Gm Global Technolgoy Operations, Inc.

Kenneth L Peirce

Ki Hak Yi

Sethu K Madhavan

Andrew J MacDonald

Ansaf Ibrahem Alrabady

David R Petrucci

Charles A Massoll

Mark Wisnewski

David J Trzcinski

Nathan C Callaghan

Thiep T Nguyen

Thomas M Forest

Robert A Hrabak

Curtis L Hay

Amanda Kalhous

David M George

Neeraj Roy Gautama

Kobi Jacob Scheim

Dipankar Pal

David P Pop

Joseph E Ploucha

Elizabeth Chesnutt

James J Piwowarski

Alfred C Tom

Uma Arun

Shaun S Marshall

Yao Hui Lei

Richard F Heines

Russ M Eling

Ervin Hoxha

A system and method for securely providing a mobile device with a cryptographic key in a vehicle. The method includes generating a cryptographic key pair that includes a first and second cryptographic keys. One of the keys is used to create a scannable image which is then incorporated into a label that is displayed in the vehicle, either as a physical label mounted in the vehicle or via a display screen within the vehicle. The label containing the scannable image can then be read by a mobile device at the vehicle, thereby providing the one key to the mobile device for use in sending communications to the vehicle.

Connection key distribution

A mobile vehicle communications system and a method of sending one or more secure short message service (SMS) messages using that system. The method includes the steps of: (a) determining at a sender a data quantity associated with zero or more proprietary data parcels (PDPs) to send within one or more SMS messages; (b) configuring an encrypted payload of each of the one or more configured SMS messages to carry the total number of PDPs, wherein when the size of the payload would result in an SMS message exceeding 140 bytes, the configuring step includes configuring a plurality of SMS messages to carry the payload; and (c) transmitting from the mobile originated device one or more configured SMS messages.

Secure SMS messaging

Methods and systems for unauthorized base station detection are disclosed herein. In an example of the method, an in-vehicle controller of a vehicle or an application of a mobile communications device scans a cellular radio environment to identify an available base station. By a signal detection unit in operative communication with the in-vehicle controller or the application, a strength of a signal of the available base station is detected. The in-vehicle controller or the application recognizes that the signal strength is out of the expected signal strength range, and determines that the available base station is the unauthorized base station. While in connection with the unauthorized base station, the in-vehicle controller or the application determines a location of the unauthorized base station. Other examples of the method are also disclosed herein.

Methods and systems for base station detection

A method and system for establishing secure short range wireless communication between devices in a vehicle. The method involves obtaining a vehicle identifier associated with the vehicle and a module identifier associated with a vehicle module. Then, the method determines a secure pin number for the vehicle module and a similar pin for a vehicle telematics unit. Once the secure pin number is determined at both devices then the devices can communicate via short range wireless communication in a secure manner using the secure pin number.

Method of establishing communication between devices in a vehicle

A system and a method implementing the method pertaining to securely providing a mobile device with a cryptographic key in a vehicle. The method includes generating a cryptographic key pair. The key pair may include at least a first cryptographic key and a second cryptographic key. The method may further include creating a label using a scannable image readable by a mobile device; the scannable image may be based on the second cryptographic key. And the method may include providing the label to the vehicle for displaying the scannable image.

A system and a method using that system is provided for establishing a secure communication channel between a vehicle and a mobile device. The method may include providing at least one unique mobile device identifier and at least one unique vehicle telematics unit identifier associated with the mobile device identifier to a call center. At least one of the two identifiers may be provided to a wireless service provider. Two private keys may be generated&#x2014;a first private key based on the at least one unique mobile identifier and a second private key based on the at least one unique vehicle telematics unit identifier. The first private key may be provided to the mobile device within a first cryptographic envelope signed with a first cryptographic key. And the second private key may be provided to the vehicle telematics unit within a second cryptographic envelope signed with a second cryptographic key.

Securing a command path between a vehicle and personal wireless device

A method and system for utilizing a telematics unit on a telematics-equipped vehicle as a register for ECU Critical Information (ECI) associated with the ECUs in the vehicle, which may include their serial numbers, configurations, software images, and other data includes the telematics unit querying ECUs within the telematics-equipped vehicle such as, for example, when the vehicle is started. The ECUs may then provide the telematics unit with the ECI associated with each ECU. The ECI may be encrypted, and the telematics unit may provide each module that it queries with a nonce used in the encryption process. The telematics unit may then decrypt the ECI received from each of the ECUs and compare the received ECI to previously stored ECI. If the received ECI is different from the previously stored ECI, the telematics unit may send the new ECI to a TSP call center. Both the telematics unit and the call center may replace the previously stored ECI with the new ECI and may maintain records of previously stored ECI and updates to the ECI.

Vehicle component identification and configuration registry reporting system

A system is provided that includes a wireless communication device (or end device), a vehicle having a central module, and a key provisioning server. The key provisioning server is communicatively coupled to the wireless communication device and the central module via wireless connections. The central module can establish a wireless connection with the wireless communication device to initiate a current communication session. When the wireless connection is established with the central module, the wireless communication device communicates a request message to request temporary security information (e.g., public key and/or a digital certificate). The key provisioning server can then provide, in response to the request message, the temporary security information to the wireless communication device and/or the central module. The temporary security information can then be used to encrypt communications between the wireless communication device and the central module.

Method and system for secure and authorized communication between a vehicle and wireless communication devices or key fobs

A system and method of securely communicating information between a vehicle and a central facility includes receiving at a vehicle diagnostic tool a challenge query from the vehicle; establishing a wireless connection between the vehicle diagnostic tool and a central facility; transmitting the challenge query from the vehicle diagnostic tool to the central facility via the wireless connection; receiving at the vehicle diagnostic tool a response to the challenge query via the wireless connection; and accessing one or more vehicle modules on the vehicle using the received response to the challenge query.

Securing vehicle service tool data communications

A system and method for communicating between a vehicle having a vehicle telematics unit and a central facility includes establishing a virtual private network (VPN) connection between a vehicle and a central facility; constructing a data message for communication between the vehicle and the central facility using the VPN; transmitting the data message via the VPN using an unreliable transmission protocol; and determining if the transmitted data message arrived at its destination.

Method of communicating with a vehicle having a telematics unit

A method, system, and computer readable medium containing programming for handling fully authenticated transmission of video or other data (content) from a provider to a recipient device via an intermediary device. An inner envelope containing the content and/or security features is prepared and digitally signed using a private cryptographic key. The signed inner envelope is then included in a second, outer envelope which may also include some or all of the content. The outer envelope is also digitally signed, thereby forming a data package which may be sent from the provider to the intermediary device. If the signature of the outer envelope is authenticated at the intermediary device, then the inner envelope is sent to the recipient device which then uses the inner signature to verify its authenticity. Authenticated content may then be presented or otherwise used at the recipient device.

Fully authenticated content transmission from a provider to a recipient device via an intermediary device

A method of communicating between a vehicle and a telematics subscription service includes wirelessly linking a vehicle telematics unit to a session initiation protocol (SIP) proxy server; placing a telephone call from the vehicle telematics unit that is received by the SIP proxy server via the wireless link; establishing a SIP connection between the vehicle telematics unit and a telematics subscription service using the SIP proxy server in response to the placed telephone call; and communicating packetized data between the vehicle telematics unit and the telematics subscription service via the SIP connection.

Method of communicating between a vehicle and a telematics subscription service

A method for programming a vehicle module via a secure programming system. The method carried out by the system involves generating a credentials media containing one or more secure credentials. Then, a credentials programmer programs one or more vehicle modules using the credentials media. During each stage of the vehicle module programming, the programming status is securely updated in the credential media. In case of a programming failure, the credentials media is used in a secondary credentials programmer to program the vehicle modules.

Secure programming of vehicle modules

A message filtering system for a communications system in a vehicle enabling communication between various systems and subsystems via a vehicle bus. Electronic devices may be coupled to the bus. Electronic control units (ECUs) may be located therebetween. The ECU may regulate or control the flow of messages between the bus and the electronic devices. Message filters may apply a filter policy to incoming and outgoing messages. In addition, the message filtering system may have an alert policy for violations of the filter policy. In one embodiment, the source identity of outgoing messages may be overwritten by a message filter dedicated to outgoing messages; this message filter may be an application specific integrated circuit.

Vehicle message filter

A system and method for producing cryptographic keys for use by an embedded processing device within a manufactured product. A pseudo random number generator is seeded with entropy data gathered by the embedded device, and the result is used to generate a public-private key pair. The process can be carried out during manufacturing so that the public key of each manufactured product can be stored in a database along with a unique identifier for the embedded device associated with the key. In one particular example, a vehicle having an installed telematics unit uses the key generating process to self-generate keys using entropy data available to the vehicle.

Growing community of inventors

Grosse Pointe Farms, MI, United States of America

Kenneth L Peirce