Method for controlling vehicle security access based on certificate

• US 9,954,851 B2
• Filed: 12/09/2015
• Issued: 04/24/2018
• Est. Priority Date: 08/24/2015
• Status: Active Grant

• Current Assignee: Hyundai Motor Company (Hyundai Motor Group)
• Original Assignee: Hyundai Motor Company (Hyundai Motor Group)
• Inventors: Ahn, Hyun Soo, Cho, A Ram, Jung, Ho Jin
• Primary Examiner(s): Cervetti, David Garca
• Application Number:
  US14/963,375
• Publication Number:
  US 20170063842A1
• Time in Patent Office: 867 Days
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A method for controlling access security at a vehicle gateway of a vehicle including at least one control unit in communication with the vehicle gateway includes: receiving a certificate from a diagnosis device; recognizing a rating of the certificate; and performing at least one of an integrity checking process and a security key authorization process according to the rating of the certificate to determine whether the diagnosis device is allowed to access to the vehicle.

Claims

1. A method for controlling access security at a vehicle gateway of a vehicle in communication with a diagnosis device through the vehicle gateway, the method comprising:

receiving, at the vehicle gateway, a certificate from the diagnosis device;

recognizing, by the vehicle gateway, a rating of the certificate, wherein the rating of the certificate is one of a first class, a second class, and a third class;

performing, by the vehicle gateway, a security key authorization process when the rating of the certificate is the first class;

performing by the vehicle gateway, the security key authorization process and a validity term checking process when the rating of the certificate is the second class; and

performing, by the vehicle gateway, the security key authorization process, the validity term checking process, and a certificate revocation list checking process when the rating of the certificate is the third class.

2. The method according to claim 1, wherein the validity term checking process includes verifying a term of validity in the received certificate;

and the certificate revocation list checking process includes determining whether the received certificate is included in a certificate revocation list.

3. The method according to claim 2, wherein the validity term checking process further includes:

either acquiring current date information from a vehicle head unit coupled to the vehicle gateway via an in-vehicle network or directly obtaining the current date information via a mobile communication network by the vehicle gateway; and

determining whether the term of validity has ended by comparing an expiration date included in the received certificate with the current date information.

4. The method according to claim 3, further comprising:

blocking a connection between the diagnosis device and the vehicle when the term of validity has expired.

5. The method according to claim 3, wherein the current date information is acquired by a mobile device in communication with the vehicle head unit via a Bluetooth pairing.

6. The method according to claim 3, wherein the current date information is obtained from a communication module of a Global Positioning System (GPS) in the vehicle head unit.

7. The method according to claim 3, wherein the in-vehicle network includes at least one of a controller area network (CAN), an Ethernet network, a local interconnect network (LIN), and a FlexRay network.

8. The method according to claim 2, wherein the certificate revocation list checking process further includes:

requesting and obtaining the certificate revocation list at a vehicle head unit coupled to the vehicle gateway via an in-vehicle network; and

determining whether the received certificate is included in the certificate revocation list.

9. The method according to claim 8, wherein the certificate revocation list is acquired from a mobile device engaged with the vehicle head unit via a Bluetooth pairing.

10. The method according to claim 9, wherein a latest version of the certificate revocation list is obtained from an authorization server by a predetermined application installed in the mobile device.

11. The method according to claim 8, wherein the certificate revocation list is acquired from an authorization server engaged with the vehicle head unit via a telematics network.

12. The method according to claim 8, further comprising:

blocking a connection between the diagnosis device and the vehicle head unit when the received certificate is included in the certificate revocation list.

13. The method according to claim 1, wherein the certificate includes information about a possessor'"'"'s role and power, and the rating of the certificate is distinguished based on the information about the possessor'"'"'s role and power.

14. The method according to claim 1, further comprising:

decoding an electronic signature encrypted based on a personal key stored in an authorization server using a public key of the authorization server, which is previously stored, to determine a validity of the electronic signature,

wherein the encrypted electronic signature is included in the received certificate.

15. The method according to claim 1, wherein:

the security key authorization process is performed after the integrity checking process is successfully completed when the integrity checking process is performed in response to the rating of the certificate.

16. The method according to claim 2, wherein the certificate revocation list checking process further includes:

transmitting a certificate revocation inquiry message including certificate identification information to an authorization server; and

receiving a certificate revocation response message containing predetermined identification information indicating whether the certificate is revoked.

17. A vehicle gateway for controlling access security in a vehicle, the apparatus comprising:

a communication unit receiving a certificate from a diagnosis device;

a certificate rating identification unit recognizing a rating of the certificate, wherein the rating of the certificate is one of a first class, a second class, and a third class;

an integrity check unit performing an integrity checking process and a validity term checking process according to the rating of the certificate; and

a control unit controlling an execution of at least one of an integrity checking process and a security key authorization process according to the rating of the certificate to determine whether the diagnosis device is allowed to access to the vehicle, wherein

the vehicle gateway performs the security key authorization process when the rating of the certificate is the first class;

the vehicle gateway performs the security key authorization process and the validity term checking process when the rating of the certificate is a second class; and

the vehicle gateway performs the security key authorization process, the validity term checking process, and a certificate revocation list checking process when the rating of the certificate is a third class.

18. The vehicle gateway according to claim 17, wherein the integrity check unit includes:

a validity term checking unit verifying a term of validity in the received certificate; and

a certificate revocation list checking unit determining whether the received certificate is included in a certificate revocation list,

wherein the control unit controls the execution of at least one of the validity term checking unit and the certificate revocation list checking unit according to the rating of the certificate.

19. The vehicle gateway according to claim 18, wherein the validity term checking unit either acquires current date information from a vehicle head unit of the vehicle coupled to a vehicle gateway of the vehicle via an in-vehicle network or directly obtains the current date information via a mobile communication network by the vehicle gateway, and determines whether the term of validity has ended by comparing an expiration date included in the received certificate from the diagnosis device with the current date information.

20. The vehicle gateway according to claim 17, further comprising:

an electronic signature confirm unit decoding an encrypted electronic signature encrypted based on a personal key of an authorization server using a public key stored in the authorization server, which is previously stored, to determine a validity of the electronic signature,

wherein the encrypted electronic signature is included in the received certificate.