Ford Global Technolgoies, LLC

Cameron Smyth

John Robert Van Wiemeersch

Daniel M King

Kevin Thomas Hille

Aaron Matthew DeLong

Timothy Thivierge, Jr

Eugene Karpinsky

Farhan Ehsan

Santosh Kumar Lalwani

Thomas Lee Miller

Eric L Reed

Jacob David Nelson

Jacob Lucero

Ali Hassani

Hamid M Golgiri

Vivekanandh Elangovan

Venkata Kishore Kajuluri

William David Treharne

Robert Bruce Kleve

Ryan Edwin Hanson

Aldi Caushi

Jeremy L Russell

Mike Raymond Westra

David Ray Erkkila

Robert James Southern

John William Turner

Bobak Shahidehpour

Alyssa Hauler

Omar Fayad

Tim Richmond

A computer includes a processor and a memory, and the memory stores instructions executable by the processor to nondeterministically select a message from a plurality of messages, the messages including respective message authentication codes; set a current trust status by verifying the message authentication code from the selected message; and forward the selected message to a recipient in response to a previous trust status being trusted.

Message verification for vehicle ECUs

A vehicle system includes a first control module, a plurality of second control modules, and a vehicle network. The vehicle network communicatively couples the first control module and the second control modules. The first control module is programmed to generate an update command including a plurality of authentication keys and transmit the update command over the vehicle network. The update command is functionally addressed to be receivable by the second control modules. Each second control module is programmed to receive a configuration file; in response to receiving the update command, identify the authentication keys in the update command that are associated with that second control module based on the configuration file; and update with the identified authentication keys.

Transmission of authentication keys

A vehicle system includes a first control module. The first control module is programmed to generate an update command including a plurality of authentication keys and a mapping associating the authentication keys with a plurality of second control modules transmit the update command over a vehicle network. The update command is functionally addressed to be receivable by the second control modules.

Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving a request to enter a valet mode of the vehicle. The example method may also include enabling the valet mode of the vehicle. The example method may also include disabling, based on the valet mode of the vehicle being enabled, a secure idle mode of the vehicle, wherein the secure idle mode of the vehicle includes locking a gear shifter of the vehicle in a park position when an occupant of the vehicle is outside of a cabin of the vehicle.

Systems and methods for enhanced vehicle valet mode

Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving a request for a temporary valet passcode. The example method may also include generating a temporary valet passcode. The example method may also include displaying a request for entry of the temporary valet passcode. The example method may also include determining that an input has been received. The example method may also include determining that a mobile device is located within the vehicle or within a threshold distance from the vehicle. The example method may also include preventing the vehicle from starting based on authorization of the mobile device for a period of time subsequent to the input being received.

The present disclosure is directed to an automotive computer in communication with a mobile device using an authentication manager to increase and/or reduce user privileges that determine a level of vehicle control or feature access that is granted to the user. The authentication manager may increase or decrease the user privilege to standard rider status until the authentication manager has confirmed elevated status for that user via a cloud security challenge question or via a local identification method such as using the mobile device authentication features. This process may be additionally triggered based on environmental or context-based use cases, such as a high traffic condition, local cyber-attack, or transportation of sensitive goods. The system may utilize the authentication to perform out of band pairing of the mobile device and the vehicle, which may add additional security.

Authenticating privilege elevation on a transportation service

A secured device has a secure storage area and is configured to communicate with an authentication manager of a key server. A salt and a key identifier of a key are received to the secured device from the key server. Information corresponding to the key identifier is embedded into the salt to create a combined identifier-salt value. The combined identifier-salt value is stored in the secure storage area. The combined identifier-salt value is utilized as additional input to a hash function along with a password. The key is identified using the information corresponding to the key identifier embedded into the salt.

Secure storage enhancements for authentication systems

Exemplary embodiments described in this disclosure are generally directed to systems and methods for securely creating passwords for performing various keyless operations upon a vehicle. In an exemplary method, a computer receives a request for creating a password for a phone-as-a-key (PaaK) device. The computer determines that the PaaK device is present inside the vehicle and that the vehicle engine has been placed in an accessory state or a run state by an authorized PaaK device located in the vehicle. The computer further determines that a passive entry passive start (PEPS) key fob is present inside the vehicle. A prompt is provided for entry of a password. The computer checks to determine if an entered password has been already assigned to another PaaK device. If unassigned, the computer links the password to the PaaK device and authorizes the entered password as a valid keyless starting password for the vehicle.

Systems and methods for creating a password and/or a keypad code for executing keyless operations upon a vehicle

Exemplary embodiments described in this disclosure are generally directed to systems and methods for ensuring password security when starting a vehicle having a keyless engine starting system. In an exemplary method, a computer detects a depression of an engine start push button when no phone-as-a-key (PaaK) device or passive-entry-passive-start (PEPS) key fob is present in the vehicle. The computer responds by executing a verification procedure prior to password validation. The verification procedure can include operations such as determining that no PaaK device or PEPS key fob is present either inside the vehicle or within a defined geofence outside the vehicle. If the verification procedure is successful, the computer displays a prompt upon a display screen for entering of a password. The computer then uses various security measures when verifying the validity of an entered password, followed by displaying of a message indicating acceptance or rejection of the password.

Systems and methods for starting a vehicle using a secure password entry system

A vehicle includes: (i) a main telematics module, (ii) a connectivity module including antenna(s) and processor(s). The connectivity module is configured to: (a) authenticate a mobile device via a vehicle-access-key (VAK); (b), if (a), issue an ephemeral-session-key (DSK) to the mobile device; (c), if (b), establish an active session with the mobile device; (d) encrypt all messages to the mobile device with the VAK during (a) and with the DSK during (c). The connectivity module is configured to automatically revoke the DSK upon expiration of a predetermined time interval.

Secure session communication between a mobile device and a base station

A vehicle system includes a controller configured to receive a vehicle state signal indicative of a vehicle being in an emergency state, repeatedly transmit a request, via Bluetooth Low Energy (BLE), to a personal communication device (PCD) to contact an emergency provider in response to receiving the vehicle state signal, and stop transmitting the request to contact the emergency provider in response to receiving an acknowledgement from the PCD that the emergency provider was contacted.

Apparatus and method for initiating an emergency call using a personal communication device

In at least one embodiment, an apparatus includes a controller coupled to a first sensor positioned on a first object external to a vehicle and configured to receive first information indicative of a height of the first object from the first sensor via Bluetooth Low Energy (BLE) and store second information corresponding to a height of the vehicle. The controller is further configured to receive third information corresponding to a height of overhead obstacle positioned external to the vehicle and to compare at least one of the first information and the second information to the third information. The controller is further configured to generate an alert based on the comparison of the at least one of the first information and the second information to the third information.

Apparatus and method for actively determining height clearance and generating alerts

An overhead clearance system for a vehicle is configured to receive signals from wireless transceivers attached to objects that are towed or carried by the vehicle and extend above a top of the vehicle. A controller is programmed to receive the signals from the wireless transceivers and transmit a request to a remote device to send height data associated with the object and the vehicle. The controller outputs an alert when combined object and vehicle heights exceed a sensed vertical clearance.

Growing community of inventors

Wyandotte, MI, United States of America

Cameron Smyth