wherein the requested local action includes a requested actuation of at least one of a button and a toggle switch of the vehicle;

receive a response to the challenge from the user, wherein the response includes at least one of a representation of an entered alphanumeric code from the vehicle diagnostic tool and a sequence of user actions within the vehicle, wherein the sequence of user actions includes an actuation of the at least one of the button and the toggle switch of the vehicle; and

authenticate the vehicle diagnostic tool if the response from the user is identical to an expected response.

7. The system of claim 6 , wherein the representation of the alphanumeric code is generated by the vehicle diagnostic tool in response to an alphanumeric entry by the user to the input device.

8. The system of claim 6 , wherein the alphanumeric code is a randomly generated number.

9. The system of claim 6 , wherein the alphanumeric code includes an odometer reading, a trip meter reading, an average fuel economy reading, or an active radio station.

10. The system of claim 6 , wherein the master controller is configured to authenticate the vehicle diagnostic tool by granting the vehicle diagnostic tool write-access to the communication bus of the vehicle.

11. The system of claim 10 , wherein the master controller is configured to grant the vehicle diagnostic tool write-access to a communication bus of the vehicle by broadcasting a write-access message on the communication bus; and

the plurality of vehicle control systems are configured to authenticate the write-access message to the master controller.

12. A system for locally authenticating a vehicle diagnostic tool with a vehicle using a challenge-response authentication scheme, the system, comprising:

a non-transitory computer readable medium containing program instructions for causing a processor to perform the method of:

receiving a pairing request from the vehicle diagnostic tool;

presenting a user with a challenge through at least one of an audio system and an LCD display associated with the vehicle, wherein the challenge includes at least one of an alphanumeric code displayed to the user through the LCD display and a requested local action, wherein the requested local action includes a requested actuation of at least one of a button and a toggle switch of the vehicle;

receiving a response to the challenge from a user via an input device of the vehicle diagnostic tool, wherein the response includes at least one of a representation of an entered alphanumeric code from the vehicle diagnostic tool and a sequence of user actions within the vehicle, wherein the sequence of user actions includes an actuation of the at least one of the button and the toggle switch of the vehicle; and

authenticating the vehicle diagnostic tool if the response from the user is identical to an expected alphanumeric response.

13. The system of claim 12 , wherein the alphanumeric challenge includes a randomly generated number.

14. The system of claim 12 , wherein the alphanumeric challenge includes an odometer reading, a trip meter reading, an average fuel economy reading, or an active radio station.

15. The system of claim 12 , wherein authenticating the vehicle diagnostic tool includes granting the vehicle diagnostic tool write-access to a communication bus of the vehicle.

16. The system of claim 15 , wherein granting the vehicle diagnostic tool write-access to a communication bus of the vehicle includes broadcasting a write-access message on the communication bus;

the method further comprising authenticating the write-access message to a master controller on the communication bus.