System and method for performing an asymmetric key exchange between a vehicle and a remote device

• US 9,800,413 B2
• Filed: 08/15/2008
• Issued: 10/24/2017
• Est. Priority Date: 08/15/2008
• Status: Active Grant

• Current Assignee: GM Global Technology Operations LLC (General Motors Company)
• Original Assignee: GM Global Technology Operations Incorporated (Motors Liquidation Co. GUC Trust)
• Inventors: Alrabady, Ansaf I., Catsburg, Thomas M. P.
• Primary Examiner(s): Korsak, Oleg
• Application Number:
  US12/192,870
• Publication Number:
  US 20100040234A1
• Time in Patent Office: 3,357 Days
• Field of Search: 340 565, 455420, 713150, 713156, 713175
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Methods and apparatus are provided for performing an asymmetric key exchange between a vehicle and a first remote device. The method comprises storing predetermined cryptographic information on the vehicle, generating a first public key and a first private key that correspond to the vehicle, storing the first private key on the vehicle, and providing the first public key and descriptive data associated with the vehicle to a trusted entity, wherein the trusted entity is configured to store the first public key and the descriptive data in a location that is accessible to the first remote device.

Claims

1. A method comprising:

electronically receiving a first digital certificate from a certificate authority by a second remote device, the first digital certificate comprising a first public key that corresponds to a first private key that is stored on the certificate authority;

storing the first public key and the first private key in a same memory device in a vehicle; and

electronically receiving a second public key, a digital signature of the second public key, and a second digital certificate from the vehicle, wherein;

the second public key corresponds to a second private key stored on the same memory device in the vehicle;

the digital signature of the second public key is generated by a first remote device, different from the second remote device and different from the certificate authority, using a third private key; and

the second digital certificate being previously generated by the certificate authority and includes a third public key and a digital signature of the third public key, wherein the third public key corresponds to the third private key and the digital signature of the third public key is generated by the certificate authority using the first private key.

2. The method of claim 1, further comprising:

authenticating the second digital certificate using the first public key from the first digital certificate; and

authenticating the digital signature of the second public key using the third public key from the second digital certificate, when the second digital certificate is authenticated.

3. The method of claim 2 further comprising:

storing the second public key when the digital signature of the second public key is authenticated.

4. The method of claim 3, further comprising:

transmitting a third digital certificate comprising a fourth public key and a digital signature of the fourth public key to the vehicle, wherein the fourth public key corresponds to a fourth private key and the digital signature of the fourth public key is generated by the certificate authority using the first private key.