Fully authenticated content transmission from a provider to a recipient device via an intermediary device

Patent metadata

Field	Value
Publication number	US-8972736-B2
Application number	US-201213612813-A
Country	US
Kind code	B2
Filing date	Sep 12, 2012
Priority date	Sep 12, 2012
Publication date	Mar 3, 2015
Grant date	Mar 3, 2015

Abstract

A method, system, and computer readable medium containing programming for handling fully authenticated transmission of video or other data (content) from a provider to a recipient device via an intermediary device. An inner envelope containing the content and/or security features is prepared and digitally signed using a private cryptographic key. The signed inner envelope is then included in a second, outer envelope which may also include some or all of the content. The outer envelope is also digitally signed, thereby forming a data package which may be sent from the provider to the intermediary device. If the signature of the outer envelope is authenticated at the intermediary device, then the inner envelope is sent to the recipient device which then uses the inner signature to verify its authenticity. Authenticated content may then be presented or otherwise used at the recipient device.

First claim

The invention claimed is:

1. A method of providing secure data to an intermediary device for delivery to a recipient device, comprising the steps of:
(a) preparing a multi-layer cryptographic data package using a hardware security module (HSM) for transmission from a provider using public key cryptography, comprising the steps of:
(1) creating a first envelope to be used by the recipient device at the HSM;
(2) signing the first envelope using a first signature at the HSM, wherein a first cryptographic layer comprises the first envelope and first signature;
(3) creating a second envelope containing the first cryptographic layer and content data at the HSM; and
(4) signing the second envelope at the HSM using a second signature corresponding to a public key accessible to the intermediary device, wherein a second cryptographic layer comprises the second envelope and the second signature; and

(b) sending the data package from the HSM to the intermediary device,
wherein the provider is a vehicle call center.

2. The method of claim 1 wherein the intermediary device comprises one of the following: a cellular telephone, a personal digital assistant (PDA), a smart phone, a personal laptop computer, or a netbook computer.

3. The method of claim 1 wherein the first envelope further comprises payload data to be received by the recipient device.

4. The method of claim 1 wherein the second envelope further comprises payload data to be received by the recipient device.

5. The method of claim 1 wherein a payload of the first envelope includes a plurality of data blocks, wherein one or more of the plurality of data blocks are digitally signed and have a signature different than the first or second signature.

6. The method of claim 1 wherein the first envelope includes a release identifier (ID), an application check block (ACB), an initialization block (IB), an X.509 certificate, or any combination of these.

7. The method of claim 6 wherein the one or more digitally signed data blocks are embedded among the remaining plurality of data blocks.

8. The method of claim 7 wherein the ACB includes a mapping of the location of the one or more digitally signed data blocks.

9. The method of claim 1 wherein the first signature corresponds to the public key.

10. The method of claim 9 wherein the public key corresponding to the second signature is different from the public key corresponding to the first signature.

11. A method of preparing a data package, comprising the steps of:
(a) preparing a data file for a payload of a first envelope, wherein the preparing step includes:
providing a plurality of data blocks;
digitally signing one or more of the plurality of data blocks; and
embedding the one or more digitally signed blocks among the remaining of the plurality of data blocks;

(b) generating an application check block (ACB), wherein the ACB maps the location of the digitally signed blocks among the plurality of data blocks;
(c) generating the first envelope, wherein the first envelope comprises the ACB;
(d) signing the first envelope with a first signature, wherein the first signature is different from the signature(s) used to digitally sign the one or more of the plurality of data blocks, wherein the first signature uses a first private key;
(e) generating a second envelope; and then
(f) signing the second envelope with a second signature, wherein the second signature is different from the signature(s) used to digitally sign the one or more of the plurality of data blocks, wherein the second signature uses a second private key, wherein the second envelope comprises the first envelope,
wherein a first cryptographic layer comprises the first envelope and the first signature, wherein a second cryptographic layer comprises the second envelope and the second signature,
wherein the data package prepared in steps (a)-(f) are performed by a vehicle call center for cellular transmission.

12. The method of claim 11 wherein the data file includes image data.

13. The method of claim 11 wherein the first private key is identical to the second private key.

14. A method of validating the security of data received at a recipient device from a provider via an intermediary device, comprising the steps of:
(a) receiving at a vehicle equipped with a cryptography module a portion of an original multi-layer cryptographic data package from an intermediary device, wherein the portion includes a first envelope and a first signature associated with a first public key that was extracted from the original multi-layer cryptographic data package, wherein the first envelope comprises a plurality of unsigned data blocks and at least one digitally signed data block embedded within the plurality of unsigned data blocks;
(b) using the first signature to validate the authenticity of the first envelope,
wherein the original data package further comprised, prior to the extraction, a second envelope and a second signature associated with a second public key used by the intermediary device to validate the data package sent by the provider,
wherein the first envelope is part of the payload of the second envelope, and wherein the provider is a vehicle call center; and

(c) using the at least one digitally signed data block to validate the authenticity of the first envelope.

15. The method of claim 14 wherein the first envelope comprises multiple digitally signed blocks, wherein the authenticity of the first envelope is partially based on a sequence that the multiple digitally signed blocks are received.

16. The method of claim 14 wherein the first envelope further comprises an initialization block (IB) containing initialization parameters.

17. The method of claim 14 wherein the digitally signed blocks are signed using a private key associated with the first public key.

18. The method of claim 17 wherein the first envelope further comprises an application check block (ACB) that comprises a mapping of the location of the digitally signed blocks within the plurality of unsigned data blocks.

19. The method of claim 18 wherein the plurality of unsigned data blocks and the at least one digitally signed data block are received by the recipient device as streaming video, wherein the recipient device validates the at least one digitally signed block while the video is being received.

20. The method of claim 19 wherein if the at least one digitally signed block is not validated, the streaming video is discontinued.

21. The method of claim 19 wherein recipient device periodically validates during the streaming video that a media access control (MAC) address of the intermediary device has not changed.

22. The method of claim 14 wherein the second envelope further comprises data blocks.

23. A non-transitory computer readable medium for use by an intermediary device to wirelessly receive and then process a data package and, after the data package is processed, wirelessly send to a receiving device a secured envelope extracted from the data package,
the non-transitory computer readable medium comprising a data storage device having stored thereon a computer readable application program that upon execution by an intermediary device, causes the intermediary device to prepare a portion of an original data package received by the intermediary device for transmission to a recipient device,
wherein the original data package originates from a hardware security module (HSM) remotely located from the i

Assignees

• Peirce Kenneth L
• Tom Alfred C
• Hrabak Robert A
• Gen Motors Llc

Inventors

• Peirce Kenneth L
• Tom Alfred C
• Hrabak Robert A

Classifications

• H04L63/0478 Primary

  applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key (cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14) · CPC title

• H04L63/0281

  Proxies · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title