Anti-spoofing protection in an automotive environment

• US 10,027,706 B2
• Filed: 08/19/2016
• Issued: 07/17/2018
• Est. Priority Date: 02/13/2014
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Foster, Andrew, Pelly, Nicholas Julian, Wang, Zheng
• Primary Examiner(s): Karikari, Kwasi
• Application Number:
  US15/242,121
• Publication Number:
  US 20160373999A1
• Time in Patent Office: 697 Days
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers
• CPC Class Codes: H04W 76/16 Involving different core network technologies, e.g. a packet-switched [PS] bearer in combination with a circuit-switched [CS] bearer

Abstract

To automatically identify an attempt at presenting falsified vehicle identifiers to portable devices, (i) a vehicle identifier reported by a vehicle with which the portable device is establishing a short-range communication link, and (ii) an indication of a current location of the portable device, are received from a portable device at a first time. An indication of a recent location at which the vehicle identifier was reported at a second time is obtained. The current location of the portable device is compared to the recent location of the vehicle, in view of the first time and the second time. In response to determining that the current location is not proximate to the recent reported location of the vehicle, an indication that the reported identifier is likely falsified is generated.

Claims

1. A vehicle connection verification system comprising:

a communication interface; and

processing hardware coupled to the communication interface, the processing hardware configured to;

receive, at a first time, an indication of a successfully established short-range communication link between a first portable device and a first vehicle presenting a vehicle identifier, at a first geographic location,

store the vehicle identifier, an indication of the first geographic location, and an indication of the first time in a database,

receive, at a second time subsequent to the first time, an indication that the first portable device or a second portable device is attempting to establish a short-range communication link with the first or a second vehicle presenting the vehicle identifier, at a second geographic location, and

determine whether the vehicle identifier presented at the second time is likely falsified in view of (i) a distance between the first geographic location and the second geographic location and (ii) a difference between the first time and the second time.

2. The vehicle connection verification system of claim 1, wherein the processing hardware is further configured to:

in response to determining that the vehicle identifier presented at the second time is likely falsified, prevent the short-range communication link from being established.

3. The vehicle connection verification system of claim 1, wherein the processing hardware is further configured to:

in response to determining that the vehicle identifier presented at the second time is likely falsified, transmit a request for additional verification data to the first portable device or the second portable device.

4. The vehicle connection verification system of claim 3, wherein the processing hardware is configured to:

transmit a plurality of photographs including a photograph of at least a portion of the vehicle corresponding to the vehicle identifier, and

request, from the first portable device or the second portable device, a selection of the photograph of at least the portion of the vehicle corresponding to the vehicle identifier.

5. The vehicle connection verification system of claim 1, wherein the vehicle identifier corresponds to a MAC address of a USB port on a head unit of the vehicle.

6. The vehicle connection verification system of claim 1, wherein the processing hardware is further configured to determine an average speed of travel of the vehicle using the first time and the second time.

7. The vehicle connection verification system of claim 6, wherein to determine the average speed of travel, the processing hardware is further configured to determine availability of a driving route between the first geographic location and the second geographic location.

8. A computer-implemented method for vehicle connection verification, the method comprising:

receiving, at a first time, an indication of a successfully established short-range communication link between a first portable device and a first vehicle presenting a vehicle identifier, at a first geographic location,

storing the vehicle identifier, an indication of the first geographic location, and an indication of the first time in a database,

receiving, at a second time subsequent to the first time, an indication that the first portable device or a second portable device is attempting to establish a short-range communication link with the first or a second vehicle presenting the vehicle identifier, at a second geographic location, and

determining, via one or more processors, whether the vehicle identifier presented at the second time is likely falsified in view of (i) a distance between the first geographic location and the second geographic location and (ii) a difference between the first time and the second time.

9. The computer-implemented method of claim 8, further comprising:

in response to determining that the vehicle identifier presented at the second time is likely falsified, preventing the short-range communication link from being established.

10. The computer-implemented method of claim 8, further comprising:

in response to determining that the vehicle identifier presented at the second time is likely falsified, transmitting a request for additional verification data to the first portable device or the second portable device.

11. The computer-implemented method of claim 10, further comprising:

transmitting a plurality of photographs including a photograph of at least a portion of the vehicle corresponding to the vehicle identifier, and

requesting, from the first portable device or the second portable device, a selection of the photograph of at least the portion of the vehicle corresponding to the vehicle identifier.

12. The computer-implemented method of claim 8, wherein the vehicle identifier corresponds to a MAC address of a USB port on a head unit of the vehicle.

13. A non-transitory tangible computer-readable storage medium having executable computer code stored thereon for vehicle connection verification, the code comprising a set of instructions that causes one or more processors to perform the following:

receive, at a first time, an indication of a successfully established short-range communication link between a first portable device and a first vehicle presenting a vehicle identifier, at a first geographic location,

store the vehicle identifier, an indication of the first geographic location, and an indication of the first time in a database,

receive, at a second time subsequent to the first time, an indication that the first portable device or a second portable device is attempting to establish a short-range communication link with the first or a second vehicle presenting the vehicle identifier, at a second geographic location, and

determine whether the vehicle identifier presented at the second time is likely falsified in view of (i) a distance between the first geographic location and the second geographic location and (ii) a difference between the first time and the second time.

14. The non-transitory tangible computer-readable storage medium of claim 13, wherein the set of instructions further causes one or more processors to:

in response to determining that the vehicle identifier presented at the second time is likely falsified, prevent the short-range communication link from being established.

15. The non-transitory tangible computer-readable storage medium of claim 13, wherein the set of instructions further causes one or more processors to:

in response to determining that the vehicle identifier presented at the second time is likely falsified, transmit a request for additional verification data to the first portable device or the second portable device.

16. The non-transitory tangible computer-readable storage medium of claim 15, wherein the set of instructions further causes one or more processors to:

transmit a plurality of photographs including a photograph of at least a portion of the vehicle corresponding to the vehicle identifier, and

request, from the first portable device or the second portable device, a selection of the photograph of at least the portion of the vehicle corresponding to the vehicle identifier.

17. The non-transitory tangible computer-readable storage medium of claim 13, wherein the vehicle identifier corresponds to a MAC address of a USB port on a head unit of the vehicle.