IN-VEHICLE SYSTEM AND COMMUNICATION METHOD

• US 20130173112A1
• Filed: 09/11/2012
• Published: 07/04/2013
• Est. Priority Date: 12/28/2011
• Status: Active Grant

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Takahashi, Yasuyuki, Harata, Yuzo, Natsume, Mitsuyoshi
• Granted Patent: US 9,641,329 B2
• Time in Patent Office: Days
• US Class Current: 701/36
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

An in-vehicle system for communicating with an external tool for storing a tool secret key includes: a communication device; a tool key acquisition device; and a communication controller. The in-vehicle system and an external server for storing external tool information provide a vehicular communication system. The external tool information provides a tool public key and key identification information. The tool public key pairs with the tool secret key. When the external tool requests communication connection with the in-vehicle system, the tool key acquisition device transmits the key identification information to the external server, so that the tool key acquisition device acquires the tool public key from the external server. The communication controller performs cryptographic communication with the external tool using the tool public key.

Claims

1. An in-vehicle system for communicating with an external tool, the system comprising:

a communication device;

a tool key acquisition device; and

a communication controller,

wherein the in-vehicle system and an external server provide a vehicular communication system,

wherein the external tool stores a tool secret key,

wherein the external server stores external tool information,

wherein the external tool information provides a tool public key and key identification information, which are associated with each other,

wherein the tool public key provides a public key, which pairs with the tool secret key,

wherein the key identification information provides identification information about the tool public key,

wherein the communication device communicates with the external server,

wherein, when the external tool requests communication connection with the in-vehicle system, the tool key acquisition device transmits the key identification information corresponding to the external tool as a request source to the external server via the communication device, so that the tool key acquisition device acquires the tool public key associated with the key identification information from the external server via the communication device, and

wherein the communication controller performs cryptographic communication with the external tool as the request source with using the tool public key acquired by the tool key acquisition device.

2. The in-vehicle system according to claim 1,

wherein the communication controller performs the cryptographic communication with the external tool in a public key cryptosystem using the tool public key, so that the communication controller shares a common key with the external tool, and

wherein the common key provides cryptographic communication in a common key cryptosystem.

3. The in-vehicle system according to claim 2 further comprising:

an update device for updating the common key.

4. The in-vehicle system according to claim 3,

wherein the update device updates the common key, each time the external tool and the in-vehicle system complete the cryptographic communication in the common key cryptosystem.

5. The in-vehicle system according to claim 3,

wherein the update device generates a updated common key based on vehicle information.

6. The in-vehicle system according to claim 1 further comprising:

a first electronic control unit for directly communicating with the external tool; and

a second electronic control unit for communicating with the external tool through the first electronic control unit,

wherein the first electronic control unit includes the tool key acquisition device and the communication controller.

7. The in-vehicle system according to claim 1 further comprising:

a storage device for storing a vehicle secret key as a secret key of the in-vehicle system,

wherein the tool key acquisition device includes a tool information acquisition device that performs cryptographic communication with the external tool in a public key cryptosystem using a vehicle public key, which pairs with the vehicle secret key so that the tool information acquisition device acquires the key identification information about the external tool from the external tool.

8. The in-vehicle system according to claim 7 further comprising:

a vehicle key generation device that generates the vehicle secret key and the vehicle public key;

a storage controller that controls the storage device to store the vehicle secret key generated by the vehicle key generation device; and

a vehicle key transmission device that transmits the vehicle public key generated by the vehicle key generation device to the external server.

9. A method for communicating between an in-vehicle system and an external tool comprising:

transmitting key identification information from the external tool to the in-vehicle system, wherein the key identification information provides identification information about a tool public key of the external tool;

transmitting the key identification information from the in-vehicle system to a external server, wherein the external server stores the tool public key and key identification information about the tool public key, which are associated with each other;

transmitting the tool public key from the external server to the in-vehicle system, wherein the tool public key is associated with the key identification information received by the external server;

transmitting a common key from the in-vehicle system to the external tool, wherein the common key is encrypted using the tool public key received by the in-vehicle system; and

decrypting an encrypted common key received by the external tool using a tool secret key, which pairs with the tool public key of the external tool; and

performing cryptographic communication with the in-vehicle system using the common key.

10. The method according to claim 9 further comprising:

updating the common key with using the in-vehicle system after the cryptographic communication is completed.

11. The method according to claim 9 further comprising:

generating the tool secret key and the tool public key of the external tool;

transmitting the tool public key and tool specification information from the external tool to the external server, wherein the tool specification information specifies the external tool;

checking the tool specification information with using the external server to determine whether the external tool that has transmitted the tool specification information is authenticated;

storing the tool public key and the key identification information in the external server when it is determined that the external tool that has transmitted the tool specification information is authenticated, wherein the key identification information is assigned to the tool public key so that the key identification information and the tool public key are associated with each other; and

transmitting the key identification information from the external server to the external tool as a transmission source when it is determined that the external tool that has transmitted the tool specification information is authenticated.

12. The method according to claim 9,

wherein, in the transmitting of the key identification information from the external tool to the in-vehicle system, the key identification information is encrypted with a vehicle public key, which pairs with a vehicle secret key of the in-vehicle system, and an encrypted key identification information is transmitted from the external tool to the in-vehicle system, and

wherein, in the transmitting of the key identification information from the in-vehicle system to the external server, the in-vehicle system decrypts the encrypted key identification information, and a decrypted key identification information is transmitted from the in-vehicle system to the external server.

13. The method according to claim 12 further comprising:

generating the vehicle secret key and the vehicle public key of the in-vehicle system with using the in-vehicle system;

transmitting the vehicle public key and the vehicle specification information from the in-vehicle system to the external server, wherein the vehicle public key is generated in the generating of the vehicle secret key and the vehicle public key, and the vehicle specification information specifies the in-vehicle system;

storing the vehicle public key and the vehicle specification information, which are associated with each other, in the external server, wherein the vehicle public key and the vehicle specification information are received by the external server in the transmitting of the vehicle public key and the vehicle specification information;

transmitting the vehicle specification information from the external tool to the external server; and

transmitting the vehicle public key from the external server to the external tool as a transmission source of the vehicle specification information, wherein the vehicle public key is associated with the vehicle specification information, which is received by the external server in the transmitting of the vehicle specification information.