Method and system for vehicle authentication of a component

• US 7,010,682 B2
• Filed: 06/28/2002
• Issued: 03/07/2006
• Est. Priority Date: 06/28/2002
• Status: Active Grant

• Current Assignee: Continental Automotive Systems, Inc. (Continental AG)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Dabbish, Ezzat A., Bruner, John D., Fehr, Walton L., Puhl, Larry C., Reinold, Jurgen, Levenson, Samual M.
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Arani, Taghi T.
• Application Number:
  US10/184,530
• Publication Number:
  US 20040003227A1
• Time in Patent Office: 1,348 Days
• Field of Search: 713/155, 713/156, 713/187, 713/169, 707/2, 701/1, 710/0
• US Class Current: 713/155
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A vehicle authenticates a prospective component for use in the vehicle by obtaining from a certification authority a certification that an authentic component is associated with a cryptographic key. The certification certifies that the cryptographic key is bound to information identifying the authentic component. The vehicle utilizes the cryptographic key obtained from the certification authority in cryptographic communication with the prospective component, and determines whether the prospective component is the authentic component based on whether the cryptographic key is successfully utilized in the cryptographic communication.

Claims

1. A method for authentication of a component for use in a vehicle, the method performed by the vehicle and comprising the steps of:

obtaining a prospective component for use in the vehicle, the prospective component having at least a component computing unit, a component cryptographic unit, and a component memory, the component memory storing data related to the component;

obtaining from a certification authority a certification that an authentic component is associated with a cryptographic key;

utilizing the cryptographic key in cryptographic communication with the component cryptographic unit of the prospective component; and

determining whether the prospective component is the authentic component based on whether the cryptographic key is successfully utilized in the cryptographic communication with the prospective component.

2. The method of claim 1 wherein the certification compnses a digital certificate.

3. The method of claim 1 wherein the certification compnses a digital signature of the certification authority.

4. The method of claim 1 wherein the certification authority is authenticated by a second certification authority.

5. The method of claim 1 wherein the certification authority is a component supplier of the authentic component.

6. The method of claim 1, further comprising the step of determining that the certification authority is authorized to certify the authentic component.

7. The method of claim 1 wherein the step of obtaining the certification comprises obtaining a certification that a component having an identified attribute is associated with the cryptographic key.

8. The method of claim 1 wherein the step of obtaining the certification comprises obtaining a certification that a component having an identified component supplier is associated with the cryptographic key.

9. The method of claim 1 wherein the authentic component has a first cryptographic key and the cryptographic key with which the certification associates the authentic component is a second cryptographic key corresponding to the first cryptographic key.

10. The method of claim 9 wherein the first cryptographic key is accessible only by the authentic component.

11. The method of claim 9 wherein the first cryptographic key is a private cryptographic key of the authentic component and the second cryptographic key is a public cryptographic key of the authentic component.

12. The method of claim 1, further comprising the step of allowing the prospective component to become operative within the vehicle upon determining the prospective component is the authentic component.

13. A system for authentication of a component for use in a vehicle, the system comprising:

a prospective component for use in the vehicle, the prospective component having at least a component computing unit, a component cryptographic unit, and a component memory, the component memory storing data related to the component; and

a vehicle system obtaining from a certification authority a certification that an authentic component is associated with cryptographic key, the vehicle system comprising

a cryptographic unit utilizing the cryptographic key in cryptographic communication with a the component cryptographic unit of the prospective component; and

a computing unit determining whether the prospective component is the authentic component based on whether the cryptographic key is successfully utilized in the cryptographic communication.

14. The system of claim 13 wherein the certification comprises a digital certificate.

15. The system of claim 13 wherein the certification comprises a digital signature of the certification authority.

16. The system of claim 13 wherein the certification authority is authenticated by a second certification authority.

17. The system of claim 13 wherein the certification authority is a component supplier of the authentic component.

18. The system of claim 13, wherein the vehicle system determines that the certification authority is authorized to certify the authentic component.

19. The system of claim 13 wherein the certification comprises a certification that a component having an identified attribute is associated with the cryptographic key.

20. The system of claim 13 wherein the certification comprises a certification that a component having an identified component supplier is associated with the cryptographic key.

21. The system of claim 13 wherein the authentic component has a first cryptographic key and the cryptographic key with which the certification associates the authentic component is a second cryptographic key corresponding to the first cryptographic key.

22. The system of claim 21 wherein the private cryptographic key is accessible only by the authentic component.

23. The system of claim 21 wherein the first cryptographic key is a private cryptographic key of the authentic component and the second cryptographic key is a public cryptographic key of the authentic component.

24. The system of claim 13 wherein the computing unit allows the prospective component to become operative within the vehicle upon determining the prospective component is the authentic component.