CONTROLLING ACCESS TO PERSONAL INFORMATION STORED IN A VEHICLE USING A CRYPTOGRAPHIC KEY

• US 20150263860A1
• Filed: 03/13/2014
• Published: 09/17/2015
• Est. Priority Date: 03/13/2014
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Leboeuf, Karl B., Mazzara, William E. Jr., Forest, Thomas M., Draluk, Vadim
• Granted Patent: US 9,571,284 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/08 Access security

Abstract

A system and a method are disclosed providing user information in a vehicle. The method includes the steps of: providing over a vehicle network a cryptographic key in response to receiving a wireless signal from a wireless transmitter at a first electronic control unit (ECU); receiving at a second ECU the cryptographic key; authenticating the cryptographic key at the second ECU; and providing user information via the second ECU based on the authentication.

Claims

1. A method of providing user information in a vehicle, comprising the steps of:

providing over a vehicle network a cryptographic key in response to receiving a wireless signal from a wireless transmitter at a first electronic control unit (ECU);

receiving at a second ECU the cryptographic key;

authenticating the cryptographic key at the second ECU; and

providing user information via the second ECU based on the authentication.

2. The method of claim 1, wherein the first ECU provides the cryptographic key.

3. The method of claim 1, wherein the wireless transmitter is one of a keyfob, a mobile device, or a cellular transceiver at a call center.

4. The method of claim 1, wherein the first ECU comprises non-volatile memory, wherein the cryptographic key is stored thereon.

5. The method of claim 1, wherein the first ECU is one of an immobilizer ECU or a body control ECU.

6. The method of claim 5, wherein when the first ECU is the immobilizer ECU, the providing the cryptographic key step is associated with a vehicle engine ignition event, wherein when the first ECU is the body control ECU, the providing the cryptographic key step is associated with a vehicle door unlocking event.

7. The method of claim 1, wherein the second ECU is a vehicle head unit ECU.

8. The method of claim 1, wherein the receiving step further comprises storing the cryptographic key in volatile memory of the second ECU.

9. The method of claim 1, wherein the user information is provided from a personal identifiable information (PII) database.

10. The method of claim 1, further comprising providing over the vehicle network from a third ECU the cryptographic key to the second ECU.

11. The method of claim 10, further comprising the third ECU storing the cryptographic key, wherein the third ECU provides the cryptographic key to the second ECU in response to the receipt of the wireless signal at the first ECU.

12. The method of claim 10, wherein the authenticating step includes authenticating the cryptographic key from both the first and third ECUs.

13. The method of claim 10, wherein the authenticating step includes authenticating the cryptographic key from either of the first or third ECUs.

14. The method of claim 1, wherein the cryptographic key has a predetermined minimum entropy.

15. The method of claim 1, wherein the wireless signal is received by a vehicle telematics unit ECU.

16. The method of claim 1, further comprising:

identifying a particular cryptographic key based on the wireless signal.

17. The method of claim 16, wherein the particular cryptographic key is associated with at least one customized database associated with the user information.

19. The method of claim 17, further comprising:

determining that a termination event has occurred; and

in response to the termination event, inhibiting further access to the personal user information;

until another one of the trigger signals is received at the first ECU.

18. A method of providing user information in a vehicle, comprising the steps of:

receiving a trigger signal at a first electronic control unit (ECU) in the vehicle, wherein receipt of the trigger signal indicates the presence of an authorized user at the vehicle;

providing over a vehicle network a decryption key from the first ECU to a second ECU associated with a personal user information database based on the trigger signal;

authenticating the decryption key at the second ECU; and

providing personal user information from the database based on the authentication.