Method and device for secure communication of a component of a vehicle with an external communication partner via a wireless communication link

• US 9,591,480 B2
• Filed: 05/04/2006
• Issued: 03/07/2017
• Est. Priority Date: 06/15/2005
• Status: Active Grant

• Current Assignee: Volkswagen AG
• Original Assignee: Volkswagen AG
• Inventors: Aijaz, Amer
• Primary Examiner(s): Wang, Jack K
• Application Number:
  US11/922,425
• Publication Number:
  US 20090212928A1
• Time in Patent Office: 3,960 Days
• Field of Search: 340/426.1, 340/425.5
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

A method, a device, and a communication system are provided for secure communication of at least one of multiple components of a vehicle with at least one external communication partner via a wireless communication link, the multiple components in each case including at least one communication module for data exchange. The method includes exchange of data packets between a transceiver device of the vehicle and an external transceiver station, a communication status of the wireless communication link being ascertained and a data exchange between the at least one component and/or the external communication partner on the one hand, and the others of the multiple components on the other hand and/or an access of the at least one component and/or of the external communication partner to the others of the multiple components being enabled or disabled as a function of the communication status. The device and the communication system are provided for implementing the method.

Claims

1. A method for secure communication of at least one of multiple components of a vehicle with at least one external communication partner, wherein the secure communication is via a wireless communication link and each of the multiple components includes at least one communication module for data exchange, comprising:

exchanging data packets between a transceiver device of the vehicle and an external transceiver station;

ascertaining a communication status of the wireless communication link, wherein the communication status includes a level of security of the communication;

assigning a security level to individual components of the multiple components; and

as a function of the ascertained communication status of the wireless communication link, and the security level assigned to the individual components of the multiple components, at least one of;

(a) enabling at least one of;

(i) data exchange between the at least one of the multiple components and others of the multiple components,

(ii) data exchange between the external communication partner and the others of the multiple components,

(iii) access of the at least one of the multiple components to the others of the multiple components, and

(iv) access of the external communication partner to the others of the multiple components; and

(b) disabling at least one of;

(i) data exchange between the at least one of the multiple components and the others of the multiple components,

(ii) data exchange between the external communication partner and the others of the multiple components,

(iii) access of the at least one of the multiple components to the others of the multiple components, and

(iv) access of the external communication partner to the others of the multiple components.

2. The method according to claim 1, wherein the communication status is ascertained in the ascertaining step based on at least one of (a) an encryption and (b) an authentication used by the external transceiver station, wherein at least one of (a) and (b) is used for establishing the wireless communication link.

3. The method according to claim 1, wherein the communication status is ascertained in the ascertaining step based on at least one of (a) an encryption and (b) an authentication used by the external communication partner.

4. The method according to claim 1, wherein the disabling includes deactivating at least the communication modules of the others of the multiple components.

5. The method according to claim 1, wherein the external transceiver station includes a WLAN access point.

6. The method according to claim 1, wherein the transceiver device of the vehicle includes a WLAN client.

7. The method according to claim 1, wherein the multiple components include computer applications configured to be executed on a vehicle computer of the vehicle.

8. The method according to claim 1, further comprising performing at least one of (a) an authentication and (b) an encryption in all network/application layers by a central security component of the vehicle.

9. The method according to claim 1, further comprising performing at least one of (a) an authentication and (b) an encryption in OSI layers by a central security component of the vehicle.

10. The method according to claim 8, wherein the security component includes computer application executable on a vehicle computer.

11. The method according to claim 8, wherein the communication status is ascertained in the ascertaining step by the security component.

12. The method according to claim 1, wherein the external communication partner includes an application program on an external computer which communicates with the transceiver station via a network.

13. The method according to claim 1, wherein the communication status includes a communication security level, the method further comprising assigning a component security level to each of the multiple components, the disabling including disabling at least one of (a) data exchange with and (b) access to the others of the multiple components if the component security level of the corresponding others of the multiple components is lower than the communication security level.

14. The method according to claim 1, wherein the communication status based on the security of the communication is ascertained based on at least one of (a) transmission security between the transceiver device of the vehicle and the external transceiver station, (b) trustworthiness of the external communication partner, and (c) encryption of the exchanged data between the external communication partner and the at least one of the multiple components.

15. A device for secure communication of at least one of multiple components of a vehicle with at least one external communication partner, wherein the secure communication is via a wireless communication link and each of the multiple components includes at least one communication module configured for data exchange, comprising:

a transceiver device of the vehicle configured to exchange data packets with an external transceiver station;

an arrangement configured to ascertain a communication status of the wireless communication link, wherein the communication status includes a level of security of the communication;

an arrangement configured to assign a security level to individual components of the multiple components; and

an arrangement configured to, as a function of the ascertained communication status of the wireless communication link, and the security level assigned to the individual components of the multiple components, at least one of;

(a) enable at least one of;

(i) data exchange between the at least one of the multiple components and others of the multiple components,

(ii) data exchange between the external communication partner and the others of the multiple components,

(iii) access of the at least one of the multiple components to the others of the multiple components, and

(iv) access of the external communication partner to the others of the multiple components; and

(b) disable at least one of;

(i) data exchange between the at least one of the multiple components and the others of the multiple components,

(ii) data exchange between the external communication partner and the others of the multiple components,

(iii) access of the at least one of the multiple components to the others of the multiple components, and

(iv) access of the external communication partner to the others of the multiple components.

16. The device according to claim 15, wherein the communication status is ascertainable based on at least one of (a) an encryption and (b) an authentication used by the external transceiver station, wherein at least one of (a) and (b) is used for establishing the wireless communication link.

17. The device according to claim 15, wherein the communication status is ascertainable based on at least one of (a) an encryption and (b) an authentication used by the external communication partner.

18. The device according to claim 15, further comprising an arrangement configured to deactivate the communication modules of the others of the multiple components to disable the at least one of (a) data exchange and (b) access.

19. The device according to claim 15, wherein the external transceiver station includes a WLAN access point.

20. The device according to claim 15, wherein the transceiver device of the vehicle includes a WLAN client.

21. The device according to claim 15, wherein the vehicle includes a vehicle computer, and the multiple components include computer applications executable on the vehicle computer of the vehicle.

22. The device according to claim 15, further comprising a central security component of the vehicle configured to perform at least one of (a) authentication and (b) encryption in all network/application layers by a central security component of the vehicle.

23. The device according to claim 15, further comprising a central security component of the vehicle configured to perform at least one of (a) authentication and (b) encryption in OSI layers by a central security component of the vehicle.

24. The device according to claim 22, wherein the security component includes a computer application executable on a vehicle computer.

25. The device according to claim 15, wherein the communication status is ascertainable by a security component.

26. The device according to claim 15, wherein the external communication partner includes an application program executable on an external computer connected to the transceiver station via a network.

27. The device according to claim 15, wherein the communication status includes a communication security level, a component security level being assigned to individual components of the multiple components, and the at least one of (a) the data exchange with and (b) the access to the others of the multiple components disabled if the component security level is lower than the communication security level of corresponding others of the multiple components.

28. The device according to claim 15, wherein the communication status based on the security of the communication is ascertained based on at least one of (a) transmission security between the transceiver device of the vehicle and the external transceiver station, (b) trustworthiness of the external communication partner, and (c) encryption of the exchanged data between the external communication partner and the at least one of the multiple components.

29. A communication system for secure communication of at least one of multiple components of a vehicle with at least one external communication partner, wherein the secure communication is via a wireless communication link and each of the multiple components includes at least one communication module configured for data exchange, comprising:

an external transceiver station including a WLAN access point; and

a device including;

a transceiver device of the vehicle configured to exchange data packets with the external transceiver station;

an arrangement configured to ascertain a communication status of the wireless communication link, wherein the communication status includes a level of security of the communication;

an arrangement configured to assign a security level to individual components of the multiple components; and

an arrangement configured to, as a function of the ascertained communication status of the wireless communication link, and the security level assigned to the individual components of the multiple components, at least one of;

(a) enable at least one of;

NY01 4317874 7

(i) data exchange between the at least one of the multiple components and others of the multiple components,

(ii) data exchange between the external communication partner and the others of the multiple components,

(iii) access of the at least one of the multiple components to the others of the multiple components,

(iv) access of the external communication partner to the others of the multiple components; and

(b) disable at least one of;

(i) data exchange between the at least one of the multiple components and the others of the multiple components,

(ii) data exchange between the external communication partner and the others of the multiple components,

(iii) access of the at least one of the multiple components to the others of the multiple components, and

(iv) access of the external communication partner to the others of the multiple components.

30. The system according to claim 29, wherein the communication status based on the security of the communication is ascertained based on at least one of (a) transmission security between the transceiver device of the vehicle and the external transceiver station, (b) trustworthiness of the external communication partner, and (c) encryption of the exchanged data between the external communication partner and the at least one of the multiple components.