Method and system for updating of an application layer for a third-party telematics provider
A method at a system including a firewall and at least one application, the method including obtaining, at the at least one application, a new address for a service provider for the at least one application; triggering a firewall update; obtaining a new firewall configuration; and updating the firewall, wherein the updating the firewall allows a connection from the at least one application to the new address for the service provider.
1. A method at a system including a firewall, a gateway and at least one application, the method comprising:
monitoring, by the gateway, incoming messages for the application;
detecting, by the gateway, a new incoming message for the application;
parsing, at the gateway, the new incoming message, to determine a new address for a service provider for the at least one application; and
updating a firewall whitelist with the new address for the service provider,
wherein the updating the firewall whitelist allows a connection from the at least one application to the new address for the service provider.
2. The method of claim 1 , further comprising performing integrity checking on the new incoming message.
3. The method of claim 2 , wherein the integrity checking comprises checking a mapping stored at the gateway to find a service provider related to the application.
4. The method of claim 3 , wherein the mapping is configured at the gateway.
5. The method of claim 1 , wherein the updating comprises adding the new address to the firewall whitelist and removing an old address from the firewall whitelist.
6. The method of claim 1 , wherein the parsing utilizes an application-layer or Man-In-The-Middle proxy at the gateway to decrypt the new incoming message.
7. The method of claim 1 , wherein the new address is at least one of a uniform resource locator, a uniform resource identifier, an Internet Protocol address, and a fully qualified domain name.
8. The method of claim 1 , wherein the system is a vehicle.
9. The method of claim 1 , wherein the new address for the service provider is provided from an Original Equipment Manufacturer server.
10. A computing device including a firewall, gateway and at least one application, the computing device comprising:
a processor; and
a communications subsystem,
wherein the computing device is configured to:
monitor, at the gateway, incoming messages for the application;
detect, by the gateway, a new incoming message for the application;
parse, at the gateway, the new incoming message, to determine a new address for a service provider for the at least one application; and
update a firewall whitelist with the new address for the service provider, wherein the updating the firewall whitelist allows a connection from the at least one application to the new address for the service provider.
11. The computing device of claim 10 , wherein the computing device is further configured to perform integrity checking on the new incoming message.
12. The computing device of claim 11 , wherein the integrity checking comprises checking a mapping stored at the gateway to find a service provider related to the application.
13. The computing device of claim 12 , wherein the mapping is configured at the gateway.
14. The computing device of claim 10 , wherein the computing device is configured to update by adding the new address to the firewall whitelist and removing an old address from the firewall whitelist.
15. The computing device of claim 10 , wherein the computing device is configured to parse using an application-layer or Man-In-The-Middle proxy at the gateway to decrypt the new incoming message.
16. The computing device of claim 10 , wherein the new address is at least one of a uniform resource locator, a uniform resource identifier, an Internet Protocol address, and a fully qualified domain name.
17. The computing device of claim 10 , wherein a system is a vehicle.
18. The computing device of claim 10 , wherein the new address for the service provider is from an Original Equipment Manufacturer server.
19. A non-transitory computer readable medium for storing instruction code, which, when executed by a processor of a computing system having a firewall, gateway and at least one application, causes the computing system to:
monitor, at the gateway, incoming messages for the application;
detect, by the gateway, a new incoming message for the application;
parse, at the gateway, the new incoming message, to determine a new address for a service provider for the at least one application; and
update a firewall whitelist with the new address for the service provider, wherein the updating the firewall whitelist allows a connection from the at least one application to the new address for the service provider.
20. The non-transitory computer readable medium of claim 19 , wherein the instruction code further causes the computing system to perform integrity checking on the new incoming message.