Method for authenticating onboard units

• US 8,724,810 B2
• Filed: 01/28/2011
• Issued: 05/13/2014
• Est. Priority Date: 01/29/2010
• Status: Expired due to Fees

• Current Assignee: Kapsch TrafficCom AG (Datax Handelsgmbh)
• Original Assignee: Kapsch TrafficCom AG (Datax Handelsgmbh)
• Inventors: Nagy, Oliver, Schrdl, Sren
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): WYSZYNSKI, AUBREY H
• Application Number:
  US13/574,571
• Publication Number:
  US 20120300929A1
• Time in Patent Office: 1,201 Days
• Field of Search: 380/255
• US Class Current: 380/255
• CPC Class Codes: G07B 15/063 using wireless information transmission between the vehicle and a fixed station identification of vehicles G08G
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method for authenticating vehicle devices that can conduct dedicated short-range communications with beacons of a road tolling system. The beacons have a system-wide key and the vehicle devices only have individual keys. A supply of pairs of individual keys and associated derivation identifiers is stored in the vehicle device, and for consecutive communications the vehicle device selects a different pair from the supply in each case and uses said pair for the respective communication. The vehicle device is triggered by an interrogation device to perform at least the part of a radio communication in which the vehicle device sends the selected derivation identifier, and the selected derivation identifier is received in the interrogation device and is compared with derivation identifiers of the supply stored in the interrogation device. The vehicle device is then authenticated in the case of consistency of the comparison.

Claims

1. A method for auth enticating onboard units, which can conduct dedicated short-range communication (DSRC) communications with beacons of a road toll system, wherein upon a communication from an onboard unit the derivation code is transmitted to the beacon to enable the beacon to emulate the individual key for encrypting or decrypting the communication with the onboard unit or for accessing data stored in the onboard unit, the method comprising:

storing a pool of pairs of individual keys and associated derivation codes, in the onboard unit, wherein the beacons have a system-wide key and the onboard units only have individual keys, which are respectively formed from the system-wide key on the basis of a derivation code specific to each onboard unit;

in the case of consecutive communications, selecting by the onboard unit a different pair of individual key and associated derivation code from the stored pool and using said selected pair for a respective communication;

for authentication, causing the onboard unit by an interrogation device to conduct at least a portion of a radio communication, in which the onboard unit transmits to the interrogation device the selected associated derivation code;

receiving the selected associated derivation code in the interrogation device and comparing it with the derivation codes of the pool; and

authenticating the onboard unit when identity is established according to said comparing.

2. The method according to claim 1, wherein the onboard unit is caused by the interrogation device to conduct consecutive communications to receive multiple different derivation codes and the received multiple different derivation codes are compared with the derivation codes of the pool, and wherein the onboard unit is only authenticated when all comparisons establish identity.

7. The method according to claim 1, wherein the pair is selected in the onboard unit from a subset of the stored pool, and wherein the subset of the stored pool is only used in the case of communications with interrogating devices and not in communications with beacons.

8. The method according to claim 1, wherein the communication occurs in accordance with DSRC standard ISO 4906, EN 15509, IEEE 1609.11 or a standard based there on and the derivation code is the key diversifier of said standard.

3. A method for authenticating onboard units, which can conduct dedicated short-range communication (DSRC) communications with beacons of a road toll system, wherein the beacons have a system-wide key and the onboard units only have individual keys, which are respectively formed from the system-wide key on the basis of a derivation n code specific to each onboard unit, wherein upon a communication from an onboard unit the derivation code is transmitted to the beacon to enable the beacon to emulate the individual key for encrypting or decrypting the communication with the onboard unit or for accessing data stored in the onboard unit, the method comprising:

storing a pool of pairs of individual keys and associated derivation codes, in the onboard unit;

in the case of consecutive communications, selecting by the onboard un it another pair of individual key and associated derivation code from the stored pool and using said selected pair for a respective communication;

for authentication, causing the onboard unit by an interrogation device to conduct at least a portion of a radio communication, in which the onboard unit transmits the selected associated derivation code;

receiving the selected associated derivation code in the interrogation device and comparing it with the derivation codes of the pool; and

authenticating the onboard unit when identity is established according to said comparing, wherein the pair is selected randomly or pseudo-randomly from the stored pool.

4. The method according to claim 3, wherein the onboard unit is caused by the interrogation device to conduct consecutive communications to receive multiple different derivation codes and the received multiple different derivation codes are compared with the derivation codes of the pool, and wherein the onboard unit is only authenticated when all comparisons establish identity.

5. The method according to claim 3, wherein the pair is selected in the onboard unit from a subset of the stored pool, and wherein the subset of the stored pool is only used in the case of communications with interrogating devices and not in communications with beacons.

6. The method according to claim 3, wherein the communication occurs in accordance with DSRC standard ISO 14906, EN 15509, IEEE 1609.11 or a stand and based thereon and the derivation code is the key diversifier of said standard.