Information distribution method, information distribution system and in-vehicle terminal

• US 9,515,829 B2
• Filed: 12/21/2012
• Issued: 12/06/2016
• Est. Priority Date: 01/10/2012
• Status: Active Grant

• Current Assignee: Clarion Co., Ltd. (Faurecia SA)
• Original Assignee: Clarion Co., Ltd. (Faurecia SA)
• Inventors: Mitsui, Koichi, Matsumoto, Takashi, Shimizu, Atsushi, Umezawa, Katsuyuki, Osafune, Tatsuaki, Endo, Hiroyoshi
• Primary Examiner(s): Wang, Harris C
• Application Number:
  US13/723,369
• Publication Number:
  US 20130179689A1
• Time in Patent Office: 1,446 Days
• Field of Search: 713/171
• US Class Current: 1/1
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/48 for in-vehicle communication
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

[Objective] When installing software into an in-vehicle terminal from a server, it is required to prevent the software from being installed into an unsuitable terminal, and to reduce time and efforts for data input and download, thereby improving the convenience of the user.

[Solution] In an information distribution system, terminal identification information and a terminal unique key for an in-vehicle terminal are stored in a server as well as in itself. The in-vehicle terminal transmits the terminal identification information to the server for terminal authentication via a communication terminal after encrypting with the terminal unique key, and then the server transmits encrypted software to the communication terminal. The communication terminal transmits the encrypted software to the in-vehicle terminal, which in turn obtains a software unique key encrypted with the terminal unique key from the server and decrypts the encrypted software for installation using the software unique key.

Claims

1. An information distribution method for use in an information distribution system including one or more in-vehicle terminals, a communication terminal, and a server, to distribute software applicable to each of the in-vehicle terminals via the communication terminal, from the server, the method comprising:

storing, by each of the one or more in-vehicle terminals each of which is connected with the communication terminal over a terminal-to-terminal communication, unique terminal identification information and a terminal unique key therein, and

storing, by the server, which is connected to each of the one or more in-vehicle terminals via the communication terminal, server-side terminal identification information and a server-side terminal unique key that are same as the terminal identification information and the terminal unique key stored individually in each of the in-vehicle terminals, and also storing therein encrypted software of a software program that is individually applicable to each of the in-vehicle terminals and software unique keys that are used for encrypting the software,

transmitting, by the communication terminal, a request for authentication information to the in-vehicle terminal;

transmitting, by the in-vehicle terminal, the terminal identification information and a transmission timestamp to the server via the communication terminal;

retrieving, by the server, a last authentication timestamp based on the terminal identification information from a database;

comparing, by the server, a predetermined threshold time value from the last authentication timestamp to obtain a difference timestamp;

transmitting, by the server, an invalid message indicative of invalid authentication information to the in-vehicle terminal via the communication terminal, on a condition that the difference timestamp is newer than the transmission timestamp;

transmitting, by the server, the encrypted software to the in-vehicle terminal via the communication terminal, on a condition that the difference timestamp is older than the transmission timestamp;

receiving, by the in-vehicle terminal, the encrypted software; and

installing, by the in-vehicle terminal, the encrypted software.

2. The information distribution method according to claim 1, wherein the method further comprises:

saving, by the communication terminal, the terminal identification information and the timestamp therein, on a condition that the terminal authentication for the in-vehicle terminal performed by the server is successful.

3. The information distribution method according to claim 2, wherein the method further comprises:

transmitting, by the communication terminal, the terminal identification information and the timestamp saved therein to the server on a condition that the in-vehicle terminal acquires the encrypted software.

4. The information distribution method according to claim 1, wherein the method further comprises:

transmitting, by the in-vehicle terminal, the identification information of the encrypted software to the server via the communication terminal;

obtaining, by the server, the unique key used for encrypting the software, based on the identification information of the encrypted software received from the in-vehicle terminal;

generating, by the server, authentication information for the software unique key and transmitting the authentication information to the in-vehicle terminal via the communication terminal; and

decrypting, by the in-vehicle terminal, the encrypted software stored therein and installing the encrypted software on a condition that authentication for the software unique key is successful by verifying the authentication information for the software unique key.

5. The information distribution method according to claim 1,

wherein the method further comprises, on a condition where the in-vehicle terminal is a second in-vehicle terminal different from the in-vehicle terminal that has transmitted the terminal identification information and the transmission timestamp to the server via the communication terminal:

determining, by the server, whether or not the software corresponding to the software unique key is applicable to the second in-vehicle terminal, after obtaining the software unique key used for encrypting the software;

generating, by the server, on a condition that the software is determined to be applicable to the second in-vehicle terminal, authentication information for the software unique key and transmitting the authentication information to the second in-vehicle terminal via the communication terminal; and

obtaining, by the server, on a condition that the software is determined not to be applicable to the second in-vehicle terminal, an encrypted software applicable to the second in-vehicle terminal and transmitting the encrypted software to the second in-vehicle terminal via the communication terminal, by adding identification information of the encrypted software.

6. An information distribution system, for distributing software, comprising:

a communication terminal;

one or more in-vehicle terminals, each connected with the communication terminal over a terminal-to-terminal communication; and

a server that is connected to each of the one or more in-vehicle terminals via the communication terminal;

wherein each of the one or more in-vehicle terminals are each configured to;

store unique terminal identification information and a terminal unique key therein,

transmit the terminal identification information and a transmission timestamp to the server via the communication terminal;

receive encrypted software and store therein;

transmit identification information of the encrypted software, added to the encrypted software, to the server via the communication terminal; and

decrypt the encrypted software stored therein and installs the encrypted software, on a condition that authentication for a software unique key is successful by verifying received authentication information for the software unique key, and

the server is configured to;

store therein server-side terminal identification information and a server-side terminal unique key that are same as the terminal identification information and the terminal unique key stored individually in each of the one or more in-vehicle terminals,

store therein encrypted software of a software program that is individually applicable to each of the one or more in-vehicle terminals and software unique keys that are used for encrypting each of the software, and;

retrieve a last authentication timestamp based on the terminal identification information from a database;

compare a predetermined threshold time value from the last authentication timestamp to obtain a difference timestamp;

transmit an invalid message indicative of invalid authentication information to the in-vehicle terminal via the communication terminal, on a condition that the difference timestamp is newer than the transmission timestamp;

transmit the encrypted software to the in-vehicle terminal via the communication terminal, on a condition that the difference timestamp is older than the transmission timestamp;

transmit identification information of the encrypted software, attached to the encrypted software, to the server via the communication terminal;

obtains the software unique key used for encrypting the software, based on the identification information of the encrypted software received from the in-vehicle terminal; and

generate authentication information for the software unique key and transmit the authentication information to the in-vehicle terminal, via the communication terminal.

7. The information distribution system according to claim 6,

wherein, in case of the in-vehicle terminal being a second in-vehicle terminal different from the in-vehicle terminal that has transmitted the terminal identification information and the transmission timestamp to the server via the communication terminal,

wherein the server is further configured to:

determine whether or not the software corresponding to the obtained software unique key is applicable to the second in-vehicle terminal, after obtaining the software unique key used for encrypting the software;

generate, on a condition that the software is determined to be applicable to the second in-vehicle terminal, authentication information for the software unique key and transmits the authentication information to the second in-vehicle terminal via the communication terminal; and

obtain, on a condition that the software is determined not to be applicable to the second in-vehicle terminal, the encrypted software applicable to the second in-vehicle terminal and transmits the encrypted software to the second in-vehicle terminal via the communication terminal, by adding identification information of the encrypted software.

8. A non-transient computer readable medium containing program instructions for causing a computer to perform a method in an information distribution system including one or more in-vehicle terminals, a communication terminal, and a server, the method comprising:

storing, in each of the one or more in-vehicle terminals, unique terminal identification information and a terminal unique key therein,

storing, server-side terminal identification information and a server-side terminal unique key that are same as the terminal identification information and the terminal unique key stored individually in each of the in-vehicle terminals, and also storing therein encrypted software of a software program that is individually applicable to each of the in-vehicle terminals and software unique keys that are used for encrypting the software,

transmitting, a request for authentication information from the communication terminal to the in-vehicle terminal;

transmitting, from the in-vehicle terminal to the server, the terminal identification information and a transmission timestamp;

retrieving, by the server, a last authentication timestamp based on the terminal identification information from a database;

comparing, by the server, a predetermined threshold time value from the last authentication timestamp to obtain a difference timestamp;

transmitting, from the server to the in-vehicle terminal, an invalid message indicative of invalid authentication information on a condition that the difference timestamp is newer than the transmission timestamp;

transmitting, from the server to the in-vehicle terminal, on a condition that the difference timestamp is older than the transmission timestamp;

receiving, by the in-vehicle terminal, the encrypted software; and

installing, by the in-vehicle terminal, the encrypted software.