Establishing a secure short-range wireless communications connection at a vehicle

1. A method of establishing a short-range wireless communications connection between a host device and a client device, wherein the host device includes a host certificate and a host key, the method comprising the steps of:

transmitting an advertisement using a short-range wireless communications (SRWC) protocol from the host device to the client device, wherein the host device is a vehicle that includes a body control module (BCM), and wherein the BCM includes a root certificate store that includes the host certificate;

receiving a connection request message from the client device;

receiving a client device verification message, wherein the client device verification message includes an encrypted client certificate, wherein the encrypted client certificate is a certificate that is encrypted using a client key, and wherein the host key and the client key are part of a common encryption scheme;

decrypting the encrypted certificate using the host key to obtain the client certificate;

verifying the client certificate using the host certificate;

generating a shared secret;

encrypting the shared secret using the host key; and

sending the encrypted shared secret to the client device.

2. The method of claim 1 , wherein the root certificate store is used by the vehicle to carry out the verifying step.

3. A method of establishing a short-range wireless communications connection between a vehicle and a mobile device, wherein the vehicle includes a wireless communications device, wherein the wireless communications device comprises a short-range wireless communications (SRWC) circuit that is used to carry out wireless communications via a SRWC protocol, wherein the vehicle includes a secure vehicle system module (VSM) that stores a host key and a host certificate, and wherein the method comprises the steps of:

transmitting an advertisement using the SRWC protocol, wherein the SRWC protocol is a Bluetooth™ protocol, and wherein the advertisement includes information pertaining to the services that are offered by the vehicle via the Bluetooth™ protocol;

receiving a connection request message from the mobile device via the Bluetooth™ protocol;

in response to receiving the connection request message from the mobile device, operating the wireless communications device in a listening mode;

while the wireless communications device is operating in the listening mode, receiving one or more mobile device verification messages, wherein at least one of the one or more mobile device verification messages include at least part of an encrypted client certificate, wherein the encrypted client certificate is a certificate that is encrypted using a client key, wherein the host key and the client key are part of a common encryption scheme;

decrypting the encrypted certificate using the host key to obtain the client certificate;

after decrypting the encrypted certificate, verifying the client certificate using the host certificate, wherein the vehicle includes a body control module (BCM), wherein the BCM includes a root certificate store, and wherein the root certificate store is used by the vehicle to carry out the verifying step;

in response to successfully verifying the client certificate, generating a shared secret;

after generating the shared secret, encrypting the shared secret using the host key;

after encrypting the shared secret, sending the encrypted shared secret to the mobile device;

receiving a vehicle command request message from the mobile device, wherein the vehicle command request message includes a request to carry out a vehicle function; and

carrying out the vehicle function using the vehicle.

4. The method of claim 3 , further comprising the step of receiving a challenge response message from the mobile device using the established SRWC connection.

5. The method of claim 4 , further comprising the steps of:

in response to receiving the challenge response message from the mobile device, verifying the challenge response message using the BCM; and

when the challenge response message is successfully verified, carrying out the vehicle function.

6. The method of claim 5 , further comprising the step of, when the challenge response message is unsuccessfully verified, terminating the established SRWC connection.