Vehicle access systems and methods
View Patent ↗Systems, devices, and methods for controlling access to vehicles in rental, loaner, shared-use, and other vehicle fleets. Some of the present systems, devices, and methods use encrypted virtual keys that can be relayed to a vehicle computing device via a user's mobile device. Such virtual keys can be command-specific such that successful use of a virtual key results execution of a predetermined command or group of commands, and further commands require one or more additional virtual keys with the additional commands. Others of the present systems, devices, and methods provide tools: for provisioning or initial pairing of vehicle computing devices with corresponding vehicles, identifying and permitting a user to select locally available vehicles, prompting vehicle computing devices to retrieve pending commands from a server, and/or various other functions described in this disclosure.
1. A system comprising:
a vehicle computing device in communication with a controller area network (CAN) bus of a corresponding vehicle, the vehicle computing device comprising, a cellular modem, memory including instructions, and a processor configured to execute the instructions to:
receive a check-in prompt message from a server of a reservation management (RM) system;
in response to receiving the check-in prompt message, generate a check-in request message including an encrypted portion and an unencrypted portion, the unencrypted portion including a unique reference;
send the check-in request message to the server;
receive from the server a command message including one or more commands for the vehicle computing device;
decrypt at least a portion of the command message based on the check-in request message; and
if the command message is consistent with the unique reference in the check-in request message, execute the one or more commands.
2. The system of claim 1 , where the unique reference is configured to enable decryption of the encrypted portion of the check-in request message.
3. The system of claim 1 , where the check-in prompt message received by the vehicle computing device is not encrypted.
4. The system of claim 1 , where the vehicle computing device is configured to not execute command messages received via the cell modem that are not sent by the server responsive to a corresponding check-in request message sent to the server by the vehicle computing device.
5. The system of claim 1 , where the vehicle computing device is configured to not execute command messages received from the server that are not sent by the server responsive to a corresponding check-in request message sent to the server by the vehicle computing device.
6. The system of claim 1 , further comprising:
a server comprising a portion of a reservation management (RM) system for a plurality of vehicles, the server comprising second memory and a second processor configured to execute instructions from the second memory to:
generate the command message including one or more command messages for the vehicle computing device;
generate the check-in prompt message;
transmit the check-in prompt message to the vehicle computing device;
receive from the vehicle computing device the check-in request message;
encrypt the command message using the unique reference; and
send the encrypted command message to the vehicle computing device.
7. The system of claim 1 , where successful decryption the at least a portion of the command message indicates that the command message is valid.
8. The system of claim 1 , wherein the processor is further configured to execute the instructions to:
determine whether one or more conditions are satisfied based on the decrypted portion of the command message and the check-in request message; and
determine that the command message is valid in response to a determination that the one or more conditions are satisfied,
wherein the command message being valid indicates the command message is consistent with the unique reference in the check-in request message.
9. The system of claim 8 , wherein:
the unique reference comprises a key timestamp or a generation timestamp; and
the processor is further configured to execute the instructions to:
determine whether the key timestamp or the generation timestamp is valid; and
determine whether the one or more conditions are satisfied further based on a determination that the key timestamp or the generation timestamp is valid.
10. The system of claim 1 , wherein the processor is further configured to execute the instructions to:
compare the decrypted portion of the command message and the unique reference in the check-in request message;
determine that the command message is valid in response to a determination that the decrypted portion of the command message matches the unique reference,
wherein the command message being valid indicates the command message is consistent with the unique reference in the check-in request message; and
execute the one or more commands based on the command message being valid.
11. A system comprising:
a server comprising a portion of a reservation management (RM) system for a plurality of vehicles, the server comprising memory and a processor configured to execute instructions from the memory to:
generate a command message for a vehicle computing device in communication with a controller area network (CAN) bus of a corresponding vehicle;
generate a check-in prompt message;
transmit the check-in prompt message to the vehicle computing device;
responsive to the check-in prompt message, receive from the vehicle computing device a check-in request message including an encrypted portion and an unencrypted portion that includes a unique reference;
encrypt the command message using the unique reference; and
send the encrypted command message to the vehicle computing device.
12. The system of claim 11 , where the processor is further configured to execute instructions from the memory to:
decrypt the encrypted portion of the received check-in request message.
13. The system of claim 11 , where the server is configured to transmit the check-in prompt message via a cell modem, and where the check-in prompt message is not encrypted.
14. A method comprising:
receiving a check-in prompt message at a vehicle computing device in communication with a controller area network (CAN) bus of a corresponding vehicle, the check-in prompt message sent from a server of a reservation management (RM) system;
generating, in response to receiving the check-in prompt message, a check-in request message including an encrypted portion and an unencrypted portion, the unencrypted portion including a unique reference;
sending the check-in request message to the server;
receiving from the server a command message including one or more commands for the vehicle computing device;
decrypt at least a portion of the command message based on the check-in request message; and
executing the one or more commands if the command message is consistent with the unique reference in the check-in request message.
15. The method of claim 14 , where the at least a portion of the command message includes the unique reference, and the method further comprises:
accessing a key;
generating a vector based on the key and the unique reference
where decrypting the at least a portion of the command message includes decrypting the at least a portion of the command message based on the vector to generate at least a decrypted unique reference; and
compare the decrypted unique reference to the unique reference.
16. The method of claim 14 , where the check-in prompt message received by the vehicle computing device is not encrypted, the check-in prompt message having a short message service (SMS) message format.
17. The method of claim 14 , further comprising:
receiving a short message service (SMS) message; and
in response to receiving the SMS message, automatically sending a second check-in request message to the server.
18. The method of claim 17 , where the second check-in request message includes a second unique reference different from the unique reference.
19. The method of claim 17 , where the SMS message is received from the server.
20. The method of claim 17 , where the SMS message is received from a device distinct from the server.
21. The method of claim 14 , where the unique reference comprises a timestamp or a unique value.
22. A method comprising:
generating a command message for a vehicle computing device in communication with a controller area network (CAN) bus of a vehicle;
generating a check-in prompt message;
transmitting the check-in prompt message to the vehicle computing device;
receiving, from the vehicle computing, device a check-in request message including an encrypted portion and an unencrypted portion including a unique reference;
encrypting the command message based on the unique reference; and
sending the encrypted command message to the vehicle computing device in response to the received check-in request message.
23. The method of claim 22 , where the method further comprises:
decrypting the encrypted portion of the received check-in request message based on the unique reference.
24. The method of claim 22 , where the command message includes the unique reference associated with the vehicle computing device.
25. The method of claim 22 , where the command message includes one or more commands configured to prohibit the vehicle from being started.
26. The method of claim 22 , where the command message is generated and the check-in prompt message is transmitted in response to a trigger event.
27. The method of claim 26 , further comprising:
receiving a report that the vehicle is stolen; and
identifying the report at the trigger event.
28. The method of claim 22 , further comprising:
accessing a key corresponding to the vehicle; and
generating a vector based on the key and the unique reference, where the vector is used to decrypt the at least a portion of the command message.
29. The method of claim 28 , where the command message is encrypted using the vector.