System and method for providing vehicle information based on personal authentication and vehicle authentication

• US 10,728,222 B2
• Filed: 06/02/2017
• Issued: 07/28/2020
• Est. Priority Date: 07/21/2016
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kimn, Soungkwan, Gandigude, Amol Mahadev, Lee, Wonchang
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US15/612,235
• Publication Number:
  US 20180026949A1
• Time in Patent Office: 1,152 Days
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

An electronic device and method for providing vehicle information based on personal authentication and vehicle authentication are disclosed. According to various example embodiments, an electronic device includes a communication module comprising communication circuitry configured to communicate with a vehicle device and a first server and a processor electrically connected with the communication module, in which the processor is configured to receive an encrypted session key set including at least one session key from the first server, to transmit the encrypted session key set to the vehicle device, receive, from the vehicle device, second vehicle information in which first vehicle information of the vehicle device is encrypted using a first session key of the at least one session key and is signed using a secret key of the vehicle device, and to transmit, to the first server, third vehicle information in which the received second vehicle information is signed using a secret key of a user.

Claims

1. An electronic device comprising:

a communication circuitry configured to communicate with a vehicle device and a first server; and

a processor electrically connected with the communication circuitry,

wherein the processor is configured to;

perform authentication with respect to a user of the electronic device using biometric information of the user;

in response to the user of the electronic device being authenticated via the authentication, establish a first session with the first server;

receive, through the first session, an encrypted session key set comprising at least one session key from the first server;

transmit the encrypted session key set to the vehicle device;

in response to transmitting the encrypted session key set to the vehicle device, receive, from the vehicle device, second vehicle information in which first vehicle information of the vehicle device is encrypted using a first session key of the at least one session key and is signed using a secret key of the vehicle device, wherein the first vehicle information includes driving information of the vehicle device; and

transmit, to the first server, third vehicle information in which the received second vehicle information is signed using a secret key of the user.

2. The electronic device of claim 1, wherein the processor is further configured to receive an authentication certificate of the vehicle device from the vehicle device, to transmit an authentication certificate of the electronic device to the vehicle device, and to verify the received authentication certificate of the vehicle device using a public key of a second server.

3. The electronic device of claim 2, wherein the processor is further configured to generate a public key and a secret key for issuing an authentication certificate, to transmit the generated public key to the second server, and to receive, together with the public key of the second server, the authentication certificate of the electronic device signed using a secret key of the second server, from the second server.

4. The electronic device of claim 3, wherein the authentication certificate comprises at least one of:

an extension identifier (ID), a vehicle ID, an electronic device ID, a first server ID, a user ID, a service ID, user driving information, service information, a service area, and country information.

5. A vehicle device comprising:

a communication circuitry configured to communicate with an electronic device; and

a processor electrically connected with the communication circuitry,

wherein the processor is configured to;

receive an encrypted session key set comprising at least one session key from the electronic device, wherein the encrypted session key set is received after a user of the electronic device is authenticated by the electronic device based on biometric information of the user;

decrypt the encrypted session key set using a secret key of the vehicle device to obtain the session key set;

obtain first vehicle information of the vehicle device, wherein the first vehicle information includes driving information of the vehicle device;

encrypt the first vehicle information using a first session key of the at least one session key; and

transmit, to the electronic device, second vehicle information in which the encrypted first vehicle information is signed using a secret key of the vehicle device.

6. The vehicle device of claim 5, wherein the processor is further configured to receive an authentication certificate of the electronic device from the electronic device and to verify the received authentication certificate of the electronic device using a public key of a second server.

7. The vehicle device of claim 5, wherein the processor is further configured to generate a public key and a secret key for issuing an authentication certificate, to transmit the generated public key to the second server, and to receive, together with the public key of the second server, the authentication certificate of the vehicle device signed using a secret key of the second server, from the second server.

8. The vehicle device of claim 7, wherein the authentication certificate comprises at least one of:

an extension identifier (ID), a vehicle ID, an electronic device ID, a first server ID, a user ID, a service ID, user driving information, service information, a service area, and country information.

9. A first server comprising:

a communication circuitry connected to an electronic device; and

a processor electrically connected with the communication circuitry,

wherein the processor is configured to;

in response to a user of the electronic device being authenticated through authentication via biometric information of the user, establish a first session with the electronic device;

generate a session key set comprising at least one session key for a session with a vehicle device;

encrypt the generated session key set using a public key of the vehicle device;

transmit, through the first session, the encrypted session key set to the electronic device;

in response to transmitting the encrypted session key set to the electronic device, receive, from the electronic device, vehicle information encrypted using a first session key of the at least one session key by the vehicle device and signed by the vehicle device and the electronic device;

verify a signature of the vehicle device using the public key of the vehicle device and verify a signature of the electronic device using a public key of the electronic device; and

decrypt the encrypted vehicle information using the first session key to obtain the vehicle information, wherein the vehicle information includes driving information of the vehicle device.

10. A non-transitory storage medium having stored therein instructions which, when executed by at least one processor of an electronic device, cause the at least one processor to perform at least one operation comprising:

performing authentication with respect to a user of the electronic device using biometric information of the user;

in response to the user of the electronic device being authenticated via the authentication, establishing a first session with a first server;

receiving, through the first session, an encrypted session key set comprising at least one session key from the first server;

transmitting the encrypted session key set to the vehicle device;

in response to transmitting the encrypted session key set to the vehicle device, receiving, from the vehicle device, second vehicle information in which first vehicle information of the vehicle device is encrypted using a first session key of the at least one session key and is signed using a secret key of the vehicle device, wherein the first vehicle information includes driving information of the vehicle device; and

transmitting, to the first server, third vehicle information in which the received second vehicle information is signed using a secret key of the user.

11. The non-transitory computer-readable storage medium of claim 10, wherein the at least one operation further comprises:

receiving an authentication certificate of the vehicle device from the vehicle device;

transmitting an authentication certificate of the electronic device to the vehicle device; and

verifying the received authentication certificate of the vehicle device using a public key of a second server.

12. The non-transitory computer-readable storage medium of claim 11, wherein the at least one operation further comprises:

generating a public key and a secret key for issuing an authentication certificate;

transmitting the generated public key to the second server; and

receiving, together with a public key of the second server, an authentication certificate of the electronic device signed with a secret key of the second server, from the second server.

13. The non-transitory computer-readable storage medium of claim 12, wherein the authentication certificate comprises at least one of:

an extension identifier (ID), a vehicle ID, an electronic device ID, a first server ID, a user ID, a service ID, user driving information, service information, a service area, and country information.

14. A non-transitory computer-readable storage medium having stored therein instructions which, when executed by at least one processor of a vehicle device, cause the at least one processor to perform at least one operation comprising:

receiving an encrypted session key set comprising at least one session key from an electronic device, wherein the encrypted session key set is received after a user of the electronic device is authenticated by the electronic device via biometric information of the user;

decrypting the encrypted session key set using a secret key of the vehicle device to obtain the session key set;

obtaining first vehicle information of the vehicle device, wherein the first vehicle information includes driving information of the vehicle device;

encrypting the first vehicle information using a first session key of the at least one session key; and

transmitting, to the electronic device, second vehicle information in which the encrypted first vehicle information is signed using a secret key of the vehicle device.

15. The non-transitory computer-readable storage medium of claim 14, wherein the at least one operation further comprises:

receiving an authentication certificate of the electronic device from the electronic device; and

verifying the received authentication certificate of the electronic device using a public key of a second server.

16. The non-transitory computer-readable storage medium of claim 14, wherein the at least one operation further comprises:

generating a public key and a secret key for issuing an authentication certificate;

transmitting the generated public key to the second server; and

receiving, together with a public key of the second server, an authentication certificate of the vehicle device signed with a secret key of the second server, from the second server.

17. The non-transitory computer-readable storage medium of claim 16, wherein the authentication certificate comprises at least one of:

an extension identifier (ID), a vehicle ID, an electronic device ID, a first server ID, a user ID, a service ID, user driving information, service information, a service area, and country information.

18. A non-transitory computer-readable storage medium having stored therein instructions which, when executed by at least one processor of a first server, cause the at least one processor to perform at least one operation comprising:

in response to a user of an electronic device being authenticated by authentication based on biometric information of the user, establishing a first session with the electronic device;

generating a session key set comprising at least one session key for a session with a vehicle device;

encrypting the generated session key set using a public key of the vehicle device;

transmitting, through the first session, the encrypted session key set to the electronic device;

in response to transmitting the encrypted session key set to the electronic device, receiving, from the electronic device, vehicle information encrypted using a first session key of the at least one session key by the vehicle device and signed by the vehicle device and the electronic device;

verifying a signature of the vehicle device using the public key of the vehicle device and a signature of the electronic device using a public key of the electronic device; and

decrypting the encrypted vehicle information using the first session key to obtain the vehicle information, wherein the vehicle information includes driving information of the vehicle device.