Method and system for component authentication of a vehicle

• US 7,131,005 B2
• Filed: 06/28/2002
• Issued: 10/31/2006
• Est. Priority Date: 06/28/2002
• Status: Active Grant

• Current Assignee: Continental Automotive Systems, Inc. (Continental AG)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Dabbish, Ezzat A., Levenson, Samuel M., Bruner, John D., Fehr, Walton L., Puhl, Larry C., Reinold, Jurgen
• Primary Examiner(s): Louis-Jacques, Jacques
• Assistant Examiner(s): HENEGHAN, MATTHEW E
• Application Number:
  US10/184,760
• Publication Number:
  US 20040003231A1
• Time in Patent Office: 1,586 Days
• Field of Search: 713/168, 713/170, 701/29, 701/32, 340/5.8
• US Class Current: 713/170
• CPC Class Codes: B60R 16/0234 related to maintenance or repairing of vehicles
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A component for use in a prospective vehicle obtains from a certification authority a certification that an authentic vehicle is associated with a cryptographic key. The certification certifies that the cryptographic key is bound to information identifying the authentic vehicle. The component utilizes the cryptographic key obtained from the certification authority in cryptographic communication with the prospective vehicle, and determines whether the prospective vehicle is the authentic vehicle based on whether the cryptographic key is successfully utilized in the cryptographic communication. Upon determining the prospective vehicle is the authentic vehicle, the component may allow the prospective vehicle to operate the component.

Claims

1. A method for authentication of a prospective vehicle by a component for use in the prospective vehicle, the method performed by the component and comprising the steps of:

accessing, by the component, the prospective vehicle, wherein the component has at least a component computing unit, a component cryptographic unit, a component memory, the component memory storing data related to the component;

obtaining from a certification authority a certification that an authentic vehicle is associated with a cryptographic key;

utilizing, by the component cryptographic unit, the cryptographic key in cryptographic communication with a cryptographic unit of the prospective vehicle; and

determining, by the component, whether the prospective vehicle is the authentic vehicle based on whether the cryptographic key is successfully utilized in the cryptographic communication.

2. The method of claim 1 wherein the certification comprises a digital certificate.

3. The method of claim 1 wherein the certification comprises a digital signature of the certification authority.

4. The method of claim 1 wherein the certification authority is authenticated by a second certification authority.

5. The method of claim 1, further comprising the step of determining that the certification authority is authorized to certify the authentic vehicle.

6. The method of claim 1 wherein the step of obtaining the certification comprises obtaining a certification that a vehicle having an identified attribute is associated with the cryptographic key.

7. The method of claim 1 wherein the authentic vehicle has a first cryptographic key and the cryptographic key with which the certification associates the authentic vehicle is a second cryptographic key corresponding to the first cryptographic key.

8. The method of claim 7 wherein the first cryptographic key is accessible only by the authentic vehicle.

9. The method of claim 7 wherein the first cryptographic key is a private cryptographic key of the authentic vehicle and the second cryptographic key is a public cryptographic key of the authentic vehicle.

10. The method of claim 1, further comprising the step of allowing the prospective vehicle to operate the component upon determining the prospective vehicle is the authentic vehicle.

11. A system for authentication of a proposed vehicle by a component for use in the prospective vehicle, the system comprising:

a component obtaining from a certification authority a certification that an authentic vehicle is associated with a cryptographic key, the component comprising

a cryptographic unit utilizing the cryptographic key in cryptographic communication with a cryptographic unit of the prospective vehicle; and

a computing unit determining whether the prospective vehicle is die authentic vehicle based on whether the cryptographic key is successfully utilized in the cryptographic communication.

12. The system of claim 11 wherein the certification comprises a digital certificate.

13. The system of claim 11 wherein the certification comprises a digital signature of the certification authority.

14. The system of claim 11 wherein the certification authority is authenticated by a second certification authority.

15. The system of claim 11, wherein the computing unit determines that the certification authority is authorized to certify the authentic vehicle.

16. The system of claim 11 wherein the certification comprises a certification that a vehicle having an identified attribute is associated with the cryptographic key.

17. The system of claim 11 wherein the authentic vehicle has a first cryptographic key and the cryptographic key with which the certification associates the authentic vehicle is a second cryptographic key corresponding to the first cryptographic key.

18. The system of claim 17 wherein the private cryptographic key is accessible only by the authentic vehicle.

19. The system of claim 17 wherein the first cryptographic key is a private cryptographic key of the authentic vehicle and the second cryptographic key is a public cryptographic key of the authentic vehicle.

20. The system of claim 11 wherein the computing unit allows the prospective vehicle to operate the component upon determining the prospective vehicle is the authentic vehicle.