PROCESSING MESSAGES RECEIVED AT A VEHICLE

• US 20130275761A1
• Filed: 04/11/2012
• Published: 10/17/2013
• Est. Priority Date: 04/11/2012
• Status: Active Grant

• Current Assignee: General Motors LLC (General Motors Company)
• Original Assignee: General Motors LLC (General Motors Company)
• Inventors: Catsburg, Thomas M.P., Alrabady, Ansaf I.
• Granted Patent: US 9,209,977 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

A system and method for processing messages received at a vehicle. The method carried by the system involves wirelessly receiving at a vehicle a first communication message having secure credentials and a message signature for a second communication message. Then, the vehicle authenticates the first communication message via its secure credentials. Later, the vehicle wirelessly receives the second communication message and validates this second message using the message signature from the first message. In response to the validation, the second message is processed at the vehicle.

Claims

1. A method for processing messages received at a vehicle, comprising the steps of:

(a) wirelessly receiving at a vehicle a first communication message having secure credentials and a message signature for a second communication message;

(b) authenticating the first communication message via its secure credentials;

(c) wirelessly receiving at the vehicle the second communication message;

(d) validating the second communication message using the message signature from the first communication message; and

(e) processing the validated message at the vehicle.

2. The method of claim 1, wherein the first communication message includes a digital certificate issued by a certification authority.

3. The method of claim 1, wherein the message signature comprises a keyed-hashed message authentication code.

4. The method of claim 1, wherein the secure credentials of the first communication message include one or more of the following:

a signer information, signature field type, signature length, and field domain extension.

5. The method of claim 4, wherein step (b) further comprises decoding the first communication message and authenticating the first communication message by validating one or more of the following:

the signer information, signature field type, signature length, and field domain extension.

6. The method of claim 1, wherein after step (b) and prior to step (c), the method further comprises the step of wirelessly transmitting to the vehicle the second communication message.

7. The method of claim 1, wherein following step (e), the method further comprises the steps of:

(f) wirelessly receiving at the vehicle a third communication message having secure credentials and a message signature for a fourth communication message;

(g) determining that the third message fails on authentication test; and

(h) terminating the method without receiving the fourth message.

8. The method of claim 1, wherein step (d) further comprises verifying the authenticity of the second communication message using the message signature from the first communication message and comparing one or more decrypted codes from the signature message to one or more codes obtained from the second communication message.

9. The method of claim 8, wherein the codes comprise hash codes generated using a payload of the second message.

10. The method of claim 8, wherein step (d) further comprises validating the second communication message by determining that the codes are equal.

11. The method of claim 1, wherein step (e) further comprises the step of programming a vehicle component using information from the second communication message.

12. A telematics unit for processing messages received at a vehicle, wherein the telematics unit includes a processor and computer readable memory that contains instructions that are executed by the processor to carry out the following steps:

(a) wirelessly receiving at a vehicle a first communication message having secure credentials and a message signature for a second communication message;

(b) authenticating the first communication message via its secure credentials;

(c) wirelessly receiving at the vehicle the second communication message;

(d) validating the second communication message using the message signature from the first communication message; and

(e) processing the validated message at the vehicle.

13. A vehicle telematics unit as defined in claim 12, wherein the telematics unit memory stores a decoding key that decodes the first communication message.

14. A vehicle telematics unit as defined in claim 12, wherein following step (e), the method further comprises the steps of:

(f) wirelessly receiving at the vehicle a third communication message having secure credentials and a message signature for a fourth communication message;

(g) determining that the third message fails on authentication test; and

(h) terminating the method without receiving the fourth message.

15. A vehicle telematics unit as defined in claim 12, wherein step (d) further comprises verifying the authenticity of the second communication message using the message signature from the first communication message;

comparing one or more decrypted codes from the message signature to one or more codes obtained from the second communication message; and

validating the second communication message by determining that the codes are equal.