V2X Enrollment via Two-Phase Software Authorization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional vehicle-to-everything (V2X) communication systems face complex and costly enrollment certificate authentication processes, requiring specialized hardware and lacking efficiency.

Innovation Solution

A two-phase software-based authorization mechanism for vehicle connectivity units, involving digital identity creation and secure connection to the OEM's public key infrastructure for obtaining V2X enrollment certificates, utilizing generic hardware and improving security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional V2X enrollment methods are used, then secure communication is achieved, but the enrollment process becomes complex and requires specialized hardware

Engineering Contradiction:
ImprovesecurityVSAvoidenrollment complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces the conventional mechanical/hardware-based enrollment system with a software-based authorization mechanism. Instead of requiring specialized hardware security modules and complex physical enrollment procedures, the system uses software agents and digital certificates to achieve secure V2X communication. The vehicle connectivity unit includes a software-based V2X enrollment agent that can obtain certificates through software communication with certificate authorities, eliminating the need for specialized hardware enrollment devices.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If conventional V2X enrollment methods are used, then secure communication is achieved, but costs increase due to specialized hardware requirements

Engineering Contradiction:
ImprovesecurityVSAvoidmanufacturing cost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent employs disposable or replaceable software-based security credentials (digital certificates and keys) instead of expensive, permanent specialized hardware security modules. The vehicle connectivity unit can obtain certificates from certificate authorities and store them in standard storage media, which are cheaper and more easily manufactured than dedicated hardware security enclaves. This approach reduces the bill of materials cost while maintaining security through cryptographic protocols.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

3Reliability

If conventional V2X enrollment methods are used, then authentication is achieved, but the enrollment process lacks efficiency

Engineering Contradiction:
ImproveauthenticationVSAvoidenrollment efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements preliminary action by having the vehicle connectivity unit automatically initiate the enrollment process and pre-obtain certificates before V2X communication is needed. The enrollment agent can proactively communicate with certificate authorities to secure authentication credentials in advance, rather than requiring manual enrollment procedures or waiting for authentication to be needed. This automation and advance preparation significantly improve enrollment efficiency.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20240323687A1Secure and efficient enrollment of vehicle-to-everything communication
Publication Date: 2024.09.26 FCA US LLC
  • US20240323687A1 patent drawing
  • US20240323687A1 patent drawing
  • US20240323687A1 patent drawing

AI summary

A vehicle-to-everything (V2X) enrollment method and communication system of a vehicle includes a transceiver configured for communication with other original equipment manufacturer (OEM) vehicles and an OEM backend system, and a controller in communication with the transceiver and configured to perform a V2X enrollment process. The V2X enrollment process includes, during a first phase, transmitting an identity certificate request to the OEM backend system, and receiving and securely storing a signed identity certificate from the OEM backend system. During a subsequent second phase, the enrollment process includes securely connecting and authenticating with the OEM backend system using the signed identify certificate, and receiving and securely storing a V2X enrollment certificate from the OEM backend system.