Central authority for certifying unbonded access to a vehicle via a digital key device
Techniques for certifying unbonded access to a vehicle are disclosed herein. An example method includes receiving, by a vehicle and from a computing system, a service identifier associated with a function of the vehicle, wherein the vehicle stores one or more device identifiers for each digital key device in communication with the vehicle, receiving, from a digital key device, a signed token associated with the service identifier, wherein the one or more device identifiers do not include a device identifier for the digital key device, sending, to the computing system, the signed token, receiving, from the computing system, an indication of whether the signed token is verified, responsive to determining, based on the indication, that the signed token is verified, authorizing use of the function of the vehicle, and storing the device identifier for the digital key device.
1. A method comprising:
receiving, by a vehicle and from a computing system, a service identifier associated with a function of the vehicle, wherein the vehicle stores one or more device identifiers for each digital key device in communication with the vehicle;
after advertising, by the vehicle, the service identifier, receiving, by the vehicle and from a digital key device, a signed token associated with the service identifier, wherein the one or more device identifiers do not include a device identifier for the digital key device;
sending, by the vehicle and to the computing system, the signed token;
receiving, by the vehicle and from the computing system, an indication of whether the signed token is verified;
responsive to determining, by the vehicle and based on the indication, that the signed token is verified, authorizing, by the vehicle, use of the function of the vehicle; and
storing, by the vehicle, the device identifier for the digital key device.
2. The method of claim 1 , further comprising:
responsive to determining, by the vehicle and based on the indication, that the signed token is not verified, refraining, by the vehicle, from authorizing use of the function of the vehicle.
3. The method of claim 1 , further comprising:
establishing, by the vehicle, a communication link with the digital key device; and
receiving, by the vehicle, one or more commands from the digital key device via the communication link.
4. The method of claim 3 , wherein the one or more commands control operation of the function of the vehicle.
5. The method of claim 3 , further comprising terminating, by the vehicle, the communication link based on one or more criteria received from the computing system.
6. The method of claim 1 , further comprising sending, by the vehicle, an indication that the vehicle is disabled, wherein the computing system refrains from verifying the signed token when the vehicle is disabled.
7. The method of claim 1 , wherein the signed token is a first signed token, the method further comprising:
receiving, by the digital key device, a second signed token from the vehicle;
sending, by the digital key device, the second signed token to the computing system for verification;
receiving, by the digital key device and from the computing system, an indication the second signed token was verified by the computing system; and
responsive to receiving the indication of the verification of the second signed token, presenting, by the digital key device, a notification that the vehicle is verified.
8. The method of claim 7 , further comprising:
receiving, by the vehicle and from the computing system, the first signed token; and
receiving, by the digital key device and from the computing system, the second signed token.
9. The method of claim 1 , further comprising receiving, by the vehicle and from the computing system, an indication of an itinerary including an occurring time period within which the itinerary is to occur.
10. The method of claim 9 , further comprising:
determining, by the vehicle, a current time is outside the occurring time period; and
responsive to determining the current time is outside the occurring time period, refraining, by the vehicle, from authorizing use of the function of the vehicle.
11. The method of claim 1 , wherein the function is an action performed by the vehicle selected from the group consisting of unlocking one or more doors, starting the vehicle, and selecting a drive mode of the vehicle.
12. A vehicle comprising:
a memory that stores instructions; and
one or more processors that execute the instructions to:
receive, from a computing system, a service identifier associated with a function of the vehicle, wherein the vehicle stores one or more device identifiers for each digital key device in communication with the vehicle;
after advertising the service identifier, receive, from a digital key device, a signed token associated with the service identifier, wherein the one or more device identifiers do not include a device identifier for the digital key device;
send, to the computing system, the signed token;
receive, from the computing system, an indication of whether the signed token is verified;
responsive to determining, based on the indication, that the signed token is verified, authorize use of the function of the vehicle; and
store the device identifier for the digital key device.
13. The vehicle of claim 12 , wherein the one or more processors further execute the instructions to:
responsive to determining, based on the indication, that the signed token is not verified, refrain from authorizing use of the function of the vehicle.
14. The vehicle of claim 12 , wherein the one or more processors further execute the instructions to:
establish a communication link with the digital key device; and
receive one or more commands from the digital key device via the communication link.
15. The vehicle of claim 14 , wherein the one or more commands control operation of the function of the vehicle.
16. The vehicle of claim 14 , wherein the one or more processors further execute the instructions to terminate the communication link based on one or more criteria received from the computing system.
17. The vehicle of claim 12 , wherein the one or more processors further execute the instructions to send an indication that the vehicle is disabled, wherein the computing system refrains from verifying the signed token when the vehicle is disabled.
18. The vehicle of claim 12 , wherein the one or more processors further execute the instructions to receive, from the computing system, an indication of an itinerary including an occurring time period within which the itinerary is to occur.
19. The vehicle of claim 18 , wherein the one or more processors further execute the instructions to:
determine a current time is outside the occurring time period; and
responsive to determining the current time is outside the occurring time period, refrain from authorizing use of the function of the vehicle.
20. A non-transitory computer-readable storage medium comprising instructions, that when executed by one or more processors of a computing system, cause the one or more processors to:
receive, from a computing system, a service identifier associated with a function of a vehicle, wherein the vehicle stores one or more device identifiers for each digital key device in communication with the vehicle;
after advertising the service identifier, receive, from a digital key device, a signed token associated with the service identifier, wherein the one or more device identifiers do not include a device identifier for the digital key device;
send, to the computing system, the signed token;
receive, from the computing system, an indication of whether the signed token is verified;
responsive to determining, based on the indication, that the signed token is verified, authorize use of the function of the vehicle; and
store the device identifier for the digital key device.