METHOD AND SYSTEM FOR SECURELY AND AUTOMATICALLY OBTAINING SERVICES FROM A MACHINE DEVICE SERVICES SERVER

• US 20160344747A1
• Filed: 03/16/2016
• Published: 11/24/2016
• Est. Priority Date: 05/22/2015
• Status: Active Grant

• Current Assignee: M2MD Technologies, Inc.
• Original Assignee: M2MD Technologies, Inc.
• Inventors: Link, Charles M. II
• Granted Patent: US 9,865,110 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: B60R 2325/205 Mobile phones
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G07C 2009/00198 the keyless data carrier having more than one limited data transmission ranges
• CPC Class Codes: G07C 9/00182 operated with unidirectional data transmission between data carrier and locks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A vehicle processing device authenticates that an authorized user has requested an action by the vehicle, and generates an authentication acknowledgement message. At least two security devices being present within the cabin of, or close to, the vehicle during a predetermined period following an authentication trigger event that occurs while the user performs a predetermined sequence of authentication activities (i.e., button presses, operating the vehicle or a part of it, etc.) provides a basis for the authentication acknowledgement message. Typically, information unique to each security device has been associated with the vehicle at a service provider'"'"'s server. The authentication acknowledgement may include an activation code that results from processing the information, unique to each security device, received from the security devices and other random information, such as date. A service provider'"'"'s server, or a user device, provides services to, or can access, respectively, the vehicle upon receiving the authentication acknowledgement.

Claims

1. A system, comprising:

a vehicle processing device coupled to a communication bus of a vehicle;

a first security device that includes first unique information that is uniquely associated with the vehicle;

a second security device that includes second unique information that is uniquely associated with the vehicle;

wherein the vehicle processing device of the vehicle is to;

receive a request signal for activation of one or more long-range-wireless-communication-based services for the vehicle;

receive a first security signal containing the first unique information from the first security device;

receive a second security signal containing the second unique information the second security device;

determine that the first security signal was transmitted within a first predetermined range of the vehicle during a first predetermined authentication period that begins after a first authentication trigger event;

determine that the second security signal was transmitted within a second predetermined range of the vehicle during a second predetermined authentication period that begins after a second authentication trigger event; and

generate a services-granted authentication acknowledgement that the first unique information was transmitted in the first security signal within the first predetermined range of the vehicle during the first predetermined authentication period, and that that the second security unique information was transmitted in the second security signal within the second predetermined range of the vehicle during the second predetermined authentication period; and

a communication device to transmit the services-granted authentication acknowledgement to a central activation computer server equipment component for activating the one or more wireless-communication-based services.

2. The system of claim 1 wherein the vehicle processing device coupled to a communication bus of a vehicle is a telematics device and wherein the communication bus is one of:

a controller area network, Local Interconnect Network, Media Oriented Systems Transport, I2C, SPI, FlexRay, SAE-J1850, or APC.

3. The system of claim 1 wherein the first and second security devices are wireless devices uniquely associated with the vehicle, and wherein the unique association enables operation of the vehicle when either of the first or second security devices are within the first and second predetermined ranges, respectively, of the vehicle.

4. The system of claim 1 wherein the generated services-granted authentication acknowledgment contains an activation code.

5. The system of claim 1 wherein the communication device to transmit the services-granted authentication acknowledgement to a central activation computer server equipment component for activating the one or more wireless-communication-based services includes a long-range wireless module.

6. The system of claim 5 wherein the communication device to transmit the services granted activation code acknowledgement to a central activation computer server equipment component for activating the one or more wireless-communication-based services includes at least one of:

the vehicle processing device coupled to the communication bus of the vehicle, or the wireless user device.

7. The system of claim 6 wherein a transmit-acknowledgement-message transmitted from the wireless user device causes the vehicle processing device coupled to the communication bus of the vehicle to transmit the services-granted authentication acknowledgement to the central activation computer server equipment component.

8. The system of claim 1 wherein the first predetermined authentication period and the second predetermined authentication period are the same.

9. The system of claim 1 wherein the first predetermined range and the second predetermined range are the same.

10. The system of claim 1 wherein the first trigger event and the second trigger event are the same event.

11. The system of claim 1 wherein the request for activation was received from a wireless user device.

12. The system of claim 1 wherein the request for activation is received wirelessly.

13. The system of claim 1 wherein the first unique information and the second unique information are received wirelessly from the first and second security device, respectively.

14. A method, comprising:

receiving with a vehicle processing device coupled to a communication bus of a vehicle a request for activation of one or more long-range-wireless-communication-based services for the vehicle;

receiving first unique information obtained from a first security device that is uniquely associated with the vehicle;

receiving second unique information obtained from a second security device that is uniquely associated with the vehicle;

determining that the first unique information associated with the first security device was transmitted within a first predetermined range of the vehicle during a first predetermined authentication period that begins after a first authentication trigger event;

determining that the second unique information associated with the second security device was transmitted within a second predetermined range of the vehicle during a second predetermined authentication period that begins after a second authentication trigger event;

generating a services-granted authentication acknowledgement that the first unique information was transmitted within the first predetermined range of the vehicle during the first predetermined authentication period, and that that the second unique information was transmitted within the second predetermined range of the vehicle during the second predetermined authentication period; and

transmitting the services-granted authentication acknowledgement to a central activation computer server equipment component for activating the one or more wireless-communication-based services.

15. The method of claim 14 wherein the vehicle processing device coupled to a communication bus of a vehicle is a telematics device and wherein the communication bus is a controller area network.

16. The method of claim 14 wherein the first and second security devices are wireless devices each uniquely associated with the vehicle, and wherein the unique associations enable operation of the vehicle when either of the first or second security devices are within the first and second predetermined ranges, respectively, of the vehicle.

17. A method, comprising:

transmitting, with a user device, a request for activation of one or more long-range-wireless-communication-based services for a vehicle, wherein the user device is not uniquely associated with the vehicle;

receiving, with a vehicle processing device coupled to a communication bus of the vehicle, the request for activation of one or more long-range-wireless-communication-based services for the vehicle;

receiving, with the vehicle processing device coupled to the communication bus of the vehicle, first unique information transmitted from a first security device that is uniquely associated with the vehicle;

receiving, with the vehicle processing device coupled to the communication bus of the vehicle, second unique information transmitted from a second security device that is uniquely associated with the vehicle;

determining, with the vehicle processing device coupled to the communication bus of the vehicle, that the first unique information associated with the first security device was transmitted within a first predetermined range of the vehicle during a first predetermined authentication period that begins after a first authentication trigger event;

determining, with the vehicle processing device coupled to the communication bus of the vehicle, that the second unique information associated with the second security device was transmitted within a second predetermined range of the vehicle during a second predetermined authentication period that begins after a second authentication trigger event;

generating, with the vehicle processing device coupled to the communication bus of the vehicle, a services-granted authentication acknowledgement that the first unique information was transmitted within the first predetermined range of the vehicle during the first predetermined authentication period, and that that the second unique information was transmitted within the second predetermined range of the vehicle during the second predetermined authentication period; and

transmitting the services-granted authentication acknowledgement to a central activation computer server equipment component for activating the one or more wireless-communication-based services.

18. The method of claim 17 wherein the vehicle processing device coupled to the communication bus of the vehicle receives the request for activation wirelessly from the user device.

19. The method of claim 17 wherein the vehicle processing device coupled to the communication bus of the vehicle receives the first and second unique information in first and second signals transmitted wirelessly from the user device.

20. The method of claim 17 wherein the user device has received the first and second unique information corresponding to the first and second security devices.