Secure communication of IOT devices for vehicles
Method for establishing secure communication between a plurality of IoT devices in one or more vehicles include: provisioning the plurality of IoT devices by providing a unique identification, a digital identity token and a cryptographic key to each of the plurality of IoT devices; establishing a secure communication line between the plurality of IoT devices by authenticating respective communication lines between respective IoT devices and issuing a digital certificate to the respective communication lines; grouping the plurality of IoT devices into different groups based on a predetermined criteria; and including a group membership for a group of the different groups in an attribute certificate indicating group characterization.
1. A method for establishing secure communication between a plurality of devices, each device including a hardware processor, associated memory, a unique identification, a digital identity token and a cryptographic key, the method comprising:
transmitting over a communication network an invitation to a second device by a first device to establish a communication line with the first device by receiving a digital identity token from the second device;
authenticating a communication line between the first device and the second device;
issuing a digital certificate to the communication line to establish a secure communication line between the first device and the second device;
grouping the plurality of devices into different groups based on a predetermined criteria and storing the different groups in a storage device;
storing group memberships for the different groups in respective attribute certificates of the respective devices; and
preventing a device for which a secure communication line to any one of the plurality of devices has not been established, or which is not a member of a group with an approved attribute certificate, from communicating with said any one of the plurality of devices.
2. The method of claim 1 , wherein the secure communication line includes a digital agreement establishing terms of use of said secure communication line between first device and the second device.
3. The method of claim 1 , wherein a group is issued an attribute certificate which includes associated rules for group membership in the attribute certificate.
4. The method of claim 1 , wherein the different groups include sub-groups.
5. The method of claim 1 , further comprising:
establishing a second group of external devices; and
establishing an attribute certificate for the second group to a member of one or more of said different groups.