Method and device for activating functions of a control device

• US 9,965,637 B2
• Filed: 12/22/2014
• Issued: 05/08/2018
• Est. Priority Date: 01/08/2014
• Status: Active Grant

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Baur, Heiko, Bhattacharya, Debojyoti, Neelakantan, Sriram Subramanian
• Primary Examiner(s): Holder, Bradley
• Application Number:
  US15/108,395
• Publication Number:
  US 20160330204A1
• Time in Patent Office: 1,233 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation

Abstract

A method for activating at least one function of a control device of a motor vehicle, which includes the steps: a) generating a random value in the control device; b) calculating a reference value from the random value by the control device; c) transmitting the random value to a remote control unit and from the remote control unit to a server; d) verifying the authorization of the remote control unit transmitting the random value by the server and if an authorization of the remote control unit is provided: e) generating a response value from the random value by the server; f) transmitting the response value to the remote control unit and from the remote control unit to the control device; and g) comparing the response value with the reference value and, if the response value matches the reference value, activating the at least one function of the control device.

Claims

1. A method for authorizing an external access to a control device of a motor vehicle for activating a function of the control device, the method comprising:

establishing, by a remote control device, a data link between the remote control device and the control device;

transmitting, by the remote control device, a first request signal from the remote control device to the control device;

activating, by the control device, a device of the control device to generate a random value in response to the request signal, whereupon the device of the control device generates a random value;

activating, by a reference value generating unit of the control device, a calculation specification, which is stored in a memory of the reference value generating unit of the control device, for calculating a reference value from the random value and storing, by the reference value generating unit of the control device, the reference value, which has been calculated by applying the calculation specification to the random value, in a memory unit of the control device;

transmitting, by the control device, the generated random value to an authentication device which is spatially separated from the remote control unit device;

providing, by the authentication device, a response value corresponding to the random value by calculating the response value by applying a 2nd calculation specification, which is stored in a memory of the authentication device, to the random value;

transmitting, by the authentication device, the response value to the control device;

comparing, by the control device, the transmitted response value with the reference value, which was previously calculated and stored in the memory unit of the control device, using a comparator;

authorizing the function of the control device, by an enabling unit if the response value matches the reference value;

transmitting, by the control device, a feedback regarding at least one of;

i) an activation which took place, and ii) an activation which did not take place, from the control device via the data link to the remote control device; and

wherein the activated function includes at least one of;

i) an activation of an immobilizer system, ii) a deactivation of the immobilizer system, iii) a request for data from the control device, and iv) an input of data into the control device.

12. The method as recited in claim 1, wherein the calculation of the response value includes utilizing a cryptographic algorithm, which is based on an asymmetrical key pair.

2. A method for authorizing an external access to a control device of a motor vehicle for activating a function of the control device, the method comprising:

establishing, by a remote control device, a data link between the remote control device and the control device;

transmitting, by the remote control device, a first request signal from the remote control device to the control device;

activating, by the control device, a device of the control device to generate a random value in response to the request signal, whereupon the device of the control device generates a random value;

activating, by a reference value generating unit of the control device, a calculation specification, which is stored in a memory of the reference value generating unit of the control device, for calculating a reference value from the random value and storing, by the reference value generating unit of the control device, the reference value, which has been calculated by applying the calculation specification to the random value, in a memory unit of the control device;

transmitting, by the control device, the generated random value to an authentication device which is spatially separated from the remote control device;

providing, by the authentication device, a response value corresponding to the random value by calculating the response value by applying a 2nd calculation specification, which is stored in a memory of the authentication device, to the random value;

transmitting, by the authentication device, the response value to the control device;

comparing, by the control device, the transmitted response value with the reference value, which was previously calculated and stored in the memory unit of the control device, using a comparator;

authorizing the function of the control device, by an enabling unit if the response value matches the reference value; and

transmitting, by the remote control device, a remote control device identification data record, which is assigned to the remote control device, bijectively, from the remote control device to an authorization verification device, which is spatially separated from the remote control device, and verifying an authorization of the remote control device by the authorization verification device by comparing the remote control device identification data record transmitted from the remote control device with entries in at least one of an authorization list and a non-authorization list, the at least one of the authorization list and the non-authorization list being stored in an authorization memory unit of the authorization verification device.

3. The method as recited in claim 2, further comprising:

transmitting the random value generated in the control device via the established data link from the control device to the remote control device and from the remote control device to at least one of the authorization verification device and the authentication device.

4. The method as recited in claim 3, further comprising:

at least one of;

i) providing a response value corresponding to the random value by the authentication device and ii) blocking the transmission of the response value to the control device by a blocking unit if the verification of the authorization of the remote control device yields a negative result.

5. The method as recited in claim 2, wherein the authorization verification device and the authentication device are formed in a central server, the authentication device and the authorization verification device being formed in a shared central server.

6. The method as recited in one of claim 2, wherein the authentication device is spatially separated from the authorization verification device.

7. The method as recited in claim 6, wherein multiple authentication devices are provided and the authorization verification device is designed for selecting one of the multiple authentication devices for generating the response value by comparing a selection criterion transmitted from the control device with entries in a select list stored in the authorization verification device.

8. The method as recited in claim 2, further comprising:

transmitting a feedback regarding at least one of;

i) an activation which took place, and ii) an activation which did not take place, from the control device via the data link to the remote control device.

9. The method as recited in claim 2, wherein the activated function includes at least one of:

i) an activation of an immobilizer system, ii) a deactivation of the immobilizer system, iii) a request for data from the control device, and iv) an input of data into the control device.

10. The method as recited in claim 2, wherein the verification of the authorization of the remote control device includes requesting at least one of:

i) a password, ii) a personal identification number, and iii) a key, and providing a response value corresponding to the random value only if the at least one of the password, the personal identification number and the key matches a value stored in the authorization verification device.

11. The method as recited in claim 10, wherein, after provision of the at least one of the password, the personal identification number, and the key, the at least one of the authorization list and the non-authorization list is at least one of:

(i) predefinable, and (ii) changeable.

13. A system for authorizing an external access to a control device of a motor vehicle for activating a function of the control device, the system comprising:

a remote control logic device which establishes a data link between the remote control device and the control device and transmits a first request signal to the control device;

a logic device of the control device, activated by the control device, to generate a random value in response to the request signal;

a reference value generating unit of the control device, which activates a calculation specification stored in a memory of the reference value generating unit, to calculate a reference value from the random value by applying the calculation specification to the random value, the reference value generating unit storing the reference value in a memory unit of the control device; and

an authentication device which is spatially separated from the remote control device, the control device transmitting the generated random value to the authentication device, the authentication device providing a response value corresponding to the random value by calculating the response value by applying a 2nd calculation specification, which is stored in a memory of the authentication device, to the random value, the authentication device transmitting the response value to the control device;

wherein the control device compares the transmitted response value with the reference value, which was previously calculated and stored in the memory unit of the control device, using a comparator, and authorizes the function of the control device, by an enabling logic unit if the response value matches the reference value, the control device transmitting a feedback regarding at least one of;

i) an activation which took place, and ii) an activation which did not take place, from the control device via the data link to the remote control device, and

wherein the activated function includes at least one of;

i) an activation of an immobilizer system, ii) a deactivation of the immobilizer system, iii) a request for data from the control device, and iv) an input of data into the control device.

14. A system for authorizing an external access to a control device of a motor vehicle for activating a function of the control device, the system comprising:

a remote control logic device which establishes a data link between the remote control device and the control device and transmits a first request signal to the control device;

a logic device of the control device, activated by the control device, to generate a random value in response to the request signal;

a reference value generating unit of the control device, which activates a calculation specification stored in a memory of the reference value generating unit, to calculate a reference value from the random value by applying the calculation specification to the random value, the reference value generating unit storing the reference value in a memory unit of the control device; and

an authentication device which is spatially separated from the remote control device, the control device transmitting the generated random value to the authentication device, the authentication device providing a response value corresponding to the random value by calculating the response value by applying a 2nd calculation specification, which is stored in a memory of the authentication device, to the random value, the authentication device transmitting the response value to the control device;

wherein the control device compares the transmitted response value with the reference value, which was previously calculated and stored in the memory unit of the control device, using a comparator, and authorizes the function of the control device, by an enabling logic unit if the response value matches the reference value; and

wherein the remote control device transmits a remote control device identification data record, which is assigned to the remote control device, bijectively, from the remote control device to an authorization verification device, which is spatially separated from the remote control device, and the authorization verification device verifies an authorization of the remote control device by comparing the remote control device identification data record transmitted from the remote control device with entries in at least one of an authorization list and a non-authorization list, the at least one of the authorization list and the non-authorization list being stored in an authorization memory unit of the authorization verification device.