In-vehicle information communication system and authentication method

• US 10,708,062 B2
• Filed: 03/14/2016
• Issued: 07/07/2020
• Est. Priority Date: 06/29/2015
• Status: Active Grant

• Current Assignee: Clarion Co., Ltd. (Faurecia SA)
• Original Assignee: Clarion Co., Ltd. (Faurecia SA)
• Inventors: Hakuta, Keisuke, Morita, Nobuyoshi, Ando, Eriko, Owada, Toru, Kayashima, Makoto
• Primary Examiner(s): Abedin, Shanto
• Application Number:
  US15/737,845
• Publication Number:
  US 20190007215A1
• Time in Patent Office: 1,576 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 7/588 Random number generators, i.e. based on natural stochastic processes
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/48 for in-vehicle communication

Abstract

An in-vehicle information communication system is configured from an in-vehicle communication device, an electronic control device that is installed in a vehicle, and an information processing device that is not installed in a vehicle. The electronic control device comprises an electronic control device storage unit, a message generation unit, a MAC generation unit, and an electronic control device communication unit which sends the message and the MAC to the information processing device via the in-vehicle communication device. The information processing device comprises an information processing device storage unit, a message authentication code verification unit, a response code generation unit, and an information processing device communication unit which sends the response code to the electronic control device via the in-vehicle communication device. The electronic control device further comprises a response code verification unit.

Claims

1. An information communication system configured from an in-vehicle communication device and an electronic control device which are installed in a vehicle, and an information processing device which is not installed in a vehicle,

wherein the electronic control device comprises:

an electronic control device storage unit which stores a common key that is shared with the information processing device in advance;

a message generation unit which generates a message for use in authentication;

a message authentication code generation unit which uses the common key and generates a message authentication code related to the message; and

an electronic control device communication unit which sends the message generated by the message generation unit and the message authentication code generated by the message authentication code generation unit to the information processing device via the in-vehicle communication device,

wherein the information processing device comprises;

an information processing device storage unit which stores the common key;

a message authentication code verification unit which performs authentication of the electronic control device by verifying the received message authentication code using the common key and the received message;

a response code generation unit which generates a response code by encrypting a value based on the received message via symmetric key encryption with the common key; and

an information processing device communication unit which, when the verification by the message authentication code verification unit is successful, sends the response code generated by the response code generation unit to the electronic control device via the in-vehicle communication device, and

wherein the electronic control device further comprises;

a response code verification unit which performs authentication of the information processing by verifying the received response code based on the common key.

2. The information communication system according to claim 1,

wherein the in-vehicle communication device comprises:

an in-vehicle communication device storage unit which stores a first public key as a public key in public key encryption and a second secret key as a secret key in public key encryption;

a first signature generation unit which uses the second secret key and generates a first signature as an electronic signature of the message received from the electronic control device; and

an in-vehicle communication device communication unit which sends the message received from the electronic control device, the message authentication code received from the electronic control device, and the first signature generated by the first signature generation unit to the information processing device,

wherein the information processing device storage unit of the information processing device further stores a first secret key which forms a pair with the first public key and a second public key which forms a pair with the second secret key,

wherein the information processing device further comprises;

a first signature verification unit which performs authentication of the in-vehicle communication device by verifying the received first signature using the second public key and the received message;

a first random number generation unit which generates a first random number;

an encryption unit which generates an encrypted random number by encrypting the first random number generated by the first random number generation unit with the second public key; and

a second signature generation unit which uses the first secret key and generates a second signature as an electronic signature of the response code generated by the response code generation unit,

wherein the response code generation unit generates the response code based on the received message, the common key, and the first random number,

wherein information processing device communication unit sends the second signature to the in-vehicle communication device,

wherein the in-vehicle communication device further comprises;

a second signature verification unit which performs authentication of the information processing device by verifying the received second signature using the first public key and the response code received from the information processing device; and

a decryption unit which uses the second secret key and decrypts the received encrypted random number into decrypted data, and

wherein the in-vehicle communication device communication unit sends the response code received from the information processing device and the decrypted data to the electronic control device, and

wherein the response code verification unit of the electronic control device verifies the received response code based on the common key and the decrypted data.

3. The information communication system according to claim 1,

wherein the message generation unit of the electronic control device generates the message when an ignition switch of the vehicle, in which the electronic control device is installed, is turned ON,

wherein the message authentication code generation unit generates the message authentication code when the message generation unit generates the message, and

wherein, when the message authentication code generation unit generates the message authentication code, the electronic control device communication unit sends the message generated by the message generation unit and the message authentication code generated by the message authentication code generation unit.

4. The information communication system according to claim 1,

wherein the electronic control device further comprises a second random number generation unit which generates a second random number,

wherein the electronic control device storage unit further stores first secret information and second secret information, and

wherein the message generation unit generates encrypted data by encrypting the first secret information with the second secret information, and generates the message by performing a bit operation of the encrypted data and the second random number generated by the second random number generation unit.