Challenge-response methodology for securing vehicle diagnostic services

• US 8,832,825 B2
• Filed: 11/29/2012
• Issued: 09/09/2014
• Est. Priority Date: 11/29/2012
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Cicala, John J.
• Primary Examiner(s): Parthasarathy, Pramila
• Assistant Examiner(s): SONG, HEE K
• Application Number:
  US13/688,355
• Publication Number:
  US 20140150090A1
• Time in Patent Office: 649 Days
• Field of Search: 726/2, 726/19, 726/28, 711/154, 711/163, 713/154, 713/168, 713/182, 713/189, 701/32, 701/33.2, 701/29.1, 701/33.4, 701/49
• US Class Current: 726/19
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A method for locally authenticating a vehicle diagnostic tool with a vehicle using a challenge-response authentication scheme includes: receiving a pairing request from the vehicle diagnostic tool; presenting a user with a challenge through at least one of an audio system and an LCD display associated with the vehicle; receiving a response to the challenge from a user; and authenticating the vehicle diagnostic tool if the response from the user is identical to an expected response.

Claims

1. A method for locally authenticating a vehicle diagnostic tool with a vehicle using a challenge-response authentication scheme, the method comprising:

receiving a pairing request from the vehicle diagnostic tool;

presenting a user with a challenge through at least one of an audio system and an LCD display associated with the vehicle, wherein the challenge includes at least one of an alphanumeric code displayed to the user through the LCD display and a requested local action, wherein the requested local action includes a requested actuation of at least one of a button and a toggle switch of the vehicle;

receiving a response to the challenge from the user, wherein the response includes at least one of a representation of an entered alphanumeric code from the vehicle diagnostic tool and a sequence of user actions within the vehicle, wherein the sequence of user actions includes an actuation of the at least one of the button and the toggle switch of the vehicle; and

authenticating the vehicle diagnostic tool if the response from the user is identical to an expected response.

2. The method of claim 1, wherein the alphanumeric code is a randomly generated number.

3. The method of claim 1, wherein the alphanumeric code includes an odometer reading, a trip meter reading, an average fuel economy reading, or an active radio station.

4. The method of claim 1, wherein authenticating the vehicle diagnostic tool includes granting the vehicle diagnostic tool write-access to a communication bus of the vehicle.

5. The method of claim 4, wherein granting the vehicle diagnostic tool write-access to a communication bus of the vehicle includes broadcasting a write-access message on the communication bus;

the method further comprising authenticating the write-access message to a master controller on the communication bus.

6. A system comprising:

a vehicle diagnostic tool including a display and an input device;

a vehicle in wireless communication with the vehicle diagnostic tool, the vehicle including;

a plurality of vehicle control systems;

an LCD display;

a master controller in networked communication with each of the plurality of vehicle control systems over a communication bus;

wherein the master controller is configured to;

receive a pairing request from the vehicle diagnostic tool;

present a user with a challenge through the LCD display in response to the pairing request, wherein the challenge includes at least one of an alphanumeric code displayed to the user through the LCD display and a requested local action, wherein the requested local action includes a requested actuation of at least one of a button and a toggle switch of the vehicle;

receive a response to the challenge from the user, wherein the response includes at least one of a representation of an entered alphanumeric code from the vehicle diagnostic tool and a sequence of user actions within the vehicle, wherein the sequence of user actions includes an actuation of the at least one of the button and the toggle switch of the vehicle; and

authenticate the vehicle diagnostic tool if the response from the user is identical to an expected response.

7. The system of claim 6, wherein the representation of the alphanumeric code is generated by the vehicle diagnostic tool in response to an alphanumeric entry by the user to the input device.

8. The system of claim 6, wherein the alphanumeric code is a randomly generated number.

9. The system of claim 6, wherein the alphanumeric code includes an odometer reading, a trip meter reading, an average fuel economy reading, or an active radio station.

10. The system of claim 6, wherein the master controller is configured to authenticate the vehicle diagnostic tool by granting the vehicle diagnostic tool write-access to the communication bus of the vehicle.

11. The system of claim 10, wherein the master controller is configured to grant the vehicle diagnostic tool write-access to a communication bus of the vehicle by broadcasting a write-access message on the communication bus;

and

the plurality of vehicle control systems are configured to authenticate the write-access message to the master controller.

12. A system for locally authenticating a vehicle diagnostic tool with a vehicle using a challenge-response authentication scheme, the system, comprising:

a non-transitory computer readable medium containing program instructions for causing a processor to perform the method of;

receiving a pairing request from the vehicle diagnostic tool;

presenting a user with a challenge through at least one of an audio system and an LCD display associated with the vehicle, wherein the challenge includes at least one of an alphanumeric code displayed to the user through the LCD display and a requested local action, wherein the requested local action includes a requested actuation of at least one of a button and a toggle switch of the vehicle;

receiving a response to the challenge from a user via an input device of the vehicle diagnostic tool, wherein the response includes at least one of a representation of an entered alphanumeric code from the vehicle diagnostic tool and a sequence of user actions within the vehicle, wherein the sequence of user actions includes an actuation of the at least one of the button and the toggle switch of the vehicle; and

authenticating the vehicle diagnostic tool if the response from the user is identical to an expected alphanumeric response.

13. The system of claim 12, wherein the alphanumeric challenge includes a randomly generated number.

14. The system of claim 12, wherein the alphanumeric challenge includes an odometer reading, a trip meter reading, an average fuel economy reading, or an active radio station.

15. The system of claim 12, wherein authenticating the vehicle diagnostic tool includes granting the vehicle diagnostic tool write-access to a communication bus of the vehicle.

16. The system of claim 15, wherein granting the vehicle diagnostic tool write-access to a communication bus of the vehicle includes broadcasting a write-access message on the communication bus;

the method further comprising authenticating the write-access message to a master controller on the communication bus.