Vehicle access systems and methods

• US 10,277,597 B2
• Filed: 03/29/2016
• Issued: 04/30/2019
• Est. Priority Date: 11/09/2015
• Status: Active Grant

• Current Assignee: Silvercar, Inc. (Volkswagen AG)
• Original Assignee: Silvercar, Inc. (Volkswagen AG)
• Inventors: Darnell, Allen, McMillan, Matt
• Primary Examiner(s): Holloway, III, Edwin C
• Application Number:
  US15/083,395
• Publication Number:
  US 20170132860A1
• Time in Patent Office: 1,127 Days
• Field of Search: 340 572
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: G06Q 50/40 Business processes related to the transportation industry shipping G06Q10/083
• CPC Class Codes: G07B 15/00 Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points handling coins or valuable papers, e.g. banknotes, G07D; apparatus for vending or hiring articles or services activated by coins, credit cards, paper currency or the like G07F7/00, G07F17/00
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 9/38 with central registration
• CPC Class Codes: H04L 12/40 Bus networks
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/084 : using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/029 : Location-based management or tracking services
• CPC Class Codes: H04W 4/40 : for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 4/44 : for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

Systems, devices, and methods for controlling access to vehicles in rental, loaner, shared-use, and other vehicle fleets. Some of the present systems, devices, and methods use encrypted virtual keys that can be relayed to a vehicle computing device via a user'"'"'s mobile device. Such virtual keys can be command-specific such that successful use of a virtual key results execution of a predetermined command or group of commands, and further commands require one or more additional virtual keys with the additional commands. Others of the present systems, devices, and methods provide tools: for provisioning or initial pairing of vehicle computing devices with corresponding vehicles, identifying and permitting a user to select locally available vehicles, prompting vehicle computing devices to retrieve pending commands from a server, and/or various other functions described in this disclosure.

Claims

1. A system comprising:

a vehicle computing device in communication with a controller area network (CAN) bus of a corresponding vehicle, the vehicle computing device comprising, a cellular modem, memory including instructions, and a processor configured to execute the instructions to;

receive a check-in prompt message from a server of a reservation management (RM) system;

in response to receiving the check-in prompt message, generate a check-in request message including an encrypted portion and an unencrypted portion, the unencrypted portion including a unique reference;

send the check-in request message to the server;

receive from the server a command message including one or more commands for the vehicle computing device;

decrypt at least a portion of the command message based on the check-in request message; and

if the command message is consistent with the unique reference in the check-in request message, execute the one or more commands.

2. The system of claim 1, where the unique reference is configured to enable decryption of the encrypted portion of the check-in request message.

3. The system of claim 1, where the check-in prompt message received by the vehicle computing device is not encrypted.

4. The system of claim 1, where the vehicle computing device is configured to not execute command messages received via the cell modem that are not sent by the server responsive to a corresponding check-in request message sent to the server by the vehicle computing device.

5. The system of claim 1, where the vehicle computing device is configured to not execute command messages received from the server that are not sent by the server responsive to a corresponding check-in request message sent to the server by the vehicle computing device.

6. The system of claim 1, further comprising:

a server comprising a portion of a reservation management (RM) system for a plurality of vehicles, the server comprising second memory and a second processor configured to execute instructions from the second memory to;

generate the command message including one or more command messages for the vehicle computing device;

generate the check-in prompt message;

transmit the check-in prompt message to the vehicle computing device;

receive from the vehicle computing device the check-in request message;

encrypt the command message using the unique reference; and

send the encrypted command message to the vehicle computing device.

7. The system of claim 1, where successful decryption the at least a portion of the command message indicates that the command message is valid.

8. The system of claim 1, wherein the processor is further configured to execute the instructions to:

determine whether one or more conditions are satisfied based on the decrypted portion of the command message and the check-in request message; and

determine that the command message is valid in response to a determination that the one or more conditions are satisfied,

wherein the command message being valid indicates the command message is consistent with the unique reference in the check-in request message.

9. The system of claim 8, wherein:

the unique reference comprises a key timestamp or a generation timestamp; and

the processor is further configured to execute the instructions to;

determine whether the key timestamp or the generation timestamp is valid; and

determine whether the one or more conditions are satisfied further based on a determination that the key timestamp or the generation timestamp is valid.

10. The system of claim 1, wherein the processor is further configured to execute the instructions to:

compare the decrypted portion of the command message and the unique reference in the check-in request message;

determine that the command message is valid in response to a determination that the decrypted portion of the command message matches the unique reference,

wherein the command message being valid indicates the command message is consistent with the unique reference in the check-in request message; and

execute the one or more commands based on the command message being valid.

11. A system comprising:

a server comprising a portion of a reservation management (RM) system for a plurality of vehicles, the server comprising memory and a processor configured to execute instructions from the memory to;

generate a command message for a vehicle computing device in communication with a controller area network (CAN) bus of a corresponding vehicle;

generate a check-in prompt message;

transmit the check-in prompt message to the vehicle computing device;

responsive to the check-in prompt message, receive from the vehicle computing device a check-in request message including an encrypted portion and an unencrypted portion that includes a unique reference;

encrypt the command message using the unique reference; and

send the encrypted command message to the vehicle computing device.

12. The system of claim 11, where the processor is further configured to execute instructions from the memory to:

decrypt the encrypted portion of the received check-in request message.

13. The system of claim 11, where the server is configured to transmit the check-in prompt message via a cell modem, and where the check-in prompt message is not encrypted.

14. A method comprising:

receiving a check-in prompt message at a vehicle computing device in communication with a controller area network (CAN) bus of a corresponding vehicle, the check-in prompt message sent from a server of a reservation management (RM) system;

generating, in response to receiving the check-in prompt message, a check-in request message including an encrypted portion and an unencrypted portion, the unencrypted portion including a unique reference;

sending the check-in request message to the server;

receiving from the server a command message including one or more commands for the vehicle computing device;

decrypt at least a portion of the command message based on the check-in request message; and

executing the one or more commands if the command message is consistent with the unique reference in the check-in request message.

15. The method of claim 14, where the at least a portion of the command message includes the unique reference, and the method further comprises:

accessing a key;

generating a vector based on the key and the unique reference

where decrypting the at least a portion of the command message includes decrypting the at least a portion of the command message based on the vector to generate at least a decrypted unique reference; and

compare the decrypted unique reference to the unique reference.

16. The method of claim 14, where the check-in prompt message received by the vehicle computing device is not encrypted, the check-in prompt message having a short message service (SMS) message format.

17. The method of claim 14, further comprising:

receiving a short message service (SMS) message; and

in response to receiving the SMS message, automatically sending a second check-in request message to the server.

18. The method of claim 17, where the second check-in request message includes a second unique reference different from the unique reference.

19. The method of claim 17, where the SMS message is received from the server.

20. The method of claim 17, where the SMS message is received from a device distinct from the server.

21. The method of claim 14, where the unique reference comprises a timestamp or a unique value.

22. A method comprising:

generating a command message for a vehicle computing device in communication with a controller area network (CAN) bus of a vehicle;

generating a check-in prompt message;

transmitting the check-in prompt message to the vehicle computing device;

receiving, from the vehicle computing, device a check-in request message including an encrypted portion and an unencrypted portion including a unique reference;

encrypting the command message based on the unique reference; and

sending the encrypted command message to the vehicle computing device in response to the received check-in request message.

23. The method of claim 22, where the method further comprises:

decrypting the encrypted portion of the received check-in request message based on the unique reference.

24. The method of claim 22, where the command message includes the unique reference associated with the vehicle computing device.

25. The method of claim 22, where the command message includes one or more commands configured to prohibit the vehicle from being started.

26. The method of claim 22, where the command message is generated and the check-in prompt message is transmitted in response to a trigger event.

27. The method of claim 26, further comprising:

receiving a report that the vehicle is stolen; and

identifying the report at the trigger event.

28. The method of claim 22, further comprising:

accessing a key corresponding to the vehicle; and

generating a vector based on the key and the unique reference, where the vector is used to decrypt the at least a portion of the command message.

29. The method of claim 28, where the command message is encrypted using the vector.