IP Library › Granted Patent US 10,931,459
Granted Patent B2
US 10,931,459 · App. 16/064,232 · Granted Feb 23, 2021

Onboard computer system, vehicle, management method, and computer program

Inventors: Keisuke Takemori (Tokyo, JP); Hideaki Kawabata (Tokyo, JP)
Assignee: KDDI Corporation
H04L9/3247B60R16/02G06F21/64H04L9/08H04L9/0825H04L9/0877H04L9/0897H04L9/32H04W4/40
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,931,459
App. No.
16/064,232
Granted
Feb 23, 2021
Kind
B2
Abstract

An onboard computer system includes a first onboard computer configured to store a first public key certificate of a data delivering apparatus, a second onboard computer, and a secure element configured to store a second public key certificate relative to a second secret key used to generate the first public key certificate. The secure element verifies the first public key certificate by use of the second public key certificate. The first onboard computer includes an encryption processor configured to verify a first electronic signature attached to data delivered from the data delivering apparatus by use of the first public key certificate which is successfully verified by the secure element. The data attached with the first electronic signature, which is successfully verified by the encryption processor, is applied to the first onboard computer or the second onboard computer.

Claims (43)

1. An onboard computer system, comprising:

a first onboard computer configured to store a first public key certificate of a data delivering apparatus in connection with a first secure element configured to store a second public key certificate associated with a second secret key used for generating the first public key certificate; and

a second onboard computer connected to the first onboard computer through a communication network,

wherein the first secure element is configured to verify the first public key certificate by use of the second public key certificate,

wherein the first onboard computer comprises an encryption processor configured to verify a first electronic signature attached to data delivered from the data delivering apparatus by use of the first public key certificate which is successfully verified by the first secure element, and

wherein the first onboard computer or the second onboard computer is configured to apply the data attached with the first electronic signature, which is successfully verified by the encryption processor.

2. The onboard computer system according to claim 1 ,

wherein the first secure element is configured to store a third secret key and to generate a third electronic signature for application result information representing an applied result of the data by use of the third secret key, and

wherein the onboard computer system transmits the application result information attached with the third electronic signature to the data delivering apparatus.

3. The onboard computer system according to claim 2 ,

wherein the first secure element is configured to store a second secret key and to generate a third public key certificate associated with the third secret key by use of the second secret key, and

wherein the onboard computer system transmits the third public key certificate to the data delivering apparatus.

4. The onboard computer system according to claim 1 , further comprising:

a second secure element configured to store a third secret key,

wherein the second secure element is configured to generate a third electronic signature attached to application result information representing an applied result of the data by use of the third secret key, and

wherein the onboard computer system transmits the application result information attached with the third electronic signature to the data delivering apparatus.

5. The onboard computer system according to claim 4 ,

wherein the second secure element is configured to store a second secret key and and to generate a third public key certificate associated with the third secret key by use of the second secret key, and

wherein the onboard computer system transmits the third public key certificate to the data delivering apparatus.

6. The onboard computer system according to claim 1 ,

wherein the first secure element is installed in a communication module mounted on a vehicle.

7. The onboard computer system according to claim 1 ,

wherein the first secure element is installed in the first onboard computer.

8. The onboard computer system according to claim 4 ,

wherein the second secure element is installed in the first onboard computer.

9. The onboard computer system according to claim 4 ,

wherein the second secure element is installed in a communication module mounted on a vehicle.

10. The onboard computer system according to claim 1 ,

wherein the first onboard computer sends the data attached with the first electronic signature, which is successfully verified by the encryption processor, to the second onboard computer,

wherein the second onboard computer receives and applies the data from the first onboard computer, and

wherein the first onboard computer and the second onboard computer are configured to store a same common key and thereby to verify a validity of applying the data by use of the common key.

11. The onboard computer system according to claim 1 ,

wherein the secure element is installed in a device outside a vehicle so as to receive or transmit the data with the first onboard computer, by use of the second public key certificate.

12. A vehicle, comprising:

the onboard computer system according to claim 1 , which is installed in a vehicle.

13. A management method adapted to an onboard computer system comprising a first onboard computer configured to store a first public key certificate of a data delivering apparatus, and a second onboard computer connected to the first onboard computer through a communication network in connection with a secure element configured to store a second public key certificate associated with a second secret key used to generate the first public key certificate, said management method comprising:

public key certificate verifying for the secure element by verifying the first public key certificate by use of the second public key certificate;

electronic signature verifying for the first onboard computer by verifying a first electronic signature attached to data delivered from the data delivering apparatus by use of the first public key certificate which is successfully verified by the secure element; and

data applying for applying the first onboard computer or the second onboard computer by applying the data attached with the first electronic signature successfully verified in the electronic signature verifying.

14. The management method adapted to an onboard computer system according to claim 13 ,

wherein the secure element is installed in a device outside a vehicle so as to receive or transmit the data with the first onboard computer by use of the second public key certificate.

15. A non-transitory computer-readable storage medium configured to store a computer program causing an onboard computer system to implement the management method according to claim 13 .

16. A non-transitory computer-readable storage medium configured to store a computer program causing an onboard computer system to implement the management method according to claim 14 .

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 20, 2018
From: TAKEMORI, KEISUKE; KAWABATA, HIDEAKI
To: KDDI CORPORATION
Reel/Frame 046147/0042 →
Priority Claims (1)
JP JP2015-256649 · Dec 28, 2015 · national
Continuity (1)
Related Publication 20190007217A1 · Jan 3, 2019