IP Library › Granted Patent US 10,652,742
Granted Patent B2
US 10,652,742 · App. 15/817,660 · Granted May 12, 2020

Hybrid authentication of vehicle devices and/or mobile user devices

Inventor: Shahram Rezaei (Troy, MI)
Assignee: VALEO COMFORT AND DRIVING ASSISTANCE
H04W12/06H04L63/0853H04L63/101H04W12/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,652,742
App. No.
15/817,660
Granted
May 12, 2020
Kind
B2
Abstract

A telematics control unit (TCU) of a vehicle includes at least one processor coupled to a memory, the at least one processor comprising a local authentication server configured to authenticate at least one device of a plurality of devices in the vehicle based on a first list of approved devices, and establish, upon successful authentication of the at least one device, a trusted communication link between the TCU and the at least one device to receive a first data from the at least one device and transmit a second data to the at least one device, wherein the first data is stored in the memory for future transmission to a remote server.

Claims (60)

1. A telematics control unit (TCU) of a vehicle, comprising:

at least one processor coupled to a memory, the at least one processor comprising a local authentication unit configured to:

locally authenticate, in a first step of a two-step authentication process, at least one device of a plurality of devices in the vehicle based on a first list of approved devices; and

establish, upon successful authentication of the at least one device, a trusted communication link between the TCU and the at least one device to receive a first data from the at least one device and transmit a second data to the at least one device,

wherein the first data is stored in the memory for future transmission to a remote server;

the at least one processor further comprising an authentication client configured to:

wirelessly authenticate the remote server;

transmit at least a portion of the first data to the remote server; and

send information regarding the TCU to the at least one device,

wherein the at least one device authenticates the TCU in a second step of the two-step authentication process, by synchronizing the first list of approved devices and based on the information regarding the TCU, and

wherein establishing the trusted communication link between the TCU and the at least one device is further based on the at least one device authenticating the TCU.

2. The TCU of claim 1 , wherein the at least one device is authenticated independent of a network connection between the vehicle and the remote server.

3. The TCU of claim 1 , wherein the authentication client is further configured to:

send, to the at least one device, a first indication that the remote server is authenticated;

send, to the remote server, a second indication that the at least one device is authenticated; and

receive a third data from the remote server and transmit the third data to the at least one device through the trusted communication link.

4. The TCU of claim 1 , wherein the authentication client is further configured to:

send, to a first device of the plurality of devices, a first indication that a second device of the plurality of devices is authenticated;

send, to the second device, a second indication that the first device is authenticated; and

transmit a vehicle data item between the first device and the second device to facilitate the first device and the second device in performing a function of the vehicle.

5. The TCU of claim 4 , wherein the plurality of devices comprises a plurality of electronic control units (ECUs) of the vehicle that are coupled to one or more sensors.

6. The TCU of claim 1 , wherein the plurality of devices comprises a user device of a user of the vehicle, and wherein the user device comprises a processor configured to communicate with the TCU to provide user access information for authentication of the user device.

7. The TCU of claim 6 , wherein authenticating the user device comprises:

receiving, from the user device, the user access information; and

verifying, by the local authentication unit of the TCU, access rights of the user by comparing the user access information with a second list of approved devices.

8. The TCU of claim 7 , wherein the first list of approved devices and the second list of approved devices are stored in the TCU and are periodically updated to reflect changes in the approved devices, wherein the first list of approved devices corresponds to internal vehicle devices and the second list of approved devices corresponds to devices external to the vehicle.

9. A method for authenticating devices in a vehicle, comprising:

authenticating locally, using a telematics control unit (TCU) of the vehicle, in a first step of a two-step authentication process, at least one device of a plurality of devices in the vehicle based on a first list of approved devices;

establishing, upon successful authentication of the at least one device, a trusted communication link between the TCU and the at least one device to receive a first data from the at least one device and transmit a second data to the at least one device;

wirelessly authenticating the remote server using the TCU;

transmitting at least a portion of the first data to the remote server, when connection to the remote server is enabled; and

in a second step of the two-step authentication process, authenticating the TCU by synchronizing the list of approved devices when connection to the remote server is enabled,

wherein the first data is stored in the memory for future transmission to a remote server.

10. The method of claim 9 , wherein the at least one device is authenticated independent of a network connection between the vehicle and the remote server.

11. The method of claim 9 , further comprising:

sending, by the TCU to the at least one device, a first indication that the remote server is authenticated;

sending, by the TCU to the remote server, a second indication that the at least one device is authenticated;

receiving, by the TCU, a third data from the remote server; and

transmitting, by the TCU, the third data to the at least one device through the trusted communication link.

12. The method of claim 9 , further comprising:

sending, by the TCU to a first device of the plurality of devices, a first indication that a second device of the plurality of devices is authenticated;

sending, by the TCU to the second device, a second indication that the first device is authenticated; and

transmitting a vehicle data item between the first device and the second device to facilitate the first device and the second device in performing a function of the vehicle.

13. The method of claim 12 , wherein the plurality of devices comprises a plurality of electronic control units (ECUs) of the vehicle that are coupled to one or more sensors.

14. The method of claim 9 , wherein the plurality of devices comprises a user device of a user of the vehicle, and wherein the user device comprises a processor configured to communicate with the TCU to provide user access information for authentication of the user device.

15. The method of claim 14 , wherein authenticating the user device comprises:

receiving, by the TCU from the user device, the user access information; and

verifying, by the TCU, access rights of the user by comparing the user access information with a second list of approved devices.

16. The method of claim 14 , further comprising:

storing the first list of approved devices and the second list of approved devices in the TCU; and

periodically updating the first list of approved devices and the second list of approved devices to reflect changes in the approved devices,

wherein the first list of approved devices corresponds to internal vehicle devices and the second list of approved devices corresponds to devices external to the vehicle.

17. A non-transitory computer readable medium comprising instructions, that when executed, cause a computer processor to:

locally authenticate, using a telematics control unit (TCU) of a vehicle, in a first step of a two-step authentication process, at least one device of a plurality of devices in the vehicle based on a list of approved devices;

establish, upon successful authentication of the at least one device, a trusted communication link between the TCU and the at least one device to receive a first data from the at least one device and transmit a second data to the at least one device;

wirelessly authenticate the remote server using the TCU;

transmit at least a portion of the first data to the remote server, when connection to the remote server is enabled; and

in a second step of the two-step authentication process, authenticate the TCU by synchronizing the list of approved devices when connection to the remote server is enabled,

wherein the first data is stored in the memory for future transmission to a remote server, and

wherein the at least one device is authenticated independent of a network connection between the vehicle and the remote server.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 9, 2018
From: VALEO NORTH AMERICA, INC.
To: VALEO COMFORT AND DRIVING ASSISTANCE
Reel/Frame 047104/0592 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 28, 2017
From: REZAEI, SHAHRAM
To: VALEO NORTH AMERICA, INC.
Reel/Frame 044234/0001 →
Continuity (1)
Related Publication 20190159026A1 · May 23, 2019