Connection key distribution

• US 9,762,559 B2
• Filed: 02/23/2016
• Issued: 09/12/2017
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: General Motors LLC (General Motors Company)
• Original Assignee: General Motors LLC (General Motors Company)
• Inventors: Peirce, Kenneth L.
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US15/051,517
• Publication Number:
  US 20160248740A1
• Time in Patent Office: 567 Days
• Field of Search: None
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A system and method for securely providing a mobile device with a cryptographic key in a vehicle. The method includes generating a cryptographic key pair that includes a first and second cryptographic keys. One of the keys is used to create a scannable image which is then incorporated into a label that is displayed in the vehicle, either as a physical label mounted in the vehicle or via a display screen within the vehicle. The label containing the scannable image can then be read by a mobile device at the vehicle, thereby providing the one key to the mobile device for use in sending communications to the vehicle.

Claims

1. A method of securely providing a mobile device with a cryptographic key in a vehicle, comprising the steps of:

generating a cryptographic key pair comprising at least a first cryptographic key for use by an electronic device in the vehicle and a second cryptographic key for use by the mobile device to control one or more vehicle functions via wireless messages sent from the mobile device to the vehicle that are encrypted using the second cryptographic key and authenticated by the vehicle using the first cryptographic key;

creating a label containing a scannable image readable by a mobile device, wherein the scannable image includes the second cryptographic key encoded in the image such that the mobile device can (i) obtain the second cryptographic key from capturing and decoding the scannable image, (ii) store the second cryptographic key, and (iii) encrypt the wireless messages using the stored second cryptographic key; and

providing the label at the vehicle for displaying the scannable image such that it can be scanned in the mobile device at the vehicle by a user of the mobile device.

2. The method of claim 1, wherein the first cryptographic key is a public key and the second cryptographic key is a private key.

3. The method of claim 1, wherein the scannable image includes either a linear barcode or a two-dimensional barcode.

4. The method of claim 1, wherein the label is a digital article and is provided at the vehicle via a visual display installed in the vehicle.

5. The method of claim 4, wherein the providing step further comprises storing a digital representation of the label in memory of a vehicle module.

6. The method of claim 1, wherein the label is a physical article.

7. The method of claim 1, wherein the electronic device receives and decrypts the wireless messages from the mobile device using the first cryptographic key to obtain one or more vehicle commands.

8. The method of claim 7, wherein the vehicle is configured to operate according to the vehicle command(s) obtained from the wireless messages.

9. The method of claim 1, wherein the electronic device is a telematics unit and wherein the telematics unit is configured to authenticate the wireless messages using the first cryptographic key.

10. The method of claim 9, wherein the telematics unit decrypts the wireless messages using the first cryptographic key to obtain one or more vehicle commands.

11. The method of claim 1, wherein the wireless messages sent from the mobile device to the vehicle are sent using short range wireless communications.

12. The method of claim 11, wherein the short range wireless communications are established between the vehicle and the mobile device.