Authentication PIN collision prevention for autonomous vehicles

Patent metadata

Field	Value
Publication number	US-11370392-B2
Application number	US-202016752597-A
Country	US
Kind code	B2
Filing date	Jan 24, 2020
Priority date	Jan 24, 2020
Publication date	Jun 28, 2022
Grant date	Jun 28, 2022

Abstract

A vehicle ridesharing system includes a user interface used to interact with rideshare passengers. The interface matches a selected user identifier with a PIN index and sends the PIN index to a vehicle body control module (BCM) of the vehicle through an unsecure communication channel. The BCM uses the PIN index to select a salt value and a nonce associated with a unique user associated with the PIN index, and sends a salt and a nonce back to the interface through the unsecure channel. The user enters a PIN value into the interface to authenticate their identity for the rideshare service. The interface generates a first hash result by hashing the PIN value with the salt and the nonce received from the BCM, and sends the hashed result back to the BCM for authentication.

First claim

That which is claimed is:

1. A method for authenticating a user in a vehicle, comprising:
receiving, at an interface, a first input indicative of a user selection of a user identifier;
sending a PIN index associated with the user identifier to a vehicle body control module (BCM);
receiving, responsive to sending the PIN index, a salt value and a nonce associated with the PIN index;
generating a first hash result by hashing a user PIN using the salt value and the nonce, and sending the first hash result to the BCM;
determining that the first hash result matches a second hash result generated by the BCM based at least in part on a copy of the user PIN stored at the BCM; and
authenticating the user based on the first hash result.

2. The method according to claim 1 , wherein the BCM generates the second hash result responsive to receiving the first hash result.

3. The method of claim 2 , further comprising:
authenticating the user responsive to determining that the first hash result matches the second hash result generated by the BCM.

4. The method according to claim 2 , further comprising:
prior to receiving the first hash result, receiving, from a cloud server, the copy of the user PIN stored at the BCM;
generating the second hash result using the salt value at the BCM based on the copy of the user PIN stored at the BCM; and
storing the second hash result in a secure memory of the BCM.

5. The method according to claim 1 , wherein the BCM is configured for:
receiving a second input of a user PIN;
fetching a user PIN record from a secure memory of the BCM, the user PIN record comprising an expected user PIN associated with the user generated using a setup operation;
generating, via the BCM, a second hash result by hashing the user PIN record using the salt value and the nonce; and
determining, via the BCM, that the first hash result matches the second hash result.

6. The method according to claim 1 , further comprising:
responsive to determining, via the BCM, that the first hash result matches the second hash result, sending, via the BCM, a status message to the interface indicative that the user is validated for a rideshare.

7. The method according to claim 1 , wherein receiving the first input comprises:
receiving a list of identifiers comprising a user identifier associated with the user, and a personal identification number (PIN) index associated with the user identifier; and
presenting the list of identifiers via the interface.

8. A vehicle authentication system, comprising:
a Body Control Module (BCM); and
an interface processor disposed in communication with the BCM; and
an interface memory for storing executable instructions, the interface processor configured to execute the instructions to:
receive a first input indicative of a user selection of a user identifier;
send a PIN index associated with the user identifier to a vehicle body control module (BCM);
receive, responsive to sending the PIN index, a salt value and a nonce associated with the PIN index;
generate a first hash result by hashing a user PIN using the salt value and the nonce, and sending the first hash result to the BCM;
determine that the first hash result matches a second hash result generated by the BCM based at least in part on a copy of the user PIN stored at the BCM; and
authenticate the user based on the first hash result.

9. The system according to claim 8 , wherein the BCM is further configured to execute the instructions to:
generate the second hash result responsive to receiving the first hash result.

10. The system according to claim 9 , wherein the BCM is further configured to execute the instructions to:
authenticate the user responsive to determining that the first hash result matches the second hash result generated by the BCM.

11. The system according to claim 10 , wherein the BCM is further configured to execute the instructions to:
prior to receiving the first hash result, receive, from a cloud server, the copy of the user PIN stored at the BCM;
generate the second hash result using the salt value at the BCM based on the copy of the user PIN stored at the BCM; and
store the second hash result in a secure memory of the BCM.

12. The system according to claim 11 , wherein the BCM is further configured to execute the instructions to:
receive a second input of a user PIN;
fetch a user PIN record from a secure memory of the BCM, the user PIN record comprising an expected user PIN associated with the user generated using a setup operation;
generate a second hash result by hashing the user PIN record using the salt value and the nonce; and
determine that the first hash result matches the second hash result.

13. The system according to claim 11 , wherein the interface processor is further configured to execute the instructions to:
responsive to determining that the first hash result matches the second hash result, send a status message to the interface indicative that the user is validated for a rideshare.

14. The system according to claim 11 , wherein the interface processor is further configured to:
receive the user identifier via an interface device associated with the interface;
receive a user input comprising the user PIN;
determine that the user PIN is acceptable based on a determination that the user PIN does not include two or more spatially orthogonally adjacent digits; and
update the PIN index, the updating comprising associating the user identifier with the user PIN.

15. The system according to claim 11 , wherein the interface processor is further configured to:
receive the first input comprising a list of identifiers having a user identifier associated with the user, and a personal identification number (PIN) index associated with the user identifier; and
presenting the list of identifiers via the interface.

16. A non-transitory computer-readable storage medium in a vehicle control system comprising a Door Access Panel (DAP) controller and a body control module (BCM), the computer-readable storage medium having instructions stored thereupon which, when executed by a processor, cause the processor to:
receive a first input indicative of a user selection of a user identifier;
send a PIN index associated with the user identifier to a vehicle body control module (BCM);
receive, responsive to sending the PIN index, a salt value and a nonce associated with the PIN index;
generate a first hash result by hashing a user PIN using the salt value and the nonce, and sending the first hash result to the BCM;
determine that the first hash result matches a second hash result generated by the BCM based at least in part on a copy of the user PIN stored at the BCM; and
authenticate the user based on the first hash result.

17. The non-transitory computer-readable storage medium of claim 16 , wherein the BCM is further configured to execute the instructions to:
determine that the first hash result matches the second hash result generated by the BCM; and
responsive to determining, via the BCM, that the first hash result matches the second hash result, sending, via the BCM, a status message to the interface indicative that the user is validated for a rideshare.

18. The non-transitory computer-readable storage medium of claim 17 , wherein the BCM is further configured to execute the instructions to:
authenticate the user responsive to determining that the first hash result matches the second hash result generated by the BCM.

19. The non-transitory computer-readable storage medium

Assignees

• Ford Global Tech Llc

Inventors

• Golgiri Hamid M
• Hassani Ali
• Hanson Ryan Edwin
• Linden Howard Paul Tsvi
• King Daniel M

Classifications

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title

• B60R25/241 Primary

  whereby access privileges are related to the identifiers · CPC title

• B60R25/248

  Electronic key extraction prevention · CPC title

• H04L9/3236 Primary

  using cryptographic hash functions · CPC title

• H04W12/06 Primary

  Authentication · CPC title