System for personalized telematic services

• US 9,306,924 B2
• Filed: 09/27/2013
• Issued: 04/05/2016
• Est. Priority Date: 09/28/2012
• Status: Active Grant

• Current Assignee: Harman Becker Automotive Systems GmbH (Samsung Electronics Co. Ltd.)
• Original Assignee: Harman Becker Automotive Systems GmbH (Samsung Electronics Co. Ltd.)
• Inventors: Lehmann, Dirk
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US14/039,503
• Publication Number:
  US 20140096217A1
• Time in Patent Office: 921 Days
• Field of Search: 726/7, 701/29.1, 701/31.4
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]

Abstract

A telematics system can provide authenticated access to telematic services. Upon connection of a mobile communication device to an automotive telematic system, and receipt of a request to access a telematic service, the system can determine by a processing unit of the automotive telematic system whether a personalized key for user authentication is required to access the telematic service and, if it is determined that the personalized key is required, request the personalized key from the mobile communication device.

Claims

1. A method for authenticated access to telematic services, comprising:

establishing a connection between a mobile communication device and an automotive telematic system;

after establishing the connection, receiving, from a user via an input device of the automotive telematic system, a request to access a telematic service;

after the receiving, determining by a processing unit of the automotive telematic system that a personalized key for user authentication is required to access the requested telematic service;

in response to determination that the personalized key is required, the processing unit requesting the personalized key from the mobile communication device; and

after the requesting, receiving, with the automotive telematic system, the requested personalized key from the mobile communication device in an encrypted form.

2. The method according to claim 1,

where upon receipt of the request for the personalized key from the automotive telematic system, the mobile communication device runs an application for transmitting the requested personalized key to the automotive telematic system, the application run on a processing unit of the mobile communication device in an application layer;

and

where the encrypted form of the requested personalized key is generated by the processing unit in the application layer.

3. The method according to claim 1,

where establishing the connection between the mobile communication device and the automotive telematic system comprises automatically establishing a short-range wireless connection with the mobile communication device using a short-range wireless transceiver of the automotive telematic system.

4. The method according to claim 3, where establishing the short-range wireless connection comprises Secure Simple Pairing (SSP) of the mobile communication device and the automotive telematic system.

5. The method according to claim 1,

where establishing the connection between the mobile communication device and the automotive telematic system comprises establishing a Wi-Fi connection with a Wi-Fi transceiver of the mobile communication device using a Wi-Fi transceiver of the automotive telematic system.

6. The method according to claim 1, further comprising:

reading the requested personalized key from a storage unit included in a subscriber identity module (SIM) card of the mobile communication device;

where at least one personalized key has previously been stored on the storage unit.

7. The method according to claim 1,

where the telematic service is at least partly provided by an external provider;

and

where determining that the personalized key for user authentication is required to access the telematic service comprises;

initiating a connection between the automotive telematic system and a remote server of the external provider;

sending a request to access the telematic service to the remote server; and

determining from a response received from the remote server that the personalized key for user authentication is required to access the telematic service.

8. The method according to claim 1, further comprising:

accessing the telematic service, which comprises accessing personalized data stored in an encrypted form on a storage unit of the automotive telematic system; and

where accessing the personalized data comprises decrypting the personalized data using the requested personalized key.

9. The method according to claim 1,

where the requested personalized key comprises a user identification and at least one of a passphrase or an encryption key.

10. The method according to claim 1,

where the requested personalized key is not stored by the automotive telematic system.

11. An automotive telematic system, adapted to be connected to a mobile communication device, comprising:

an input device configured to receive a request to access a telematic service from a user via user input; and

a processing unit configured to determine that a personalized key for user authentication is required to access the telematic service;

where in response to determination that the personalized key is required, the processing unit is further configured to request the personalized key from the mobile communication device, which is connected to the automotive telematic system; and

where the processing unit is further configured to perform communication with the mobile communication device in an encrypted form.

12. The automotive telematic system according to claim 11, further comprising:

a short-range wireless transceiver configured to automatically establish a short-range wireless connection to a short-range wireless transceiver of the mobile communication device;

where establishing the short-range wireless connection comprises Secure Simple Pairing (SSP) of the mobile communication device and the automotive telematic system.

13. The automotive telematic system according to claim 11,

where the telematic service is at least partly provided by an external provider;

where the automotive telematic system is further adapted to establish a connection to a remote server of the external provider, and to send a request to access the telematic service to the remote server via the connection; and

where the processing unit is further configured to determine from a response received from the remote server that the personalized key for user authentication is required to access the telematic service.

14. A non-transitory computer readable storage medium configured to store instructions executable by a processor, the computer readable storage medium comprising:

instructions executable by the processor to establish communications with a mobile communication device;

instructions executable by the processor to receive a request to access a telematic service of an automotive telematic system from a user via an input device of the automotive telematic system;

instructions executable by the processor to determine that a personalized key for user authentication is required to access the requested telematic service; and

instructions executable by the processor to, in response to determination that the personalized key is required, request the personalized key from the mobile communication device over the established communications.

15. The computer readable medium of claim 14, where the instructions executable by the processor to determine that the personalized key for user authentication is required comprises instructions executable by the processor to determine from information included with the request, whether the telematic service is at least partly provided by an external provider, and instructions to establish a connection between the automotive telematic system and a remote server of the external provider.

16. The computer readable medium of claim 14, where the mobile communication device is a first mobile communication device and the personalized key is a first personalized key, and the computer readable medium further comprises:

instructions executable by the processor to establish communications with a second mobile communication device;

instructions executable by the processor to receive another request to access the telematic service of the automotive telematic system, where the another request identifies the second mobile communication device; and

instructions executable by the processor to request a second personalized key from the second mobile communication device over the established communications.

17. The computer readable medium of claim 14, where the instructions to request the personalized key include instructions to select the mobile communication device to receive the request for the personalized key, based on information comprising a user identity included in the request to access the telematic service of the telematic system.

18. The computer readable medium of claim 14, further comprising instructions executable by the processor to generate an error signal absent receipt from the mobile communication device of the requested personalized key within a predetermined period of time.