Systems and methods for a secure subscription based vehicle data service

• US 10,715,511 B2
• Filed: 05/03/2018
• Issued: 07/14/2020
• Est. Priority Date: 05/03/2018
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Olive, Michael L., He, Xiaozhong, Pothula, Phani Ammi Raju
• Primary Examiner(s): Patel, Haresh N
• Application Number:
  US15/970,521
• Publication Number:
  US 20190342274A1
• Time in Patent Office: 803 Days
• Field of Search: 713150
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]

Abstract

Secure subscription based vehicle data services are provided. In one embodiment, a device comprises: a non-volatile memory comprising an embedded public key (EPK) that comprises a public key of a public-private key pair associated with a data service system not onboard the vehicle; a protocol that initiates a communication session that includes a session validation sequence that causes a processor to transmit a session request message and validate an authenticity of a session reply request using the EPK; the protocol includes a session initiation sequence that causes the processor to: transmit an initiation request message to the data service system that includes a key derivation key, and apply the key derivation key to a key derivation function to generate a message authentication key. The processor authenticates uplink messages exchanged with a host data service using the message authentication key.

Claims

1. A vehicle communication manager device located onboard a vehicle, the device comprising:

a memory comprising a non-volatile memory device storing a fixed embedded public key, wherein the embedded public key is a public key of a public-private key pair associated with a data service system not onboard the vehicle;

a processor in communication with a wireless datalink transceiver;

a vehicle data service protocol executed by the processor, wherein the vehicle data service protocol initiates a communication session for data service exchanges with the data service system via the wireless datalink transceiver;

wherein the vehicle data service protocol includes a session validation sequence that causes the processor to;

transmit a session request message to the data service system; and

validate an authenticity of a session reply request message received from the data service system using the embedded public key, wherein the session reply message includes a public operational authentication key, a public operational encryption key, and is signed with a subscriber validation private key associated with the embedded public key;

wherein the vehicle data service protocol includes a session initiation sequence that causes the processor to;

transmit an initiation request message to the data service system, the session request message including a key derivation key generated onboard the vehicle, wherein the key derivation key in the initiation request message is encrypted using the public operational encryption key;

validate an authenticity of an initiation response message received from the data service system using the public operational authentication key; and

in response to affirmatively validating the initiation response message, apply the key derivation key to a key derivation function to generate a message authentication key;

wherein the processor authenticates data service uplink messages received from received from the host data service during the communication session using the message authentication key.

2. The device of claim 1, wherein the processor protects data service downlink messages sent to a host data service of the data service system during the communication session using the message authentication key.

3. The device of claim 1, wherein the session request message includes a protocol identifier (ID) that identifies the embedded public key stored in the memory.

4. The device of claim 1, wherein the session reply message further includes an indication of one or more optional services available to the vehicle communication manager.

5. The device of claim 1, wherein the data service system generates a replica of the message authentication key and the data service uplink messages are protected using the replica of the message authentication key.

6. The device of claim 1, wherein the data service system comprises a subscription validation service and the host data service, wherein the vehicle communication manager communicates with the subscription validation service during the session validation sequence, and wherein the vehicle communication manager communicates with the host data service during the session initiation sequence.

7. The device of claim 6, wherein the session validation sequence is accessible through a first network address and the host data service is accessible through a second network address, wherein the second network address is communicated to the vehicle communication manager by the session reply message.

8. The device of claim 7, wherein the wireless datalink transceiver is configured to communicatively couple the processor to a network, wherein the subscription validation service and the host data service are communicatively coupled to the network.

9. The device of claim 1, wherein the vehicle is an aircraft comprising either a communication management unit or a communication management function that executes the vehicle data service protocol.