Stolen vehicle prevention using two-factor authentication

Abstract

A vehicle security system includes a vehicle system of a vehicle having an electronic control unit and a computer-readable medium. An immobilization system is configured to mobilize and demobilize an engine of the vehicle. The immobilization system is in communication with the vehicle system. A key having a transponder is in communication with the immobilization system. A cloud database is in communication with the vehicle system. The cloud database selectively sends a verification command to the immobilization system through the vehicle system. A user interface computer is in communication with the cloud. The user interface is configured to input a successful unique response into the user interface computer to activate the sending of the verification command.

Description

STOLEN VEHICLE PREVENTION USING TWO-FACTOR AUTHENTICATIONCROSS REFERENCE TO RELATED APPLICATIONS

[0001] This application claims the benefit of U.S. Provisional Application No. 63 / 515,183, filed on July 23, 2023. The entire disclosure of the above application is hereby incorporated herein by reference.FIELD OF THE INVENTION

[0002] This disclosure relates to a vehicle security system and method and, more particularly, to a vehicle security system using a two-factor authentication to a vehicle.BACKGROUND OF THE INVENTION

[0003] Vehicle thefts are rising steeply especially among higher value vehicles which are more attractive to a potential thief. Theft of vehicles with a Manufacturer’s Suggested Retail Pnce (MSRP) of over $100,000 are becoming increasingly more common every year, and this will continue unabated as vehicles continue to be manufactured with automated driving technology, electric vehicle drive trains, enhanced safety equipment, and other high cost equipment.

[0004] Despite the increase in vehicle values due to an increase effort in incorporating vehicle technology and efficiency, there is not a commensurate effort by the automotive industry to curtail vehicle theft. In many scenarios, a single key is all that is required to steal a vehicle. Many of these keys can be easily duplicated. Where keyless fob keys are employed, a thief can use a ‘relay method’ or similar attack without the owner of the vehicle ever knowing or missing the keyless fob. The relay method is also known as a relay attack which is a method of stealing cars with keyless entry or start systems by using radio interference technology to hijack a signal from the car key. Thieves can be within a few meters of the key, even if the key is inside a home, to capture the signal

[0005] Weaknesses in online cybersecurity have been addressed since the 1980’s using a process called “two-factor authentication”, or 2FA. 2FA is a security system that requires users to provide two different forms of identification to access an account or system. This adds an extra layer of security to logging in with just a username and password, which can be easily stolen or hacked. This prevents an asset from being accessed through a singleauthentication channel, and requires a secondary authentication sent through another method, frequently called “out of band,” which may include email, SMS text message, opening a mobile application, or other methods. This mechanism has proven extremely effective in preventing hacking through a single authentication channel.

[0006] Accordingly, it would be desirable for vehicles entry systems to include a security system and method including two-factor authentication technology to prevent theft.SUMMARY OF THE INVENTION

[0007] In accordance and attuned with the present disclosure, a vehicle security system, incorporating two-factor Authentication into a vehicle, has surprisingly been discovered.

[0008] According to an embodiment of the disclosure, a vehicle security system is disclosed. A vehicle security system includes a vehicle system of a vehicle having an electronic control unit and a computer-readable medium. An immobilization system is configured to mobilize and demobilize an engine of the vehicle. The immobilization system is in communication with the vehicle system. A key having a transponder is in communication with the immobilization system. A cloud database is in communication with the vehicle system. The cloud database selectively sends a verification command to the immobilization system through the vehicle system. A user interface computer is in communication with the cloud. The user interface is configured to input a successful unique response into the user interface computer to activate the sending of the verification command.

[0009] According to another embodiment of the disclosure, a method of mobilizing a vehicle with key and a two-factor authentication is disclosed. The method includes the steps of: integrating an immobilization system in communication with an engine system of a vehicle, the immobilization system selectively mobilizing and demobilizing the engine system; and sending at least two verification commands to the immobilization system to permit mobilization of the engine system.BRIEF DESCRIPTION OF THE DRAWINGS

[0010] FIG. 1 is a schematic illustrating the logic architecture of a vehicle security system of the present disclosure; and

[0011] FIG. 2 is a schematic illustrating the architecture of a vehicle security system of the present disclosure.

[0012] The above, as well as other advantages of the present invention, will become readilyapparent to those skilled in the art from the following detailed description of a preferred embodiment when considered in the light of the accompanying drawings.DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS OF THE INVENTION

[0013] The following detailed description and appended drawings describe and illustrate various exemplary embodiments of the invention. The description and drawings serve to enable one skilled in the art to make and use the invention, and are not intended to limit the scope of the invention in any manner. In respect of the methods disclosed, the steps presented are exemplary in nature, and thus, the order of the steps is not necessary' or critical.

[0014] The phrases “at least one,” “one or more,” and “and / or” are open-ended expressions that are both conjunctive and disjunctive in operation. For example, each of the expressions “at least one of A, B and C,” “at least one of A, B, or C,” “one or more of A, B, and C,” “one or more of A, B, or C” and “A, B, and / or C” means A alone, B alone, C alone, A and B together, A and C together, B and C together, or A, B and C together.

[0015] The term “a” or “an” entity refers to one or more of that entity. As such, the terms “a” (or “an”), “one or more,” and “at least one” can be used interchangeably herein. It is also to be noted that the terms “comprising,” “including,” and “having” can be used interchangeably.

[0016] Except where otherwise expressly indicated, all numencal quantities in this description are to be understood as modified by the word “about” and all geometric and spatial descriptors are to be understood as modified by the word “substantially” in describing the broadest scope of the technology. “About” when applied to numerical values indicates that the calculation or the measurement allows some slight imprecision in the value (with some approach to exactness in the value; approximately or reasonably close to the value; nearly). If, for some reason, the imprecision provided by “about” and / or “substantially” is not otherwise understood in the art with this ordinary' meaning, then “about” and / or “substantially” as used herein indicates at least variations that may arise from ordinary methods of measuring or using such parameters.

[0017] As used herein, “substantially” means “to a considerable degree,” “largely,” or “proximately” as a person skilled in the art in view of the instant disclosure would understand the term. Although the terms first, second, third, etc. may be used herein to describe various elements, components, regions, layers and / or sections, these elements, components, regions, layers and / or sections should not be limited by these terms. These terms may be only used todistinguish one element, component, region, layer or section from another region, layer or section. Terms such as “first,” “second,” and other numerical terms when used herein do not imply a sequence or order unless clearly indicated by the context. Thus, a first element, component, region, layer or section discussed below could be termed a second element, component, region, layer or section without departing from the teachings of the example embodiments.

[0018] It shall be understood that the term “means,” as used herein, shall be given its broadest possible interpretation in accordance with 35 U.S.C., Section 112, Paragraph 6 or other applicable law. Accordingly, a claim incorporating the term “means” shall cover all structures, materials, or acts set forth herein, and all of the equivalents thereof. Further, the structures, materials or acts and the equivalents thereof shall include all those described in the summary of the invention, brief description of the drawings, detailed description, abstract, and claims themselves.

[0019] The terms “vehicle,” “car,” “automotive,” “automobile,” and variations thereof may be used interchangeably herein and can refer to a device or structure for transporting animate and / or inanimate or tangible objects (e.g., persons and / or things), such as a self-propelled conveyance. A vehicle as used herein can include any conveyance or model of a conveyance, where the conveyance was originally designed for the purpose of moving one or more tangible objects, such as people, animals, cargo, and the like. The term “vehicle” does not require that a conveyance moves or is capable of movement Typical vehicles may include but are in no way limited to cars, trucks, motorcycles, busses, automobiles, trains, railed conveyances, boats, ships, marine conveyances, submarine conveyances, airplanes, space craft, flying machines, human-powered conveyances, and the like. For example, the vehicle can be of the passenger vehicle ty pe categorized into one of a vehicle body styles such one of a coupe, a compact car, a mid-size car, a large car, sedan, a van, an SUV, a truck, a hybrid, an electric car, hatchback, a luxury SUV or car, a convertible, a sports car, or a combination thereof that are commonly found a car dealership.

[0020] The term “automatic” and variations thereof, as used herein, refer to any process or operation done without material human input when the process or operation is performed. However, a process or operation can be automatic, even though performance of the process or operation uses material or immaterial human input, if the input is received before the performance of the process or operation. Human input is deemed to be material if such input influences how the process or operation will be performed. Human input that consents to the performance of the process or operation is not deemed to be “material.”

[0021] As used herein, the term database is used broadly to include any known or convenient means for storing data, whether centralized or distributed, relational or otherwise.

[0022] As used herein, the term “Internet” is a global system of interconnected computer networks that use the standard Internet protocol suite (TCP / IP) to serve billions of users worldwide. It is a network of networks that consists of millions of private, public, academic, business, and government networks, of local to global scope, that are linked by a broad array of electronic, wireless and optical networking technologies. The Internet carries an extensive range of information resources and services, such as the inter-linked hypertext documents of the World Wide Web (WWW) and the infrastructure to support email. The communications infrastructure of the Internet consists of its hardware components and a system of software layers that control various aspects of the architecture, and can also include a mobile device network, e.g., a cellular network.

[0023] The terms “communication device,” “computer,” “smartphone,” and “mobile device,” and variations thereof, as used herein, are a general purpose device that can be programmed to carry out a finite set of arithmetic or logical operations. Since a sequence of operations can be readily changed, the computer can solve more than one kind of problem. A computer can include of at least one processing element, typically a central processing unit (CPU) and some form of memory. The processing element carries out arithmetic and logic operations, and a sequencing and control unit that can change the order of operations based on stored information. Peripheral devices allow information to be retrieved from an external source, and the result of operations saved and retrieved. These devices can be used interchangeably and may include any type of device capable of communicating with one or more of another device and / or across a communications network, via a communications protocol, and the like. Exemplary communication devices may include but are not limited to smartphones, handheld computers, laptops, netbooks, notebook computers, subnotebooks, tablet computers, scanners, portable gaming devices, phones, pagers, GPS modules, portable music players, and other Internet-enabled and / or network-connected devices. As used herein a mobile device includes, but is not limited to, a cell phone, such as Apple's iPhone®, other portable electronic devices, such as Apple's iPod Touches®, Apple's iPads®, and mobile devices based on Google's Android® operating system, and any other portable electronic device that includes software, firmware, hardware, or a combination thereof that is capable of at least receiving the signal, decoding if needed, exchanging information with a server to verify information. Typical components of mobile device may include but are not limited to persistent memories like flash ROM, random access memory like SRAM, a camera, a battery,LCD driver, a display, a cellular antenna, a speaker, a Bluetooth® circuit, and WIFI circuitry, where the persistent memory may contain programs, applications, and / or an operating system for the mobile device. A mobile device can be a key fob. A key fob which can be a type of security token which is a small hardware device with built in authentication mechanisms. It is used to manage and secure access to network services, data, provides access, communicates with door systems to open and close doors and the like.

[0024] The term “communication system” or “communication network” and variations thereof, as used herein, can refer to a collection of communication components capable of one or more of transmission, relay, interconnect, control, or otherwise manipulate information or data from at least one transmitter to at least one receiver. As such, the communication may include a range of systems supporting point-to-point or broadcasting of the information or data. A communication system may refer to the collection individual communication hardware as well as the interconnects associated with and connecting the individual communication hardware. Communication hardware may refer to dedicated communication hardware or may refer a processor coupled with a communication means (i.e., an antenna) and running software capable of using the communication means to send and / or receive a signal within the communication system. Interconnect refers some type of wired or wireless communication link that connects various components, such as communication hardware, within a communication system. A communication network may refer to a specific setup of a communication system with the collection of individual communication hardware and interconnects having some definable network topography. A communication network may include wired and / or wireless network having a pre-set to an ad hoc network structure.

[0025] The term “computer-readable medium,” as used herein refers to any tangible storage and / or transmission medium that participates in providing instructions to a processor for execution. Such a medium may take many forms, including but not limited to, non-volatile media, volatile media, and transmission media. Non-volatile media includes, for example, non-volatile random access memory (NVRAM), or magnetic or optical disks. Volatile media includes dynamic memory, such as main memory. Common forms of computer-readable media include, for example, a floppy disk, a flexible disk, hard disk, magnetic tape, or any other magnetic medium, magneto-optical medium, a compact disc read only memory (CD- ROM), any other optical medium, punch cards, paper tape, any other physical medium with patterns of holes, a random access memory (RAM), a programmable read only memory (PROM), and erasable programmable read only memory EPROM, a FLASH-EPROM, a solidstate medium like a memory card, any other memory chip or cartridge, a carrier wave as described hereinafter, or any other medium from which a computer can read. A digital file attachment to an e-mail or other self-contained information archive or set of archives is considered a distnbution medium equivalent to a tangible storage medium. When the computer-readable media is configured as a database, it is to be understood that the database may be any type of database, such as relational, hierarchical, object-oriented, and / or the like. Accordingly, the disclosure is considered to include a tangible storage medium or distribution medium and prior art-recognized equivalents and successor media, in which the software implementations of the present disclosure are stored. It should be noted that any computer readable medium that is not a signal transmission may be considered non-transitory.

[0026] The term “desktop” refers to a metaphor used to portray systems. A desktop is generally considered a “surface” that may include pictures, called icons, widgets, folders, etc. that can activate and / or show applications, windows, cabinets, files, folders, documents, and other graphical items. The icons are generally selectable to initiate a task through user interface interaction to allow a user to execute applications and / or conduct other operations.

[0027] The term “display” refers to a portion of a physical screen used to display the output of a computer to a user.

[0028] The term “displayed image” refers to an image produced on the display. A typical displayed image is a window or desktop. The displayed image may occupy all or a portion of the display.

[0029] The term “cloud” refers to a network of remote servers. These servers store and manage data, run applications, and deliver content and services like streaming videos, web mail, and office productivity software over the internet.

[0030] The terms “online community,” “e-community,” or “virtual community” can mean a group of people that interact via a computer network, for social, professional, educational, and / or other purposes. The interaction can use a variety of media formats, including wikis, blogs, chat rooms, Internet forums, instant messaging, email, and other forms of electronic media. Many media formats may be used in social software separately and / or in combination, including text-based chat rooms and forums that use voice, video text or avatars.

[0031] The term “social network sendee” may include a service provider that builds online communities of people, who share interests and / or activities, or who are interested in exploring the interests and / or activities of others. Social network services can be networkbased and may provide a variety of ways for users to interact, such as e-mail and instant messaging services. The term “social network” can refer to a network-based social network.

[0032] The term “screen,” “touch screen,” “touchscreen,” or “touch-sensitive display” refers to a physical structure that enables the user to interact with the computer by touching areas on the screen and provides information to a user through a display. The touch screen may sense user contact in a number of different ways, such as by a change in an electrical parameter (e.g., resistance or capacitance), acoustic wave variations, infrared radiation proximity detection, light variation detection, and the like. In a resistive touch screen, for example, normally separated conductive and resistive metallic layers in the screen pass an electrical current. When a user touches the screen, the two layers make contact in the contacted location, whereby a change in electrical field is noted and the coordinates of the contacted location calculated. In a capacitive touch screen, a capacitive layer stores electrical charge, which is discharged to the user upon contact with the touch screen, causing a decrease in the charge of the capacitive layer. The decrease is measured, and the contacted location coordinates determined. In a surface acoustic wave touch screen, an acoustic wave is transmitted through the screen, and the acoustic wave is disturbed by user contact. A receiving transducer detects the user contact instance and determines the contacted location coordinates.

[0033] The term “window” refers to a, typically rectangular, displayed image on at least part of a display that contains or provides content different from the rest of the screen. The window may obscure the desktop. The dimensions and orientation of the window may be configurable either by another module or by a user. When the window is expanded, the window can occupy substantially all of the display space on a screen or screens.

[0034] The terms “determine,” “calculate,” “form,” “generate,” and “compute,” and variations thereof, as used herein, are used interchangeably and include any type of methodology, process, mathematical operation, or technique.

[0035] The term “in communication with,” as used herein, refers to any coupling, connection, or interaction using electrical signals to exchange information or data, using any system, hardware, software, protocol, or format, regardless of whether the exchange occurs wirelessly or over a wired connection.

[0036] The preceding is a simplified summary of the disclosure to provide an understanding of some aspects of the disclosure. This summary is neither an extensive nor exhaustive overview of the disclosure and its various aspects, embodiments, and / or configurations. It is intended neither to identify key or critical elements of the disclosure nor to delineate the scope of the disclosure but to present selected concepts of the disclosure in a simplified form as an introduction to the more detailed description presented below. As will be appreciated,other aspects, embodiments, and / or configurations of the disclosure are possible utilizing, alone or in combination, one or more of the features set forth above or described in detail below.

[0037] As used herein, the term “extranet” is a computer network that allows controlled access from the outside. An extranet can be an extension of an organization's intranet that is extended to users outside the organization that can be partners, vendors, and suppliers, in isolation from all other Internet users. An extranet can be an intranet mapped onto the public Internet or some other transmission system not accessible to the general public, but managed by more than one company's administrator(s). Examples of extranet-style networks include but are not limited to: (1) LANs or WANs belonging to multiple organizations and interconnected and accessed using remote dial-up, (2) LANs or WANs belonging to multiple organizations and interconnected and accessed using dedicated lines, (3) Virtual private network (VPN) that is comprised of LANs or WANs belonging to multiple organizations, and that extends usage to remote users using special “tunneling” software that creates a secure, usually encrypted network connection over public lines, sometimes via an ISP.

[0038] As used herein, the term “Intranet” is a network that is owned by a single organization that controls its security policies and network management. Examples of intranets include but are not limited to: (1) a LAN, (2) a Wide-area network (WAN) that is comprised of a LAN that extends usage to remote employees with dial-up access, (3) a WAN that is comprised of interconnected LANs using dedicated communication lines, (4) a Virtual private network (VPN) that is comprised of a LAN or WAN that extends usage to remote employees or networks using special “tunneling” software that creates a secure, usually encrypted connection over public lines, sometimes via an Internet Service Provider (ISP).

[0039] For purposes of the present invention, the Internet, extranets and intranets collectively are referred to as (“Network Systems”).

[0040] The present technology relates to a connected vehicle network configured for communication with a specified vehicle to employ a two-factor authorization for entry to a vehicle or automobile.

[0041] FIG. 2 illustrates a schematic for a vehicle two-factor authentication security system 10 operable through network systems. The system 10 includes a vehicle 20 managed by a user, a two-factor authentication cloud 30, a user interface computer 40, and a vehicle key 50. The system 10 is configured for militating against theft of the vehicle 20.

[0042] The vehicle 20 includes a vehicle system 22 and an immobilizer system 24 in communication, wired or wireless, with the vehicle system 22. The vehicle system is acomputer system that may include hardware and / or software, computer readable medium, a communication device, an electronic control unit (ECU).

[0043] The immobilizer system 24 is in signal communication with an engine system of the vehicle 20. The immobilizer system 24 is configured to turn off one of the devices or systems required to start an engine of the vehicle 20. For example, the immobilizer system 24 turns off a gas supply to the engine system or turns off the ignition to the vehicle 20 by utilizing a radio frequency identification between an ignition key transponder and a radio frequency reader positioned in the vehicle 20, such as the steering column. When the key 50 is turned in the ignition, the ignition key transponder transmits a signal to the frequency reader, which, in turn, sends the signal to the vehicle system 22. The key transponder is a battery powered chip coupled to or stored in the key 50 configured as a fob or smart key. A code on the chip must match a code on the immobilizer system 24 for the vehicle 20 to start. The codes of the key transponder and the immobilizer system 24 can be fixed or changed as needed. If the codes do not match or the key 50 is not within a designated range of the vehicle 20 such as within the vehicle 20, the vehicle 20 will not start and a start request command will not be sent by the vehicle system 22 to the cloud 30.

[0044] The vehicle system 22 is in communication with the two-factor authentication cloud 30 having a central processing unit, a computer-readable medium, and a database for receiving the start request command from the vehicle system 22, generating a challenge, sending the challenge to the user interface computer 40 of the user of the vehicle 20, receiving a response to the challenge from the user interface computer 40, verifying a successful or non-successful completion of the challenge, and sending a verification signal command to the vehicle system 22 to permit the immobilization system 24 to allow the vehicle 20 to be started or mobilized. As used herein, ‘‘challenge,” refers to a authentication request or prompt, wherein the challenge has a single unique correct response to the prompt.

[0045] The user interface computer 40 is configured as a mobile device. However, the user interface computer 40 can be any computer or device capable of inputting the challenge and outputting a response to the challenge. In exemplary embodiments, the user interface computer 40, includes a CPU, computer-readable medium, and a database. The user interface computer 40 may have a screen with a display. The user may download or employ a specific application for receiving challenges from the cloud 30. The application can require credentials and / or passwords to be entered for access to the application. In another exemplary embodiment, the user may receive the challenge in a messaging form such as text messaging, email, voice memo, or through online netw orks or social networks, or any otherform as desired. The user interface computer 40 is preferably unique to the user and easily carried by the user when driving or starting the vehicle 20.

[0046] The challenge can be a question with an answer unique to the user such as “what city were you bom in?” or “what are the last four numbers of your social security number9” or “what is the name of your best friend?” or any personalized question. The user receives the question through the user interface computer 40 such as through the application or text and answers the question through the user interface computer 40. The challenge can include a series of rotating questions for each occurance.

[0047] Another example of the challenge is a puzzle such as a picture puzzle, word puzzle, etc. that must be completed through the user interface computer 40 or the challenge can be a random number and / or letter code or QR code. In other examples, other challenges can include any authentication means including other biometrics, one-time passcodes, a username and passcode, or a physical token like a smartcard.[004S] Once the verification signal command is sent to the vehicle system 22, the immobilization system 24 permits the user to start the vehicle 20 with the key 50. According to an embodiment of the disclosure, once the vehicle 20 is mobilized, the vehicle can continue to start and stop without using the two-factor authentication cloud 30 to formulate a new challenge for an interval of time such as about two hours to four hours, for example. In other words, the verification signal command from the cloud 30 will remain active for the interval of time without having to authenticate again. In such a scenario, the key 50 will still be required to start the vehicle 20. The interval of time can be changed by a user through the user interface computer 40, if desired. In another embodiment of the disclosure, a new authentifi cation or new verification signal command will need to be activated to start the vehicle 20 after each disablement or turning off the ignition of the vehicle 20.

[0049] Advantageously, the system and method of the present disclosure facilitates an extra layer of theft protection by requiring both the key 50 authentication and a second authentication. Such an authentication would be beneficial if the key 50 itself is stolen or duplicated, particularly.

[0050] FIG. 1 illustrates an example of a computer logic architecture for the security system 10 of the present disclosure.

[0016] From the foregoing description, one ordinarily skilled in the art can easily ascertain the essential characteristics of this invention and, without departing from the spirit and scope thereof, can make various changes and modifications to the invention to adapt it to various usages and conditions.

Claims

CLAIMS AIM:

1. A vehicle security system comprising: a vehicle system of a vehicle having an electronic control unit and a computer-readable medium; an immobilization system configured to mobilize and demobilize an engine of the vehicle, the immobilization system in communication with the vehicle system; a key having a transponder in communication with the immobilization system; a cloud database in communication with the vehicle system, the cloud database selectively sending a verification command to the immobilization system through the vehicle system; and a user interface computer in communication with the cloud, the user interface configured to input a successful unique response into the user interface computer to activate the sending of the verification command.

2. The vehicle security system of Claim 1, wherein the immobilization system includes the transponder and a frequency reader positioned in the vehicle.

3. The vehicle security system of Claim 2, wherein the transponder includes a chip with a code matching a code of the immobilization system.

4. The vehicle security system of Claim 3, wherein when the chip with the code matches the code of the immobilization system, a start request command is sent to the cloud database.

5. The vehicle security system of Claim 1, wherein the cloud sends a challenge to the user interface computer facilitating a response from the user interface computer.

6. The vehicle security system of Claim 5, wherein the challenge is a question7. The vehicle security system of Claim 5, wherein the challenge is a code.

8. The vehicle security system of Claim 5, wherein the challenge is a physical token.

9. The vehicle security system of Claim 5, where the challenge is a user name and a password.

10. The vehicle security system of Claim 5, wherein the challenge is received on the user interface computer through an application.

11. The vehicle security system of Claim 5, wherein the challenge is received on the user interface computer through a text message or an email.

12. The vehicle security system of Claim 1, wherein the user interface computer is a mobile device.

13. The vehicle security system of Claim 1, wherein the verification command is sent to the immobilization system for a continuous interval of time.

14. The vehicle security system of Claim 13, wherein the verification command is sent to the immobilization system for a continuous interval of about two to four hours.

15. The vehicle security system of Claim 1, wherein verification command sent to the immobilization system permits the vehicle to be mobilized with the key.

16. The vehicle security system of Claim 1, wherein the key is a fob.

17. A method of mobilizing a vehicle with key and a two-factor authentication comprising the steps of: integrating an immobilization system in communication with an engine system of a vehicle, the immobilization system selectively mobilizing and demobilizing the engine system; and sending at least two verification commands to the immobilization system to permit mobilization of the engine system.

18. The method of Claim 17. wherein a first one of the at least two verification commands is sent from a key transponder and a second one of the at least two verification commands is sent from a cloud after a successfully completed response is sent to the cloud from a user interface computer corresponding to a user of the vehicle.

19. The method of Claim 18, wherein the cloud generates a challenge and sends the challenge to the user interface computer upon receiving a start request command from a vehicle system of the vehicle.

20. The method of Claim 19, wherein the start request command is sent to the cloud after the first one of the at least two verification commands is sent to the immobilization system.

Images