V2X certificate management

Patent metadata

Field	Value
Publication number	US-11025607-B2
Application number	US-201615380992-A
Country	US
Kind code	B2
Filing date	Dec 15, 2016
Priority date	Dec 15, 2016
Publication date	Jun 1, 2021
Grant date	Jun 1, 2021

Abstract

Concepts and technologies disclosed herein are directed to vehicle-to-everything (“V2X”) certificate management. According to one aspect of the concepts and technologies disclosed herein, a system can receive a CRL from a security credential management (“SCM”) system. The CRL can identify one or more certificates that have been determined to be invalid, such as when the certificate(s) has expired. The certificate(s) can be utilized by a vehicle for secure communications, including vehicle-to-vehicle (“V2V”) and vehicle-to-infrastructure (“V2I”) (collectively V2X). The system can format the CRL as a cell broadcast message. The system can then create a cell broadcast request directed to a cell broadcast center (“CBC”). The cell broadcast request can include the CRL formatted as the cell broadcast message. The system can send the cell broadcast request to the CBC to instruct the CBC to broadcast the CRL as the cell broadcast message.

First claim

We claim:

1. A method comprising:
receiving, by a traffic optimization management server system comprising a processor, a certificate revocation list from a security credential management system, wherein the certificate revocation list identifies a certificate that has been determined to be invalid, and wherein the certificate is utilized by a vehicle for secure communications;
receiving, by the traffic optimization management server system, configuration information from the security credential management system, wherein the configuration information specifies how to configure a cell broadcast message for broadcasting the certificate revocation list to at least one cell of a cellular network, wherein the configuration information further specifies that the certificate revocation list is to be broadcast to the at least one cell of the cellular network in accordance with a frequency to be determined based, at least in part, upon a peak travel time;
determining, by the traffic optimization management server system, the peak travel time;
determining, by the traffic optimization management server system, the frequency based, at least in part, upon the peak travel time;
formatting, by the traffic optimization management server system, the certificate revocation list as the cell broadcast message in accordance with the configuration information;
creating, by the traffic optimization management server system, a cell broadcast request directed to a cell broadcast center, wherein the cell broadcast request comprises the certificate revocation list formatted as the cell broadcast message; and
sending, by the traffic optimization management server system, the cell broadcast request to the cell broadcast center to instruct the cell broadcast center to broadcast the certificate revocation list as the cell broadcast message to the at least one cell of the cellular network in accordance with the frequency.

2. The method of claim 1 , wherein the certificate revocation list is generated by the security credential management system in response to the security credential management system determining that the certificate is invalid.

3. The method of claim 1 , wherein the certificate revocation list is generated by the security credential management system in response to a request received from the vehicle.

4. The method of claim 1 , wherein the certificate that has been determined to be invalid is expired.

5. The method of claim 1 , wherein the configuration information comprises a time period during which the certificate revocation list is to be broadcast to the at least one cell of the cellular network.

6. A computer-readable storage medium comprising computer-executable instructions that, when executed by a processor of a traffic optimization management server system, causes the processor to perform operations comprising:
receiving a certificate revocation list from a security credential management system, wherein the certificate revocation list identifies a certificate that has been determined to be invalid, and wherein the certificate is utilized by a vehicle for secure communications;
receiving configuration information from the security credential management system, wherein the configuration information specifies how to configure a cell broadcast message for broadcasting the certificate revocation list to at least one cell of a cellular network, wherein the configuration information further specifies that the certificate revocation list is to be broadcast to the at least one cell of the cellular network in accordance with a frequency to be determined based, at least in part, upon a peak travel time
determining the peak travel time,
determining the frequency based, at least in part, upon the peak travel time,
formatting the certificate revocation list as the cell broadcast message in accordance with the configuration information;
creating a cell broadcast request directed to a cell broadcast center, wherein the cell broadcast request comprises the certificate revocation list formatted as the cell broadcast message; and
sending the cell broadcast request to the cell broadcast center to instruct the cell broadcast center to broadcast the certificate revocation list as the cell broadcast message to the at least one cell of the cellular network in accordance with the frequency.

7. The computer-readable storage medium of claim 6 , wherein the certificate revocation list is generated by the security credential management system in response to the security credential management system determining that the certificate is invalid.

8. The computer-readable storage medium of claim 6 , wherein the certificate revocation list is generated by the security credential management system in response to a request received from the vehicle.

9. The computer-readable storage medium of claim 6 , wherein the certificate that has been determined to be invalid is expired.

10. The computer-readable storage medium of claim 6 , wherein the configuration information comprises a time period during which the certificate revocation list is to be broadcast to the at least one cell of the cellular network.

11. A traffic optimization management server system comprising:
a processor; and
a memory that stores instructions that, when executed by the processor, cause the processor to perform operations comprising
receiving a certificate revocation list from a security credential management system, wherein the certificate revocation list identifies a certificate that has been determined to be invalid, and wherein the certificate is utilized by a vehicle for secure communications,
receiving configuration information from the security credential management system, wherein the configuration information specifies how to configure a cell broadcast message for broadcasting the certificate revocation list to at least one cell of a cellular network, wherein the configuration information further specifies that the certificate revocation list is to be broadcast to the at least one cell of the cellular network in accordance with a frequency to be determined based, at least in part, upon a peak travel time,
determining the peak travel time,
determining the frequency based, at least in part, upon the peak travel time,
formatting the certificate revocation list as the cell broadcast message in accordance with the configuration information,
creating a cell broadcast request directed to a cell broadcast center, wherein the cell broadcast request comprises the certificate revocation list formatted as the cell broadcast message, and
sending the cell broadcast request to the cell broadcast center to instruct the cell broadcast center to broadcast the certificate revocation list as the cell broadcast message to the at least one cell of the cellular network in accordance with the frequency.

12. The traffic optimization management server system of claim 11 , wherein the certificate revocation list is generated by the security credential management system in response to the security credential management system determining that the certificate is invalid.

13. The traffic optimization management server system of claim 11 , wherein the certificate revocation list is generated by the security credential management system in response to a request received from the vehicle.

14. The traffic optimization management server system of claim 11 , wherein the configuration information further specifies a time period during which the certificate revocation list is to be broadcast to the at least one cell of the cellular network.

15. The method of claim 1 , further comprising calling, by

Assignees

• At & T Mobility Ii Llc
• At & T Ip Ii Lp

Inventors

• Narayanan Murali
• Mahler Roger
• Nichols Paul
• Murphy George
• Carter Zachery
• Ramakrishnan Senthil
• Becker Thomas

Classifications

• H04W12/069

  using certificates or pre-shared keys · CPC title

• H04W4/40

  for vehicles, e.g. vehicle-to-pedestrians [V2P] · CPC title

• H04W84/005

  Moving wireless networks · CPC title

• H04W48/10

  using broadcasted information · CPC title

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title