Method and system for vehicle authentication of a component using key separation

• US 7,137,142 B2
• Filed: 06/28/2002
• Issued: 11/14/2006
• Est. Priority Date: 06/28/2002
• Status: Active Grant

• Current Assignee: Continental Automotive Systems, Inc. (Continental AG)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Dabbish, Ezzat A., Puhl, Larry C.
• Primary Examiner(s): Barrón, Jr., Gilberto
• Assistant Examiner(s): Ho, Thomas
• Application Number:
  US10/184,570
• Publication Number:
  US 20040003237A1
• Time in Patent Office: 1,600 Days
• Field of Search: 713/187, 713/169, 713/189, 713/155, 713/156, 701/24, 726/10, 726/5, 705/67
• US Class Current: 726/10
• CPC Class Codes: B60R 16/0234 related to maintenance or repairing of vehicles
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A vehicle authenticates a prospective component for use in the vehicle by obtaining from a certification authority a certification that an authentic component is associated with a cryptographic key. The vehicle obtains the certification separately from the component. The certification certifies that the cryptographic key is bound to information identifying the authentic component. The vehicle utilizes the cryptographic key obtained from the certification authority in cryptographic communication with the prospective component, and determines whether the prospective component is the authentic component based on whether the cryptographic key is successfully utilized in the cryptographic communication.

Claims

1. A method for authentication of a component for use in a vehicle, the method performed by the vehicle and comprising the steps of:

obtaining a prospective component for use in the vehicle, the prospective component having at least a component computing unit, a component cryptographic unit, and a component memory, the component memory storing data related to the component;

obtaining from a certification authority a certification that an authentic component is associated with a cryptographic key, wherein the certification is obtained separately from the prospective component;

utilizing the cryptographic key in cryptographic communication with the component cryptographic unit of the prospective component; and

determining whether the prospective component is the authentic component based on whether the cryptographic key is successfully utilized in the cryptographic communication.

2. The method of claim 1 wherein the certification comprises a digital certificate.

3. The method of claim 1 wherein the certification comprises a digital signature of the certification authority.

4. The method of claim 1 wherein the certification authority is authenticated by a second certification authority.

5. The method of claim 1 wherein the certification authority is a component supplier of the authentic component.

6. The method of claim 1, further comprising the step of determining that the certification authority is authorized to certify the authentic component.

7. The method of claim 1 wherein the step of obtaining the certification comprises obtaining a certification that a component having an identified attribute is associated with the cryptographic key.

8. The method of claim 1 wherein the step of obtaining the certification comprises obtaining a certification that a component having an identified component supplier is associated with the cryptographic key.

9. The method of claim 1 wherein the authentic component has a first cryptographic key and the cryptographic key with which the certification associates the authentic component is a second cryptographic key corresponding to the first cryptographic key.

10. The method of claim 9 wherein the first cryptographic key is accessible only by the authentic component.

11. The method of claim 9 wherein the first cryptographic key is a private cryptographic key of the authentic component and the second cryptographic key is a public cryptographic key of the authentic component.

12. The method of claim 1, further comprising the step of allowing the prospective component to become operative within the vehicle upon determining the prospective component is the authentic component.

13. A system for authentication of a component for use in a vehicle, the system comprising:

a prospective component for use in the vehicle, the prospective component having at least a component computing unit, a component cryptographic unit, and a component memory, the component memory storing data related to the component

a vehicle system obtaining from a certification authority a certification that an authentic component is associated with a cryptographic key;

a cryptographic computing clement utilizing the cryptographic key in cryptographic communication with the component cryptographic unit of the prospective component, wherein the certification is obtained separately from the prospective component; and

the vehicle system determining whether the prospective component is the authentic component based on whether the cryptographic key is successfully utilized in the cryptographic communication.

14. The system of claim 13 wherein the certification comprises a digital certificate.

15. The system of claim 13 wherein the certification comprises a digital signature of the certification authority.

16. The system of claim 13 wherein the certification authority is authenticated by a second certification authority.

17. The system of claim 13 wherein the certification authority is a component supplier of the authentic component.

18. The system of claim 13, wherein the vehicle system determines that the certification authority is authorized to certify the authentic component.

19. The system of claim 13 wherein the certification comprises a certification that a component having an identified attribute is associated with the cryptographic key.

20. The system of claim 13 wherein the certification comprises a certification that a component having an identified component supplier is associated with the cryptographic key.

21. The system of claim 13 wherein the authentic component has a first cryptographic key and the cryptographic key with which the certification associates the authentic component is a second cryptographic key corresponding to the first cryptographic key.

22. The system of claim 21 wherein the private cryptographic key is accessible only by the authentic component.

23. The system of claim 21 wherein the First cryptographic key is a private cryptographic key of the authentic component and the second cryptographic key is a public cryptographic key of the authentic component.

24. The system of claim 13 wherein the vehicle system allows the prospective component to become operative within the vehicle upon determining the prospective component is the authentic component.