Information Sharing System, Computer, and Information Sharing Method

• US 20180006810A1
• Filed: 06/26/2017
• Published: 01/04/2018
• Est. Priority Date: 07/04/2016
• Status: Active Grant

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: IDEGUCHI, Kota, ANDO, Eriko, KAYASHIMA, Makoto
• Granted Patent: US 10,499,219 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/48 for in-vehicle communication
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

It is provided an information sharing system, comprising a server, and an in-vehicle system. The server includes: a first storage part; a first key generation part configured to generate a first private key and a first public key, if keys can be exchanged with the in-vehicle system; and a signature generation part configured to generate a signature value of the first public key using a server private key. The in-vehicle system includes: a second storage part configured to store a public key certificate including a server public key; a signature verification part configured to verify the first public key and a signature value received from the server, using a public key certificate; and a second key generation part configured to generate a second private key and a second public key, if a combination of the first public key and the signature value is correct as a result of the verification.

Claims

1. An information sharing system, comprising:

a server; and

an in-vehicle system that includes a vehicle configuration management part configured to collect configuration information for a vehicle in which said in-vehicle system is installed,

wherein the server includes;

a first storage part configured to store a server private key, and vehicle state management information indicating a state of the vehicle, the vehicle state management information being used to determine whether or not keys can be exchanged with the in-vehicle system;

a judgment part configured to compare the vehicle state management information with the configuration information, thereby determining whether keys can be exchanged with the in-vehicle system or not;

a first key generation part configured to generate a first private key and a first public key, in a case where it is determined that keys can be exchanged with the in-vehicle system; and

a signature generation part configured to generate a signature value of the first public key using the server private key, and

wherein the in-vehicle system further includes;

a second storage part configured to store a public key certificate including the server public key;

a signature verification part configured to verify the first public key and the signature value received from the server, using the public key certificate; and

a second key generation part configured to generate a second private key and a second public key, in a case where a combination of the first public key and the signature value is correct as a result of the verification.

2. The information sharing system according to claim 1,

wherein the first private key, the first public key, the second private key, and the second public key are generated and exchanged using the Diffie-Hellman key exchange method.

3. The information sharing system according to claim 2,

wherein the server has a first private information generation part configured to generate private information using the first private key and the second public key, and

wherein the in-vehicle system has a second private information generation part configured to generate private information using the second private key and the first public key.

4. The information sharing system according to claim 1, further comprising a terminal to which the configuration information is provided,

wherein the terminal includes a vehicle configuration registration part configured to send the input configuration information to the server.

5. The information sharing system according to claim 1,

wherein the vehicle state management information includes information to identify an appropriate location for the vehicle to exchange keys, and

wherein the judgment part is configured to:

determine whether the vehicle is present in a location that is appropriate for key exchange or not; and

determine that the keys can be exchanged with the in-vehicle system in a case where the vehicle is present in the location that is appropriate for key exchange.

6. A computer configured to communicate with an in-vehicle system, comprising:

a storage part configured to store a server private key, and vehicle state management information indicating a state of the vehicle, the vehicle state management information being used to determine whether keys can be exchanged with the in-vehicle system or not;

a judgment part configured to compare the vehicle state management information with the configuration information, thereby determining whether keys can be exchanged with the in-vehicle system or not;

a key generation part configured to generate a first private key and a first public key, in a case where it is determined that keys can be exchanged with the in-vehicle system; and

a signature generation part configured to generate a signature value of the first public key using the server private key,

wherein the computer sends the first public key and the signature value to the in-vehicle system, and

wherein the computer receives, from the in-vehicle system, a second public key generated in a case where a combination of the first public key and the signature value is correct.

7. The computer according to claim 6,

wherein the first private key and the first public key are generated and exchanged by the Diffie-Hellman key exchange method.

8. The computer according to claim 7, further comprising a second private information generation part configured to generate private information using the first private key and the second public key.

9. The computer according to claim 6,

wherein the computer is configured to receive the configuration information from a terminal.

10. The computer according to claim 6,

wherein the vehicle state management information includes information to identify an appropriate location for the vehicle to exchange keys, and

wherein the judgment part is configured to:

determine whether the vehicle is present in a location that is appropriate for key exchange or not; and

determine that the keys can be exchanged with the in-vehicle system, in a case where the vehicle is present in the location that is appropriate for key exchange.

11. An information sharing method by an information sharing system that includes a server and an in-vehicle system,

wherein the server includes a first processor configured to execute programs and a first storage device configured to store the programs,

wherein the first storage device is configured to store a server private key, and vehicle state management information indicating a state of the vehicle, the vehicle state management information being used to determine whether keys can be exchanged with the in-vehicle system or not,

wherein the in-vehicle system includes a second processor configured to execute programs and a second storage device configured to store the programs,

wherein the second storage device is configured to store a public key certificate including the server public key, and

wherein the information sharing method comprises:

a step in which the in-vehicle system collects configuration information for a vehicle that has the in-vehicle system installed therein;

a step in which the server receives the configuration information;

a determinant step in which the server compares the vehicle state management information with the configuration information, thereby determining whether keys can be exchanged with the in-vehicle system or not;

a step in which the server generates a first private key and a first public key, in a case where it is determined that keys can be exchanged with the in-vehicle system;

a step in which the server generates a signature value of the first public key using the server private key;

a step in which the server sends the first public key and the signature value to the in-vehicle system;

a step in which the in-vehicle system verifies the first public key and the signature value received from the server, using the public key certificate;

a step in which the in-vehicle system, in a case where a combination of the first public key and the signature value is deemed correct as a result of the verification, generates a second private key and a second public key; and

a step in which the in-vehicle system sends the generated second public key to the server.

12. The information sharing method according to claim 11,

wherein the first private key, the first public key, the second private key, and the second public key are generated and exchanged by the Diffie-Hellman key exchange method.

13. The information sharing method according to claim 12, further comprising:

a step in which the server generates private information using the first private key and the second public key; and

a step in which the in-vehicle system generates private information using the second private key and the first public key.

14. The information sharing method according to claim 11,

wherein the information sharing system further includes a terminal to which the configuration information is provided, and

wherein the information sharing method further comprises a step in which the server receives the configuration information from the terminal.

15. The information sharing method according to claim 11,

wherein the vehicle state management information includes information to identify an appropriate location for the vehicle to exchange keys, and

wherein the judgment step performed by the server includes:

determining whether the vehicle is present in a location that is appropriate for key exchange, using the vehicle state management information and a location of the vehicle included in the configuration information; and

determining that the keys can be exchanged with the in-vehicle system, in a case where it is determined by the server that the vehicle is present in the location that is appropriate for key exchange.