Secure telematics

• US 20040185842A1
• Filed: 01/28/2004
• Published: 09/23/2004
• Est. Priority Date: 01/28/2003
• Status: Active Grant

• Current Assignee: CyberCare, Incorporated
• Original Assignee: Cellport Systems Incorporated
• Inventors: Kennedy, Patrick J., Braitberg, Michael F., Spaur, Charles W., Fuchs, Axel, Klingenstein, Nate, Lee, Lane
• Granted Patent: US 7,366,892 B2
• Time in Patent Office: Days
• US Class Current: 455/420
• CPC Class Codes: B60R 2325/10 Communication protocols, communication systems of vehicle anti-theft devices
• CPC Class Codes: B60R 2325/101 Bluetooth
• CPC Class Codes: B60R 2325/202 Personal digital assistant [PDA]
• CPC Class Codes: B60R 2325/205 Mobile phones
• CPC Class Codes: B60R 25/01 operating on vehicle systems or fittings, e.g. on doors, seats or windscreens
• CPC Class Codes: B60R 25/04 operating on the propulsion system, e.g. engine or drive motor
• CPC Class Codes: B60R 25/1001 Alarm systems associated with another car fitting or mechanism, e.g. door lock or knob, pedals features related to the general power supply B60R25/1018
• CPC Class Codes: B60R 25/20 Means to switch the anti-theft system on or off
• CPC Class Codes: B60R 25/209 Remote starting of engine
• CPC Class Codes: B60R 25/241 whereby access privileges are related to the identifiers
• CPC Class Codes: B60R 25/25 using biometry
• CPC Class Codes: B60R 25/252 Fingerprint recognition
• CPC Class Codes: B60R 25/255 Eye recognition
• CPC Class Codes: B60R 25/257 Voice recognition
• CPC Class Codes: B60R 25/33 of global position, e.g. by providing GPS coordinates
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/085 using electronic data carriers
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 2463/082 : applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/068 : using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys

Abstract

A telematics system that includes a security controller is provided. The security controller is responsible for ensuring secure access to and controlled use of resources in the vehicle. The security measures relied on by the security controller can be based on digital certificates that grant rights to certificate holders, e.g., application developers. In the case in which applications are to be used with vehicle resources, procedures are implemented to make sure that certified applications do not jeopardize vehicle resource'"'"'0 security and vehicle users'"'"' safety. Relationships among interested entities are established to promote and support secure vehicle resource access and usage. The entities can include vehicle makers, communication service providers, communication apparatus vendors, vehicle subsystem suppliers, application developers, as well as vehicle owners/users. At least some of the entities can be members of a federation established to enhance and facilitate secure access and usage of vehicle resources.

Claims

1. A method for controlling use of proprietary resources associated with a vehicle, comprising:

providing resources including proprietary resources associated with a vehicle including a plurality of the following;

a first bus, a first interface, a first display, a first vehicle device, a first subsystem, a first application, and a second application;

establishing a plurality of relationships involving at least three entities, wherein first and second entities of said at least three entities has proprietary rights in at least first and second proprietary resources, respectively, and each of said three entities accepts a plurality of conditions related to use of said at least first proprietary resource; and

performing at least a first function after said establishing while making use of at least said first and second proprietary resources.

2. A method of claim 1 wherein said first vehicle device communicates with said first bus and said first application executes in association with said first vehicle device and in which said first entity has proprietary rights in said first vehicle device, but not in said first application and said second entity has proprietary rights in said first application, but not in said first vehicle device.

3. A method of claim 1 wherein said first application relates to at least one of the following:

regulating said first vehicle device using commands;

changing a certificate related to granting use of at least one of said proprietary resources;

accessing an assertion repository associated with a security controller;

providing weather and road conditions information;

monitoring vehicle location;

toll and transportation payments;

servicing a navigation subscription for the vehicle;

executing vehicle diagnostics;

exercising control over said first subsystem related to use thereof.

4. A method of claim 1 wherein said first vehicle device includes at least one of:

an engine monitor, an oil pressure sensor, a temperature sensor and an inflator device.

5. A method of claim 1 wherein said first subsystem includes at least one of the following:

a body control, a chassis control, an engine control, a transmission control, telematics control, a global positioning system (GPS), storage memory located in the vehicle, a personal digital assistant (PDA), a laptop computer, a CD-ROM, a vehicle monitoring system (VMS), a printer, and an accident and emergency notification alarm (AENA).

6. A method of claim 1, wherein:

said providing includes providing a security controller in communication with at least some of said plurality of resources and being used in controlling at least one of the following;

monitoring stored information related to vehicle warranty and quality assurance;

arbitrating priority;

granting access to diagnostic information and vehicle configuration information;

granting access to vehicle information, driver information and vehicle control to authorized service providers;

granting access to vehicle information, driver information and vehicle control to an authorized user of the vehicle;

granting access to enable or change control of vehicle devices;

granting access to one or more features of said first subsystem when made available for communication in the vehicle;

granting access to services authorized for a user;

granting access to authorized credit and debit entities to using an assertion repository;

granting access to vehicle positioning data;

granting access to vehicle data related to border crossing and weight inspection;

granting access to vehicle data related to a smog test; and

granting access to an assertion repository related to public or private transportation, toll and parking payments.

7. A method of claim 1, wherein at least one condition of said plurality of conditions is different for at least one of said three entities.

8. A method of claim 1 wherein said establishing includes describing said plurality of conditions that said three entities accept including at least some of:

compensation for using at least said first proprietary resource, time within which said at least first proprietary resource can be used, an identity of said at least first proprietary resource, use to which said first proprietary resource can be made and at least one remedy that is available when one or more of said conditions is not met.

9. A method of claim 1 wherein said establishing includes certifying at least one of said first application and said first subsystem for use in the vehicle using a first certificate.

10. A method of claim 9 wherein said certifying includes producing a plurality of keys related to allowing use of at least said first proprietary resource by a third entity of said three entities.

11. A method of claim 9 wherein said certifying includes providing a number of properties as part of a first certificate granted to a third entity of said three entities, said properties including at least one of the following:

an identifier that identifies uniquely said third entity;

a priority level;

a geographic area where said first certificate is valid;

an expiration date of said first certificate;

one or more proprietary resources with which communications are to be made using said first application;

one or more application programming interfaces (APIs) available for use; and

one or more authentication procedures required to enable use of one or more of said plurality of resources.

12. A method of claim 9 wherein said certifying includes generating a first certificate request by a third entity of said three entities and providing said first certificate request to a certificate authority.

13. A method of claim 9 wherein said certifying includes associating a signature key from a certificate authority with said first certificate.

14. A method of claim 13 wherein said certifying includes associating a signature key of a requester of said first certificate with said first application.

15. A method of claim 9, wherein said certifying includes approving said first application by at least a first authority.

16. A method of claim 9 wherein said certifying includes enabling generation of a certificate request by a certificate authority.

17. A method of claim 9 wherein said certifying includes issuing said first certificate by a certificate authority and checking accuracy of said first certificate by a requester of said first certificate.

18. A method of claim 9 wherein said certifying includes granting a certificate request related to said first certificate to a certificate requester by a certificate authority.

19. A method of claim 9 further including utilizing information related to said first certificate to ascertain compensation to be made by a first certificate requester.

20. A method of claim 9 further including revoking said first certificate by a certificate authority based on at least a first predetermined condition.

21. A method of claim 9 further including authenticating said first certificate by a security controller in the vehicle.

22. A method of claim 1 in which said establishing includes establishing a federation in which at least some of said entities have predetermined credentials to enable access and use of at least one of the said resources and in which said resources further include an assertion repository.

23. A system for controlling use of proprietary resources in a vehicle, comprising:

resources including proprietary resources for use in the vehicle including a plurality of the following;

a first bus, a first vehicle device, a first subsystem, a first display, a first application, a second application and a first interface; and

a security controller communicating with at least a first of said proprietary resources wherein said security controller controls use of at least said first proprietary resource utilizing certificate information that includes stored certificate information accessible by said security controller that relates to approval of use of said at least first proprietary resource by a first certificate holder of a first certificate, wherein said approval involves at least a first entity having proprietary rights associated with said at least first proprietary resource.

24. A system of claim 23 wherein said stored certificate information includes a certificate authority public key used to authenticate a first certificate of said first certificate holder.

25. A system of claim 23 wherein said security controller is involved with performing at least one of the following:

authenticating said first application using said stored certificate information;

authenticating a user associated with said first application using stored identification information;

verifying use of said at least first proprietary resource utilizing at least one of location and time;

relying on at least a first key in determining whether to allow execution of said first application;

enabling a number of applications including said first application and said second application to execute simultaneously using a plurality of said proprietary resources;

enabling access to at least non-proprietary resources of said resources;

arbitrating use of said first bus; and

monitoring activity on said first bus.

26. A system of claim 23 further including at least one of:

a communication services module in communication with at least said first proprietary resource that is involved with communications, said communication services module for use in protecting and arbitrating access to said first proprietary resource and performing at least some of the following functions;

managing at least said first certificate and at least a first key;

enforcing one or more usage rules for said first proprietary resource;

monitoring and logging usage associated with said first proprietary resource;

providing fault notification;

supporting communications outside the vehicle, including over the Internet; and

supporting communication on said first bus.

27. A system of claim 23 further including a human/machine interface services module in communication with said security controller that protects and arbitrates access to said first display and performs at least some of the following functions:

managing, responding to, handling or otherwise being involved with;

(a) tactile inputs such as steering wheel controls, buttons, switches, (b) audio and voice recognition, text-to-speech and/or voice prompts;

(c) multiple displays including said first display;

managing said first certificate and at least a first key related to use of said first display;

enforcing one or more usage rules associated with said first display;

monitoring and logging usage information related to said first display;

providing fault notification related to said first display and supporting communication on said first bus.

28. A system of claim 23 further including a vehicle gateway and a vehicle services module, wherein said first bus includes one or more vehicle buses including a first vehicle bus communicating with said vehicle gateway that allows access to information obtained from vehicle devices in communication with said vehicle bus, said vehicle services module involved with at least one of the following functions:

managing said first certificate and at least a first key related to use of one or more vehicle devices including said first vehicle device communicating with said first vehicle bus;

enforcing one or more usage rules associated with said first vehicle bus and said vehicle devices;

monitoring and logging usage related to said first vehicle bus and said vehicle devices;

providing fault notification related to said first vehicle bus and said vehicle devices;

upgrading said first vehicle bus access for outgoing requests; and

supporting security on said first vehicle bus.

29. A system of claim 23 wherein said proprietary resources include at least some of the following:

sensors of vehicle devices, diagnostic messages and alarms, a global positioning system (GPS) receiver, a storage memory located in the vehicle, a compact disc read only memory (CD-ROM), a cellular telephone, a vehicle monitoring system (VMS), an inflator system, a printer, a personal digital assistant (PDA), a laptop computer, and an accident and emergency notification alarm (AENA).

30. A system of claim 23 wherein said first application relates to at least one of the following:

determining access to vehicle devices and controlling vehicle functions;

contributing to alarm notification sent to at least one predetermined authority;

a subscription service for navigation;

performing vehicle diagnostics;

upgrading firmware;

conducting a configuration upgrade for the vehicle;

accessing and using an assertion repository;

providing vehicle, road and weather conditions; and

determining that said first proprietary resource can be used.

31. A method for securely controlling access and use related to a target provider involving a vehicle having a security controller, comprising:

providing a security system that includes a security controller in a vehicle;

requesting a target provider;

obtaining first information using said security controller related to authorizing use of said target provider by a requesting application; and

determining use related to said target provider based on said first information.

32. A method of claim 31 wherein said requesting is conducted using said requesting application and said determining is made using said target provider.

33. A method of claim 31 wherein said requesting is initiated by said requesting application.

34. A method of claim 31 wherein said first information relates to a plurality of information available from said security system and said security system includes a database for storing said plurality of information and a decision engine in communication therewith.

35. A method of claim 34 wherein said decision engine determines to provide said first information based on at least one factor that includes:

an identity related to said requesting application, information being requested and consent from an entity involved with authorizing use of said target provider.

36. A method of claim 31 wherein said first information maintains privacy of an identity associated with at least one of said requesting application, said security controller and an entity whose consent is required to implement said requesting application.

37. A method of claim 31 wherein said security controller issues credentials related to at least a first resource located in the vehicle.