METHOD AND SYSTEM FOR SECURE AND AUTHORIZED COMMUNICATION BETWEEN A VEHICLE AND WIRELESS COMMUNICATION DEVICES OR KEY FOBS

• US 20140169564A1
• Filed: 11/19/2013
• Published: 06/19/2014
• Est. Priority Date: 12/14/2012
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: PEIRCE, KENNETH L., GAUTAMA, NEERAJ R., KALHOUS, AMANDA J., MARSHALL, SHAUN S.
• Granted Patent: US 9,218,700 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/00476 dynamically
• CPC Class Codes: G07C 2009/00865 remotely by wireless communication
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: H04W 4/48 for in-vehicle communication

Abstract

A system is provided that includes a wireless communication device (or end device), a vehicle having a central module, and a key provisioning server. The key provisioning server is communicatively coupled to the wireless communication device and the central module via wireless connections. The central module can establish a wireless connection with the wireless communication device to initiate a current communication session. When the wireless connection is established with the central module, the wireless communication device communicates a request message to request temporary security information (e.g., public key and/or a digital certificate). The key provisioning server can then provide, in response to the request message, the temporary security information to the wireless communication device and/or the central module. The temporary security information can then be used to encrypt communications between the wireless communication device and the central module.

Claims

1. A system, comprising:

a wireless communication device;

a vehicle, comprising;

a central module configured to establish a wireless connection with the wireless communication device to initiate a current communication session, wherein the wireless communication device communicates a request message when the wireless connection is established with the central module, wherein the request message requests temporary security information; and

a key provisioning server, communicatively coupled to the wireless communication device and the central module, wherein the key provisioning server is configured to provide, in response to the request message, the temporary security information to the wireless communication device and the central module,

wherein the temporary security information is used to encrypt communications between the wireless communication device and the central module.

2. A system according to claim 1, wherein the wireless communication device is configured to temporarily store the temporary security information until a confirmation is made that the current communication session has ended.

3. A system according to claim 1, wherein the wireless communication device and/or the central module confirm that the current communication session has ended when the wireless connection has terminated for a particular time period.

4. A system according to claim 1, wherein the wireless communication device and/or the central module confirm that the current communication session has ended when the wireless connection has terminated a particular number of times during a time period.

5. A system according to claim 1, wherein the wireless communication device communicates a new request message requesting new temporary security information each time the wireless communication device determines that the current communication session has ended and that a communication connection is available between the wireless communication device and the key provisioning server.

6. A system according to claim 2, wherein the key provisioning server receives a registration message from the wireless communication device that includes an identifier for the wireless communication device and a personal identification number for the wireless communication device, wherein the key provisioning server communicates the identifier and the personal identification number to the central module, and

when it has been confirmed that the current communication session has ended and the wireless communication device determines that no communication connection is available between the wireless communication device and the key provisioning server, wherein the wireless communication device is configured to display a user prompt for entry of a personal identification number that allows the temporary security information that is temporarily stored to continue to be used to encrypt communications between the wireless communication device and the central module even though it has been confirmed that the current communication session has ended.

7. A system according to claim 1, wherein the security information comprises:

a cryptographic key.

8. A system according to claim 7, wherein the security information further comprises:

a digital certificate signed with a private key.

9. A system according to claim 1, wherein the wireless communication device is a Bluetooth enabled consumer electronics device.

10. A system according to claim 1, wherein the wireless communication device is a personal wireless communication device capable of communicating over a cellular network.

11. A method, comprising:

establishing, between a central module of a vehicle and a wireless communication device, a wireless connection to initiate a current communication session;

communicating, from the wireless communication device, a request message when the wireless connection is established with the central module, wherein the request message requests temporary security information; and

providing, from a key provisioning server in response to the request message, the temporary security information to the wireless communication device and the central module, wherein the temporary security information is used to encrypt communications between the wireless communication device and the central module.

12. A method according to claim 11, further comprising:

temporarily storing the temporary security information at the wireless communication device until a confirmation is made that the current communication session has ended.

13. A method according to claim 11, further comprising:

determining whether the wireless connection has terminated for a particular time period; and

confirming, at the wireless communication device and/or the central module, that the current communication session has ended when the wireless connection has terminated for a particular time period.

14. A method according to claim 11, further comprising:

determining whether the wireless connection has terminated for a particular time period; and

confirming, at the wireless communication device and/or the central module, that the current communication session has ended when the wireless connection has terminated a particular number of times during a time period.

15. A method according to claim 11, further comprising:

communicating, from the wireless communication device each time the wireless communication device determines that the current communication session has ended and that a communication connection is available between the wireless communication device and the key provisioning server, a new request message requesting new temporary security information.

16. A method according to claim 12, wherein the key provisioning server receives a registration message from the wireless communication device that includes an identifier for the wireless communication device and a personal identification number for the wireless communication device, wherein the key provisioning server communicates the identifier and the personal identification number to the central module, and when it has been confirmed that the current communication session has ended and the wireless communication device determines that no communication connection is available between the wireless communication device and the key provisioning server,

displaying a user prompt at the wireless communication device for entry of a personal identification number that allows the temporary security information that is temporarily stored to continue to be used to encrypt communications between the wireless communication device and the central module even though it has been confirmed that the current communication session has ended.

17. A method according to claim 11, wherein the security information comprises:

a cryptographic key.

18. A method according to claim 17, wherein the security information further comprises:

a digital certificate signed with a private key.

19. A method according to claim 11, wherein the wireless communication device is a Bluetooth enabled consumer electronics device.

20. A method according to claim 11, wherein the wireless communication device is a personal wireless communication device capable of communicating over a cellular network.