Secure connection systems and methods for vehicles
A communication system of a vehicle includes a mode determination module and a connection control module. The mode determination module sets a mode of operation to one of a first mode and a second mode based on a comparison of a common name (CN) of a root certificate with first and second predetermined CNs associated with operation in the first and second modes, respectively. The connection control module selectively transmits a request to one of a first server and a second server to establish a secure wireless connection between the connection control module and the one of the first and second servers. The first and second servers are different, and the first and second predetermined CNs are different.
1. A communication system of a vehicle, comprising:
a mode determination module that sets a mode of operation to one of a vehicle production mode and a vehicle development mode based on a comparison of a common name (CN) of a root certificate with first and second predetermined CNs associated with operation in the vehicle production and vehicle development modes, respectively, wherein the CN is set to the vehicle development mode during vehicle development and set to the vehicle production mode when the vehicle is ready for public use; and
a connection control module that selectively transmits a request to one of a first server and a second server to establish a secure wireless connection between the connection control module and the one of the first and second servers,
wherein the first and second servers are different, and
wherein the first and second predetermined CNs are different.
2. The communication system of claim 1 wherein the connection control module selects one of a first set and a second set of predetermined subject and issuer CNs based on the mode of operation, wirelessly receives a server certificate from the one of the first and second servers, and compares a subject CN and an issuer CN of the server certificate with the one of the first and second sets of predetermined subject and issuer CNs, and
wherein the first and second sets of issuer CNs are different.
3. The communication system of claim 2 wherein the first and second sets of predetermined subject and issuer CNs are stored in a non-modifiable portion of memory of the vehicle.
4. The communication system of claim 2 wherein the first and second sets of predetermined subject and issuer CNs are stored in a portion of memory of the vehicle that is modifiable via wired connection to an input/output (I/O) interface of the vehicle.
5. The communication system of claim 2 wherein the connection control module discontinues the establishment of the secure wireless connection between the connection control module and the one of the first and second servers when the subject CN of the server certificate is different than the subject CN of the one of the first and second sets of predetermined subject and issuer CNs.
6. The communication system of claim 2 wherein the connection control module discontinues the establishment of the secure wireless connection between the connection control module and the one of the first and second servers when the issuer CN of the server certificate is different than the issuer CN of the one of the first and second sets of predetermined subject and issuer CNs.
7. The communication system of claim 2 wherein the connection control module continues with the establishment of the secure wireless connection between the connection control module and the one of the first and second servers when the subject and issuer CNs of the server certificate are the same as the subject and issuer CNs of the one of the first and second sets of predetermined subject and issuer CNs.
8. The communication system of claim 1 wherein the connection control module transmits the request to establish the secure wireless connection using a transport layer security (TLS) protocol.
9. The communication system of claim 8 wherein the connection control module transmits the request to establish the secure wireless connection using version 3 of the TLS protocol and an X.509 standard.
10. The communication system of claim 1 wherein the connection control module transmits the request to establish the secure wireless connection using a secure sockets layer (SSL) protocol.
11. A communication method for a vehicle, comprising:
setting a mode of operation to one of a vehicle production mode and a vehicle development mode based on a comparison of a common name (CN) of a root certificate with first and second predetermined CNs associated with operation in the vehicle production and vehicle development modes, respectively, wherein the CN is set to the vehicle development mode during vehicle development and is set to the vehicle production mode when the vehicle is ready for public use; and
selectively transmitting a request to one of a first server and a second server to establish a secure wireless connection between a connection control module of the vehicle and the one of the first and second servers,
wherein the first and second servers are different, and
wherein the first and second predetermined CNs are different.
12. The communication method of claim 11 further comprising:
selecting one of a first set and a second set of predetermined subject and issuer CNs based on the mode of operation;
wirelessly receiving a server certificate from the one of the first and second servers; and
comparing a subject CN and an issuer CN of the server certificate with the one of the first and second sets of predetermined subject and issuer CNs,
wherein the first and second sets of issuer CNs are different.
13. The communication method of claim 12 wherein the first and second sets of predetermined subject and issuer CNs are stored in a non-modifiable portion of memory of the vehicle.
14. The communication method of claim 12 wherein the first and second sets of predetermined subject and issuer CNs are stored in a portion of memory of the vehicle that is modifiable via wired connection to an input/output (I/O) interface of the vehicle.
15. The communication method of claim 12 further comprising discontinuing the establishment of the secure wireless connection between the connection control module and the one of the first and second servers when the subject CN of the server certificate is different than the subject CN of the one of the first and second sets of predetermined subject and issuer CNs.
16. The communication method of claim 12 further comprising discontinuing the establishment of the secure wireless connection between the connection control module and the one of the first and second servers when the issuer CN of the server certificate is different than the issuer CN of the one of the first and second sets of predetermined subject and issuer CNs.
17. The communication method of claim 12 further comprising continuing with the establishment of the secure wireless connection between the connection control module and the one of the first and second servers when the subject and issuer CNs of the server certificate are the same as the subject and issuer CNs of the one of the first and second sets of predetermined subject and issuer CNs.
18. The communication method of claim 11 further comprising transmitting the request to establish the secure wireless connection using a transport layer security (TLS) protocol.
19. The communication method of claim 18 further comprising transmitting the request to establish the secure wireless connection using version 3 of the TLS protocol and an X.509 standard.
20. The communication method of claim 11 further comprising transmitting the request to establish the secure wireless connection using a secure sockets layer (SSL) protocol.