Vehicle wireless internet security

• US 10,075,421 B2
• Filed: 11/10/2017
• Issued: 09/11/2018
• Est. Priority Date: 07/22/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Reece, Stuart J., Shaw, Matthew S.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Kaplan, Benjamin
• Application Number:
  US15/809,018
• Publication Number:
  US 20180091488A1
• Time in Patent Office: 305 Days
• Field of Search: 713171
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/40 Security arrangements using identity modules
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/027 using movement velocity, acceleration information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

Methods, systems, and computer program products for vehicle wireless internet security are provided. A connection request is received from a mobile device. A data request is transmitted to the mobile device. The data request includes a request for location-based data of the mobile device. A first data is received from the mobile device that corresponds to the data request. A vehicle data is generated that comprises location-based data of the vehicle. A match between the first data and the vehicle data is determined. A match is determined where the location based data of the mobile device is with a pre-determined threshold of the location-based data of the vehicle.

Claims

1. A method comprising:

receiving, by one or more processors, a connection request from a mobile device;

transmitting, by one or more processors, a data request to the mobile device, wherein;

the data request comprises a request for location-based data of the mobile device; and

the location-based data of the mobile device includes historical velocity data of the mobile device;

receiving, by one or more processors, a first data from the mobile device, wherein the first data corresponds to the data request;

generating, by one or more processors, a vehicle data, wherein;

the vehicle data comprises location-based data of the vehicle;

the location-based data of the vehicle includes historical velocity data of the vehicle; and

each historical velocity data includes a plurality of locations and corresponding timestamps; and

determining, by one or more processors, whether the first data matches the vehicle data, wherein a match is determined where the location-based data of the mobile device is within a pre-determined threshold of the location-based data of the vehicle.

2. The method of claim 1, further comprising:

in response to determining that the vehicle data does not match the first data, prompting, by one or more processors, the mobile device for a security key;

receiving, by one or more processors, a first security key from the mobile device; and

determining, by one or more processors, whether the first security key matches an expected response.

3. The method of claim 2, further comprising:

in response to determining that the first security key matches the expected response, allowing, by one or more processors, the mobile device to connect to a network.

4. The method of claim 2, further comprising:

in response to determining that the first security key does not match the expected response, blocking, by one or more processors, access of the mobile device to a network.

5. The method of claim 1, further comprising:

re-authenticating, by one or more processors, the mobile device, by;

transmitting, by one or more processors, a second data request from the mobile device, wherein the second data request comprises a request for an updated velocity of the mobile device;

receiving, by one or more processors, a second data from the mobile device, wherein the second data corresponds to the second data request;

re-generating, by one or more processors, the vehicle data, including generating an updated velocity of the vehicle; and

determining, by one or more processors, whether the second data matches the vehicle data based, at least in part, on the updated velocity of the mobile device and updated velocity of the vehicle.

6. The method of claim 5, wherein re-authenticating the mobile device is in response to determining that an acceleration of the vehicle is not equal to zero.

7. A computer program product, the computer program product comprising:

a computer readable storage medium and program instructions stored on the computer readable storage medium, the program instructions comprising;

program instructions to receive a connection request from a mobile device;

program instructions to transmit a data request to the mobile device, wherein;

the data request comprises a request for location-based data of the mobile device; and

the location-based data of the mobile device includes historical velocity data of the mobile device;

program instructions to receive a first data from the mobile device, wherein the first data corresponds to the data request;

program instructions to generate a vehicle data, wherein;

the vehicle data comprises location-based data of the vehicle;

the location-based data of the vehicle includes historical velocity data of the vehicle; and

each historical velocity data includes a plurality of locations and corresponding timestamps; and

program instructions to determine whether the first data matches the vehicle data, wherein a match is determined where the location-based data of the mobile device is within a pre-determined threshold of the location-based data of the vehicle.

8. The computer program product of claim 7, further comprising;

in response to determining that the vehicle data does not match the first data, program instructions to prompt the mobile device for a security key;

program instructions to receive a first security key from the mobile device; and

program instructions to determine whether the first security key matches an expected response.

9. The computer program product of claim 8, further comprising:

in response to determining that the first security key matches the expected response, program instructions to allow the mobile device to connect to a network.

10. The computer program product of claim 7, further comprising:

program instructions to re-authenticate the mobile device, by;

program instructions to transmit a second data request from the mobile device, wherein the second data request comprises a request for an updated velocity of the mobile device;

program instructions to receive a second data from the mobile device, wherein the second data corresponds to the second data request;

program instructions to re-generate the vehicle data, including generating an updated velocity of the vehicle; and

program instructions to determine whether the second data matches the vehicle data based, at least in part, on the updated velocity of the mobile device and updated velocity of the vehicle.

11. The computer program product of claim 10, wherein re-authenticating the mobile device is in response to determining that an acceleration of the vehicle is not equal to zero.

12. A computer system, the computer system comprising:

one or more computer processors;

one or more computer readable storage media;

program instructions stored on the computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising;

program instructions to receive a connection request from a mobile device;

program instructions to transmit a data request to the mobile device, wherein;

the data request comprises a request for location-based data of the mobile device; and

the location-based data of the mobile device includes historical velocity data of the mobile device;

program instructions to receive a first data from the mobile device, wherein the first data corresponds to the data request;

program instructions to generate a vehicle data, wherein;

the vehicle data comprises location-based data of the vehicle;

the location-based data of the vehicle includes historical velocity data of the vehicle; and

each historical velocity data includes a plurality of locations and corresponding timestamps; and

program instructions to determine whether the first data matches the vehicle data, wherein a match is determined where the location-based data of the mobile device is within a pre-determined threshold of the location-based data of the vehicle.

13. The computer system of claim 12, further comprising;

in response to determining that the vehicle data does not match the first data, program instructions to prompt the mobile device for a security key;

program instructions to receive a first security key from the mobile device; and

program instructions to determine whether the first security key matches an expected response.

14. The computer system of claim 13, further comprising:

in response to determining that the first security key matches the expected response, program instructions to allow the mobile device to connect to a network.

15. The computer system of claim 12, further comprising:

program instructions to re-authenticate the mobile device, by;

program instructions to transmit a second data request from the mobile device, wherein the second data request comprises a request for an updated velocity of the mobile device;

program instructions to receive a second data from the mobile device, wherein the second data corresponds to the second data request;

program instructions to re-generate the vehicle data, including generating an updated velocity of the vehicle; and

program instructions to determine whether the second data matches the vehicle data based, at least in part, on the updated velocity of the mobile device and updated velocity of the vehicle.

16. The computer system of claim 15, wherein re-authenticating the mobile device is in response to determining that an acceleration of the vehicle is not equal to zero.