SYSTEM AND METHOD FOR ESTABLISHING A SECURE CONNECTION WITH A MOBILE DEVICE

• US 20100191973A1
• Filed: 01/27/2009
• Published: 07/29/2010
• Est. Priority Date: 01/27/2009
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations Incorporated (Motors Liquidation Co. GUC Trust)
• Inventors: HUNTZICKER, FRED W., ALRABADY, ANSAF I., RACKLYEFT, DAVID
• Granted Patent: US 8,499,154 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

Methods and apparatus are provided for establishing a secure connection with a mobile device that is configured to store a first private key that mathematically corresponds to a first public key. The method comprises receiving a quasi-public key from a trusted entity, wherein the quasi-public key mathematically corresponds to a quasi-private key that is stored on the mobile device, receiving a first digital certificate from the mobile device, the first digital certificate comprising the first public key and a first digital signature generated with the quasi-private key, and authenticating the first digital certificate using the first digital signature and the quasi-public key.

Claims

1. A method for establishing a secure connection with a mobile device, the mobile device configured to store a first private key that mathematically corresponds to a first public key and a quasi-private key that mathematically corresponds to a quasi-public key, the method comprising:

receiving the quasi-public key from a trusted entity;

receiving a first digital certificate from the mobile device, the first digital certificate comprising the first public key and a first digital signature generated with the quasi-private key on the mobile device; and

authenticating the first digital certificate using the first digital signature and the quasi-public key.

2. The method of claim 1, further comprising receiving a message and a second digital signature of the message from the mobile device, wherein the second digital signature is generated with the first private key;

and

authenticating the second digital signature using the first public key.

3. The method of claim 2, further comprising the step of transmitting non-critical information to the mobile device if the second digital signature is authenticated.

4. The method of claim 1, further comprising determining if the first public key is associated with descriptive data within a database if the first digital certificate is authenticated.

5. The method of claim 1, wherein the same quasi-private key is stored on a plurality of other mobile devices.

6. The method of claim 4, further comprising transmitting critical and non-critical information to the mobile device if the first public key is associated with the descriptive data in the database.

7. The method of claim 1, wherein the step of receiving the quasi-public key from the trusted entity further comprises:

receiving a second digital certificate from the trusted entity, wherein the second digital certificate comprises the quasi-public key.

8. The method of claim 1, wherein the step of receiving the first digital certificate from the mobile device further comprises receiving the first digital certificate as part of a handshake procedure for establishing the secure connection with the mobile device.

9. The method of claim 8, wherein the step of receiving the first digital certificate further comprises receiving the first digital certificate as part of a Transport Layer Security handshake procedure.

10. A method for establishing a secure connection between a vehicle and a first device, the method comprising:

receiving a quasi-private key that mathematically corresponds to a quasi-public key that is stored on the first device;

generating a first digital certificate comprising a first public key and a first digital signature, wherein the first public key mathematically corresponds to a first private key that is stored on the vehicle and the first digital signature is generated with the quasi-private key; and

transmitting the first digital certificate from the vehicle to the first device.

11. The method of claim 10, further comprising generating the first public key and the first private key during the production process of the vehicle.

12. The method of claim 10, further comprising:

receiving a root certificate from a trusted certificate authority, wherein the root certificate comprises a second public key that mathematically corresponds to a second private key stored on the trusted certificate authority;

receiving a public key certificate from the first device, the public key certificate comprising a third public key that mathematically corresponds to a third private key that is stored on the first device and a second digital signature generated with the second private key; and

authenticating the public key certificate using the second digital signature and the second public key.

13. The method of claim 10, further comprising transmitting a message and a digital signature of the message to the first device, wherein the digital signature of the message is generated with the first private key.

14. The method of claim 10, wherein the step of transmitting the first digital certificate further comprises transmitting the first digital certificate as part of a handshake procedure for establishing the secure connection.

15. The method of claim 14, wherein the step of transmitting the first digital signature further comprises transmitting the first digital signature as part of a two-way Transport Layer Security handshake procedure.

16. A vehicular communication system for establishing a secure connection with a first device, the vehicular communication system comprising:

a wireless transceiver for communicating with the first device;

electronic memory for storing a quasi-private key that mathematically corresponds to a quasi-public key stored on the first device;

a processor coupled to the wireless transceiver and to the electronic memory and configured to;

generate an asymmetric key pair comprising a vehicle private key that mathematically corresponds to a vehicle public key;

generate a first digital certificate comprising the vehicle public key and a digital signature generated with the quasi-private key; and

transmit the first digital certificate to the first device.

17. The vehicular communication system of claim 16, wherein the processor is further configured to:

digitally sign a message with the vehicle private key; and

transmit the message and the digital signature to the first device.

18. The vehicular communication system of claim 16, wherein:

the electronic memory further stores a root certificate, wherein the root certificate is generated by a trusted certificate authority and comprises a first public key that mathematically corresponds to a first private key stored on the trusted certificate authority; and

the processor is further configured to;

receive a public key certificate from the first device, wherein the public key certificate comprises a second public key that mathematically corresponds to a second private key stored on the first device and a second digital signature that is generated using the first private key; and

authenticate the public key certificate using the second digital signature and the first public key.

19. The vehicular communication system of claim 17, wherein the processor transmits the first digital certificate to the first device as part of a handshake procedure for establishing the secure connection.

20. The vehicular communication system of claim 19, wherein the secure connection is a two-way Transport Layer Security session.