Method and system for technician authentication of a vehicle

• US 7,228,420 B2
• Filed: 06/28/2002
• Issued: 06/05/2007
• Est. Priority Date: 06/28/2002
• Status: Active Grant

• Current Assignee: Continental Automotive Systems, Inc. (Continental AG)
• Original Assignee: Temic Automotive of North America, Incorporated (Continental AG)
• Inventors: Dabbish, Ezzat A., Levenson, Samuel M., Fehr, Walton L., Puhl, Larry C., Reinold, Jurgen
• Primary Examiner(s): ZIA, SYED
• Application Number:
  US10/185,127
• Publication Number:
  US 20040003249A1
• Time in Patent Office: 1,803 Days
• Field of Search: 713/170, 713/193, 713/200
• US Class Current: 713/170
• CPC Class Codes: B60R 16/0234 related to maintenance or repairing of vehicles
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

The service technician accesses the prospective vehicle and obtains from a certification authority a certification that an authentic vehicle is associated with a cryptographic key. The service technician utilizes the cryptographic key in cryptographic communication with the prospective vehicle via a secure device having limited accessibility but being accessible by the service technician. The service technician determines whether the prospective vehicle is the authentic vehicle based on whether the cryptographic key is successfully utilized in the cryptographic communication with the prospective vehicle.

Claims

1. A method for authentication of a prospective vehicle by a service technician for performing a service operation on the prospective vehicle, the method performed by the service technician and a secure device, and comprising the steps of:

accessing the prospective vehicle;

obtaining from a certification authority a digital signature, wherein the digital signature certifies the prospective vehicle as an authentic vehicle and certifies an identified attribute of the authentic vehicle, and wherein the digital signature is associated with a certificate that comprises an attribute identifying the authentic vehicle and a cryptographic key, wherein the cryptographic key is bound to the authentic vehicle;

utilizing the cryptographic key in cryptographic communication with the prospective vehicle via a secure device having limited accessibility but being accessible by the service technician; and

determining whether the prospective vehicle is the authentic vehicle based on whether the cryptographic key is successfully utilized in the cryptographic communication.

2. The method of claim 1 wherein identified attribute is a vehicle identification number.

3. The method of claim 1 wherein the identified attribute is a vehicle manufacturer.

4. The method of claim 1 wherein the cryptographic key is a public cryptographic key of the authentic vehicle and the prospective vehicle has a corresponding private key previously stored therein and only accessible thereby.

5. The method of claim 1, trther comprising the step of determining that the certification authority is authorized to certify the authentic vehicle.

6. The method of claim 4 wherein the determining step includes issuing a cryptographic challenge to the vehicle, wherein the vehicle encrypts the challenge using the vehicle private key and passes the encrypted challenge to the secure device, wherein the secure device decrypts the encrypted challenge using the public key from the certificate to authenticate that the decrypted challenge is the same as the original challenge.

7. The method of claim 6 wherein the challenge is a randomly generated number.

8. The method of claim 1 wherein certification authority is the vehicle manufacturer.

9. The method of claim 1 wherein the secure device has certification and includes the private key of the authentic vehicle, and the prospective vehicle has the same private key previously stored therein and only accessible thereby.

10. A method for authentication of a prospective vehicle by a service technician for performing a service operation on the prospective vehicle, the method performed by the service technician and a secure device, and comprising the steps of:

accessing the prospective vehicle;

obtaining for the secure device a digital signature, wherein the digital signature certifies the prospective vehicle as an authentic vehicle and certifies an identified attribute of the authentic vehicle, and wherein the digital signature is associated with a certificate that comprises an attribute identifying the authentic vehicle and a secret cryptographic key stared therein;

challenging the prospective vehicle utilizing the secret cryptographic key in cryptographic communication via the secure device;

encrypting the challenge by the prospective vehicle using a private key stored therein;

decrypting the challenge using the secret key of the secure device; and

determining whether the prospective vehicle is the authentic vehicle based on whether the decrypted challenge in the cryptographic communication is the same as the original challenge.

11. A method for authentication of a prospective component of a vehicle by a service technician for performing a service operation on the vehicle with respect to the prospective component, the method performed by the service technician and a secure device, and comprising the steps of:

accessing the prospective component of the vehicle;

obtaining from a certification authority a digital signature, wherein the digital signature certifies an identified attribute of an authentic component and wherein the digital signature is associated with a certificate that comprises an attribute identifying the authentic component and a cryptographic key, wherein the cryptographic key is bound to the attribute identifying the authentic component;

utilizing the cryptographic key in cryptographic communication with the prospective component via a secure device having limited accessibility but being accessible by the service technician; and

determining whether the prospective component is the authentic component based on whether the cryptographic key is successfully utilized in the cryptographic communication.

12. The method of claim 11 wherein identified attribute is a component serial number.

13. The method of claim 11 wherein the identified attribute is a component supplier.

14. The method of claim 11 wherein the cryptographic key is a public cryptographic key of the authentic component and the prospective component has a corresponding private key previously stored therein and only accessible thereby.

15. The method of claim 11, further comprising the step of determining that the certification authority is authorized to certify the authentic component.

16. The method of claim 14 wherein the determining step of includes issuing a cryptographic challenge to the vehicle, wherein the vehicle encrypts the challenge using the vehicle private key and passes the encrypted challenge to the secure device, wherein the secure device decrypts the encrypted challenge using the public key from the certificate to authenticate that the decrypted challenge is the same as the original challenge.

17. The method of claim 16 wherein the challenge is a randomly generated number.

18. The method of claim 11 wherein the certification authority is the authentic component supplier.

19. The method of claim 11 wherein the secure device has certification and includes the private key of the authentic component, and the prospective component has the same private key previously stored therein and only accessible thereby.

20. The method of claim 11, further comprising the step of performing the service operation upon determining die prospective vehicle is the authentic component wherein the secure device has certification and includes the private key of the authentic component, and the prospective component has the same private key previously stored therein and only accessible thereby, and wherein the determining step includes issuing a cryptographic challenge to the component, wherein the component encrypts the challenge using the component private key and passes the encrypted challenge to the secure device, wherein the secure device decrypts the encrypted challenge using its private key to authenticate that the decrypted challenge is the same as the original challenge.