Method and system for securely authenticating an electronic user device to a vehicle

• US 10,013,828 B2
• Filed: 09/20/2016
• Issued: 07/03/2018
• Est. Priority Date: 05/22/2015
• Status: Active Grant

• Current Assignee: M2MD Technologies, Inc.
• Original Assignee: M2MD Technologies, Inc.
• Inventors: Link, II, Charles M.
• Primary Examiner(s): To, Baotran N
• Application Number:
  US15/270,895
• Publication Number:
  US 20170011572A1
• Time in Patent Office: 651 Days
• Field of Search: 726 9
• CPC Class Codes: B60R 2325/205 Mobile phones
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G07C 2009/00198 the keyless data carrier having more than one limited data transmission ranges
• CPC Class Codes: G07C 9/00182 operated with unidirectional data transmission between data carrier and locks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A vehicle processing device authenticates that an authorized user has requested an action by the vehicle, and generates an authentication acknowledgement message. At least two security devices being present within the cabin of, or close to, the vehicle during a predetermined period following an authentication trigger event that occurs while the user performs a predetermined sequence of authentication activities (i.e., button presses, operating the vehicle or a part of it, etc.) provides a basis for the authentication acknowledgement message. Typically, information unique to each security device has been associated with the vehicle at a service provider'"'"'s server. The authentication acknowledgement may include an activation code that results from processing the information, unique to each security device, received from the security devices and other random information, such as date. A service provider'"'"'s server, or a user device, provides services to, or can access, respectively, the vehicle upon receiving the authentication acknowledgement.

Claims

1. A system, comprising:

a vehicle processing device coupled to a communication bus of a vehicle;

a first security device that includes first unique information that is uniquely associated with the vehicle;

a second security device that includes second unique information that is uniquely associated with the vehicle;

wherein the vehicle processing device of the vehicle is to;

receive a request signal that includes a request to associate a user device with the vehicle;

receive a first security signal containing the first unique information from the first security device;

receive a second security signal containing the second unique information from the second security device;

determine that the first security signal was transmitted within a first predetermined range of the vehicle during a first predetermined authentication period that begins after a first authentication trigger event;

determine that the second security signal was transmitted within a second predetermined range of the vehicle during a second predetermined authentication period that begins after a second authentication trigger event; and

associate the user device with the vehicle when a determination is made that the first unique information was transmitted in the first security signal within the first predetermined range of the vehicle during the first predetermined authentication period, and that the second security unique information was transmitted in the second security signal within the second predetermined range of the vehicle during the second predetermined authentication period.

2. The system of claim 1 wherein the vehicle processing device coupled to a communication bus of a vehicle is an infotainment head unit and wherein the communication bus is one of:

a controller area network, Local Interconnect Network, Media Oriented Systems Transport, I2C, SPI, FlexRay, SAE-J1850, or APC.

3. The system of claim 1 wherein the first and second security devices are wireless devices uniquely associated with the vehicle, and wherein the unique association enables operation of the vehicle when either of the first or second security devices are within the first and second predetermined ranges, respectively, of the vehicle.

4. The system of claim 1 wherein the associating of the user device with the vehicle includes providing an activation code.

5. The system of claim 1 wherein the request to associate the user device with the vehicle is for purposes of accessing, controlling, or making a payment in connection with, the vehicle.

6. The system of claim 5 wherein the purposes of accessing, controlling, or making a payment in connection with, the vehicle include at least one of:

remote-door unlocking, vehicle-trip reporting, providing of vehicle location, providing of battery-charge status, performing vehicle remote-start, performing climate pre-conditioning, providing of fuel status, or downloading of point-of-interest information.

7. The system of claim 6 wherein the user device causes the vehicle processing device coupled to the communication bus of the vehicle to transmit an acknowledgement to a central activation computer server equipment component that the user device has been associated with the vehicle.

8. The system of claim 1 wherein the first predetermined authentication period and the second predetermined authentication period are the same.

9. The system of claim 1 wherein the first predetermined range and the second predetermined range are the same.

10. The system of claim 1 wherein the first trigger event and the second trigger event are the same event.

11. The system of claim 1 wherein the request to associate the user device with the vehicle was received from the user device.

12. The system of claim 1 wherein the request to associate the user device with the vehicle is received wirelessly.

13. The system of claim 1 wherein the first unique information and the second unique information are received wirelessly from the first and second security devices, respectively.

14. A method, comprising:

receiving with a vehicle processing device coupled to a communication bus of a vehicle a request to associate a user device with the vehicle;

receiving first unique information obtained from a first security device that is uniquely associated with the vehicle;

receiving second unique information obtained from a second security device that is uniquely associated with the vehicle;

determining that the first unique information associated with the first security device was transmitted within a first predetermined range of the vehicle during a first predetermined authentication period that begins after a first authentication trigger event;

determining that the second unique information associated with the second security device was transmitted within a second predetermined range of the vehicle during a second predetermined authentication period that begins after a second authentication trigger event;

associating the user device with the vehicle when a determination is made that the first unique information was transmitted within the first predetermined range of the vehicle during the first predetermined authentication period, and that the second unique information was transmitted within the second predetermined range of the vehicle during the second predetermined authentication period.

15. The method of claim 14 wherein the vehicle processing device coupled to a communication bus of a vehicle is an infotainment head unit and wherein the communication bus is a controller area network.

16. The method of claim 14 wherein the first and second security devices are wireless devices each uniquely associated with the vehicle, and wherein the unique associations enable operation of the vehicle when either of the first or second security devices are within the first and second predetermined ranges, respectively, of the vehicle.

17. A method for associating a user device with a vehicle, comprising:

receiving, with a vehicle processing device coupled to a communication bus of the vehicle, a request to associate the user device with the vehicle;

receiving, with the vehicle processing device coupled to the communication bus of the vehicle, first unique information transmitted from a first security device that is uniquely associated with the vehicle;

receiving, with the vehicle processing device coupled to the communication bus of the vehicle, second unique information transmitted from a second security device that is uniquely associated with the vehicle;

determining, with the vehicle processing device coupled to the communication bus of the vehicle, that the first unique information associated with the first security device was transmitted within a first predetermined range of the vehicle during a first predetermined authentication period that begins after a first authentication trigger event;

determining, with the vehicle processing device coupled to the communication bus of the vehicle, that the second unique information associated with the second security device was transmitted within a second predetermined range of the vehicle during a second predetermined authentication period that begins after a second authentication trigger event;

associating the user device with the vehicle when a determination is made that the first unique information was transmitted within the first predetermined range of the vehicle during the first predetermined authentication period, and that the second unique information was transmitted within the second predetermined range of the vehicle during the second predetermined authentication period.

18. The method of claim 17 wherein the vehicle processing device coupled to the communication bus of the vehicle receives the request to associate the user device with the vehicle wirelessly from the user device.

19. The method of claim 17 wherein the vehicle processing device coupled to the communication bus of the vehicle receives the first and second unique information in first and second signals transmitted wirelessly from the user device.

20. The method of claim 18 wherein the user device transmitted the request to associate the user device with the vehicle for purposes of accessing, controlling, or making a payment in connection with, the vehicle, which purposes may include at least one of:

remote-door unlocking, vehicle-trip reporting, providing of vehicle location, providing of battery-charge status, performing vehicle remote-start, performing climate pre-conditioning, providing of fuel status, or downloading of point-of-interest information.