Secure vehicle communication system
A secure vehicle communication system relies on credentials to provide security. A credential includes a private key and a digital certificate. A generic credential file format that is generalized to hold information from multiple credential file formats is provided. Various optimizations enhance the efficiency of the security system, keys may be pre-derived to reduce latency and digital certificates may be sorted and pre-loaded to reduce start-up time. An API may be provided to provide a common interface that abstracts away hardware dependency of secure hardware.
1. A method for use in a secure vehicle communication system comprising:
storing credentials in credential files in a storage in a vehicle, wherein each credential includes a digital certificate and at least one of a private key, a reference to a private key, data to calculate a private key, or combinations thereof and is valid for a specified time frame;
for each credential file, naming the credential file to include a date indicating a start time of a credential in the credential file;
sorting the credential files by the specified time frames that the credentials in the credential files are valid;
storing an index to the credential files in the storage of the vehicle, wherein the index indexes the credential files by the specified time frames that the credentials stored in the credential files are valid;
using the index to retrieve the credential files for a duration, wherein the credentials in the retrieved credential files are valid in the duration; and
using at least one of the retrieved credential files in the vehicle communication system during the duration.
2. The method of claim 1 wherein the sorting uses the names of the credential files to sort.
3. The method of claim 2 , further comprising:
creating the index to index the sorted credential files.
4. The method of claim 1 , wherein the step of storing credentials further comprises storing the credentials for an anticipated lifetime of a vehicle or a significant portion of the anticipated lifetime of the vehicle in the credential files in the storage in the vehicle.
5. A non-transitory computer-readable storage medium holding instructions that when executed by processing logic perform the following:
storing credentials in credential files in a storage in a vehicle, wherein each credential includes a digital certificate and at least one of a private key, a reference to a private key, data to calculate a private key, or combinations thereof and is valid for a specified time frame;
for each credential file, naming the credential file to include a date indicating a start time of a credential in the credential file;
sorting the credential files by the specified time frames that the credentials in the credential files are valid;
storing an index to the credential files in the storage of the vehicle, wherein the index indexes the credential files by the specified time frames that the credentials stored in the credential files are valid;
using the index to retrieve the credential files for a duration, wherein the credentials in the retrieved credential files are valid in the duration; and
using at least one of the retrieved credential files in the vehicle communication system during the duration.
6. The non-transitory computer-readable medium of claim 5 , further holding instructions that when executed by processing logic perform the following:
storing the credentials for an anticipated lifetime of a vehicle or a significant portion of the anticipated lifetime of the vehicle in the credential files in the storage in the vehicle.