On-board vehicle communication system and method

• US 9,485,247 B2
• Filed: 03/04/2014
• Issued: 11/01/2016
• Est. Priority Date: 03/04/2014
• Status: Active Grant

• Current Assignee: Nissan Motor Co., Ltd.
• Original Assignee: Nissan North America Incorporated (Nissan Motor Co., Ltd.)
• Inventors: Goudy, Roy W, Christensen, Andrew, Probert, Neal
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): Le, Thanh T
• Application Number:
  US14/197,132
• Publication Number:
  US 20150256534A1
• Time in Patent Office: 973 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

An on-board vehicle communication system and method employ a storage device, a communication device and a controller. The storage device is configured to store a plurality of security certificates. The communication device is configured to receive external information that is external to a host vehicle equipped with the on-board vehicle communication system. The controller is configured to determine whether to begin a security certificate replenishment process to attempt to receive additional security certificates from at least one source that is external of the host vehicle based on the received external information, upon an amount of security certificates stored in the storage device decreasing below a first prescribed threshold.

Claims

1. An on-board vehicle communication system comprising:

a memory configured to store a plurality of security certificates;

a communication processor configured to receive external information that is external to a host vehicle equipped with the on-board vehicle communication system, the external information representing a driving environment in which the host vehicle is travelling the communication device being further configured to communicate with a remote device that is external to the host vehicle; and

a controller configured to evaluate whether an amount of security certificates stored in the storage device has decreased below a first prescribed threshold and, upon determining that the amount of security certificates has decreased below the first prescribed threshold, perform a security certificate replenishment process while permitting the communication device to use a backup security certificate, which is different from any other of the security certificates, to communicate with the remote device, such that during the security certificate replenishment process the controller evaluates the external information representing the driving environment to assess a risk factor pertaining to the travelling of the host vehicle in the driving environment, compares the risk factor to a risk threshold, controls the communication device to attempt to receive additional security certificates from at least one source that is external of the host vehicle upon determining that the risk factor is below the risk threshold, and controls the communication device to refrain from attempting to receive the additional security certificates from the at least one source upon determining that the risk factor is at least equal to the risk threshold.

2. The on-board vehicle communication system according to claim 1, wherein

the controller is further configured to determine a traffic environment based on the received external information representing the driving environment and to determine the risk factor based on the traffic environment.

3. The on-board vehicle communication system according to claim 2, wherein

the controller is further configured to set the risk factor at a first risk factor level upon determining that the driving environment indicates a first traffic level and to set the risk factor at a second risk factor level, which indicates less risk than that indicated by the first risk factor level, upon determining that the driving environment indicates a second traffic level which indicates an amount of traffic that is sparser than an amount of traffic indicative of the first traffic level.

4. The on-board vehicle communication system according to claim 1, wherein

the controller is further configured to set the risk factor at a first risk factor level upon determining that the external information representing the driving environment indicates a first probability of the host vehicle contacting a remote object, and to set the risk factor at a second risk factor level, which is lower than the first risk factor level, upon determining that the external information representing the driving environment indicates a second probability of the host vehicle contacting a remote object, the second probability being lower than the first probability.

5. The on-board vehicle communication system according to claim 1, wherein

the controller is configured to provide a security certificate replenishment notification during the security certificate replenishment process.

6. The on-board vehicle communication system according to claim 1, wherein

the controller is configured to control the communication device to attempt to obtain additional security certificates from the source during the security certificate replenishment process.

7. The on-board vehicle communication system according to claim 1, wherein

the memory is configured to store a plurality of security certificates in a plurality of storage stages.

8. The on-board vehicle communication system according to claim 7, wherein

the plurality of storage stages includes a first storage stage and a second storage stage, and the controller is configured to move those of the security certificates in the second storage stage to the first storage stage as the security certificates in the first storage stage are depleted.

9. The on-board vehicle communication system according to claim 1, wherein

the controller is configured to control a user interface in the host vehicle to present information pertaining to at least one characteristic of the at least one source.

10. The on-board vehicle communication system according to claim 9, wherein

the at least one characteristic includes information pertaining to at least one location of the at least one source in relation to a present location of the host vehicle.

11. The on-board vehicle communication system according to claim 10, wherein

the at least one characteristic includes information pertaining to the source that is closest to the present location of the host vehicle.

12. The on-board vehicle communication system according to claim 9, wherein

the at least one characteristic includes information pertaining to at least one type of connection of the at least one source.

13. The on-board vehicle communication system according to claim 12, wherein

the at least one characteristic includes information pertaining to the type of connection having a security level which is more secure than a respective security level of any other type of connections available at the at least one source.

14. The on-board vehicle communication system according to claim 1, wherein

the memory is configured to store a plurality of external source identifiers and a respective priority level associated with each respective one of the external source identifiers;

and

the controller is further configured to compare identification information included in the received external information with the external source identifiers to determine a manner in which to process the received external information based on the comparison.

15. The on-board vehicle communication system according to claim 14, wherein

the controller is further configured, upon determining that the identification information corresponds to one of the external source identifiers, to compare the identification information included in the received external information with the respective priority level associated with the one of the external source identifiers to determine the manner in which to process the received external information based on the comparison of the identification information with the respective priority level.

16. The on-board vehicle communication system according to claim 1, wherein

the controller is further configured to assess a validity of the received external information based on information included in the received external information, and to control the communication device to provide an invalidity indicator for receipt by an external destination upon determining that the received external information is potentially invalid.

18. The on-board vehicle communication system according to claim 1, wherein

the controller evaluates the external information to determine a number of other vehicles from which the host vehicle is receiving information that is part of the external information, and determines the risk factor based on the number of other vehicles.

17. An on-board vehicle communication method comprising:

storing a plurality of security certificates in an on-board storage device of a host vehicle;

receiving at the host vehicle external information that is external of the host vehicle, the external information representing a driving environment in which the host vehicle is travelling; and

evaluating, by an on-board controller on the host vehicle, whether an amount of security certificates stored in the storage device has decreased below a first prescribed threshold;

performing, by the on-board controller, a security certificate replenishment process upon the on-board controller determining that the amount of security certificates has decreased below the first prescribed threshold, the on-board controller performing the security certificate replenishment process while permitting a communication device to use a backup security certificate, which is different from any other of the security certificates, to communicate with a remote device that is external to the host vehicle, the security certificate replenishment process including evaluating, by the on-board controller, the information representing the driving environment to assess a risk factor pertaining to the travelling of the host vehicle in the driving environment, comparing, by the on-board controller, the risk factor to a risk threshold, controlling the communication device to attempt to receive additional security certificates from at least one source that is external of the host vehicle upon the on-board controller determining that the risk factor is below the risk threshold, and controlling the communication device to refrain from attempting to receive the additional security certificates from the at least one source upon the on-board controller determining that the risk factor is at least equal to the risk threshold.

19. The on-board vehicle communication method according to claim 17, wherein

the evaluating includes determining a number of other vehicles from which the host vehicle is receiving information that is part of the external information, to assess the risk factor based on the number of other vehicles.

20. The An on-board vehicle communication method according to claim 17, wherein

the risk factor is set at a first risk factor level upon determining that the external information representing the driving environment indicates a first probability of the host vehicle contacting a remote object, and the risk factor is set at a second risk factor level, which is lower than the first risk factor level, upon determining that the external information representing the driving environment indicates a second probability of the host vehicle contacting a remote object, the second probability being lower than the first probability.