Method and apparatus for remote authentication

• US 10,097,993 B2
• Filed: 07/25/2011
• Issued: 10/09/2018
• Est. Priority Date: 07/25/2011
• Status: Active Grant

• Current Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Original Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Inventors: Esselink, Chad Evert, Westra, Michael Raymond, Schunder, Mark, Mitchell, David Chase
• Primary Examiner(s): Edwards, Linglan E
• Application Number:
  US13/189,722
• Publication Number:
  US 20130031604A1
• Time in Patent Office: 2,633 Days
• Field of Search: 726 2- 8, 726 26- 30
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A computer-implemented authentication method includes receiving a request to access one or more features of a vehicle computing system (VCS) from an application running on a wireless device in communication with the VCS. The method further includes preparing a secure access rights request to a remote server including one or more characteristics associated with the application and sending the secure request from the VCS, through the wireless device to the remote server. The method additionally includes receiving a response to the request having been sent from the remote server through the wireless device. The method includes verifying the authenticity of the received response and updating a policy table including information from the received response, the information including at least an expiration trigger and access rights for the application. Also, the method includes validating the application for usage based at least on the information included in the updated policy table.

Claims

1. A computer-implemented authentication method comprising:

compiling, at a vehicle, a list of applications having current vehicle-stored approval for use on a vehicle computing system (VCS);

transmitting the list from the vehicle to a remote server;

receiving a response from the remote server indicating authorization status of applications on the list;

determining an application on the list not authorized for use with the VCS based on the response; and

preventing resource access by the determined application.

2. The method of claim 1, wherein the preventing includes removing a stored approval-status for the application.

3. The method of claim 1, wherein the application not authorized for use based on the response is installed on the VCS and the preventing includes removing the application.

4. The method of claim 1, wherein the response includes information relating to a new version of an application, and wherein the method further includes updating the application indicated by the information as having a new version.

5. The method of claim 1, wherein the list of applications comprises applications currently installed on the vehicle computing system.

6. The method of claim 1, further comprising notifying a user if an application is prevented from accessing resources.