Vehicle access systems and methods

• US 10,200,371 B2
• Filed: 03/29/2016
• Issued: 02/05/2019
• Est. Priority Date: 11/09/2015
• Status: Active Grant

• Current Assignee: DealerWare LLC (Cox Enterprises Incorporated)
• Original Assignee: Silvercar, Inc. (Volkswagen AG)
• Inventors: Darnell, Allen, McMillan, Matt, Sarra, Bill
• Primary Examiner(s): Moorthy, Aravind K
• Application Number:
  US15/083,369
• Publication Number:
  US 20170134382A1
• Time in Patent Office: 1,043 Days
• Field of Search: 713171, 726 2, 380262, 380278
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 50/40 Business processes related to the transportation industry shipping G06Q10/083
• CPC Class Codes: G07B 15/00 Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points handling coins or valuable papers, e.g. banknotes, G07D; apparatus for vending or hiring articles or services activated by coins, credit cards, paper currency or the like G07F7/00, G07F17/00
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 9/38 with central registration
• CPC Class Codes: H04L 12/40 Bus networks
• CPC Class Codes: H04L 2012/40215 Controller Area Network CAN
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/084 : using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/029 : Location-based management or tracking services
• CPC Class Codes: H04W 4/40 : for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 4/44 : for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

Systems, devices, and methods for controlling access to vehicles in rental, loaner, shared-use, and other vehicle fleets. Some of the present systems, devices, and methods use encrypted virtual keys that can be relayed to a vehicle computing device via a user'"'"'s mobile device. Such virtual keys can be command-specific such that successful use of a virtual key results execution of a predetermined command or group of commands, and further commands require one or more additional virtual keys with the additional commands. Others of the present systems, devices, and methods provide tools: for provisioning or initial pairing of vehicle computing devices with corresponding vehicles, identifying and permitting a user to select locally available vehicles, prompting vehicle computing devices to retrieve pending commands from a server, and/or various other functions described in this disclosure.

Claims

1. A system comprising:

a server comprising a portion of a reservation management (RM) system for a plurality of vehicles, the server comprising memory and a processor configured to execute instructions from the memory to;

receive a request for access to a vehicle from a user'"'"'s mobile computing device via an application on the mobile computing device that is configured to interact with the RM system;

generate a virtual key for a specific one of the plurality of vehicles, each virtual key comprising an encrypted portion that includes;

a command for an action to be initiated by a vehicle computing device of the specific vehicle;

where the instructions to generate a virtual key for a specific vehicle includes instructions to;

access an encryption key that is unique to the specific vehicle, and use the accessed unique encryption key to generate the encrypted portion of the virtual key; and

send the virtual key to the requesting user'"'"'s mobile computing device.

2. The system of claim 1, where the command for an action to be initiated by the vehicle includes sending a message to a controller area network (CAN) bus of the specific vehicle to unlock at least one door of the specific vehicle.

3. The system of claim 1, further comprising:

a vehicle computing device in communication with a controller area network (CAN) bus of a corresponding vehicle, the vehicle computing device comprising memory and a processor configured to execute instructions from the memory to;

receive from the user'"'"'s mobile computing device one of the virtual keys;

decrypt the encrypted portion of the virtual key;

initiate the command for the corresponding vehicle;

where the memory does not include unique encryption keys of others of the plurality of vehicles such that the vehicle computing device is unable to decrypt the encrypted portions of virtual keys for others of the plurality of vehicles.

4. The system of claim 3, where the encrypted portion of each virtual key further includes:

a virtual key identifier associated with the specific vehicle, and the processor of the vehicle computing device is configured to execute instructions from the memory of the vehicle computing device to;

validate that the virtual key identifier associated with the specific vehicle matches an identifier of the corresponding vehicle.

5. The system of claim 3, where the processor of the vehicle computing device is configured to execute instructions from the memory of the vehicle computing device to:

in response to receiving a valid command to begin or end a reservation, change an availability status of the corresponding vehicle.

6. The system of claim 5, where the processor of the vehicle computing device is configured to execute instructions from the memory of the vehicle computing device to:

in response to a change in an availability status of the corresponding vehicle, send to the server a message indicating the change in availability.

7. The system of claim 6, where the message to the server indicating the change in availability status includes one or more characteristics of the vehicle obtained from the CAN bus.

8. The system of claim 3, where the processor of the vehicle computing device is configured to execute instructions from the memory of the vehicle computing device to:

in response to a triggering event, send to the server a message including one or more characteristics of the vehicle obtained from the CAN bus;

where the triggering event includes one or more events selected from the list consisting of;

a change in ignition state of the vehicle, the passage of a predetermined period of time, and receiving an unencrypted message from the server.

9. The system of claim 8, where the one or more characteristics of the vehicle include last odometer reading and fuel level.

10. The system of claim 9, where the message including the one or more characteristics is encrypted.

11. The system of claim 8, where the vehicle computing device further comprises a global positioning system (GPS) module, and the message includes one or more characteristics of the vehicle obtained from the CAN also includes a location of the vehicle.

12. The system of claim 3, where the processor of the vehicle computing device is configured to execute instructions from the memory of the vehicle computing device to:

if the corresponding vehicle is configured to be compatible with a smartkey and to determine whether the smartkey is located in a cabin of the vehicle, query the CAN bus of the corresponding vehicle to determine whether the smartkey is located in the cabin.

13. The system of claim 12, where the processor of the vehicle computing device is configured to not execute a command to end a reservation unless the smartkey is located in the cabin.

14. The system of claim 1, further comprising:

a mobile computing device comprising a processor, memory, and an application stored in the memory and comprising instructions configured to be executed by the processor to;

receive, from a server of a reservation management (RM) system that manages usage of a plurality of vehicles, a virtual key for a specific one of the plurality of vehicles, the virtual key comprising an encrypted portion that includes;

a command for an action to be initiated by a vehicle computing device of the specific vehicle;

where the encrypted portion is encrypted such that decryption requires an encryption key that is unique to the specific vehicle; and

transmit the virtual key to the selected one of the plurality of vehicles; and

a vehicle computing device in communication with a controller area network (CAN) bus of a corresponding vehicle, the vehicle computing device comprising memory and a processor configured to execute instructions from the memory to;

receive from the user'"'"'s mobile computing device one of the virtual keys;

decrypt the encrypted portion of the virtual key; and

initiate the command for the corresponding vehicle;

where the memory does not include unique encryption keys of others of the plurality of vehicles such that the vehicle computing device is unable to decrypt the encrypted portions of virtual keys for others of the plurality of vehicles.

15. The system of claim 14, where the application is configured to, after a virtual key that changes an availability status has been successfully received by a vehicle computing device of the corresponding vehicle, and the command has been executed:

send a message to the server indicating the change in availability status.

16. The system of claim 15, where the processor of the server is configured to execute instructions from the memory of the server to:

upon receipt of a message from one of the vehicle computing device or the user'"'"'s mobile computing device indicating a change in availability state of a vehicle, determine whether a corresponding message has also been received from the other of the vehicle computing device or the user'"'"'s mobile computing device.

17. The system of claim 1, where each virtual key further comprises an unencrypted portion.

18. The system of claim 17, where at least one of the virtual keys further comprises an unencrypted portion that includes:

a key timestamp;

where the processor of the vehicle computing device is further configured to execute instructions from the memory of the vehicle computing device to;

generate an initialization vector from at least the key timestamp to decrypt the encrypted portion.

19. The system of claim 18, where the key timestamp is determined by the server, is based on a data value included in the request, or both.

20. The system of claim 17, where the unencrypted portion includes a unique reference.

21. The system of claim 20, where the unique reference is configured to enable decryption of the encrypted portion of the virtual key.

22. The system of claim 1, where the encrypted portion of at least one of the virtual keys further includes:

an expiration timestamp defining the end of a time period by which the virtual key must be used;

where the processor of the vehicle computing device is further configured to execute instructions from the memory of the vehicle computing device to;

before executing the command of a virtual key with an expiration timestamp, validate that the expiration timestamp is not expired.

23. The system of claim 22, where each of the virtual keys includes an expiration timestamp, and the processor of the vehicle computing device is further configured to execute instructions from the memory of the vehicle computing device to:

execute an otherwise valid command to end a reservation even if the timestamp of a virtual key including the command is expired.

24. The system of claim 1, where the encrypted portion of at least one of the virtual keys further includes:

a session identifier;

where the processor of the vehicle computing device is further configured to execute instructions from the memory of the vehicle computing device to;

in response to receiving a valid virtual key with a command to begin a reservation, store the session identifier; and

in response to subsequently receiving a virtual key with a command to end the reservation, compare the session identifier of the subsequently received virtual key to the stored session identifier; and

if the compared session identifiers match, processing the command to end the reservation.

25. The system of claim 1, where the decryption of the encrypted portion of a virtual key depends upon an encryption key known to the server and the vehicle device, but not known to the application on the user'"'"'s portable computing device.

26. The system of claim 1, where the encrypted portion of at least one of the virtual keys further includes:

a validation code;

where the processor of the vehicle computing device is further configured to execute instructions from the memory of the vehicle computing device to;

generate a random challenge phrase;

generate a hash string from the validation code and challenge phrase;

transmit the generated random challenge phrase to the user'"'"'s mobile computing device;

receive a hash string from the user'"'"'s mobile computing device; and

compare the received hash string to the generated hash string to validate that the virtual key originated from an authorized user'"'"'s mobile computing device.

27. The system of claim 1, where the encrypted portion of the virtual key further includes a validation code, and where the processor of the server is configured to execute the instructions of the memory of the server to send a message to the user'"'"'s mobile computing device that includes a validation code, the message distinct from the virtual key, where the validation code included in the message enables the user'"'"'s mobile computing device to generate, responsive to a challenge phrase received from the vehicle computing device, a hash string based on the challenge phrase and the validation code, the hash string associated with validation by the vehicle computing device that the user'"'"'s mobile computing device is authorized to provide the virtual key to the vehicle computing device.

28. A method comprising:

receiving a request for access to a vehicle, the request for access being;

received with a server of a reservation management (RM) system for a plurality of vehicles; and

sent from a user'"'"'s mobile computing device via an application on the mobile computing device that is configured to interact with the RM system;

generating a virtual key for a specific one of the plurality of vehicles, including accessing an encryption key that is unique to the specific vehicle and using the accessed unique encryption key to generate the encrypted portion of the virtual key, each virtual key comprising an encrypted portion that includes;

a command for an action to be initiated by a vehicle computing device of the specific vehicle; and

sending the virtual key to the requesting user'"'"'s mobile computing device.

29. The method of claim 28, where the virtual key includes an unencrypted portion that includes a data value, where the encrypted portion further includes a validation code, and where using the accessed encryption key to generate the encrypted portion comprises:

generating an initialization vector based on the data value and the accessed encryption key; and

using the initialization vector to encrypt the command and the validation code.

30. The method of claim 28, further comprising sending a message to the user'"'"'s mobile computing device that includes a validation code, the message distinct from the virtual key, the encrypted portion further includes the validation code, and where the validation code included in the message enables the user'"'"'s mobile computing device to generate, responsive to a challenge phrase received from the vehicle computing device, a hash string based on the challenge phrase and the validation code, the hash string associated with validation by the vehicle computing device that the user'"'"'s mobile computing device is authorized to provide the virtual key to the vehicle computing device.

31. A mobile device comprising:

a memory that stores an application that is configured to interact with a reservation management (RM) system that includes a server, the application comprising one or more instructions;

a processor coupled to the memory and configured to execute the instructions to cause the processor to;

send a request to the server for access to a vehicle of a plurality of vehicles;

receive, responsive to the request, a virtual key from the server, the virtual key including an encrypted portion encoded by the server using an encryption key unique to a specific vehicle of the plurality of vehicles, where the encrypted portion includes a validation code and a command for an action to be initiated by the specific vehicle;

send the virtual key to a vehicle computing device of the specific vehicle;

receive, from the server, a message that includes the validation code;

identify the validation code included in the message;

receive a challenge phrase from the vehicle computing device;

generate a hash string based on the challenge phrase and the validation code; and

send the hash string to the vehicle computing device.

32. The mobile device of claim 31, where the hash string is associated with validation by the vehicle computing device that the virtual key received by the vehicle computing device originate from an authorized device, and where decryption of the encrypted portion of the virtual key depends upon the encryption key that is known to the server and the vehicle computing device, but not known to the application.