Secure Short-Range Wireless Connection Establishment in Vehicles
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing a short-range wireless communication connection between a vehicle and a mobile device often requires user input and verification, which is inconvenient and resource-intensive, especially when securing connections.
Innovation Solution
A method involving a host device with a host certificate and key, transmitting an advertisement, receiving a connection request, decrypting and verifying an encrypted client certificate, generating a shared secret, and encrypting it for secure communication, potentially without user intervention using Out of Band technologies like Bluetooth Low Energy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional SRWC connection establishment methods are used, then secure communication can be achieved, but user input and verification are required which increases operation complexity and resource consumption
Solution Approach 1:
The system performs preliminary actions by pre-provisioning the vehicle with host certificate and key during manufacturing or initial configuration. The mobile device receives client certificate and key through out-of-band communication before the actual SRWC connection attempt, enabling automatic authentication without user input during operation
Solution Approach 2:
The patent introduces an intermediary out-of-band communication channel (separate from SRWC) for transmitting authentication credentials. This intermediary channel enables the mobile device to receive verification information without requiring user interaction during the main SRWC connection process
2Reliability
If traditional SRWC connection establishment methods are used, then secure communication can be achieved, but numerous steps are required which increases time consumption and resource usage
Solution Approach 1:
Authentication credentials (certificates and keys) are prepared in advance through out-of-band communication before the SRWC connection attempt. This preliminary action eliminates the need for multi-step authentication exchanges during connection establishment, reducing time consumption while maintaining security
Solution Approach 2:
The patent extracts the authentication verification steps from the main SRWC connection establishment process by performing credential transmission through a separate out-of-band channel. This separation allows the SRWC connection to be established quickly while security verification occurs independently in the background
3Reliability
If certificate verification and encryption steps are performed, then secure communication is ensured, but computational resources and processing time are consumed
Solution Approach 1:
Cryptographic credentials are established in advance through out-of-band communication, allowing the vehicle and mobile device to skip computationally intensive key exchange and certificate verification steps during actual SRWC operation. The preliminary credential setup reduces real-time computational burden while maintaining security
Data Source
AI summary
A method and system of establishing a short-range wireless communications connection between a host device and a client device, wherein the host device includes a host certificate and a host key, the method including the steps of: transmitting an advertisement using a short-range wireless communications (SRWC) protocol from the host device to the client device; receiving a connection request message from the client device; receiving a client device verification message, wherein the client device verification message includes an encrypted client certificate, wherein the encrypted client certificate is a certificate that is encrypted using a client key; decrypting the encrypted certificate using the host key to obtain the client certificate; verifying the client certificate using the host certificate; generating a shared secret; encrypting the shared secret using the host key; and sending the encrypted shared secret to the client device.