Controlling access to personal information stored in a vehicle using a cryptographic key

• US 9,571,284 B2
• Filed: 03/13/2014
• Issued: 02/14/2017
• Est. Priority Date: 03/13/2014
• Status: Expired due to Fees

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations LLC (General Motors Company)
• Inventors: Leboeuf, Karl B., Mazzara, William E. Jr., Forest, Thomas M., Draluk, Vadim
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): Le, Thanh T
• Application Number:
  US14/207,999
• Publication Number:
  US 20150263860A1
• Time in Patent Office: 1,069 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/08 Access security

Abstract

A system and a method are disclosed providing user information in a vehicle. The method includes the steps of: providing over a vehicle network a cryptographic key in response to receiving a wireless signal from a wireless transmitter at a first electronic control unit (ECU); receiving at a second ECU the cryptographic key; authenticating the cryptographic key at the second ECU; and providing user information via the second ECU based on the authentication.

Claims

1. A method of providing user information in a vehicle, comprising the steps of:

detecting at a first electronic control unit (ECU) installed on the vehicle a wireless signal sent from a wireless transmitter of a device that is separate from the first ECU and a second ECU installed on the vehicle;

in response to the detection, providing over a vehicle network a cryptographic key;

receiving the cryptographic key at the second ECU and temporarily storing the cryptographic key in a volatile memory of the second ECU;

authenticating the cryptographic key at the second ECU;

providing user information via the second ECU based on the authentication; and

storing the cryptographic key on the vehicle in a non-volatile memory installed in a physically separate location on the vehicle from the second ECU, the second ECU containing the user information, such that removal of the second ECU from the vehicle separates the second ECU from the stored cryptographic key, thereby inhibiting access to the user information.

2. The method of claim 1, wherein the first ECU provides the cryptographic key.

3. The method of claim 1, wherein the wireless transmitter is one of a keyfob, a mobile device, and a cellular transceiver.

4. The method of claim 1, wherein the first ECU comprises the non-volatile memory, wherein the cryptographic key is stored thereon.

5. The method of claim 1, wherein the first ECU is one of an immobilizer ECU or a body control ECU.

6. The method of claim 5, wherein when the first ECU is the immobilizer ECU, the providing the cryptographic key step is associated with a vehicle engine ignition event, wherein when the first ECU is the body control ECU, the providing the cryptographic key step is associated with a vehicle door unlocking event.

7. The method of claim 1, wherein the second ECU is a vehicle head unit ECU.

8. The method of claim 1, wherein the user information is provided from a personal identifiable information (PII) database.

9. The method of claim 1, further comprising providing the cryptographic key to the second ECU over the vehicle network from a third ECU installed to the vehicle.

10. The method of claim 9, further comprising storing the cryptographic key at the third ECU, wherein the third ECU provides the cryptographic key to the second ECU in response to the receipt of the wireless signal at the first ECU.

11. The method of claim 9, wherein the authenticating step includes authenticating the cryptographic key from both the first and third ECUs.

12. The method of claim 9, wherein the authenticating step includes authenticating the cryptographic key from either of the first or third ECUs.

13. The method of claim 1, wherein the cryptographic key has a predetermined minimum entropy.

14. The method of claim 1, wherein the wireless signal is received by a vehicle telematics unit ECU.

15. The method of claim 1, further comprising:

identifying a particular cryptographic key based on the wireless signal.

16. The method of claim 15, wherein the particular cryptographic key is associated with at least one customized database associated with the user information.

17. The method of claim 1, wherein authenticating the cryptographic key at the second ECU includes recalling a paired cryptographic key stored on the second ECU.

18. The method of claim 1, wherein the non-volatile memory is installed in a difficult-to-access location on the vehicle.

19. The method of claim 18, wherein the non-volatile memory is installed in a fuel pump ECU of the vehicle.

20. A method of providing user information in a vehicle, comprising the steps of:

receiving a trigger signal at a first electronic control unit (ECU) installed on the vehicle, the trigger signal received from a wireless transmitter not installed on the vehicle, wherein receipt of the trigger signal indicates the presence of an authorized user at the vehicle;

in response to the trigger signal, providing over a vehicle network a decryption key from the first ECU to the second ECU, the second ECU associated with a personal user information database based on the trigger signal;

temporarily storing the cryptographic key in a volatile memory of the second ECU, and authenticating the decryption key at the second ECU;

providing personal user information from the database based on the authentication; and

storing the cryptographic key on the vehicle in a non-volatile memory installed in a physically separate location on the vehicle from the second ECU, the second ECU containing the user information, such that removal of the second ECU from the vehicle separates the second ECU from the stored cryptographic key, thereby inhibiting access to the user information.

21. The method of claim 20, further comprising:

determining that a termination event has occurred; and

in response to the termination event, inhibiting further access to the personal user information;

until another one of the trigger signals is received at the first ECU.