SECURE VEHICLE DATA COMMUNICATIONS

• US 20150264017A1
• Filed: 03/14/2014
• Published: 09/17/2015
• Est. Priority Date: 03/14/2014
• Status: Abandoned Application

• Current Assignee: Hyundai America Technical Center, Inc. (Hyundai Mobis Co., Ltd.), Hyundai Motor Company (Hyundai Motor Group), Kia Motors Corporation (Kia Corp.)
• Original Assignee: Hyundai America Technical Center, Inc. (Hyundai Mobis Co., Ltd.), Hyundai Motor Company (Hyundai Motor Group), Kia Motors Corporation (Kia Corp.)
• Inventors: Saed, Mustafa, Rizwan, Muhammad
• Application Number:
  US14/210,777
• Publication Number:
  US 20150264017A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/567 Integrating service provisioning from a plurality of service providers
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]

Abstract

A method for performing a remote control operation in a vehicle is provided. The method includes receiving, at telematics electronics of a vehicle, versions of a remote control command sent wirelessly to the vehicle by a dispatcher service. The versions of the remote control command are text-based messages encrypted by the dispatcher service using a first encryption mechanism. The method also includes decrypting the versions of the remote control command received from the dispatcher service into a plain text command. The method further includes encrypting the plain text command using a second encryption mechanism for use within the vehicle. The method additionally includes providing the command encrypted using the second encryption mechanism to another controller within the vehicle.

Claims

1. A method for performing a remote control operation in a vehicle comprising:

receiving, at telematics electronics of a vehicle, versions of a remote control command sent wirelessly to the vehicle by a dispatcher service, wherein the versions of the remote control command are text-based messages encrypted by the dispatcher service using a first encryption mechanism;

decrypting the versions of the remote control command received from the dispatcher service into a plain text command;

encrypting the plain text command using a second encryption mechanism for use within the vehicle; and

providing the command encrypted using the second encryption mechanism to another controller within the vehicle.

2. The method as in claim 1, wherein the second encryption mechanism is based in part on a seed value generated during an ignition cycle of the vehicle.

3. The method as in claim 2, further comprising:

receiving an encrypted version of the seed value at the telematics electronics;

decrypting the received version of the seed value; and

storing the seed value in memory.

4. The method as in claim 1, further comprising:

comparing transmittal times associated with the versions of the control command received from the dispatcher service to authenticate the control command.

5. The method as in claim 1, wherein the versions of the control command received from the dispatcher are short message service (SMS) text messages.

6. The method as in claim 1, wherein the command encrypted using the second encryption mechanism is provided to a body control module (BCM) of the vehicle.

7. The method as in claim 1, wherein the command encrypted using the second encryption method is provided to the other control module in the vehicle via a control area network (CAN) bus.

8. The method as in claim 1, further comprising:

generating an authentication string associated with the command encrypted using the second encryption mechanism; and

providing the authentication string in conjunction with the command encrypted using the second encryption mechanism to the other controller.

9. The method as in claim 8, wherein the authentication string comprises a hash of the command and two seed values generated during the latest two ignition cycles of the vehicle.

10. An apparatus comprising:

one or more network interfaces adapted to communicate in a vehicle;

a processor adapted to execute one or more processes; and

a memory configured to store a process executable by the processor, the process when executed operable to;

receive versions of a remote control command sent wirelessly to the vehicle by a dispatcher service, wherein the versions of the remote control command are text-based messages encrypted by the dispatcher service using a first encryption mechanism;

decrypt the versions of the remote control command received from the dispatcher service into a plain text command;

encrypt the plain text command using a second encryption mechanism for use within the vehicle; and

provide the command encrypted using the second encryption mechanism to another controller within the vehicle.

11. The apparatus as in claim 10, wherein the second encryption mechanism is based in part on a seed value generated during an ignition cycle of the vehicle.

12. The apparatus as in claim 10, wherein the process when executed is operable to:

compare transmittal times associated with the versions of the control command received from the dispatcher service to authenticate the control command.

13. The apparatus as in claim 10, wherein the versions of the control command received from the dispatcher are short message service (SMS) text messages.

14. The apparatus as in claim 10, wherein the command encrypted using the second encryption method is provided to the other control module in the vehicle via a control area network (CAN) bus.

15. The apparatus as in claim 10, wherein the process when executed is operable to:

generate an authentication string associated with the command encrypted using the second encryption mechanism; and

provide the authentication string in conjunction with the command encrypted using the second encryption mechanism to the other controller.

16. The apparatus as in claim 15, wherein the authentication string comprises a hash of the command and two seed values generated during the latest two ignition cycles of the vehicle.

17. An apparatus comprising:

one or more network interfaces adapted to communicate in a vehicle;

a processor adapted to execute one or more processes; and

a memory configured to store a process executable by the processor, the process when executed operable to;

receive an encrypted command from telematics electronics of the vehicle, wherein the command was received by the telematics electronics from a remote location outside of the vehicle;

authenticate that the encrypted command was sent by the telematics electronics;

decrypt the encrypted command if the encrypted command is authenticated; and

provide the decrypted command to a controller of the vehicle.

18. The apparatus of claim 17, wherein the encrypted command is received via a control area network (CAN) bus.

19. The apparatus of claim 17, wherein the encrypted command is authenticated using an authentication string received in conjunction with the encrypted command.

20. The apparatus of claim 17, wherein the encrypted command is decrypted using a seed value generated during an ignition cycle of the vehicle.