Secure communication between a vehicle and a remote device

1. An apparatus, comprising:

a processing resource;

memory having instructions executable by the processing resource; and

a vehicular communication component coupled to the processing resource, wherein the vehicular communication component is configured to, in response to receiving a request from a remote communication component to switch a state of a lock of the apparatus from a first state to a second state:

calculate a challenge count for the request;

generate a vehicular private key and a vehicular public key;

perform a number of verification iterations, wherein each respective one of the number of verification iterations includes:

providing the vehicular public key to the remote communication component;

receiving, from the remote communication component in response to providing the vehicular public key to the remote communication component, code for switching the state of the lock from the first state to the second state;

verifying an identity of the remote communication component; and

incrementing a counter of the apparatus in response to verifying the identity of the remote communication component; and

in response to the counter being incremented to a value equal to or greater than the challenge count:

decrypt the received code using the vehicular private key; and

switch the state of the lock from the first state to the second state.

2. The apparatus of claim 1 , wherein the vehicular communication component is configured to generate the vehicular public key using a unique secret key for the apparatus stored in the memory of the apparatus.

3. The apparatus of claim 1 , wherein each respective one of the number of verification iterations includes:

receiving, from the remote communication component in response to providing the vehicular public key to the remote communication component, a digital signature for the remote communication component; and

verifying the identity of the remote communication component using the digital signature for the remote communication component.

4. The apparatus of claim 1 , wherein each respective one of the number of verification iterations includes:

generating an anti-replay value using an additional counter of the apparatus;

providing the anti-replay value to the remote communication component; and

receiving, from the remote communication component in response to providing the anti-replay value to the remote communication component, the code for switching the state of the lock from the first state to the second state.

5. The apparatus of claim 1 , wherein each respective one of the number of verification iterations includes:

generating a vehicular public identification and a vehicular certificate;

providing the vehicular public identification and the vehicular certificate to the remote communication component; and

receiving, from the remote communication component in response to providing the vehicular public identification and the vehicular certificate to the remote communication component, the code for switching the state of the lock from the first state to the second state.

6. The apparatus of claim 1 , wherein the challenge count is above a threshold.

7. The apparatus of claim 1 , wherein the vehicular communication component is configured to, in response to receiving a request from an additional remote communication component to pair with the apparatus:

generate a vehicular public key, a vehicular public identification, and a vehicular certificate;

provide the vehicular public key, the vehicular public identification, and the vehicular certificate to the additional remote communication component;

receive a remote public key, a remote public identification, and a remote certificate from the additional remote communication component in response to providing the vehicular public key, the vehicular public identification, and the vehicular certificate to the additional remote communication component;

verify an identity of the additional remote communication component using the remote public key, the remote public identification, and the remote certificate; and

pair with the additional remote communication component in response to verifying the identity of the additional remote communication component.

8. The apparatus of claim 7 , wherein the remote public key is generated using a unique secret key for the additional remote communication component.

9. A method of operating an apparatus, comprising:

receiving a request from a remote communication component to switch a state of a lock of the apparatus from a first state to a second state;

calculating a challenge count for the request;

generating a vehicular private key and a vehicular public key, wherein the vehicular public key is generated using a unique secret key for the apparatus;

performing a number of verification iterations, wherein each respective one of the number of verification iterations includes:

providing the vehicular public key to the remote communication component;

receiving, from the remote communication component in response to providing the vehicular public key to the remote communication component, code for switching the state of the lock from the first state to the second state and a digital signature for the remote communication component;

verifying an identity of the remote communication component using the digital signature for the remote communication component; and

incrementing a counter of the apparatus in response to verifying the identity of the remote communication component; and

decrypting the received code using the vehicular private key, and switching the state of the lock from the first state to the second state, in response to the counter being incremented to a value equal to or greater than the challenge count.

10. The method of claim 9 , wherein the digital signature for the remote communication component received during each respective one of the number of verification iterations is generated by the remote communication component using a remote private key.

11. The method of claim 9 , wherein the method includes ceasing to perform the number of verification iterations in response to the identity of the remote communication being unable to be verified.

12. The method of claim 9 , wherein the method includes switching a state of an engine of the apparatus from a first state to a second state in response to the counter being incremented to a value equal to or greater than the challenge count.

13. The method of claim 9 , wherein the method includes calculating the challenge count for the request using a random number generator.

14. The method of claim 9 , wherein the method includes calculating the challenge count for the request using an additional counter of the apparatus.

15. An apparatus, comprising:

a processing resource;

memory having instructions executable by the processing resource; and

a remote communication component coupled to the processing resource, wherein the remote communication component is configured to:

generate a remote private key and a remote public key;

provide a request to a vehicle communication component of a vehicle to switch a state of a lock of the vehicle from a first state to a second state; and

perform a number of verification iterations, wherein each respective one of the number of verification iterations includes:

receiving, from the vehicular communication component, a vehicular public key and a counter value corresponding to that verification iteration;

decrypting the counter value corresponding to that verification iteration using the remote private key;

verifying an identity of the vehicular communication component;

encrypting code for switching the state of the lock from the first state to the second state using the vehicular public key; and

providing the remote public key and the encrypted code to the vehicular communication component in response to decrypting the counter value and verifying the identity of the vehicular communication component.

16. The apparatus of claim 15 , wherein the remote communication component is configured to generate the remote public key using a unique secret key for the apparatus stored in the memory of the apparatus.

17. The apparatus of claim 15 , wherein each respective one of the number of verification iterations includes:

receiving, from the vehicular communication component, a digital signature for the vehicular communication component; and

verifying the identity of the vehicular communication component using the digital signature for the vehicular communication component.

18. The apparatus of claim 15 , wherein each respective one of the number of verification iterations includes:

generating an anti-replay value using a counter of the apparatus; and

providing the anti-replay value to the vehicular communication component in response to decrypting the counter value and verifying the identity of the vehicular communication component.

19. The apparatus of claim 15 , wherein each respective one of the number of verification iterations includes:

generating a remote public identification and a remote certificate; and

providing the remote public identification and the remote certificate to the vehicular communication component in response to decrypting the counter value and verifying the identity of the vehicular communication component.

20. A method of operating an apparatus, comprising:

generating a remote private key and a remote public key, wherein the remote public key is generated using a unique secret key for the apparatus;

providing a request to a vehicle communication component of a vehicle to switch a state of a lock of the vehicle from a first state to a second state; and

performing a number of verification iterations, wherein each respective one of the number of verification iterations includes:

receiving, from the vehicular communication component, a vehicular public key, a counter value corresponding to that verification iteration, and a digital signature for the vehicular communication component;

decrypting the counter value corresponding to that verification iteration using the remote private key;

verifying an identity of the vehicular communication component using the digital signature for the vehicular communication component;

encrypting code for switching the state of the lock from the first state to the second state using the vehicular public key; and

providing the remote public key and the encrypted code to the vehicular communication component in response to decrypting the counter value and verifying the identity of the vehicular communication component.

21. The method of claim 20 , wherein the digital signature for the vehicular communication component received during each respective one of the number of verification iterations is generated by the vehicular communication component using a vehicular private key.

22. The method of claim 20 , wherein the method includes ceasing to perform the number of verification iterations in response to the identity of the vehicular communication component being unable to be verified.

23. The method of claim 20 , wherein the method includes verifying the digital signature for the vehicular communication component using the vehicular public key.

24. The method of claim 20 , wherein the method includes verifying the identity of the vehicular communication component using a device identification composition engine-robust internet of things (DICE-RIOT) protocol.

25. The method of claim 20 , wherein the request includes a vehicle identification number (VIN) identifier for the vehicle.