Vehicle wireless internet security

• US 9,912,647 B2
• Filed: 07/22/2015
• Issued: 03/06/2018
• Est. Priority Date: 07/22/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Reece, Stuart J., Shaw, Matthew S.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): KAPLAN, BENJAMIN A
• Application Number:
  US14/805,511
• Publication Number:
  US 20170026354A1
• Time in Patent Office: 958 Days
• Field of Search: 713171
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/40 Security arrangements using identity modules
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/027 using movement velocity, acceleration information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

Methods, systems, and computer program products for vehicle wireless internet security are provided. A connection request is received from a mobile device. A data request is transmitted to the mobile device. The data request includes a request for location-based data of the mobile device. A first data is received from the mobile device that corresponds to the data request. A vehicle data is generated that comprises location-based data of the vehicle. A match between the first data and the vehicle data is determined. A match is determined where the location based data of the mobile device is with a pre-determined threshold of the location-based data of the vehicle.

Claims

1. A method comprising:

receiving, by one or more processors, a connection request from a mobile device;

transmitting, by one or more processors, a data request to the mobile device, wherein;

the data request comprises a request for location-based data of the mobile device; and

the location-based data of the mobile device includes a velocity of the mobile device;

receiving, by one or more processors, a first data from the mobile device, wherein the first data corresponds to the data request;

generating, by one or more processors, a vehicle data, wherein;

the vehicle data comprises location-based data of the vehicle; and

the location-based data of the vehicle includes a velocity of the vehicle;

determining, by one or more processors, whether the first data matches the vehicle data, wherein a match is determined where the location-based data of the mobile device is within a pre-determined threshold of the location-based data of the vehicle; and

in response to determining that the first data matches the vehicle data, connecting, by one or more processors, the mobile device to a network.

2. The method of claim 1, further comprising:

in response to determining that a second vehicle data does not match a third data from a second mobile device, prompting, by one or more processors, the second mobile device for a security key;

receiving, by one or more processors, a first security key from the second mobile device; and

determining, by one or more processors, whether the first security key matches an expected response.

3. The method of claim 2, further comprising:

in response to determining that the first security key matches the expected response, allowing, by one or more processors, the second mobile device to connect to the network.

4. The method of claim 2, further comprising:

in response to determining that the first security key does not match the expected response, blocking, by one or more processors, access of the second mobile device to the network.

5. The method of claim 1, further comprising:

re-authenticating, by one or more processors, the mobile device, by;

transmitting, by one or more processors, a second data request from the mobile device, wherein the second data request comprises a request for an updated velocity of the mobile device;

receiving, by one or more processors, a second data from the mobile device, wherein the second data corresponds to the second data request;

re-generating, by one or more processors, the vehicle data, including generating an updated velocity of the vehicle; and

determining, by one or more processors, whether the second data matches the vehicle data based, at least in part, on the updated velocity of the mobile device and updated velocity of the vehicle.

6. The method of claim 5, wherein re-authenticating the mobile device is in response to determining that an acceleration of the vehicle is not equal to zero.

7. The method of claim 1, wherein the location-based data of the mobile device further includes historical velocity data of the mobile device and wherein the location-based data of the vehicle further includes historical velocity data of the vehicle, wherein each historical velocity data includes a plurality of locations and corresponding timestamps.

8. A computer program product, the computer program product comprising:

a computer readable storage medium and program instructions stored on the computer readable storage medium, the program instructions comprising;

program instructions to receive a connection request from a mobile device;

program instructions to transmit a data request to the mobile device, wherein;

the data request comprises a request for location-based data of the mobile device; and

the location-based data of the mobile device includes a velocity of the mobile device;

program instructions to receive a first data from the mobile device, wherein the first data corresponds to the data request;

program instructions to generate a vehicle data, wherein;

the vehicle data comprises location-based data of the vehicle; and

the location-based data of the vehicle includes a velocity of the vehicle;

program instructions to determine whether the first data matches the vehicle data, wherein a match is determined where the location-based data of the mobile device is within a pre-determined threshold of the location-based data of the vehicle; and

program instructions to, in response to determining the first data matches the vehicle data, connect the mobile device to a network.

9. The computer program product of claim 8, further comprising;

program instructions to, in response to determining that a second vehicle data does not match a third data from a second mobile device, prompt the second mobile device for a security key;

program instructions to receive a first security key from the second mobile device; and

program instructions to determine whether the first security key matches an expected response.

10. The computer program product of claim 9, further comprising:

program instructions to, in response to determining that the first security key matches the expected response, allow the second mobile device to connect to the network.

11. The computer program product of claim 8, further comprising:

program instructions to re-authenticate the mobile device, by;

program instructions to transmit a second data request from the mobile device, wherein the second data request comprises a request for an updated velocity of the mobile device;

program instructions to receive a second data from the mobile device, wherein the second data corresponds to the second data request;

program instructions to re-generate the vehicle data, including generating an updated velocity of the vehicle; and

program instructions to determine whether the second data matches the vehicle data based, at least in part, on the updated velocity of the mobile device and updated velocity of the vehicle.

12. The computer program product of claim 11, wherein re-authenticating the mobile device is in response to determining that an acceleration of the vehicle is not equal to zero.

13. A computer system, the computer system comprising:

one or more computer processors;

one or more computer readable storage media;

program instructions stored on the computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising;

program instructions to receive a connection request from a mobile device;

program instructions to transmit a data request to the mobile device, wherein;

the data request comprises a request for location-based data of the mobile device; and

the location-based data of the mobile device includes a velocity of the mobile device;

program instructions to receive a first data from the mobile device, wherein the first data corresponds to the data request;

program instructions to generate a vehicle data, wherein;

the vehicle data comprises location-based data of the vehicle; and

the location-based data of the vehicle includes a velocity of the vehicle;

program instructions to determine whether the first data matches the vehicle data, wherein a match is determined where the location-based data of the mobile device is within a pre-determined threshold of the location-based data of the vehicle; and

program instructions to, in response to determining the first data matches the vehicle data, connect the mobile device to a network.

14. The computer system of claim 13, further comprising;

program instructions to, in response to determining that a second vehicle data does not match a third data from a second mobile device, prompt the second mobile device for a security key;

program instructions to receive a first security key from the second mobile device; and

program instructions to determine whether the first security key matches an expected response.

15. The computer system of claim 14, further comprising:

program instructions to, in response to determining that the first security key matches the expected response, allow the second mobile device to connect to the network.

16. The computer system of claim 13, further comprising:

program instructions to re-authenticate the mobile device, by;

program instructions to transmit a second data request from the mobile device, wherein the second data request comprises a request for an updated velocity of the mobile device;

program instructions to receive a second data from the mobile device, wherein the second data corresponds to the second data request;

program instructions to re-generate the vehicle data, including generating an updated velocity of the vehicle; and

program instructions to determine whether the second data matches the vehicle data based, at least in part, on the updated velocity of the mobile device and updated velocity of the vehicle.

17. The computer system of claim 16, wherein re-authenticating the mobile device is in response to determining that an acceleration of the vehicle is not equal to zero.