Method for securing communication between a communication system of a vehicle and a vehicle-external server

Patent metadata

Field	Value
Publication number	US-12389231-B2
Application number	US-202218275253-A
Country	US
Kind code	B2
Filing date	Jan 17, 2022
Priority date	Feb 2, 2021
Publication date	Aug 12, 2025
Grant date	Aug 12, 2025

Abstract

Communications between a communication system of a vehicle and an external server external via a communication interface are secured such that data is transmitted to the communication system with integrity and authenticity protection, and also confidentially where necessary. A first securing method for the non-post-quantum-resistant securing of exchanged data is implemented, a second securing method for the post-quantum-resistant securing of exchanged data is implemented or is able to be implemented. Key material for the second securing method is initially introduced in the communication system and is stored securely or is able to be introduced via a further interface with cryptographic encryption and is securely stored for exclusive use in the second securing method.

First claim

The invention claimed is:

1. A method for securing communication between a communication system of a vehicle and a vehicle-external server via a communication interface, the communication interface being secured such that data is transmittable to the communication system in a manner that protects its integrity and authenticity, the method comprising:
implementing a first securing method for non-post-quantum-resistant securing of exchanged data in the communication system via the communication interface;
implementing a second securing method for post-quantum-resistant securing of exchanged data in the communication system via the communication interface, implementing the second securing method for post-quantum-resistant securing of exchanged data in the communication system via another interface implemented in the communication system, or implementing the second securing method for post-quantum-resistant securing of exchanged data in the communication system via a software update; and
introducing key material for use in the second securing method via a further interface, wherein the further interface is implemented in the communication system or is implemented via a software update, wherein the introduced key material is received in a cryptographically encrypted manner and is securely stored for exclusive use in the second securing method, wherein the key material is introduced via the further interface with symmetrical cryptographic encryption.

2. The method of claim 1 , further comprising:
deactivating or deleting functions of the first securing method in event of introduction of the post-quantum threat by another further interface.

3. The method of claim 1 , wherein in the event of the introduction of the post-quantum threat, the second securing method is activated by another further fourth interface to exclusively secure data exchanged via the communication interface.

4. The method of claim 2 , wherein the deactivation or deletion of the functions of the first securing method via the other further interface is irreversible.

5. The method of claim 1 , wherein the communication system is equipped with required key material to implement the another interface or the further interface.

6. The method of claim 5 , wherein the equipping of the communication the equipment occurs initially.

7. The method of claim 2 , further comprising:
securely marking a process as the last possible process of one of the another interface, the further interface, or the another further interface such that changes made up to that point regarding the another interface, the further interface, or the another further interface become irreversible.

8. The method of claim 2 , wherein a dedicated secured software update interface is provided for each of the another interface, the further interface, and the another further interface that is implementable via a software update.

9. The method of claim 8 , further comprising:
securely marking a process as the last possible process of at least one of the software update interfaces such that changes made up to that point regarding the software update interface become irreversible.

Assignees

• Mercedes Benz Group Ag

Inventors

• Friesen Viktor
• Pavlovic Viktor

Classifications

• G07C5/008

  communicating information to a remotely located station (transmission systems for measured values G08C) · CPC title

• G06F8/65

  Updates (security arrangements therefor G06F21/57) · CPC title

• H04L2209/84

  Vehicles · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title