Secure manipulation of embedded modem connection settings through short messaging service communication

• US 9,398,397 B2
• Filed: 01/09/2014
• Issued: 07/19/2016
• Est. Priority Date: 01/09/2014
• Status: Active Grant

• Current Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Original Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Inventors: Petersen, Brian, Yalavarty, Praveen, Pandya, Ritesh, Rork, Joseph Paul
• Primary Examiner(s): MOORTHY, ARAVIND K
• Application Number:
  US14/151,531
• Publication Number:
  US 20150195364A1
• Time in Patent Office: 922 Days
• Field of Search: 713/168, 370/228, 370/254, 709/220
• US Class Current: 1/1
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/344 Out-of-band transfers
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

A vehicle may include at least one controller configured to maintain a communication channel over a network between a vehicle and a vehicle service server accessible through an access point node. The at least one controller may be further configured to receive, over the network out-of-band from the communication channel, an update message including updated communication channel connection information, and upon receiving the message, reconnect the communication channel according to the updated connection information. A secure server may be configured to generate the update message specifying at least one of updated access point node information and updated address information, encrypt the update message according to an encryption key shared with a vehicle destination, and provide the update message over a network to the vehicle out-of-band from the communication channel.

Claims

1. A computer-implemented method comprising:

maintaining a communication channel over a network between a vehicle and a vehicle service server accessible through an access point node;

receiving, over the network out-of-band from the communication channel, an update message including updated communication channel connection information; and

upon receiving the message, reconnecting the communication channel according to the updated connection information.

2. The method of claim 1, further comprising receiving the update message over cellular short messaging service.

3. The method of claim 1, further comprising decrypting the update message according to a decryption key corresponding to an encryption performed to the update message by a secure server sending the update message.

4. The method of claim 1, further comprising updating connection information stored by the vehicle according to the update message.

5. The method of claim 4, the connection information including access point node information specifying connection parameters to connect the vehicle to the access point node, and address information specifying an address of the vehicle service server reachable over the access point node and providing at least one network service to the vehicle.

6. The method of claim 5, the updated connection information specifying at least one of updated access point node information and updated address information.

7. A vehicle comprising:

a modem configured to maintain a communication channel over a network between the vehicle and a vehicle service server accessible through an access point node; and

a controller configured to

receive, from the modem over the network out-of-band from the communication channel, an update message including updated communication channel connection information; and

responsive to receiving the message, direct the modem to reconnect the communication channel according to the updated connection information.

8. The vehicle of claim 7, the controller further configured to receive the update message over cellular short messaging service.

9. The vehicle of claim 7, the controller further configured to decrypt the update message according to a decryption key corresponding to an encryption performed to the update message by a secure server sending the update message.

10. The vehicle of claim 7, the controller further configured to update connection information stored by the vehicle according to the update message.

11. The vehicle of claim 10, the connection information including access point node information specifying connection parameters to connect the vehicle to the access point node, and address information specifying an address of the vehicle service server reachable over the access point node and providing at least one network service to the vehicle.

12. The vehicle of claim 11, the updated connection information specifying at least one of updated access point node information and updated address information.

13. A system comprising:

a secure server configured to;

generate an update message specifying at least one of updated access point node information and updated address information;

encrypt the update message according to an encryption key shared with a vehicle destination; and

provide the update message over a network to a vehicle out-of-band from a communication channel between the vehicle and a vehicle service server accessible through an access point node.

14. The system of claim 13, wherein the secure server is further configured to provide the update message over cellular short messaging service.

15. The system of claim 13, wherein the secure server is further configured to validate, before providing the update message to the vehicle, at least one of (i) an identity of a party requesting the update message be sent to the vehicle and (ii) login credentials received from the party requesting the update message.

16. The system of claim 13, the access point node information specifying connection parameters to connect the vehicle to the access point node, the address information specifying an address of the vehicle service server reachable over the access point node and providing at least one network service to the vehicle.

17. The system of claim 13, further comprising the vehicle, wherein the vehicle is configured to:

maintain a communication channel over the network between the vehicle and the service server;

receive the update message; and

upon receiving the message, reconnect the communication channel according to the at least one of updated access point node information and updated address information.

18. The system of claim 17, the vehicle further configured to receive the update message over cellular short messaging service.

19. The system of claim 17, the vehicle further configured to decrypt the update message according to a decryption key corresponding to an encryption performed to the update message by a secure server sending the update message.

20. The system of claim 17, the vehicle further configured to update connection information stored by the vehicle according to the update message.