Apparatus, system, and method for authentication of vehicular components

• US 8,798,852 B1
• Filed: 06/14/2013
• Issued: 08/05/2014
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Gogoro Inc.
• Original Assignee: Gogoro Inc.
• Inventors: Chen, Ching, Taylor, Matthew Whiting, Luke, Hok-Sum Horace, Huang, Jui Sheng
• Primary Examiner(s): To, Tuan C.
• Assistant Examiner(s): Hilgendorf, Dale W
• Application Number:
  US13/918,703
• Time in Patent Office: 417 Days
• Field of Search: 701/2, 701/36, 701/48, 701/29.1, 701/29.6, 701/31.4, 701/32.7, 701/34.4, 701/32.6, 714/25, 714/30, 714/37, 714/41, 714/51, 726/2, 726/5
• US Class Current: 701/32.6
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

Manufacturers and original equipment manufacturers provide vehicles that include various components and systems that operate to provide safe, environmentally conscious transportation compliant with local, state, and federal requirements. Each of the components or systems may include a nontransitory storage media containing data indicative of an authentication code specific to the respective component or system. Authentication data may be communicated from each of the nontransitory storage media on a vehicle to a control system where the authentication data is compared to one or more defined criteria. If the one or more criteria confirm the validity of the authentication data supplied by the components or systems, full operation of one or more vehicular systems is permitted. If the one or more criteria fail to confirm the validity of the authentication data supplied by the components or systems, the operation of at least one vehicular system is at least partially inhibited.

Claims

1. A system for authenticating a first plurality of components operably coupled to a vehicle via a first authentication method and authenticating a second plurality of components operably coupled to the vehicle via a second authentication method that differs from the first authentication method, wherein the first plurality of components and the second plurality of components include at least one different component, and wherein a portable electrical power storage device is common to both the first plurality and the second plurality of components, the system comprising:

a vehicle controller;

at least one communications interface communicably coupled to the vehicle controller, a non-rewriteable portion of a respective nontransitory storage media carried by each of the first plurality of components, and a respective nontransitory storage media carried by each of the second plurality of components;

at least one controller-readable, nontransitory, storage communicably coupled to the vehicle controller and having stored therein at least data indicative of a manufacturer-specific authentication string used in the first authentication method, data indicative of a vehicle-specific authentication code used in the second authentication method, and at least one machine executable instruction set that when executed by the vehicle controller, causes the vehicle controller to;

authenticate each of the first plurality of components via the first authentication method by causing the vehicle controller to;

generate an authentication seed;

communicate the authentication seed to each of the components included in the first plurality of components;

determine, based at least in part on the data indicative of the manufacturer-specific authentication string and the authentication seed, a valid, manufacturer-specific, authentication code used in the first authentication method;

receive authentication data from each of the first plurality of components, the authentication data generated by each of the first plurality of components using the authorization seed and a manufacturer-specific authentication string stored in a non-rewriteable portion of the nontransitory storage media carried by the respective component;

validate the authentication data provided by each of the components included in the first plurality of components using the valid manufacturer-specific, authentication code determined by the vehicle controller; and

at least partially inhibit operation of at least one vehicular system responsive to an unsuccessful validation of the authentication data provided by at least one of the components included in the first plurality of components; and

authenticate each of the second plurality of components via the second authentication method by causing the vehicle controller to;

responsive to receiving a request to enable vehicle operation, receive data indicative of a vehicle-specific authentication code from a respective nontransitory storage media carried by each component included in the second plurality of components, the vehicle-specific authentication code stored in a selectively rewriteable portion of the nontransitory storage media carried by the portable electrical power storage device;

validate at least a portion of the vehicle-specific authentication code received from each component in the second plurality of components against the vehicle-specific authentication code stored in the at least one controller-readable, nontransitory, storage; and

inhibit operation of the vehicle responsive to an unsuccessful validation of the vehicle-specific authentication code received from at least one component included in the second plurality of components.

2. The system of claim 1 wherein the data indicative of the manufacturer-specific authentication string includes data indicative of a manufacturer-specific key assigned by at least one of a vehicle manufacturer or an original equipment supplier.

3. The system of claim 2 wherein the data indicative of the authentication seed comprises a random number.

4. The system of claim 1 wherein the respective nontransitory storage media carried by each of the first plurality of components comprises a non-rewriteable nontransitory storage media carried by one or more of the following components:

the vehicle controller, the portable electrical power storage device, and a vehicular power system control device.

5. The system of claim 4 wherein respective nontransitory storage media carried by each of the second plurality of components comprises nontransitory storage media carried by one or more of the following components:

the vehicle controller, the portable power storage device, and a vehicular key or keyfob.

6. The system of claim 5 wherein the portable electrical power storage device an consists of a non-vehicle specific, replaceable, electrical charge storage device;

and

wherein the nontransitory storage media carried by the non-vehicle specific, interchangeable electrical charge storage device comprises a non-rewriteable portion in which data indicative of a manufacturer-specific authentication string is stored and a selectively rewriteable portion in which data indicative of a vehicle-specific authentication code is stored.

7. The system of claim 1 wherein the at least one machine executable instruction set further causes the vehicle controller to:

compare the authentication data received from each of the components included in the first plurality of components with one or more defined criteria to determine a suitability for each of at least a portion of the first plurality of components for use with the vehicle;

at least partially inhibit operation of at least one vehicular system responsive to the determination that at least one of the first plurality of components is not suitable for use with the vehicle; and

permit operation of the at least one vehicular system responsive to the determination that each of the first plurality of components is suitable for use with the vehicle.

8. The system of claim 7, further comprising at least one human perceptible output device, wherein the machine executable instruction set, when executed by the vehicle controller, further causes the vehicle controller to provide via the at least one human perceptible output device at least one of:

a human perceptible audible output or a human perceptible visual output responsive to at least partially inhibiting operation of the at least one vehicular system.

9. The system of claim 7 wherein the machine executable instruction set, when executed by the vehicle controller, further causes the vehicle controller to:

inhibit operation of the vehicle responsive to the determination that at least one of a number of defined critical vehicular components included in the first plurality of components is not suitable for use with the vehicle based at least in part on the authentication data provided by the nontransitory storage media carried by the respective critical vehicular component.

10. The system of claim 7 wherein the machine executable instruction set, when executed by the vehicle controller, further causes the vehicle controller to:

select a vehicle performance profile responsive to the determination that the number of components comprising the at least one vehicular system and included in the first plurality of components are suitable for use with the selected vehicle performance profile based at least in part on the authentication data provided by each respective one of the number of vehicular components comprising the at least one vehicular system.

11. The system of claim 7 wherein at least some of the components included in the first plurality of components further comprise a wireless communications interface communicably coupled to the nontransitory storage media carried by the respective component, the wireless communications interface communicably coupleable to the at least one communications interface communicably coupled to the vehicle controller.

12. The system of claim 11 wherein at least some of the components included in the second plurality of components further comprise a wireless communications interface communicably coupled to the nontransitory storage media carried by the respective component, the wireless communications interface communicably coupleable to the at least one communications interface communicably coupled to the vehicle controller.

13. The system of claim 12 wherein the communications interface communicably coupled to the nontransitory storage media carried by at least some of the components included in the first plurality of components comprises at least one of:

a radio frequency identification (“

RFID”

) interface, or a near field communications (“

NFC”

) interface; and

wherein the communications interface communicably coupled to the nontransitory storage media carried by at least some of the components included in the second plurality of components comprises at least one of;

an RFID interface, or an NFC interface.

14. The system of claim 7 wherein at least some of the components included in the first plurality of components further comprise a wired communications interface communicably coupled to the nontransitory storage media carried by the respective component, the wired communications interface communicably coupleable to the communications interface communicably coupled to the vehicle controller.

15. A method for authenticating components operably coupled to a vehicle, the method comprising:

generating, by a vehicle controller, data indicative of an authentication seed;

determining, by the vehicle controller, a valid manufacturer-specific authentication code based at least in part on the data indicative of the authentication seed and data indicative of a manufacturer-specific authentication string;

transmitting via a communications interface communicably coupled to the vehicle controller, the data indicative of the authentication seed to a respective nontransitory storage media carried by each component included in a first plurality of components, the first plurality of components including a portable electrical power storage device;

receiving authentication data returned by each of the components included in the first plurality of components, the authentication data generated at least in part using data indicative of the manufacturer-specific authentication string stored in a non-rewriteable portion of the nontransitory storage media carried by each respective component included in the first plurality of components and the data indicative of the authentication seed; and

validating, by the vehicle controller, the authentication data returned by each of the components included in the first plurality of components using at least in part valid manufacturer-specific authentication code determined by the vehicle controller;

at least partially inhibiting, by the vehicle controller, an operation of at least one vehicular system responsive to a failure to validate the authentication data received from at least one of the components included in the first plurality of components;

responsive to receiving a request to enable vehicle operation, receiving data indicative of a vehicle-specific authentication code from a nontransitory storage media carried by each component included in a second plurality of components, the second plurality of components including the portable electrical power storage device and at least one component not included in the first plurality of components, the vehicle-specific authentication code stored in a selectively rewriteable portion of the nontransitory storage media carried by the portable electrical power storage device;

validating, by the vehicle controller, at least a portion of the vehicle-specific authentication code received from each component included in the second plurality of components; and

inhibiting, by the vehicle controller, operation of the vehicle responsive to an unsuccessful validation of the vehicle-specific authentication code received from at least one of the components included in the second plurality of components.

16. The method of claim 15 wherein transmitting via a communications interface communicably coupled to the vehicle controller, data indicative of the authentication seed from the vehicle controller to the nontransitory storage media carried by each of the components included in the first plurality of components includes:

transmitting via a communications interface communicably coupled to the vehicle controller, data indicative of the authentication seed to the nontransitory storage media carried by the at least one portable electrical power storage device and to the nontransitory storage media carried by a vehicular power system control device.

17. The method of claim 16 wherein receiving data indicative of a vehicle-specific authentication code from a nontransitory storage media carried by each component included in a second plurality of components includes:

receiving data indicative of a vehicle-specific authentication code from the selectively rewriteable portion of the nontransitory storage media carried by the at least one portable electrical power storage device and from the nontransitory storage media carried by a vehicular key or keyfob.

18. The method of claim 15 wherein generating, by the vehicle controller, data indicative of the authentication seed includes;

generating, by the vehicle controller, data indicative of a random number.

19. A non-transitory computer readable medium containing instructions that, when executed by a vehicular controller, cause the vehicular controller to:

generate data indicative of an authentication seed;

determine a valid manufacturer-specific authentication code based at least in part on data indicative of the authentication seed and data indicative of a manufacturer-specific authentication string;

transmit data indicative of the authentication seed to a respective nontransitory storage media carried by each component included in a first plurality of components, the first plurality of components including a portable electrical power storage device;

receive authentication data from each component included in the first plurality of components, the received authentication data generated by each respective component at least in part using data indicative of a manufacturer-specific authentication string stored in a non-rewriteable portion of the nontransitory storage media carried by the respective component and the data indicative of the received authentication seed;

validate the authentication data provided by each of the components included in the first plurality of components using at least in part the valid manufacturer-specific authentication code determined by the vehicle controller;

at least partially inhibit an operation of at least one vehicular system responsive to a failure to validate the authentication data received from at least one of the components included in the first plurality of components;

responsive to the receipt of a request to enable vehicle operation, receive data indicative of a vehicle-specific authentication code from a nontransitory storage media carried by each component included in a second plurality of components, the second plurality of components including the portable electrical power storage device and at least one other component not included in the first plurality of components, the vehicle-specific authentication code stored in a selectively rewriteable portion of the nontransitory storage media carried by the portable electrical power storage device;

validate at least a portion of the vehicle-specific authentication code received from each component included in the second plurality of components; and

inhibit operation of the vehicle responsive to an unsuccessful validation of the vehicle-specific authentication code received from at least one of the components included in the second plurality of components.

20. The nontransitory computer readable media of claim 19, further comprising instructions that when executed by the vehicular controller, cause the vehicular controller to:

generate at least one human perceptible output responsive to the determination that at least one of a number of components comprising at least one vehicular system is unsuitable for use with a vehicle based at least in part on the received authentication data associated with the respective component.

21. A vehicle controller, comprising:

at least one input to receive manufacturer-specific authentication data from each component included in a first plurality of components operably coupled to a vehicle, the first plurality of components including a portable electrical power storage device, the manufacturer-specific authentication data generated at least in part using data indicative of an authentication seed generated by the vehicle controller and data indicative of a manufacturer-specific authentication string stored in a non-rewriteable portion of a nontransitory storage media carried by each of the components included in the first plurality of components;

a controller-readable nontransitory storage media communicably coupled to the vehicle controller, the controller-readable nontransitory storage media containing one or more sets of machine executable instructions that when executed by the vehicle controller, cause the vehicle controller to;

determine a valid manufacturer-specific authentication code based at least in part on the data indicative of a valid manufacturer-specific authentication string stored in the controller-readable nontransitory storage media and the data indicative of the authentication seed;

validate the manufacturer-specific authentication data provided by each of the components included in the first plurality of components using the valid manufacturer-specific authentication code determined by the vehicle controller;

at least partially inhibit operation of at least one vehicular system responsive to an unsuccessful validation of the authentication data provided by at least one component included in the first plurality of components;

responsive to the receipt of a request to enable vehicle operation, receive data indicative of a vehicle-specific authentication code from a nontransitory storage media carried by each component included in a second plurality of components, the second plurality of components including the portable electrical power storage device and at least one other component not included in the first plurality of components, the vehicle-specific authentication code stored in a selectively rewriteable portion of the nontransitory storage media carried by the portable electrical power storage device;

validate at least a portion of the second authentication code received from each component included in the second plurality of components; and

inhibit operation of the vehicle responsive to an unsuccessful validation of the second authentication code received from at least one of the components included in the second plurality of components.

22. The controller of claim 21 wherein the one or more sets of machine executable instructions further cause the controller to:

select a vehicle performance profile responsive to the determination that a number of vehicular components comprising the at least one vehicular system and included in the first plurality of components are suitable for use with the selected vehicle performance profile based at least in part on the authentication data provided by the respective nontransitory storage media carried by the vehicular components comprising the at least one vehicular system.