System and method for performing an asymmetric key exchange between a vehicle and a remote device
Methods and apparatus are provided for performing an asymmetric key exchange between a vehicle and a first remote device. The method comprises storing predetermined cryptographic information on the vehicle, generating a first public key and a first private key that correspond to the vehicle, storing the first private key on the vehicle, and providing the first public key and descriptive data associated with the vehicle to a trusted entity, wherein the trusted entity is configured to store the first public key and the descriptive data in a location that is accessible to the first remote device.
1. A method comprising:
electronically receiving a first digital certificate from a certificate authority by a second remote device, the first digital certificate comprising a first public key that corresponds to a first private key that is stored on the certificate authority;
storing the first public key and the first private key in a same memory device in a vehicle; and
electronically receiving a second public key, a digital signature of the second public key, and a second digital certificate from the vehicle, wherein:
the second public key corresponds to a second private key stored on the same memory device in the vehicle;
the digital signature of the second public key is generated by a first remote device, different from the second remote device and different from the certificate authority, using a third private key; and
the second digital certificate being previously generated by the certificate authority and includes a third public key and a digital signature of the third public key, wherein the third public key corresponds to the third private key and the digital signature of the third public key is generated by the certificate authority using the first private key.
2. The method of claim 1 , further comprising:
authenticating the second digital certificate using the first public key from the first digital certificate; and
authenticating the digital signature of the second public key using the third public key from the second digital certificate, when the second digital certificate is authenticated.
3. The method of claim 2 further comprising:
storing the second public key when the digital signature of the second public key is authenticated.
4. The method of claim 3 , further comprising:
transmitting a third digital certificate comprising a fourth public key and a digital signature of the fourth public key to the vehicle, wherein the fourth public key corresponds to a fourth private key and the digital signature of the fourth public key is generated by the certificate authority using the first private key.