Secure telematics

• US 9,668,133 B2
• Filed: 08/05/2015
• Issued: 05/30/2017
• Est. Priority Date: 01/28/2003
• Status: Active Grant

• Current Assignee: CyberCare, Incorporated
• Original Assignee: Cellport Systems Incorporated
• Inventors: Kennedy, Patrick J.
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US14/819,141
• Publication Number:
  US 20150341787A1
• Time in Patent Office: 664 Days
• Field of Search: None
• CPC Class Codes: B60R 2325/10 Communication protocols, communication systems of vehicle anti-theft devices
• CPC Class Codes: B60R 2325/101 Bluetooth
• CPC Class Codes: B60R 2325/202 Personal digital assistant [PDA]
• CPC Class Codes: B60R 2325/205 Mobile phones
• CPC Class Codes: B60R 25/01 operating on vehicle systems or fittings, e.g. on doors, seats or windscreens
• CPC Class Codes: B60R 25/04 operating on the propulsion system, e.g. engine or drive motor
• CPC Class Codes: B60R 25/1001 Alarm systems associated with another car fitting or mechanism, e.g. door lock or knob, pedals features related to the general power supply B60R25/1018
• CPC Class Codes: B60R 25/20 Means to switch the anti-theft system on or off
• CPC Class Codes: B60R 25/209 Remote starting of engine
• CPC Class Codes: B60R 25/241 whereby access privileges are related to the identifiers
• CPC Class Codes: B60R 25/25 using biometry
• CPC Class Codes: B60R 25/252 Fingerprint recognition
• CPC Class Codes: B60R 25/255 Eye recognition
• CPC Class Codes: B60R 25/257 Voice recognition
• CPC Class Codes: B60R 25/33 of global position, e.g. by providing GPS coordinates
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/085 using electronic data carriers
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 2463/082 : applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys

Abstract

A telematics system that includes a security controller is provided. The security controller is responsible for ensuring secure access to and controlled use of resources in the vehicle. The security measures relied on by the security controller can be based on digital certificates that grant rights to certificate holders, e.g., application developers. In the case in which applications are to be used with vehicle resources, procedures are implemented to make sure that certified applications do not jeopardize vehicle resources'"'"' security and vehicle users'"'"' safety. Relationships among interested entities are established to promote and support secure vehicle resource access and usage. The entities can include vehicle makers, communication service providers, communication apparatus vendors, vehicle subsystem suppliers, application developers, as well as vehicle owners/users. At least some of the entities can be members of a federation established to enhance and facilitate secure access and usage of vehicle resources.

Claims

1. A communication system, comprising:

a communication device;

a first proprietary resource, wherein the first proprietary resource is proprietary to a first entity;

a second proprietary resource, wherein the second proprietary resource is proprietary to a second entity;

a security controller;

a communication network interconnecting the communication device, the first proprietary resource, the second proprietary resource, and the security controller, wherein the security controller includes a processor, wherein the security controller is operable to monitor communications between any two of the communication device, the first proprietary resource, and the second proprietary resource, wherein only communications that are authenticated by the security controller are allowed between the communication device and the first proprietary resource, between the communication device and the second proprietary resource, and between the first proprietary resource and the second proprietary resource.

2. The system of claim 1, wherein the security controller controls use of the first proprietary resource utilizing certificate information that includes stored certificate information accessible by the security controller that relates to approval of use of the first proprietary resource by a holder of a first certificate.

3. The system of claim 2, wherein approval of use of the first proprietary resource by the holder of at least a first certificate involves at least the first entity having proprietary rights associated with the first proprietary resource, and wherein the proprietary rights are evidenced by the first certificate.

4. The system of claim 1, further comprising:

a global positioning system (GPS) receiver associated with the security controller.

5. The system of claim 4, wherein approval of use of the first proprietary resource involves determining a location of at least one of the wireless communication device, the first proprietary resource, the second proprietary resource, and the security controller at the time the security controller performs authentication with respect to a request for use of the first proprietary resource.

6. The system of claim 4, wherein the GPS receiver is integral to the security controller.

7. The system of claim 1, wherein the first proprietary resource is at least one of:

a first vehicle bus, a first vehicle device, a first interface, a first subsystem, a first storage memory, a first application, first connectivity hardware, first connectivity software, and a first communication device.

8. The system of claim 7, wherein the second proprietary resource is at least one of:

a second vehicle bus, a second vehicle device, a second interface, a second subsystem, a second storage memory, a second application, second connectivity hardware, second connectivity software, and a second communication device.

9. The system of claim 7, wherein the first proprietary resource is a first subsystem, and wherein the first subsystem includes at least one of:

an electronic control unit, a navigational global positioning system, an inflator subsystem, a personal digital assistant, a laptop computer, a vehicle monitoring system, and an accident and emergency notification alarm.

10. The system of claim 7, wherein the first proprietary resource is a first application, and wherein the first application includes at least one of an application related to:

entertainment delivered to a vehicle, data gathering from a vehicle, educational information delivered to a vehicle, information sent to the vehicle for use by a subsystem, information sent to the vehicle for use by a device.

11. The system of claim 10, wherein the first application is further related to at least one of:

a security service, a multi-user service, a vehicle to vehicle communication service, a geographical service, a regulatory service, a communication service, and a commerce service.

12. The system of claim 1, wherein the communication device is a cellular telephone.

13. The system of claim 1, wherein the communication device, the first proprietary resource, and the second proprietary resource are all located in a first vehicle.

14. A method for controlling utilization of resources in a vehicle, comprising:

receiving by a device located in the vehicle first information;

authenticating the first information by a security controller located in the vehicle;

in response to authenticating the first information, passing the first information to a first proprietary resource, wherein the first proprietary resource is proprietary to a first entity;

generating in the first proprietary resource located in the vehicle second information;

authenticating the second information by the security controller;

in response to authenticating the second information, passing the second information to a second proprietary resource, wherein the second proprietary resource is proprietary to a second entity.

15. The method of claim 14, wherein the first information includes a first command.

16. The method of claim 15, wherein the first information includes a second command, and wherein the device is a wireless communication device, the method further comprising:

in response to authenticating the first information, passing the second command to the second proprietary resource;

generating in the second proprietary resource located in the vehicle third information;

passing the third information to the wireless communication device for transmission.

17. The method of claim 16, wherein the first proprietary resource is at least a first one of a vehicle bus, a vehicle device, an interface, a subsystem, storage memory, an application executed in the vehicle, connectivity hardware, connectivity software, and a communication device, and wherein the second proprietary resource is at least a second one of a vehicle bus, a vehicle device, an interface, a subsystem, storage memory, an application executed in the vehicle, connectivity hardware, connectivity software, and a communication device.

18. The method of claim 17, further comprising:

displaying at least a portion of at least one of the first information and the second information on a third proprietary resource in the vehicle.

19. The method of claim 17, wherein the first proprietary resource is a global positioning system, and wherein the second proprietary resource is a vehicle electronic control unit.

20. A system in a first vehicle, comprising:

a security controller;

a wireless communication device, wherein the wireless communication device is interconnected to the security controller;

a first proprietary resource, wherein the first proprietary resource is interconnected to the security controller, wherein the first proprietary resource is proprietary to a first entity, and wherein the first proprietary resource includes a global positioning system;

a second proprietary resource, wherein the second proprietary resource is interconnected to the security controller, wherein the second proprietary resource is proprietary to a second entity, and wherein the second proprietary resource includes a vehicle electronic control unit.