Smartphones based vehicle access

Patent metadata

Field	Value
Publication number	US-11258598-B2
Application number	US-201916686861-A
Country	US
Kind code	B2
Filing date	Nov 18, 2019
Priority date	May 18, 2017
Publication date	Feb 22, 2022
Grant date	Feb 22, 2022

Abstract

A symmetric key-based generation and distribution system and method for a vehicle access authentication framework is provided, the framework comprising: a first device operated by a car owner, a second device operated by a delegated user, and a third device residing in a vehicle. The first device is configured to: request for an authentication key from the third device, the request for the authentication key comprising an ID of the first device, id O ; receive an authentication key K id O from the third device; and generate a delegated authentication key K id U based on authentication key K id O and an ID of the second device in response to receiving a request for delegated authentication key from the second device, the request for delegated authentication key comprising the ID of the second device.

First claim

What is claimed is:

1. A device, wherein the device comprises a non-transitory memory having processor-executable instructions stored thereon, a processor coupled to the non-transitory memory, the processor-executable instructions when executed cause the processor to:
transmit a request for an authentication key of a user of a vehicle to a third device, wherein the request for the authentication key comprises an identification (ID) of the user (id O );
receive an authentication key (K id O ) from the third device; wherein the authentication key (K id O ) is used to access the vehicle by the user; and
generate a delegated authentication key (K id U ) to a delegated user based on the authentication key (K id O ) and an ID of the delegated user in response to receiving a request for a delegated authentication key from a second device, the request for delegated authentication key comprising the ID of the delegated user; wherein the delegated authentication key (K id U ) is used to access the vehicle; wherein
K id O =h(K, id Car , id O ), where h(.) is a cryptographic hash function, id Car is an ID of the third device, and the device is configured to store the K id O in a secured memory.

2. The device according to claim 1 , wherein the processor is further configured to:
generate and transmit a request to generate a new secret key;
receive an authentication request from the third device; and
transmit a superuser password, provided by the user, to the third device.

3. The device according to claim 1 , wherein the processor is further configured to:
receive the ID of the third device and a random number (r), from the third device;
compute a Message Authentication Code (MAC) represented by vd using a MAC generation function with input parameters K id O and r as vd=MAC(K id O , r); and
transmit an access request containing parameters [0, id O , vd] to the third device where 0 denotes a requested access is from the user of the vehicle.

4. The device according to claim 3 , wherein the processor is further configured to:
receive a new authentication key (K′ id O ) from the third device;
update the authentication key (K′ id O ) in memory with the new authentication key (K′ id O ).

5. The device according to claim 1 wherein the processor is further configured to:
receive the ID of the second device (id U ),
determine an access policy (P U ); and
generate the delegated authentication key (K id U ), where K id U =h(K id O , id U , P U ), wherein h(.) is the cryptographic hash function;
store the K id U in the secured memory; and
transmit the delegated authentication key (K id U ) to the second device.

6. The device according to claim 5 , wherein the access policy (P U ) include one or more of validity period, speed limit, and mileage limit.

7. The device according to claim 1 , wherein the processor is further configured to:
update a blacklist in the third device.

8. The device according to claim 7 , wherein updating the blacklist in the third device comprises:
generating a revoke request containing the ID of user to be revoked; and
transmitting the revoke request to the third device.

9. A method for a vehicle access authentication framework having a first device operated by a car owner, a second device operated by a delegated user, and a third device residing in a vehicle; the method which is applied to the first device comprising:
transmitting a request for an authentication key of a user of a vehicle to the third device, the request for the authentication key comprising an identification (ID) of the user (id O );
receiving an authentication key (K id O ) from the third device; wherein the authentication key (K id O ) is used to access the vehicle by the user; and
generating a delegated authentication key (K id U ) to a delegated user based on the authentication key K id O and an ID of the delegated user in response to receiving a request for a delegated authentication key from the second device, the request for the delegated authentication key comprising the ID of the delegated user; wherein the delegated authentication key (K id U ) is used to access the vehicle; wherein K id O =h(K, id Car , id O ), where h(.) is a cryptographic hash function, id Car is an ID of the third device, and the first device is configured to store the K id O in a secured memory.

10. The method according to claim 9 , further comprising:
generating and transmitting a request to generate a new secret key;
receiving an authentication request from the third device; and
transmitting a superuser password, provided by the user, to the third device.

11. The method according to claim 9 , further comprising:
receiving the ID of the third device and a random number (r), from the third device;
computing a Message Authentication Code (MAC) represented by vd using a MAC generation function with input parameters K id O and r as vd=MAC(K id O , r); and
transmitting an access request containing parameters [0, id O , vd] to the third device where 0 denotes a requested access is from the user of the vehicle.

12. The method according to claim 11 , further comprising:
receiving a new authentication key (K′ id O ) from the third device;
updating the authentication key (K′ id O ) in a memory of the first device with the new authentication key (K′ id O ).

Assignees

• Huawei Int Pte Ltd

Inventors

• Yang Yanjiang
• Wei Zhuo
• Chu Cheng Kang
• Shi Jie

Classifications

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L2209/84

  Vehicles · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• B60R2325/205

  Mobile phones · CPC title