Apparatus and method for providing location based security for communication with a remote device

• US 9,356,925 B2
• Filed: 10/31/2008
• Issued: 05/31/2016
• Est. Priority Date: 10/31/2008
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Alrabady, Ansaf I., Huntzicker, Fred W., Racklyeft, David
• Primary Examiner(s): HUNNINGS, TRAVIS R
• Application Number:
  US12/263,029
• Publication Number:
  US 20100109835A1
• Time in Patent Office: 2,769 Days
• Field of Search: 340/5.2, 340/5.21, 340/5.86, 340/539.13, 340/539.11, 340/539.14, 342/357.25, 342/357.33, 342/357.34
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

A method for providing location based security for communication between a remote device and a mobile device having a global positioning system receiver for determining its current position. The method comprises receiving geographic data from the remote device, determining if the mobile device is within a predetermined geographic region based on the geographic data and the current position, and enabling subsequent communication with the remote device when the current position is within the predetermined geographic region.

Claims

1. A method for providing location based security for communication between a remote device and a vehicle having a global positioning system receiver for determining a current position of the vehicle, the method comprising:

receiving, via a transceiver onboard the vehicle, geographic data from the remote device, the geographic data comprising a latitude and a longitude for a single location;

determining if the vehicle is located at an authorized vehicle service facility based on the geographic data and the current position;

enabling subsequent communication between the remote device and the vehicle when the vehicle is located at the authorized vehicle service facility, and

disabling subsequent communication between the remote device and the vehicle when the vehicle is not located at the authorized vehicle service facility.

2. The method of claim 1, wherein the step of receiving further comprises receiving a digital signature, wherein a trusted entity generates the digital signature by digitally signing a message that comprises the geographic data.

3. The method of claim 2, further comprising verifying that the digital signature was generated by the trusted entity.

4. The method of claim 3, wherein the step of receiving further comprises receiving a digital certificate from the remote device, the digital certificate comprising the geographic data and the digital signature.

5. The method of claim 4, wherein the step of receiving further comprises receiving the digital certificate as part of a handshake procedure for establishing a secure connection between the remote device and the vehicle.

6. The method of claim 5, wherein the step of receiving further comprises receiving the digital certificate as part of a Transport Layer Security handshake procedure.

7. The method of claim 1, wherein the method further comprises determining if the current position of the vehicle is within the authorized vehicle service facility based on a comparison of the coordinates of the single location with the current position of the vehicle.

8. An apparatus for providing location based security for communication between a vehicle and a remote device, the apparatus comprising:

a wireless transceiver coupled to the vehicle;

a global positioning system receiver coupled to the vehicle for determining a current position of the vehicle; and

a processor coupled to the wireless transceiver and the global positioning system receiver, the processor configured to;

receive a digital certificate comprising geographic data and a corresponding digital signature from the remote device via the wireless transceiver, the geographic data comprising a latitude and a longitude for a single location;

verify that the digital certificate was issued by a trusted certificate authority;

determine if the vehicle is located at an authorized vehicle dealership based on the geographic data and the current position of the vehicle;

enable subsequent communication between the remote device and the vehicle when the vehicle is located at the authorized vehicle dealership and the digital certificate was issued by a trusted certificate authority; and

disable subsequent communication between the remote device and the vehicle when the vehicle is not located at the authorized vehicle dealership, the digital certificate was not issued by a trusted certificate authority, or both.

9. The apparatus of claim 8, wherein the processor is further configured to receive the digital certificate during a handshake procedure for establishing a secure connection with the remote device.

10. The apparatus of claim 9, wherein the processor is further configured to receive the digital certificate during a Transport Layer Security handshake procedure.

11. The method of claim 9, wherein the single location comprises the authorized vehicle service facility.

12. The method of claim 11, further comprising:

calculating a distance between the single location of the authorized vehicle service facility and the current position of the vehicle using;

latitude and longitude coordinates of the authorized vehicle service facility as obtained from the geographic data; and

latitude and longitude coordinates of the vehicle as obtained from the GPS;

wherein the step of determining if the vehicle is located at the authorized vehicle service facility comprises;

determining that the vehicle is located at the authorized vehicle service facility when the calculated distance is less than a predetermined threshold value; and

determining that the vehicle is not located at the authorized vehicle service facility when the calculated distance is greater than the predetermined threshold value.

13. The method of claim 12, wherein:

the step of enabling subsequent communication between the remote device and the vehicle comprises enabling subsequent communication between the remote device and the vehicle when the vehicle is located at the authorized vehicle service facility, based on whether the calculated distance is less than the predetermined threshold; and

the step of disabling subsequent communication between the remote device and the vehicle comprises disabling subsequent communication between the remote device and the vehicle when the vehicle is not located at the authorized vehicle service facility, based on whether the calculated distance is greater than the predetermined threshold.

14. The apparatus of claim 8, wherein the single location comprises the authorized vehicle dealership.

15. The apparatus of claim 14, wherein the processor is further configured to determine if the distance between the single location and the current position of the vehicle is less than a predetermined threshold distance.

16. The apparatus of claim 8, wherein the processor is further configured to:

calculate a distance between the single location of the authorized vehicle dealership and the current position of the vehicle using;

latitude and longitude coordinates of the authorized vehicle dealership as obtained from the geographic data; and

latitude and longitude coordinates of the vehicle as obtained from the GPS;

determine that the vehicle is located at the authorized vehicle dealership when the calculated distance is less than a predetermined threshold value;

determine that the vehicle is not located at the authorized vehicle dealership when the calculated distance is greater than the predetermined threshold value;

enable subsequent communication between the remote device and the vehicle when the vehicle is located at the authorized vehicle dealership, based on whether the calculated distance is less than the predetermined threshold; and

disable subsequent communication between the remote device and the vehicle when the vehicle is not located at the authorized vehicle dealership, based on whether the calculated distance is greater than the predetermined threshold.

17. An apparatus for establishing a secure connection with a vehicle, the apparatus comprising:

a network interface for communicating with the vehicle while the vehicle is located at an authorized vehicle service facility;

a processor coupled to the network interface and configured to;

transmit geographic data and an associated digital signature to the vehicle, the geographic data comprising a latitude and a longitude for a single location;

receive data regarding the vehicle from a remote device when the vehicle is located at the authorized vehicle service facility as determined based on the geographic data;

determine if the vehicle is located at an authorized vehicle dealership based on the geographic data and the current position of the vehicle;

enable subsequent communication between the remote device and the vehicle when the vehicle is located at the authorized vehicle service facility; and

disable subsequent communication between the remote device and the vehicle when the vehicle is not located at the authorized vehicle service facility.

18. The apparatus of claim 17, wherein the processor is further configured to transmit a digital certificate issued by a trusted certificate authority to the vehicle, the digital certificate comprising geographic data and the associated digital signature.

19. The apparatus of claim 18, wherein the processor is further configured to transmit the digital certificate to the vehicle during a Transport Layer Security handshake procedure.

20. The apparatus of claim 17, wherein:

the single location comprises the authorized vehicle service facility; and

the processor is further configured to;

calculate a distance between the single location of the authorized vehicle service facility and the current position of the vehicle using;

latitude and longitude coordinates of the authorized vehicle service facility as obtained from the geographic data; and

latitude and longitude coordinates of the vehicle as obtained from the GPS;

determine that the vehicle is located at the authorized vehicle service facility when the calculated distance is less than a predetermined threshold value;

determine that the vehicle is not located at the authorized vehicle service facility when the calculated distance is greater than the predetermined threshold value;

enable subsequent communication between the remote device and the vehicle when the vehicle is located at the authorized vehicle service facility, based on whether the calculated distance is less than the predetermined threshold; and

disable subsequent communication between the remote device and the vehicle when the vehicle is not located at the authorized vehicle service facility, based on whether the calculated distance is greater than the predetermined threshold.