Gm Global Technolgoy Operations, Inc.

David M Nairn

Thomas M Forest

Stephan Huang

Muralikrishnan K

Brian Farrell

Padma Sundaram

Mohammed Abdulla Yousuf

The present application relates to a method and apparatus for intelligent wireless protocol optimization including storing, in a memory, a first customer key and a second customer key, receiving, by a processor, a secret key, decrypting, by the processor, the secret key using a first customer key to extract a master key, provisioning, by the processor, an electronic control unit in response to the master key, and deleting, by the processor, the second customer key in response to the provisioning of electronic control unit in response to the master key.

Method and apparatus for providing an individually secure system to multiple distrusting parties

A method of transmitting data within a vehicle includes: storing two copies of a data message; constructing at an electronic control unit (ECU) a serial bus message that includes one copy of the data message and a message authentication code (MAC) created using a secret key stored at the ECU, a MAC algorithm, and a different copy of the data message; transmitting the serial bus message to a receiving ECU over a vehicle bus; authenticating the serial bus message at the receiving ECU using a copy of the key stored at the receiving ECU by creating a copy of the MAC from the data message included in the serial bus message and the copy of the key; comparing the MAC from the serial bus message with the copy of the MAC created at the receiving ECU; and rejecting or accepting the data message based on the comparison.

Authenticating messages sent over a vehicle bus that include message authentication codes

A method provides secure communication between a first module and a second module within a vehicle communication network. A first anti-replay counter is provided within the first module, and a second anti-replay counter is provided within the second module. A message is transmitted from the first module to the second module over the vehicle communication network. The message includes a partial counter including only a portion of the contents of the first anti-replay counter, and the message is authenticated based on the partial counter.

Methods and apparatus for secure communication in a vehicle-based data communication system

A communication system in a vehicle is described and various methods for securely providing diagnostic data between a vehicle and a remote server using a vehicle diagnostic tool. The method may include the steps of: receiving at the remote from the diagnostic tool both a challenge question and encrypted data acquired by the diagnostic tool from a vehicle electronic control unit; using the challenge question to determine how to decrypt the encrypted data; and decrypting the encrypted data at the remote server.

Securely providing diagnostic data from a vehicle to a remote server using a diagnostic tool

A vehicle system and method of secure communication between a vehicle and an external device communicating with the vehicle in a diagnostics mode. The method includes the steps of: receiving a first diagnostic request at an electronic control unit (ECU) from the external device; determining an increased risk of security breach at the ECU based on the [nature of the] first request; and when it is determined that the increased risk exists, providing a misinformative response.

Inhibiting access to sensitive vehicle diagnostic data

A system and method of verifying data at a microcontroller using message authentication codes (MACs) includes generating at a microprocessor of the microcontroller a valid MAC using valid data; transmitting the valid MAC to a peripheral of the microcontroller along with the valid data; receiving an authentication message at the microprocessor from the peripheral in response to transmitting the valid MAC; generating at the microprocessor an invalid MAC, which is created by changing one or more bits of the valid MAC; transmitting the invalid MAC to the peripheral along with the valid data in response to the authentication message; and receiving a second authentication message at the microprocessor from the peripheral in response to transmitting the invalid MAC.

Authenticating data at a microcontroller using message authentication codes

A method of securing electronic control units (ECUs) using message authentication codes includes receiving a message authentication code (MAC) at an ECU; determining that the length of the MAC is greater than or equal to a predefined bit value; authenticating the MAC when the length of the MAC has been determined to be equal to or greater than the predefined bit value; and rejecting the MAC when the length of the MAC has been determined to be less than the predefined bit value.

Growing community of inventors

Plymouth, MI, United States of America

David M Nairn