Vehicle access systems and methods
Systems, devices, and methods for controlling access to vehicles in rental, loaner, shared-use, and other vehicle fleets. Some of the present systems, devices, and methods use encrypted virtual keys that can be relayed to a vehicle computing device via a user's mobile device. Such virtual keys can be command-specific such that successful use of a virtual key results execution of a predetermined command or group of commands, and further commands require one or more additional virtual keys with the additional commands. Others of the present systems, devices, and methods provide tools: for provisioning or initial pairing of vehicle computing devices with corresponding vehicles, identifying and permitting a user to select locally available vehicles, prompting vehicle computing devices to retrieve pending commands from a server, and/or various other functions described in this disclosure.
1. A system comprising:
a server comprising:
a memory storing one or more instructions; and
a processor coupled to the memory and configured to execute the one or more instructions to cause the processor to:
receive, from a computing device of a transportation device, a check-in request message including an encrypted portion and an unencrypted portion including a reference identifier;
encrypt a command message based on the reference identifier; and
initiate transmission of the encrypted command message to the computing device in response to the received check-in request message.
2. The system of claim 1 , where the encrypted portion of the check-in request message is encrypted based on the reference identifier.
3. The system of claim 1 , where at least a portion of the encrypted command message is decryptable at the computing device based on the check-in request message.
4. The system of claim 1 , where the processor is further configured to execute the one or more instructions to initiate transmission of a check-in prompt message to the computing device.
5. The system of claim 4 , where the check-in request message is received responsive to the check-in prompt message.
6. The system of claim 4 , where:
the server further comprises a cell modem configured to transmit the check-in prompt message to the computing device;
the check-in prompt message is not encrypted; and
the check-in prompt message has a short message service (SMS) message format.
7. The system of claim 1 , where the processor is further configured to execute the one or more instructions to decrypt the encrypted portion of the check-in request message based on the reference identifier.
8. The system of claim 1 , where the reference identifier comprises a key timestamp or a generation timestamp.
9. The system of claim 1 , wherein the command message includes one or more commands to inhibit the transportation device from being started.
10. A method comprising:
receiving, at a server from a computing device of a transportation device, a check-in request message including an encrypted portion and an unencrypted portion including a reference identifier, the encrypted portion encrypted based on the reference identifier;
encrypting a command message based on the reference identifier; and
transmitting the encrypted command message to the computing device in response to the received check-in request message.
11. The method of claim 10 , further comprising generating the command message based on a trigger event.
12. The method of claim 11 , further comprising:
receiving a report that the transportation device is stolen; and
identifying the report as the trigger event.
13. The method of claim 10 , further comprising:
accessing a key corresponding to the transportation device; and
generating a vector based on the key and the reference identifier.
14. The method of claim 13 , where the command message is encrypted using the vector.
15. An apparatus comprising:
a computing device of a transportation device, the computing device comprising a memory including one or more instructions and a processor configured to execute the one or more instructions to:
initiate transmission, to a server, of a check-in request message including an encrypted portion and an unencrypted portion including a reference identifier;
receive an encrypted command message from the server, the encrypted command message including one or more commands for the computing device; and
decrypt at least a portion of the encrypted command message based on the check-in request message.
16. The apparatus of claim 15 , where the processor is further configured to execute the one or more instructions to execute the one or more commands based on the encrypted command message being consistent with the reference identifier included in the check-in request message.
17. The apparatus of claim 15 , where:
the processor is further configured to execute the one or more instructions to receive a check-in prompt message from the server; and
transmission of the check-in request message is initiated responsive to receipt of the check-in prompt message.
18. The apparatus of claim 15 , where the processor is further configured to execute the one or more instructions to:
access a key;
generate a vector based on the key and the reference identifier, where decrypting the at least a portion of the encrypted command message includes decrypting the at least a portion of the encrypted command message based on the vector to generate at least a decrypted reference identifier; and
compare the decrypted reference identifier to the reference identifier.
19. The apparatus of claim 15 , where the processor is further configured to execute the one or more instructions to:
determine whether one or more conditions are satisfied based on the decrypted portion of the encrypted command message and the check-in request message; and
determine that the encrypted command message is valid in response to a determination that the one or more conditions are satisfied.
20. The apparatus of claim 19 , where:
the reference identifier comprises a key timestamp or a generation timestamp; and
the processor is further configured to execute the one or more instructions to:
determine whether the key timestamp or the generation timestamp is valid; and
determine whether the one or more conditions are satisfied further based on a determination that the key timestamp or the generation timestamp is valid.