Granted Patent B2

US 12,556,408 · App. 18/214,803 · Granted Feb 17, 2026

Inventor: Hojin Jung (Bucheon-Si, KR)

Assignees: Hyundai Motor Company; Kia Corporation

H04L9/3263H04L9/3268

Abstract

Claims (53)

1 . A method comprising:

receiving, by a controller including a gateway installed at an on-board diagnostic connector of a vehicle and from an external device including an external diagnostic device communicatively connected to the on-board diagnostic connector to diagnose the vehicle, a certificate for authenticating the external diagnostic device;

based on a determination that wireless communication is available between the controller and a certificate validation server:

sending, by the controller and to the certificate validation server, the certificate without a certificate revocation list (CRL) for verification of validity of the certificate; and

requesting the certificate validation server to validate the certificate without the CRL; and

based on a determination that wireless communication is unavailable between the controller and the certificate validation server:

requesting, by the controller, the CRL for validation of the certificate by sending a CRL request message to the external diagnostic device;

based on the CRL request message, receiving, by the controller, the CRL from the external diagnostic device; and

verifying, based on the received CRL, the validity of the certificate.

2 . The method of claim 1 , further comprising:

receiving, from the external device, a request to provide a seed value.

3 . The method of claim 2 , further comprising:

receiving, from the certificate validation server, a validation result of the certificate; and

sending, to the external device, the validation result of the certificate and the seed value.

4 . The method of claim 3 , further comprising:

authenticating, based on the validation result of the certificate and based on the seed value, the external device.

5 . The method of claim 1 , further comprising:

verifying a signature of the certificate.

6 . The method of claim 1 , further comprising:

extracting, from the certificate, a public key associated with the external device.

7 . A method comprising:

receiving, by a controller including a gateway installed at an on-board diagnostic connector of a vehicle and from an external device including an external diagnostic device communicatively connected to the on-board diagnostic connector to diagnose the vehicle, a certificate for authenticating the external diagnostic device; and

based on a determination that a wireless communication is unavailable between the controller and a certificate validation server:

requesting, by the controller, a certificate revocation list (CRL) for validation of the certificate by sending a CRL request message to the external diagnostic device;

based on the CRL request message, receiving, by the controller and from the external diagnostic device, the CRL for verification of validity of the certificate; and

verifying, based on the received CRL, the validity of the certificate.

8 . The method of claim 7 , further comprising:

receiving, from the external device, a request to provide a seed value.

9 . The method of claim 7 , further comprising:

verifying a signature of the certificate.

10 . The method of claim 7 , further comprising:

receiving a request for a seed value.

11 . The method of claim 7 , further comprising:

extracting, from the certificate, a public key associated with the external device.

12 . A vehicle comprising:

a controller including a gateway installed at an on-board diagnostic connector communicatively connected to an external device including an external diagnostic device communicatively connected to the on-board diagnostic connector to diagnose the vehicle, wherein the controller comprises:

one or more processors; and

memory storing instructions that, when executed by the one or more processors, cause the vehicle to:

receive, from the external diagnostic device, a certificate for authenticating the external diagnostic device;

based on a determination that wireless communication is available between the controller and a certificate validation server:

send, to the certificate validation server, the certificate without a certificate revocation list (CRL) for verification of validity of the certificate; and

request the certificate validation server to validate the certificate without the CRL; and

based on a determination that the wireless communication is unavailable between the controller and the certificate validation server:

request, by the controller, the CRL for validation of the certificate by sending a CRL request message to the external diagnostic device;

based on the CRL request message, receive, from the external diagnostic device, the CRL; and

verify, based on the received CRL, the validity of the certificate.

13 . The vehicle of claim 12 , wherein the instructions, when executed by the one or more processors, further cause the vehicle to:

receive, from the external device, a request to provide a seed value.

14 . The vehicle of claim 13 , wherein the instructions, when executed by the one or more processors, further cause the vehicle to:

receive, from the certificate validation server, a validation result of the certificate; and

send, to the external device, the validation result of the certificate and the seed value.

15 . The vehicle of claim 14 , wherein the instructions, when executed by the one or more processors, further cause the vehicle to:

authenticate, based on the validation result of the certificate and based on the seed value, the external device.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (9)