In-vehicle device, vehicle authentication system and data communication method

• US 8,583,317 B2
• Filed: 10/19/2011
• Issued: 11/12/2013
• Est. Priority Date: 10/19/2010
• Status: Active Grant

• Current Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Original Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Inventors: Nishida, Junichi
• Primary Examiner(s): Cheung, Mary
• Assistant Examiner(s): Sweeney, Brian P
• Application Number:
  US13/276,462
• Publication Number:
  US 20120095642A1
• Time in Patent Office: 755 Days
• Field of Search: 701/31.4, 701/31.5, 701/33.2, 701/29.6
• US Class Current: 701/31.4
• CPC Class Codes: H04L 12/28 characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks] wireless communication networks H04W ; arrangements for dividing the transmission path H04W40/00
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]

Abstract

An in-vehicle device includes a storage unit storing a PIN code and an in-vehicle device ID kept confidential for a user and registered one for each vehicle; a first authentication unit determining whether the in-vehicle device is allowed to be connected to a mobile terminal on the basis of a comparison of the PIN code; a second authentication unit requesting an in-vehicle device ID from the mobile terminal that has been connected through authentication performed by the first authentication unit and authenticating the mobile terminal by comparing the in-vehicle device ID transmitted from the mobile terminal in response to the request with the in-vehicle device ID registered in the in-vehicle device; and a data transmission unit transmitting predetermined vehicle data, obtained from a vehicle equipped with the in-vehicle device and indicating a vehicle state, to the mobile terminal that has been authenticated by the second authentication unit.

Claims

1. An in-vehicle device that relays wireless data communication between an in-vehicle electronic device and a mobile terminal, comprising:

a storage unit that stores a PIN code and an in-vehicle device ID that is kept confidential for a user and that is registered one for each vehicle;

a first authentication unit that determines whether the in-vehicle device is allowed to be connected to the mobile terminal on the basis of a comparison of the PIN code;

a second authentication unit that requests an in-vehicle device ID from the mobile terminal that has been connected through authentication performed by the first authentication unit and that authenticates the mobile terminal by comparing the in-vehicle device ID transmitted from the mobile terminal in response to the request with the in-vehicle device ID registered in the in-vehicle device, wherein the in-vehicle device ID requested from the second authentication unit is allocated to each in-vehicle device; and

a data transmission unit that transmits predetermined vehicle data, which is obtained from the in-vehicle electronic device and which indicates a vehicle state, to the mobile terminal that has been authenticated by the second authentication unit.

2. The in-vehicle device according to claim 1, wherein the in-vehicle device ID is generated and stored in the storage unit at a vehicle maker or a facility under management of the vehicle maker.

3. The in-vehicle device according to claim 1, wherein the data transmission unit does not transmit the predetermined vehicle data but transmits vehicle data other than the predetermined vehicle data to the mobile terminal that has been connected through authentication performed by the first authentication unit and that has not been authenticated by the second authentication unit.

4. The in-vehicle device according to claim 3, wherein the predetermined vehicle data has a higher level of security than vehicle data other than the predetermined vehicle data.

5. The in-vehicle device according to claim 3, wherein the vehicle data other than the predetermined vehicle data includes at least one of data that indicates a vehicle speed, data that indicates a steering angle and data required to calculate a fuel consumption.

6. The in-vehicle device according to claim 1, wherein the predetermined vehicle data is data detected by an in-vehicle sensor or data generated on the basis of the detected data.

7. The in-vehicle device according to claim 1, wherein the predetermined vehicle data includes data that indicates a failed/abnormal state of the vehicle.

8. A vehicle authentication system comprising:

a mobile terminal;

an in-vehicle device that relays wireless data communication between an in-vehicle electronic device and the mobile terminal, including;

a storage unit that stores a PIN code and an in-vehicle device ID that is kept confidential for a user and that is registered one for each vehicle;

a first authentication unit that determines whether the in-vehicle device is allowed to be connected to the mobile terminal on the basis of a comparison of the PIN code;

a second authentication unit that requests an in-vehicle device ID from the mobile terminal that has been connected through authentication performed by the first authentication unit and that authenticates the mobile terminal by comparing the in-vehicle device ID transmitted from the mobile terminal in response to the request with the in-vehicle device ID registered in the in-vehicle device, wherein the in-vehicle device ID requested from the second authentication unit is allocated to each in-vehicle device; and

a data transmission unit that transmits predetermined vehicle data, which is obtained from the in-vehicle electronic device and which indicates a vehicle state, to the mobile terminal that has been authenticated by the second authentication unit; and

a data management device that manages the in-vehicle device ID and that is managed at a vehicle maker or a facility under management of the vehicle maker, wherein the data management device is communicable with the mobile terminal and transmits the in-vehicle device ID to the mobile terminal.

9. The vehicle authentication system according to claim 8, wherein the data management device transmits the in-vehicle device ID to the mobile terminal together with an application that runs in association with the predetermined vehicle data transmitted from the in-vehicle device.

10. The vehicle authentication system according to claim 9, wherein the data management device receives the predetermined vehicle data transmitted from the mobile terminal.

11. A data communication method between an in-vehicle device and a mobile terminal, wherein the in-vehicle device stores a PIN code and an in-vehicle device ID that is kept confidential for a user and that is registered one for each vehicle, the method comprising:

in the in-vehicle device, determining whether the in-vehicle device is allowed to be connected to the mobile terminal on the basis of a comparison of the PIN code;

in the in-vehicle device, requesting an in-vehicle device ID from the mobile terminal that has been connected through authentication based on the comparison of the PIN code, wherein the requested in-vehicle device ID is allocated to each in-vehicle device;

in the in-vehicle device, authenticating the mobile terminal by comparing the in-vehicle device ID transmitted from the mobile terminal in response to the request for the in-vehicle device ID with the in-vehicle device ID registered in the in-vehicle device; and

in the in-vehicle device, transmitting predetermined vehicle data, which is obtained from the vehicle equipped with the in-vehicle device and which indicates a vehicle state, to the mobile terminal that has been authenticated by a comparison of the in-vehicle device ID.