Method and apparatus for nonlinear discrimination for vehicle communication

Abstract

A system for authenticating communications from a vehicle to a remote assistance unit includes a connectivity module (CM) installed in the vehicle. A safety device is adapted to transmit a message when the safety device is within a predefined proximity of the CM. A safety cloud unit is configured to confirm the safety device based in part on a first pair of complementary keys, including a first factory key stored by the safety device and a second factory key stored by the safety cloud unit. The first pair of complementary keys is configured for asymmetric encryption such that the first factory key is decryptable only with the second factory key. The remote assistance unit is configured to authenticate the integrity of the CM based in part on a second pair of complementary keys, the second pair of complementary keys being dynamically generated by the safety cloud unit.

Description

Technical Field

[0001] This disclosure generally relates to a system and corresponding method for identifying communications from a vehicle to a remote assistance unit. Background Technology

[0002] An undeniable aspect of modern life is that many people spend a significant amount of time in their vehicles while being transported from one place to another. Many vehicles are equipped with communication methods or technologies that enable passengers to communicate with various remote entities. Such communications can be vulnerable to hacking or compromise from a variety of sources of risk. Authentication of communications originating from vehicles can be a particularly important concern when traversing unfavorable or hostile territory. Summary of the Invention

[0003] This document discloses a system for authenticating communication from a vehicle to a remote assistance unit. The system includes a connectivity module (CM) installed in the vehicle. When a security device is within a predefined proximity of the CM, the security device is adapted to transmit messages. A security cloud unit is configured to authenticate the security device partially based on a first pair of complementary keys, the first pair including a first factory key stored by the security device and a second factory key stored by the security cloud unit. The first pair of complementary keys is configured for asymmetric encryption such that the first factory key can only be decrypted using the second factory key. The remote assistance unit is configured to authenticate the integrity of the CM partially based on a second pair of complementary keys, the second pair being dynamically generated by the security cloud unit. The remote assistance unit may be a vehicle service cloud unit.

[0004] In one embodiment, the security device is designed as a handheld FOB. Verifying the security device may include configuring it to send an activation request for the CM, including submitting an encrypted message to the security cloud unit via a first factory key through a first network. The security cloud unit is adapted to decrypt the encrypted message from the security device using a second factory key.

[0005] The second pair of complementary keys is dynamically generated by the secure cloud unit and has a pre-defined expiration time. The second pair of complementary keys is not stored (e.g., on physical or electronic media), thereby eliminating the need for a fixed credential repository and eliminating the possibility of theft. The second pair of complementary keys includes a first transaction key and a second transaction key. The secure cloud is adapted to transmit the first transaction key to a secure device. The secure device can be configured to transmit the first transaction key to the CM via proximity detection. The CM is adapted to use the first transaction key to contact the remote assistance unit. The secure cloud unit can be configured to transmit the second transaction key to the remote assistance unit via a second network.

[0006] The CM is suitable for submitting data requests to the remote assistance unit for authentication using a multi-source credential submission mechanism, wherein a first transaction key is submitted to the remote assistance unit by the CM and a second transaction key is submitted to the remote assistance unit by the secure cloud unit, and the two parts are associated by the remote assistance unit to authenticate the data request.

[0007] The remote assistance unit is adapted to authenticate the integrity of the CM based on a second transaction key transmitted by the secure cloud unit. The CM may be adapted to submit data requests to the remote assistance unit via a third network, accepting the data requests upon successful authentication of the CM's integrity. The first, second, and third networks are each out-of-band, and each includes multiple corresponding modes. In one embodiment, the data request from the CM to the remote assistance unit incorporates password salting that can be recognized by the vehicle's user. The password salting may be dynamically generated, in part, based on the vehicle's mission and payload data.

[0008] This document discloses a method for authenticating communication from a vehicle to a remote assistance unit. The method includes installing a connectivity module (CM) in the vehicle and configuring a security device to transmit messages when the security device is within a predefined proximity of the CM. A first pair of complementary keys is generated, including a first factory key stored by the security device and a second factory key stored by a security cloud unit. The first pair of complementary keys is configured for asymmetric encryption such that the first factory key can only be decrypted using the second factory key. The method includes authenticating the security device via the security cloud unit, partially based on the first pair of complementary keys. The method further includes authenticating the integrity of the CM via the remote assistance unit, partially based on the second pair of complementary keys dynamically generated by the security cloud unit.

[0009] The above-mentioned features and advantages, as well as other features and advantages, of this disclosure will readily become apparent when considered in conjunction with the accompanying drawings, based on the following specific embodiments of the best mode for carrying out this disclosure.

[0010] The present invention also includes the following technical solutions.

[0011] Technical Solution 1. A system for identifying communication from a vehicle to a remote assistance unit, the system comprising: Connectivity modules (CM) installed in vehicles; A security device, when within a predefined proximity of a CM, is adapted to transmit messages; A secure cloud unit, the secure cloud unit being configured to partially verify a secure device based on a first pair of complementary keys, the first pair of complementary keys including a first factory key stored by the secure device and a second factory key stored by the secure cloud unit; The first pair of complementary keys is configured for asymmetric encryption, such that the first factory key can only be decrypted using the second factory key; and The remote assistance unit is configured to authenticate the integrity of the CM in part based on a second pair of complementary keys dynamically generated by the secure cloud unit.

[0012] Technical Solution 2. The system according to Technical Solution 1, wherein the safety device is a handheld FOB and the remote assistance unit is a vehicle service cloud unit.

[0013] Technical Solution 3. The system according to Technical Solution 1, wherein: The second pair of complementary keys is dynamically generated by the secure cloud unit and has a pre-defined expiration time; and No second pair of complementary keys is stored, thus eliminating the need for a fixed credential repository.

[0014] Technical Solution 4. The system according to Technical Solution 1, wherein: The second pair of complementary keys includes the first transaction key and the second transaction key; and The CM is suitable for submitting data requests to the remote assistance unit for authentication using a multi-source credential submission mechanism, wherein a first transaction key is submitted by the CM to the remote assistance unit, and a second transaction key is submitted by the secure cloud unit to the remote assistance unit, and the two are associated by the remote assistance unit to authenticate the CM's data request.

[0015] Technical Solution 5. The system according to Technical Solution 1, wherein confirming the security device includes configuring the security device to send an activation request for the CM, including submitting an encrypted message to the security cloud unit via a first network using a first factory key, wherein the security cloud unit is adapted to decrypt the encrypted message from the security device using a second factory key.

[0016] Technical Solution 6. The system according to Technical Solution 5, wherein: The second pair of complementary keys includes a first transaction key and a second transaction key, and the secure cloud is adapted to transmit the first transaction key to the secure device; The security device is configured to transmit the first transaction key to the CM via proximity detection, and the CM is adapted to use the first transaction key to contact the remote assistance unit; The secure cloud unit is configured to transmit the second transaction key to the remote assistance unit via a second network; and The remote assistance unit is suitable for verifying the integrity of the CM based on a second transaction key transmitted by the secure cloud unit.

[0017] Technical Solution 7. The system according to Technical Solution 6, wherein the CM is adapted to submit a data request to the remote assistance unit via a third network, and accepts the data request when the integrity of the CM is successfully verified.

[0018] Technical Solution 8. The system according to Technical Solution 7, wherein the first network, the second network and the third network are respectively out-of-band, and each of the first network, the second network and the third network includes multiple corresponding modes.

[0019] Technical Solution 9. The system according to Technical Solution 7, wherein the data request from the CM to the remote assistance unit is incorporated into a password salt that can be recognized by the user of the vehicle.

[0020] Technical Solution 10. The system according to Technical Solution 9, wherein the password salting part is dynamically generated based on the vehicle's mission and payload data.

[0021] Technical Solution 11. A method for identifying communication from a vehicle to a remote assistance unit, the method comprising: Install connectivity modules (CM) in vehicles; Configure the security device to transmit messages when the security device is within a predefined proximity of the CM; A first pair of complementary keys is generated, including a first factory key stored by a security device and a second factory key stored by a security cloud unit. The first pair of keys is configured for asymmetric encryption such that the first factory key can only be decrypted by the second factory key. The secure cloud unit verifies the security device based on the first pair of complementary keys; and The integrity of the CM is verified by a second pair of complementary keys dynamically generated by the secure cloud unit via a remote assistance unit.

[0022] Technical Solution 12. The method according to Technical Solution 11 further includes: The CM submits a data request to the remote assistance unit, and the second pair of complementary keys includes the first transaction key and the second transaction key; and A multi-source credential submission mechanism is used to authenticate data requests, wherein a first transaction key is submitted by the CM to the remote assistance unit, and a second transaction key is submitted by the secure cloud unit to the remote assistance unit. The two are associated by the remote assistance unit to authenticate the CM's data request.

[0023] Technical Solution 13. The method according to Technical Solution 11 further includes: A second pair of complementary keys is generated via a secure cloud unit, and this second pair of complementary keys has a pre-defined expiration time; and Eliminate the fixed credential repository by not storing a second pair of complementary keys.

[0024] Technical Solution 14. The method according to Technical Solution 11, wherein the safety device includes: To adapt the security device to send an activation request for the CM, including submitting an encrypted message via a first network using a first factory key; and Configure the security cloud unit to receive activation requests and decrypt encrypted messages from the security device using the second factory key owned by the security cloud unit.

[0025] Technical Solution 15. The method according to Technical Solution 14, wherein identifying the integrity of the CM includes: The secure cloud unit is configured to transmit the first transaction key to the secure device, and the second pair of complementary keys includes the first transaction key and the second transaction key; The first transaction key is transmitted from the security device to the CM via proximity detection, and the CM is adapted to use the first transaction key to contact the remote assistance unit. The second transaction key is transmitted from the secure cloud unit to the remote assistance unit via a second network; and The integrity of the CM is verified by the remote assistance unit based on the second transaction key transmitted by the secure cloud unit.

[0026] Technical Solution 16. The method according to Technical Solution 15 further includes: Submitting data requests from the CM to the remote assistance unit on a third network; and Configure the remote assistance unit to accept data requests when the integrity of the CM is successfully verified.

[0027] Technical Solution 17. The method according to Technical Solution 16 further includes: The first, second, and third networks are selected to be out-of-band, and each of the first, second, and third networks includes multiple corresponding modes.

[0028] Technical Solution 18. The method according to Technical Solution 16 further includes: The data request from the CM to the remote assistance unit is incorporating a password salt, which can be recognized by the vehicle user.

[0029] Technical Solution 19. The method according to Technical Solution 18 further includes: Password salting is dynamically generated based on vehicle mission and payload data.

[0030] Technical Solution 20. A system for identifying communication from a vehicle to a remote assistance unit, the system comprising: Connectivity modules (CM) installed in vehicles; A security device, when within a predefined proximity of a CM, is adapted to transmit messages; A security cloud unit is configured to partially verify the security device based on a first pair of complementary keys, the first pair of complementary keys including a first factory key stored by the security device and a second factory key stored by the security cloud unit; The first pair of complementary keys is configured for asymmetric encryption such that the first factory key can only be decrypted using the second factory key. The remote assistance unit is configured to authenticate the integrity of the CM in part based on a second pair of complementary keys, which are dynamically generated by the secure cloud unit and have a pre-defined expiration time. The CM is adapted to submit data requests to the remote assistance unit, and accepts the data request when the integrity of the CM is successfully verified; and In this process, data requests from the CM to the remote assistance unit are incorporating a salted password that can be recognized by the vehicle's user. Attached Figure Description

[0031] Figure 1 This is a partial schematic diagram of a system with a nonlinear discrimination mode; and Figure 2 It is an operation Figure 1 A flowchart of an exemplary method for nonlinear identification modes.

[0032] Representative embodiments of this disclosure are illustrated by way of non-limiting example in the accompanying drawings and are described in detail below. However, it should be understood that the novel aspects of this disclosure are not limited to the specific forms illustrated in the drawings enumerated above. Rather, this disclosure will cover modifications, equivalents, combinations, sub-combinations, permutations, groupings, and alternatives that fall within the scope of this disclosure as included, for example, by the appended claims. Detailed Implementation

[0033] Referring to the accompanying drawings, similar reference numerals refer to similar parts. Figure 1 The diagram schematically illustrates a system 10 for identifying communication from vehicle 12 to remote assistance unit 14. Vehicle 12 may include, but is not limited to, passenger cars, SUVs, light trucks, heavy vehicles, minivans, buses, transit vehicles, bicycles, mobile robots, agricultural implements (e.g., tractors), sports-related equipment (e.g., golf carts), boats, aircraft, trains, or other mobile platforms. Vehicle 12 may be an electric vehicle, which may be fully electric or hybrid / partially electric. It should be understood that vehicle 12 may take many different forms and have additional components.

[0034] refer to Figure 1Vehicle 12 is equipped with a connectivity module 16, hereinafter referred to as "CM 16". CM 16 is adapted to contact remote assistance unit 14 for various requests. Remote assistance unit 14 may be a cloud unit dedicated to vehicle services. In one embodiment, remote assistance unit 14 is a vehicle service cloud SaaS (Software as a Service) application. Remote assistance unit 14 may be operated electronically and / or by a remote advisor 18 (e.g., a service administrator), who may be accessible to an electronic device such as a desktop computer, laptop computer, tablet computer, cellular phone, or wearable device. Remote assistance unit 14 may include one or more servers located on the Internet to store, manage, and process data. Remote assistance unit 14 may be a private or public entity maintained by an organization such as, for example, a public agency, research institution, or company.

[0035] refer to Figure 1 System 10 implements a non-linear authentication mode 20 for communication between CM 16 and remote assistance unit 14, including verifying the identity of user 22 of vehicle 12. User 22 can be the driver or a passenger of vehicle 12. Figure 2 A flowchart of a method 100 for operating nonlinear discrimination mode 20 is shown below, and reference is made below. Figure 2 The nonlinear identification mode 20 is described below. In some embodiments, the nonlinear identification mode 20 may be automatically activated during operation of the vehicle 12. Alternatively, the nonlinear identification mode 20 may be selectively activated based on a request from the user 22, for example, via a user interface 24 in the vehicle 12. The user interface 24 may include a touchscreen or other I / O device and may be incorporated into the dashboard, overhead sun visor (not shown), or other suitable location in the vehicle 12.

[0036] System 10 enables vehicle 12 to traverse unfavorable or hostile areas while providing protection against damage from various sources of risk. Security is enhanced through dynamic networking and role isolation, schematically represented by dividing lines 25. A non-linear authentication process is created by generating credentials at runtime and segmenting them into multiple sources for submission and association. Here, the technical advantage is the elimination of a single point of origin for submitting credentials. Another advantage is that credentials are not stored on physical representations such as disks, databases, or hard drives, and therefore cannot be stolen.

[0037] refer to Figure 1 The system 10 further includes a security device 26. The security device 26 is adapted to transmit messages when it is near or within a predefined distance of the CM 16. In one embodiment, the security device 26 is shaped or designed as a handheld FOB 26A. In another embodiment, the security device 26 is shaped as a handheld mobile device 26B.

[0038] As described below, the security device 26 is partially confirmed based on the first pair of complementary keys 30. (See reference) Figure 1 The first pair of complementary keys 30 includes a first factory key 30A stored by security device 26 and a second factory key 30B stored by security cloud unit 28. The first pair of complementary keys 30 provides asymmetric encryption, such that the first factory key 30A can only be decrypted using the second factory key 30B. Security device 26 requests CM 16 to be activated by security cloud unit 28 by securely submitting an encrypted message using the first factory key 30A, and the first factory key 30A is decrypted using the second factory key 30B (complementary key).

[0039] refer to Figure 1 Various types of mechanisms (e.g., firewalls F1, F2, F3, F4, and F5) that prevent unauthorized access while allowing outward communication can be located at several interfaces in system 10. Figure 1 The secure cloud unit 28 can be operated electronically and / or by a security administrator 32 who has access to an electronic device such as a desktop computer, laptop computer, tablet computer, cellular phone, or wearable device. The secure cloud unit 28 may include one or more servers located on the Internet for storing, managing, and processing data.

[0040] Similarly, as described below, remote assistance unit 14 is adapted to authenticate the integrity of CM 16 in part based on a second pair of complementary keys 34 dynamically generated by secure cloud unit 28. Upon successful authentication of the integrity of CM 16, remote assistance unit 14 accepts a data request from vehicle 12 (via CM 16). It should be understood that the first pair of complementary keys 30 and the second pair of complementary keys 34 are not physical keys, but rather electronic codes or transmissions or messages of various sizes related to data sensitivity and / or network trustworthiness.

[0041] Now for reference Figure 2 The flowchart illustrates a method 100 for operating the nonlinear identification mode 20. Method 100 need not be applied in the specific order described herein. Furthermore, it should be understood that some boxes may be omitted. During normal and continuous operation of the vehicle 12, the method may be performed in real-time, continuously, systematically, intermittently, and / or periodically.

[0042] In some embodiments, method 100 may be implemented as computer-readable code or stored instructions and may be executed at least in part by controller C. (See reference) Figure 1Vehicle 12 includes a controller C having at least one processor P and at least one memory M (or a non-transitory tangible computer-readable storage medium). The memory M may store a set of controller-executable instructions, and the processor P may execute the set of controller-executable instructions stored in the memory M. Security device 26, security cloud unit 28, remote assistance unit 14, and CM 16 may include corresponding processors and corresponding tangible non-transitory memories, on which instructions for at least partially executing method 100 are recorded.

[0043] Beginning Figure 2 In box 102, method 100 includes setting a first pair of complementary keys 30. This can be done by the manufacturer at the factory or by the vehicle dealer before the vehicle 12 is released for sale or use. In other words, the first pair of complementary keys 30 (“factory keys”) is generated before the vehicle 12 ventures to perform a task or trip. The first pair of keys 30 includes a first factory key 30A stored by security device 26 and a second factory key 30B stored by secure cloud unit 28. The first pair of complementary keys 30 is configured for asymmetric encryption such that the first factory key 30A can only be decrypted using the second factory key 30B.

[0044] Box 102 includes registering security device 26 and CM 16 in remote assistance unit 14 and / or security cloud unit 28. For example, security administrator 32 can assist in registering CM 16 and security device 26 to security cloud unit 28 at the start of the process. Remote advisor 18 can assist in registering CM 16 and security device 26 to remote assistance unit 14 at the start of the process.

[0045] Advance to Figure 2 In frame 104, security device 26 is configured to submit encrypted messages (such as those from a first factory key 30A) to security cloud unit 28 via first network N1. Figure 1 (As indicated by arrow A1 in the diagram) to send an activation request for CM 16. The first network N1 can be dynamically selected based on the task and data classification of vehicle 12. Each event can be recorded by security device 26.

[0046] Progressing to Figure 2In box 106, the security cloud unit 28 receives messages, maintains the connection, and verifies the integrity of the security device 26. The security cloud unit 28 verifies the security device 26 when it decrypts the encrypted message from the security device 26 using the second factory key 30B and other conditions are met. For example, the security cloud unit 28 may determine whether the security device 26 appears healthy and has not been tampered with. If the security device 26 appears unhealthy or has been tampered with, the security cloud unit 28 may warn various personnel, deactivate the connection, and follow other recovery protocols. In another embodiment, verification of the security device 26 includes verifying that the current geographical location of the vehicle 12 is relevant to the activities, purposes, or tasks undertaken by the vehicle 12. Each event may be logged by the security cloud unit 28.

[0047] Progressing to Figure 2 In box 108, assuming successful confirmation, the secure cloud unit 28 generates a second pair of complementary keys 34 for transaction authentication. The second pair of complementary keys 34 is not stored (e.g., on physical or electronic media), thereby eliminating the need for a fixed credential repository and eliminating the possibility of theft. (See reference) Figure 1 The second pair of keys 34 includes a first transaction key 34A and a second transaction key 34B. The second pair of complementary keys 34 can be dynamically generated by the secure cloud unit 28 and has a limited lifespan before expiration. In other words, if authentication does not occur within the pre-defined expiration time, the second pair of complementary keys 34 will no longer be functional. The first transaction key 34A is transmitted to the secure device 26 (optionally, with a pre-defined expiration time). The secure cloud unit 28 can then close its connection with the secure device 26.

[0048] refer to Figure 1 The secure cloud unit 28 injects the second transaction key 34B into the remote assistance unit 14 via the second network N2 (as per...). Figure 1 (As shown by arrow A2 in the diagram). The second network N2 is selected based on various factors (e.g., task classification) without repeating the previous network.

[0049] Advance to Figure 2 Box 110, as by Figure 1 As indicated by arrow A3, security device 26 is configured to transmit the first transaction key 34A (received from security cloud unit 28 in box 108) to CM 16 via proximity detection. In other words, if security device 26 is within a predefined distance of CM 16, CM 16 can access the details of the first transaction key 34A.

[0050] Advance to Figure 2 Box 112, as shown Figure 1As indicated by arrow A4, CM 16 initiates secure communication with remote assistance unit 14 using the first transaction key 34A (obtained via access in box 110) and a data request via the third network N3. CM 16 then sends a data request to remote assistance unit 14 (in... Figure 2 When submitting a data request, the RA unit (referred to as "RA unit") selects a different network band / route (third network N3) instead of repeating previous network connections (first and second networks N1, N2).

[0051] refer to Figure 1 The first network N1, the second network N2, and the third network N3 are each a different out-of-band wireless network. The first network N1, the second network N2, and the third network N3 can be short-range or long-range networks. The first network N1, the second network N2, and the third network N3 can include a serial communication bus in the form of a local area network (LAN). The LAN can include, but is not limited to, a Controller Area Network (CAN), a Controller Area Network with Flexible Data Rates (CAN-FD), Ethernet, Bluetooth, Wi-Fi, and other data formats. The network can include a Wireless Local Area Network (LAN) that links multiple devices using a wireless distribution method, a Wireless Metropolitan Area Network (MAN) that connects several wireless LANs, or a Wireless Wide Area Network (WAN) that covers a large area such as a neighboring town or city. It should be understood that other types of network and satellite technologies or communication protocols available to those skilled in the art can be employed.

[0052] The first network N1, the second network N2, and the third network N3 can each incorporate multiple corresponding transmission modes, including satellite and non-satellite methods. For example, the first network N1 may include a first satellite mode and a first local area network (LAN). The second network N2 may include a second satellite mode and a second LAN. The third network N2 may include a third satellite mode and a third LAN. Here, the first, second, and third satellite modes are different from each other, and the first, second, and third LANs are also different from each other.

[0053] Data requests from CM 16 to remote assistance unit 14 can incorporate dynamically generated "password salting" that can be recognized by user 22 of vehicle 12. Password salting can be defined as a technique to strengthen a password by increasing its complexity (e.g., by adding a string (e.g., with 32 or more characters) and then hashing it). As understood by those skilled in the art, hashing is the process of using an algorithm to transform inputs of varying lengths into a fixed-size string (or number). Password salting prevents hackers from reverse engineering the code / password. Password salting can be dynamically generated in part based on the mission and payload data of vehicle 12. For example, the added "salt" could be a personal question related to user 22, such as their mother's maiden name, their first-grade teacher, or keywords related to the mission of vehicle 12. Password salting can be registered with remote assistance unit 14 via remote advisor 18.

[0054] Progressing to Figure 2 In box 114, the remote assistance unit 14 authenticates the integrity of CM 16 based on a second transaction key 34B (and a password salt, if present) that has been transmitted to it via the secure cloud unit 28. In other words, the remote assistance unit 14 confirms the status of CM 16 by associating the first transaction key 34A with the second transaction key 34B or by decrypting the first transaction key 34A with the second transaction key 34B and determining whether the password salt (if present) incorporated therein matches. The remote assistance unit 14 may further inquire whether CM 16 appears healthy and has not been tampered with. If CM 16 appears unhealthy or has been tampered with, the remote assistance unit 14 may warn various personnel, deactivate the connection, and follow other recovery protocols. In one embodiment, the authentication of CM 16 includes verifying that the current geographical location of vehicle 12 is relevant to the activities, purposes, or tasks undertaken by vehicle 12. Upon successful authentication, the remote assistance unit 14 accepts data requests and issues commands or tasks as appropriate.

[0055] The data request from CM 16 may include the secure transmission of data collected by various sensors (not shown) on vehicle 12 and the environment to remote assistance unit 14. In one example, this may include transmitting the current fuel level and / or fuel consumption rate for remote assistance unit 14 to calculate the effective mileage range. In another example, this may include transmitting the current engine oil level for processing by remote assistance unit 14 to calculate predictive maintenance.

[0056] Data requests from CM 16 may include retrieving tasks or commands (or warnings) from remote assistance unit 14 based on data analysis to be performed in vehicle 12 or processed by others. For example, this could include warnings / notifications to user 22 regarding remaining fuel mileage or the need for maintenance of vehicle 12. Data requests from CM 16 may also include the secure delivery of complex datasets such as images, audio, and video streams for sophisticated analysis and predictive outcomes. For example, this could include operator behavior monitoring to improve human-machine interaction, detect visually imperceptible objects or conditions, and support augmented reality modeling and outcome modeling.

[0057] In summary, an effective and secure method for authenticating communications originating from vehicle 12 is proposed. System 10 provides protection against external threats and internal risks by eliminating static trust storage and providing multi-source authentication keys. A second pair of complementary keys 34 is dynamically generated at runtime to protect transactions between security device 26 and CM 16 (which has already registered the first pair of complementary keys 30), without a single individual control process. As described above, system 10 enables dynamic generation and verification of credentials, with multiple sources generating credentials.

[0058] Figure 1The controller C includes a computer-readable medium (also called a processor-readable medium), including non-transitory (e.g., tangible) media that participate in providing data (e.g., instructions) that can be read by a computer (e.g., by the computer's processor). This medium can take many forms, including, but not limited to, non-volatile and volatile media. Non-volatile media can include, for example, optical discs or magnetic disks, and other persistent storage. Volatile media can include, for example, dynamic random access memory (DRAM), which can constitute main memory. Such instructions can be transmitted by one or more transmission media, including coaxial cables, copper wires, and optical fibers, including conductors that include a system bus coupled to the computer's processor. Some forms of computer-readable media include, for example, floppy disks, hard disks, magnetic tape, other magnetic media, CD-ROMs, DVDs, other optical media, physical media with perforated patterns, RAM, PROMs, EPROMs, FLASH-EEPROMs, other memory chips, or cassette tapes or other media forms from which a computer can read.

[0059] The lookup tables, databases, data repositories, or other data repositories described herein can include a variety of mechanisms for storing, accessing, and retrieving various types of data, including hierarchical databases, a set of files in a file system, application databases in specialized formats, relational database energy management systems (RDBMS), directory servers, and so on. Each such data repository can be contained within a computing device employing a computer operating system (such as one of those mentioned above) and can be accessed via a network in one or more of a variety of ways. File systems can be accessed from a computer operating system and can include files stored in various formats. In addition to languages ​​used for creating, storing, editing, and executing stored programs, RDBMS can also employ Structured Query Language (SQL), such as the PL / SQL language mentioned above.

[0060] The flowcharts illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this disclosure. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code, including one or more executable instructions for implementing a specified logical function. It will also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, may be implemented by a system based on dedicated hardware or a combination of dedicated hardware and computer instructions that implements the specified function or action. These computer program instructions may also be stored in a computer-readable medium that can direct a controller or other programmable data processing means to function in a particular manner, such that the instructions stored in the computer-readable medium produce an article of art including instructions for implementing the functions / actions specified in the flowchart and / or block diagram blocks.

[0061] All numerical values ​​of parameters (e.g., quantities or conditions) in this specification (including the appended claims) should be understood to be modified by the term "about" in each corresponding case, regardless of whether "about" actually appears before the numerical value. "About" indicates that the numerical value allows for some slight imprecision (achieving accuracy of the value in some way; about or reasonably close to the value; close). If the imprecision provided by "about" is not understood in this ordinary sense in the art, then the "about" used herein indicates variations that can at least be caused by common methods of measuring and using such parameters. Furthermore, the disclosure of ranges includes the disclosure of each value as well as further divisions of the range throughout. Each value within the range and the endpoints of the range are thereby disclosed as separate embodiments.

[0062] The detailed description and accompanying drawings are support and description of this disclosure, but the scope of this disclosure is defined only by the claims. While some preferred modes and other embodiments for carrying out the claimed disclosure have been described in detail, various alternative designs and embodiments exist for practicing the disclosure as defined in the appended claims. Furthermore, the features of the embodiments shown in the drawings or the various embodiments mentioned in this specification should not be construed as embodiments independent of each other. Rather, each of the features described in one example of an embodiment may be combined with one or more other desired features of other embodiments to produce other embodiments not described in words or by reference to the drawings. Therefore, such other embodiments fall within the framework of the appended claims.

Claims

1. A system for identifying communication from a vehicle to a remote assistance unit, the system comprising: Connectivity modules installed in vehicles; A security device, when within a predefined proximity of the connectivity module, is adapted to transmit messages; A secure cloud unit, the secure cloud unit being configured to partially verify a secure device based on a first pair of complementary keys, the first pair of complementary keys including a first factory key stored by the secure device and a second factory key stored by the secure cloud unit; The first pair of complementary keys is configured for asymmetric encryption, such that the first factory key can only be decrypted using the second factory key; and The remote assistance unit is configured to authenticate the integrity of the connectivity module in part based on a second pair of complementary keys dynamically generated by the secure cloud unit. in: The second pair of complementary keys is dynamically generated by the secure cloud unit and has a pre-defined expiration time; No second pair of complementary keys is stored, thus eliminating the need for a fixed credential repository; The second pair of complementary keys includes a first transaction key and a second transaction key; and The connectivity module is adapted to submit a data request to the remote assistance unit for authentication using a multi-source credential submission mechanism, wherein a first transaction key is submitted to the remote assistance unit by the connectivity module, and a second transaction key is submitted to the remote assistance unit by the secure cloud unit, and the two are associated by the remote assistance unit to authenticate the data request of the connectivity module.

2. The system according to claim 1, wherein, The safety device is a handheld FOB, and the remote assistance unit is a vehicle service cloud unit.

3. The system according to claim 1, wherein, Authenticating the security device includes configuring the security device to send an activation request for the connectivity module, including submitting an encrypted message to the security cloud unit via a first network using a first factory key, wherein the security cloud unit is adapted to decrypt the encrypted message from the security device using a second factory key.

4. The system according to claim 3, wherein: The second pair of complementary keys includes a first transaction key and a second transaction key, and the secure cloud is adapted to transmit the first transaction key to the secure device; The security device is configured to transmit a first transaction key to the connectivity module via proximity detection, the connectivity module being adapted to contact a remote assistance unit using the first transaction key; The secure cloud unit is configured to transmit the second transaction key to the remote assistance unit via a second network; and The remote assistance unit is adapted to authenticate the integrity of the connectivity module based on a second transaction key transmitted by the secure cloud unit.

5. The system according to claim 4, wherein, The connectivity module is adapted to submit data requests to the remote assistance unit via a third network and accept the data requests when the integrity of the connectivity module is successfully verified.

6. The system according to claim 5, wherein, The first network, the second network, and the third network are each outside the band, and each of the first network, the second network, and the third network includes multiple corresponding modes.

7. The system according to claim 5, wherein, Data requests from the connectivity module to the remote assistance unit are incorporated with a salted password that can be recognized by the vehicle's user.

8. The system according to claim 7, wherein, The password salting part is dynamically generated based on the vehicle's mission and payload data.

9. A method for identifying communication from a vehicle to a remote assistance unit, the method comprising: Install connectivity modules in vehicles; Configure the security device to transmit messages when it is within a predefined proximity of the connectivity module; A first pair of complementary keys is generated, including a first factory key stored by a security device and a second factory key stored by a security cloud unit. The first pair of keys is configured for asymmetric encryption such that the first factory key can only be decrypted by the second factory key. The security device is confirmed via a secure cloud unit based on the first pair of complementary keys. The integrity of the connectivity module is authenticated via a remote assistance unit based on a second pair of complementary keys dynamically generated by the secure cloud unit. The connectivity module submits a data request to the remote assistance unit, and the second pair of complementary keys includes a first transaction key and a second transaction key; A multi-source credential submission mechanism is used to authenticate data requests, wherein a first transaction key is submitted by the connectivity module to the remote assistance unit, and a second transaction key is submitted by the secure cloud unit to the remote assistance unit. The two are associated by the remote assistance unit to authenticate the data requests of the connectivity module. A second pair of complementary keys is generated via a secure cloud unit, and this second pair of complementary keys has a pre-defined expiration time; and Eliminate the fixed credential repository by not storing a second pair of complementary keys.

10. The method according to claim 9, wherein, Confirm that the safety equipment includes: Adapting the security device to send an activation request for the connectivity module, including submitting an encrypted message via a first network using a first factory key; and Configure the security cloud unit to receive activation requests and use the second factory key owned by the security cloud unit to decrypt encrypted messages from the security device.

11. The method according to claim 10, wherein, Verifying the integrity of the connectivity module includes: The secure cloud unit is configured to transmit the first transaction key to the secure device, and the second pair of complementary keys includes the first transaction key and the second transaction key; The first transaction key is transmitted from the security device to the connectivity module via proximity detection, and the connectivity module is adapted to use the first transaction key to contact the remote assistance unit; The second transaction key is transmitted from the secure cloud unit to the remote assistance unit via a second network; and The integrity of the connectivity module is authenticated by the remote assistance unit based on a second transaction key transmitted by the secure cloud unit.

12. The method of claim 11, further comprising: Submit a data request from the connectivity module to the remote assistance unit on the third network; as well as The remote assistance unit is configured to accept data requests when the integrity of the connectivity module is successfully verified.

13. The method of claim 12, further comprising: The first, second, and third networks are selected to be out-of-band, and each of the first, second, and third networks includes multiple corresponding modes.

14. The method of claim 12, further comprising: A password salt is incorporated into the data request from the connectivity module to the remote assistance unit. The password salt can be identified by the vehicle user.

15. The method of claim 14, further comprising: Password salting is dynamically generated based on vehicle mission and payload data.

16. A system for identifying communication from a vehicle to a remote assistance unit, the system comprising: Connectivity modules installed in vehicles; A security device, when within a predefined proximity of the connectivity module, is adapted to transmit messages; A security cloud unit is configured to partially verify the security device based on a first pair of complementary keys, the first pair of complementary keys including a first factory key stored by the security device and a second factory key stored by the security cloud unit; The first pair of complementary keys is configured for asymmetric encryption such that the first factory key can only be decrypted using the second factory key. The remote assistance unit is configured to authenticate the integrity of the connectivity module in part based on a second pair of complementary keys, which are dynamically generated by the secure cloud unit and have a pre-defined expiration time. The connectivity module is adapted to submit data requests to the remote assistance unit and accept the data requests when the integrity of the connectivity module is successfully verified; and The data request from the connectivity module to the remote assistance unit is incorporating a salted password that can be recognized by the vehicle's user; The second pair of complementary keys includes a first transaction key and a second transaction key; and The connectivity module is adapted to submit a data request to the remote assistance unit for authentication using a multi-source credential submission mechanism. A first transaction key is submitted to the remote assistance unit by the connectivity module, and a second transaction key is submitted to the remote assistance unit by the secure cloud unit. The two are associated by the remote assistance unit to authenticate the data request from the connectivity module.

Images