Hacker security solution for package transfer to and from a vehicle

• US 9,635,006 B2
• Filed: 08/21/2015
• Issued: 04/25/2017
• Est. Priority Date: 10/01/2014
• Status: Active Grant

• Current Assignee: Continental Intelligent Transportation Systems LLC (Continental AG)
• Original Assignee: Continental Intelligent Transportation Systems LLC (Continental AG)
• Inventors: Oz, Seval, Kaushik, Sudeep, Zhai, Yao, Fernandez Nares, Francisco, Aguayo, Adrian Ramos, Zein El-Abedein, Tammer
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US14/832,882
• Publication Number:
  US 20160099927A1
• Time in Patent Office: 613 Days
• Field of Search: 726 9
• CPC Class Codes: G06Q 10/083 Shipping
• CPC Class Codes: G07C 5/0808 Diagnosing performance data testing of vehicles G01M17/00; testing of electrical installation on vehicles G01R31/005
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

A cloud based system for a package exchange with a vehicle service is discussed. The system can have servers having processors, ports, and databases and a security module running on the processors to receive a virtual key and one of a request for package exchange with a vehicle service, data, or both, from a package delivery vehicle. The virtual key has a first shelf life and is used for authentication of communications from the delivery vehicle. The security module can receive a security token having a second shelf life from a user. The security token is used for verification of the user and target vehicle. After the first authentication and in an overlap window of the two shelf lives, the security module can send the one or more commands to an on-board actuation module of the target vehicle to cause an electro-mechanical operation in the target vehicle.

Claims

1. A cloud based system for a package exchange with a vehicle service between a package delivery vehicle and a target vehicle, comprising:

one or more servers having one for more hardware processors, one or more ports, and configured to cooperate with one or more databases in the cloud based system;

a security module of the one or more servers running on the one or more processors and configured to receive a first virtual key via a first port and one of

     1) a request for the package exchange with the vehicle service,

     2) data, or

     3) both, from a first client device associated with the package delivery vehicle,

where the first virtual key having a first shelf life to limit at least activation of an on-board actuation module installed in the target vehicle and is stored in a first database of the cloud based system, and

where the first virtual key is used by the security module for a first authentication of communications from the first client device;

where the security module is further configured to receive a security token associated with both a user and the target vehicle from a second client device associated with the user, the security token having a second shelf life,

where the security token is used for a verification of the user and the target vehicle; and

wherein the security module is configured to send to any of i) the first client device, ii) one or more application programming interfaces of a server of the third party site or iii) internally to another module within the cloud based system for the package exchange with the vehicle service the security token for the verification and one or more commands regarding the target vehicle to be executed, after the first authentication and in an overlap window of time between the first shelf life and the second shelf life,

where the security module is configured to send the one or more commands regarding the target vehicle

     1) based on the request from the first client device, or

     2) initiated by the security module,

where the security module is configured to send the one or more commands regarding the target vehicle over a network to either a local client device or over the network via the one or more application programming interfaces of the server of the third party site to the on-board actuation module of the target vehicle,

where in response to the one or more commands, the on-board actuation module is configured to cause an electro-mechanical operation in the target vehicle to any of i) open up a door, a window, or a trunk of the target vehicle, ii) unlock the door or the trunk of the target vehicle, and iii) any combination of these two, so that the package delivery vehicle can perform the package exchange with the target vehicle.

2. The cloud based system of claim 1,

wherein the on-board actuation module is one of:

1) an on-board telematics module coupled to a network of a telematics provider,

where using user'"'"'s credentials and after a user login through the second client device to the telematics provider, in response to a user request, the telematics provider is configured to provide the security token to the second client device of the user via a first secure communication;

wherein before sending a command on behalf of the user to the telematics provider, the security module is configured to send the security token to a server of the telematics provider,

where the security token is used by a verification module running on one or more servers of a telematics provider to verify the user and the target vehicle,

where in response to receiving the security token and after the verification, the telematics provider supplies, via a second secure communication, a second virtual key to the security module to be used for authenticating communications from the security module to the telematics provider; and

wherein the security module is configured to send the second virtual key and the commands to the telematics provider,

where the one or more servers of the telematics provider perform a second authentication using the second virtual key before sending the commands to the on-board telematics module in the target vehicle;

2) an on-board dongle module having a Wi-Fi or cellular communication circuit configured to establish a secure communication with the security module to receive the commands and the security token via the local client device,

where the on-board dongle module includes an RF circuitry of a key fob and is configured to perform the commands by transmitting RF signals that include the commands to a Body Control Module (BCM) of the target vehicle of the customer,

where the security token is a rolling security key of the BCM that is included in the transmitted signals and is use by the BMC for verifying the authentication of the commands;

or

3) an on-board RF module having a radio frequency communication circuit configured to establish a secure communication with the security module to receive the commands and the security token via the local client device,

where the on-board RF module includes the radio frequency communication circuit of a key fob and is configured to perform the commands by transmitting RF signals.

3. The cloud based system of claim 2, further comprising:

a GPS-based proximity module that includes the security module;

wherein the GPS-based proximity module is configured to run on the one or more processors and to control and track a package exchange process, to speed up a package delivery and pick-up process, and to ensure security for the package exchange process,

where the GPS-based proximity module is configured to receive both current GPS coordinates associated with the package delivery vehicle from the first client device and current GPS coordinates associated with the target vehicle from the on-board actuation module and to monitor a distance between the package delivery vehicle and the target vehicle for at least one of a package delivery to the target vehicle and a package pick-up from the target vehicle,

where after receiving the second virtual key and in the overlap window of the first shelf life and the second shelf life, the security module of the GPS-based proximity module is configured to send to the target vehicle the one or more commands including

     1) to wake-up the on-board telematics module in the target vehicle while in a close proximity established by a first threshold distance between the package delivery vehicle and the target vehicle,

     2) to give an alert from the target vehicle while in a close proximity established by a second threshold distance between the package delivery vehicle and the target vehicle,

     3) to unlock the door including the trunk of the target vehicle, or

     4) to lock doors of the target vehicle after receiving a confirmation of the package exchange process from the first client device associated with the package delivery vehicle and establishing a fourth separation distance between the package delivery vehicle and the target vehicle.

4. The cloud based system of claim 3,

wherein the GPS-based proximity module is hosted on the cloud-based system that contains the one or more servers, including the cloud:

based server, that cooperate with the one or more databases to store the data and reference information needed to control and track the package exchange process, to speed up the package delivery and pick-up process, and to ensure security for the package exchange process,

where the on-board actuation module of the target vehicle is the on-board telematics module,

where the one or more servers present the one or more application programming interfaces to provide a single common end-to-end solution between servers of one or more package delivery systems and servers of one or more telematics providers without additional hardware required to be installed in the target vehicle.

5. The cloud based system of claim 4,

wherein the on-board telematics module of the target vehicle is coupled to an intelligent control system in the target vehicle,

where the security module is configured to send the commands to the intelligent control system of the target vehicle via communication with the on-board telematics module in the target vehicle through the one or more servers of the telematics provider,

where the security module provides the second virtual key to the telematics provider,

where the one or more servers of the telematics provider uses the second virtual key for authentication of communications from the security module;

wherein the commands include waking up the on-board telematics module and performing mechanical actions of locking and unlocking the target vehicle, opening and closing doors, and giving an alert,

wherein giving the alert includes one or a combination of

     1) activating one or more lights of the target vehicle,

     2) activating an alarm system of the target vehicle, and

     3) hocking a horn of the target vehicle; and

wherein the one or more processors are configured to calculate the first threshold distance, and then issue a request to the one or more servers of the telematics provider to issue the command to wake up the on-board telematics module by pinging the on-board telematics module with intervals shorter than a predefined idle time before going to sleep of the on-board telematics module.

6. The cloud based system of claim 4, further includes:

the security module is configured to provide the one or more application programming interfaces between servers of two or more of the package delivery systems and servers of two or more of the telematics providers;

a first input socket of the security module is configured to receive a first notification about a request for the package delivery to or a pick-up from the target vehicle of the user via the one or more application programming interfaces from a first package delivery system, the first notification includes the first virtual key for authentication;

a second module is configured to communicate with a database of the cloud based provider to store the first notification including a shipping Tracking Number (TN) and a Vehicle Identification Number (VIN) associated with the request and to register the request for the package delivery to or the pick-up from the target vehicle;

the security module is configured to, upon registering the package delivery or pick-up request, send a second notification to the user via either a mobile application or a desktop application on the second client device of the user to confirm with the user a desire to have a package with the shipping TN shipped to or picked-up from the target vehicle with the VIN, the second notification requesting the security token from the user;

the security module is configured to use the one or more application programming interfaces with the two or more telematics providers to establish wireless communications with the on-board telematics module in the target vehicle,

where the security module is configured to send a wakeup command along with the second virtual key for authentication to a first telematics provider via the one or more application programming interfaces to wake the target vehicle'"'"'s on-board telematics module when the package delivery vehicle is in close proximity established by the first threshold distance to the target vehicle matching the VIN; and

where the security module is configured to send an unlock command along with the second virtual key for authentication to the first telematics provider via the one or more application programming interfaces to unlock the trunk and/or the doors of the vehicle via the vehicle'"'"'s on-board telematics module when an indication is received that a delivery person is ready to deliver or pick-up the package, and

where the security module is also configured to send a lock command along with the second virtual key for authentication to the first telematics provider via the one or more application programming interfaces to lock the trunk and the doors of the vehicle via the vehicle'"'"'s on-board telematics module when the confirmation is received that the delivery person has delivered or picked-up the package.

7. The cloud based system of claim 3,

wherein the current GPS coordinates of the package delivery vehicle are transmitted from a GPS-based delivery application resident in the first client device associated with the package delivery vehicle, the first client device residing 1) in the package delivery vehicle, or 2) in a handheld tool that travels with a delivery person of the package delivery vehicle,

where the GPS-based delivery application transmits the current GPS coordinates of the package delivery vehicle along with the first virtual key for authentication,

where the GPS-based delivery application is downloadable or otherwise electronically distributed to the first client device from a database in a cloud-based server;

wherein the on-board actuation module of the target vehicle is one of;

     1) the on-board telematics module configured to send the current GPS coordinates of the target vehicle to the one or more servers of the telematics provider, and

wherein the one or more servers of the telematics provider are configured to send the GPS coordinates of the target vehicle to the cloud-based server having the GPS-based proximity module,

where the data is transmitted, via a secure communication, from the telematics provider to the GPS-based proximity module;

or

     2) the on-board dongle module that is coupled to a fault and diagnostic module installed in the target vehicle of the user and is configured to retrieve diagnostic data including the current GPS coordinates of the target vehicle of the user, the on-board dongle module is configured to send the current GPS coordinates of the target vehicle of the user via a Wi-Fi or cellular communication to the GPS-based proximity module.

8. The cloud based system of claim 3,

wherein the first threshold distance is calculated by the one or more processors in cooperation with a GPS-based proximity control routine in the GPS-based proximity module and the calculation is based on factors including current traffic data as well as actual distance between the first client device of the package delivery vehicle and the target vehicle, and

wherein unlocking the target vehicle while in a close proximity established by a third threshold distance smaller by a preset distance than the second threshold distance between the package delivery vehicle and the target vehicle,

wherein the one or more processors calculate the third threshold distance and the second threshold distance, and

wherein unlocking includes acquiring an unlocking permission by the GPS-based proximity module from the user and satisfying the third threshold distance as well as satisfying a security measure that the issuing of an unlocking command is occurring only within a preset time window, and then the GPS-based proximity module is configured to transmit the unlock command to the on-board actuation module in the target vehicle to unlock one or more of the doors including the trunk of the target vehicle.

9. The cloud based system of claim 3,

wherein the GPS-based proximity module is further configured to calculate the fourth distance separation threshold with the one or more processors and then send a command to lock the target vehicle when the fourth distance separation threshold between the first client device associated with the package delivery vehicle and the target vehicle is satisfied, and

wherein locking includes performing a lock verification, to check to see if the doors of the target vehicle are indeed locked by a time the fourth distance separation threshold is satisfied, and then, if not locked, to send a command to the on-board actuation module to lock the target vehicle by locking one or more of the doors of the target vehicle, and,

where the locking the doors includes ensuring the trunk and a sunroof are closed and locked.

10. The cloud based system of claim 2,

wherein the security token is a current rolling security key of the BCM that is used by the security module to generate a next rolling security key of the BCM of the target vehicle;

and

wherein after the first authentication and in the overlap window of time between the first shelf life and the second shelf life, the security module is configured to send, via a universal fey fob simulator of a delivery person, the next rolling security key and the one or more commands

     1) based on the request from first client device, or

     2) initiated by the security module, to the Body Control Module (BMC) of the target vehicle such that after the second authentication of the next rolling security key by the BMC, the commands are executed via the BMC of the target vehicle.

11. The cloud based system of claim 1, further including

a pool of virtual keys including one or more public keys and associated private keys in at least one database of a cloud-based server,

where the first virtual key is a public key from the pool of virtual keys supplied by the security module, via a secure communication, to the first client device of the package delivery vehicle;

wherein the first client device is configured to include the first virtual key with each communication to the security module; and

wherein the first virtual key is used by the security module for the first authentication of the communications received from the first client device of the package delivery vehicle,

where the first authentication includes matching the first public key with an associated first private key of the pool of virtual keys,

where the first virtual key is recycled after the expiration of the first shelf life.

12. A secure method of package exchange with a vehicle service by a cloud-based system between a package delivery vehicle and a target vehicle, comprising:

receiving at the cloud-based system a first virtual key and one of

     1) a request for the package exchange with the vehicle service,

     2) data, or

     3) both, from the package delivery vehicle, the first virtual key having a first shelf life to limit at least activation of an on-board actuation module installed in the target vehicle;

authenticating by the cloud-based system communications from the package delivery vehicle using the first virtual key;

receiving a security token from a user, the security token having a second shelf life and to be used for a verification of the user and the target vehicle; and

after authentication, sending one or more commands by the cloud-based system

     1) based on the request from the package delivery vehicle, or

     2) initiated by the cloud-based system, in an overlap window of time between the first shelf life and the second shelf life to the on-board actuation module of the target vehicle so as to perform a package delivery of the vehicle service from the package delivery vehicle.

13. The secure method of claim 12,

wherein the on-board actuation module is one of:

1) an on-board telematics module,

where receiving the security token from the user further includes logging by the user into a user'"'"'s account on the telematics provider and requesting the security token, and providing the security token to the user by the telematics provider;

wherein sending the commands further includes sending the security token to the telematics provider, receiving a second virtual key from the telematics provider after the verification, and sending the commands and the second virtual key to the telematics provider in the overlap window of time between the first shelf life and the second shelf life,

where the commands are sent by the telematics provider to a telematics module of the target vehicle after authenticating communications using the second virtual key;

or

     2) an on-board dongle module

where receiving the security token from the user further includes receiving a current rolling security key of the BCM of the target vehicle as the security token, generating a next rolling security key of the BCM of the target vehicle,

where sending the commands further includes sending the command and the next rolling security key to the on-board dongle module of the target vehicle, and the dongle module transmitting the commands and the next rolling security key to the BCM of the target vehicle; and

wherein authenticating communications from the package delivery vehicle further includes selecting the first virtual key from a pool of virtual keys, the pool of virtual keys including one or more public keys and associated private keys, providing the first virtual key to the package delivery vehicle, authenticating the communications from the package delivery vehicle by matching the first public key with an associated private key, and recycling the first virtual key after expiration of the first shelf life.

14. The secure method of claim 12, further including

controlling and tracking a secure package exchange with the vehicle service by a GPS-based proximity module of the cloud-based system;

monitoring a distance between the package delivery vehicle and the target vehicle by receiving current GPS coordinates of the package delivery vehicle and current GPS coordinates of the target vehicle;

sending a first command for waking up the on-board actuation module of the target vehicle while establishing a close proximity by a first threshold distance between the package delivery vehicle and the target vehicle;

sending a second command for providing an alert by to the target vehicle while establishing a close proximity by a second threshold distance between the package delivery vehicle and the target vehicle;

sending a third command for unlocking the target vehicle;

exchanging at least one package between the package delivery vehicle and the target vehicle;

receiving a confirmation of the package exchange with a vehicle service; and

sending a fourth command for locking the target vehicle after receiving the confirmation and after establishing a fourth separation distance between the package delivery vehicle and the target vehicle.

15. The secure method of claim 14,

wherein monitoring the distance between the package delivery vehicle and the target vehicle further includes:

authenticating communications from the package delivery vehicle using the first virtual key;

receiving the current GPS coordinates of the package delivery vehicle from a resident application in

     1) the package delivery vehicle, or

     2) a mobile device of a package carrier;

receiving the current GPS coordinates of the target vehicle through a secure communication channel from the actuation module; and

calculating a distance between the target vehicle and package delivery vehicle using the GPS coordinates of the package delivery vehicle and GPS coordinates of the target vehicle.

16. The secure method of claim 14,

wherein sending the third command for unlocking the target vehicle further includes:

establishing a close proximity by a third threshold distance smaller than the second threshold distance between the package delivery vehicle and the target vehicle,

issuing the unlock command in a preset time window, and

acquiring a permission for unlocking the target vehicle from the user,

where unlocking includes opening one or more doors of the target vehicle, including a trunk and a sunroof; and

wherein sending the fourth command for locking the target vehicle further includes performing a lock verification.

17. The secure method of claim 12,

wherein the target vehicle'"'"'s on-board actuation module further performing:

sending data including GPS coordinates of the target vehicle to the cloud based system; and

receiving the commands from the cloud-based system, the commands including waking up the on-board actuation module and performing mechanical actions of locking and unlocking the target vehicle, opening and closing doors, and giving an alert,

where giving the alert includes

     1) activating one or more lights of the target vehicle,

     2) activating an alarm system of the target vehicle, and

     3) honking a horn of the target vehicle,

wherein executing the commands by an intelligent controller of in the target vehicle coupled to the on-board actuation module.

18. The secure method of claim 12,

wherein prior to the package exchange with the vehicle service performing:

offering to a customer on a user interface at a checkout of a retail website an alternative package delivery option of delivering to a vehicle of the customer;

selecting the alternative package delivery option by the customer;

uploading shipping data to the cloud-based system implementing the package exchange with the vehicle service, the shipping data includes customer data;

tentatively proposing a date and time frame for the alternative package delivery to the customer;

receiving, by the cloud-based system, a first notification about a request for the package exchange with the vehicle service for the target vehicle of the user;

storing a shipping tracking number and a Vehicle Identification Number of the target vehicle in a database of the cloud-based system and registering a package delivery to or a package pickup from the target vehicle; and

sending, by the cloud-based system, a second notification to the user about an expected date and time frame of the package exchange with the vehicle service and receiving a confirmation of the package delivery to or the package pickup from the user.

19. The package exchange method of claim 12, further including:

acquiring a permission for unlocking the target vehicle from a user of the package exchange with the vehicle service; and

sending a confirmation and a target vehicle lock confirmation to the user of the package exchange with the vehicle service, after exchanging the at least one package between the package carrier'"'"'s vehicle and the target vehicle and locking the target vehicle.

20. A multiple phase security system used by a cloud-based package-exchange-service between a package delivery vehicle and a target vehicle, comprising:

one or more servers having one for more hardware processors, one or more ports, and configured to cooperate with one or more databases in the system for cloud based package-exchange-service;

a security module of the one or more servers running on the one or more processors and configured to coordinate the multiple phase security system to enable the package exchange with the target vehicle by enabling access to the target vehicle for the package exchange by remotely opening up the target vehicle;

where the security module is configured to receive notification of a package exchange request for a first user either i) from a server of a package delivery service or ii) from a server of a merchant;

where the security module is configured to look up in a first database of the cloud-based package-exchange-service for one or more contact information listings for the first user and to create one or more notifications, including any of e-mail notifications, SMS text notifications, and mobile app notifications, to one or more client devices associated with the first user;

where the notification of the package exchange request for the first user to take action to verify that the package exchange with their one or more target vehicles has indeed been requested by that first user;

where, when there is more than one target vehicle, the security module is configured to, via a first port, to receive confirmation of which of the one or more target vehicles associated with the first user will be the target vehicle used for the package exchange with the package delivery service, the received information is from any of the following i) the one or more client device of the first user, ii) the server of the merchant, and iii) the server of the package delivery service;

where the security module is configured to create at least one or more unique digital encrypted keys with an associated valid duration time period that are specific to the target vehicle in order for the package exchange service to utilize and to limit at least activation of an on-board actuation module installed in the target vehicle,

where the security module is configured to then send the one or more unique digital encrypted keys to the server of the package delivery service as well as store each unique key sequence of the one or more unique digital encrypted keys or their equivalents in the first database of the cloud-based package-exchange-service in order to later verify an authenticity of the digital encrypted key for the package delivery service;

where the security module is configured to receive a first digital encrypted key and a request to any of i) locate the target vehicle, ii) open the target vehicle, iii) cause an alert of the target vehicle including one or a combination of honking a horn and flashing lights, iv) lock the target vehicle, and v) any combination of these four, from a client device associated with the package delivery service when the package delivery services wants to locate, open, cause an alert, or lock the target vehicle, and

where the security module is configured to then check the unique key sequence against the stored information in the first database of the cloud based package-exchange-service in order to authenticate the digital encrypted key; and

where the security module is configured to perform a time check against an effective duration of a first unique virtual digital key received from the client device of the package delivery service, and if the time check against the effective duration of the virtual digital key indicates that the time period for use is still valid, then generating a request to issue a command for either i) a telematics module of the on-board actuation module in the target vehicle, ii) a dongle module of the on-board actuation module, or iii) a RF module associated with a keyless remote entry function located in the target vehicle, to perform an electro-mechanical operation in the target vehicle and open up the target vehicle so that the package exchange with the target vehicle can occur from the package delivery vehicle.