Secure communication of IoT devices for vehicles
Method for establishing secure communication between a plurality of IoT devices in one or more vehicles include: provisioning the plurality of IoT devices by providing a unique identification, a digital identity token and a cryptographic key to each of the plurality of IoT devices; establishing a secure communication line between the plurality of IoT devices by authenticating respective communication lines between respective IoT devices and issuing a digital certificate to the respective communication lines; grouping the plurality of IoT devices into different groups based on a predetermined criteria; and including a group membership for a group of the different groups in an attribute certificate indicating group characterization.
1. A method for establishing secure communication between a plurality of devices, each device including a hardware processor, associated memory, a unique identification, a digital identity token and a cryptographic key, the method comprising:
transmitting over a communication network an invitation to a second device by a first device to establish a communication line with the first device by receiving a digital identity token from the second device;
authenticating a communication line between the first device and the second device;
issuing a digital certificate to the communication line to establish a secure communication line between the first device and the second device; and
preventing a third device for which the secure communication line has not been established from communicating with said secure communication line.
2. The method of claim 1 , wherein the secure communication line includes a digital agreement establishing terms of use of said secure communication line between first device and the second device.
3. The method of claim 1 , further comprising grouping the plurality of devices into different groups based on a predetermined criterion and storing the different groups in a storage device.
4. The method of claim 3 , further comprising storing including group memberships for the different groups in respective attribute certificates of the respective devices; and preventing a device which is not a member of a group with an approved attribute certificate, from communicating with said any one of the plurality of devices.
5. The method of claim 3 , wherein each group is issued an attribute certificate which includes associated rules for group membership in the attribute certificate.
6. The method of claim 3 , wherein the different groups include sub-groups.
7. The method of claim 3 , further comprising establishing a second group of external devices; and establishing an attribute certificate for the second group to a member of one or more of said different groups.
8. The method of claim 6 , wherein the plurality of devices are in two or more vehicles and wherein each of the two or more vehicles has a different group and each sub-group of a respective group includes components of a respective vehicle.
9. The method of claim 1 , wherein the plurality of devices are in a vehicle, wherein the plurality of devices are Internet of Things (loT) devices, and wherein one or more IoT devices are coupled to a controller area network (CAN) bus of the vehicle and establishes a secure communication line with another IoT device that is coupled to the CAN bus.
10. The method of claim 1 , wherein the plurality of devices are Internet of Things (loT) devices, and wherein one or more IoT devices are coupled to a controller area network (CAN) bus of a vehicle and are made a member of a group of IoT devices that are characterized with the CAN bus as recorded on an attribute certificate, and wherein an attribute certificate associated with the group of IoT devices is utilized by an eligible originator for communicating between one or more of the group.
11. The method of claim 10 , wherein the secure communication line is utilized for communicating between one or more of the group consisting of Vehicle-to-vehicle (V2V), Vehicle-to-Infrastructure (V2I), Vehicle-to-Grid (V2G), Vehicle-to-X (V2X), and on-board diagnostics (OBD) of a vehicle.
12. The method of claim 10 , wherein a group for a particular vehicle includes variable identities for the particular vehicle for transmission to external devices.
13. The method of claim 12 , wherein the variable identities dynamically change based on one or more of certain mode or time of operation of the particular vehicle or its IoT devices.