Satellite receiver option for certificate distribution
View Patent ↗In exemplary embodiments of the present invention, a V2V unit in a vehicle (OBE) can, for example, store a plurality of years of encrypted certificates. The certificates can, for example, be programmed at an OBE factory using a secure server, and access to all certificates can be locked until an unlock key is computed for a given window (certificate validity period). An in-vehicle satellite receiver can then receive, over, for example, a dedicated satellite control channel, unlock codes for a current time window and a next time window, and provide them to the V2V device. Using those unlock codes, the V2V device (OBE) can compute an unlock key from an unlock code provided by the satellite receiver. In this manner an in-vehicle device may be directly messaged, but only to unlock one or more certificates at a controlled time. Without the received lock codes, the stored certificates are not useable.
1. A method, comprising:
storing a large number of encrypted, device specific authentication certificates for one or more types of devices in an in-vehicle vehicle-to-vehicle (V2V) device;
receiving, at a satellite receiver in the vehicle and over a satellite channel, unlock codes corresponding to at least one certificate of the authentication certificates, the satellite receiver communicably connected to the V2V device;
providing the unlock codes to the V2V device; and
computing, in the V2V device and based on the unlock code provided by the satellite receiver, an unlock key for a current validity time window of the at least one certificate.
2. The method of claim 1 , wherein the satellite receiver device is a satellite digital audio radio service (SDARS) receiver in a vehicle.
3. The method of claim 1 , wherein the satellite receiver receives unlock codes for a a next validity time window.
4. The method of claim 1 , further comprising the V2V device first requesting the unlock codes from the satellite receiver and in response the satellite receiver providing the unlock codes to the V2V device.
5. The method of claim 1 , wherein the satellite control channel can further shut down disbursement of unlock codes to rogue V2V units.
6. The method of claim 5 , wherein unlock codes are requested from a satellite receiver if a relevant Roadside Unit (RSU) is not available.
7. The method of claim 1 , wherein prior to installation into a vehicle, an SCMS provides a chip within the V2V device with credentials including (i) a unique V2V ID, (ii) a unique secret key, and (iii) a group ID.
8. The method of claim 7 , wherein said credentials are stored in at least one of one-time programmable (OTP), on-chip flash memory, and in package non-volatile memory.
9. The method of claim 7 , further comprising:
receiving, at the satellite receiver and over the satellite channel, a revoke services message including an array of V2V IDs;
determining that the unique V2V ID of the V2V device is included in the array of V2V IDs; and
terminating unlock services for the V2V device.
10. The method of claim 1 , wherein the unlock code is calculated is V2V device specific, and is a function of a group code common to a plurality of devices and a unique vehicle ID.
11. The method of claim 1 , wherein a predetermined number of the authentication certificates correspond to each validity time window.
12. The method of claim 1 , wherein the computing the unlock key is further based on a unique secret key associated with the V2V device.
13. A system for unlocking authentication certificates in a vehicle, comprising:
a vehicle, provided with:
a satellite reception device; and
a (vehicle-to-vehicle) V2V communications module communicably connected to the satellite reception device, comprising a memory,
wherein, in operation, the satellite reception device:
receives a plurality of device specific authentication certificates,
provides the plurality of authentication certificates to the V2V communications module,
receives at least one unlock code corresponding to at least one of the plurality of authentication certification over a satellite communications channel, and
provides the at least one unlock code to the V2V communications module, and the processor in the V2V communications module computes an unlock key for a current validity time window of the at least one certificate from the unlock code provided by the satellite receiver.
14. The system of claim 13 , further comprising storing the plurality of encrypted, device specific authentication certificates in the memory.
15. The system of claim 14 , wherein the device specific authentication certificates are for one or more types of devices.
16. The system of claim 14 , wherein the plurality of encrypted certificates comprise N certificates, where N=(number of certificates per window)*(number of windows).
17. The system of claim 14 , wherein the plurality of encrypted certificates is encrypted with a device specific and time period specific key.
18. The system of claim 13 , wherein the V2V communications module computes the unlock key further based on a unique secret key associated with the V2V communications module.
19. The system of claim 13 , wherein the V2V communications module is associated with credentials including a unique V2V ID and a group ID.