Ford Global Technolgoies, LLC

Michael Raymond Westra

Chad Evert Esselink

Julius Marchwicki

Sukhwinder Wadhwa

Uwe Zank

David Chase Mitchell

Sandeep Singh Waraich

Michael J Schanerberger

Mark Schunder

Doron M Elliott

Xin Ye

Praveen Kumar Yalavarty

John Naum Vangelov

John Ellis

Aldi Caushi

Venkata Maruthe Ravikumara Sharma Chengalvala

Jeffrey Raymond Ostrowski

Simon John William Hurr

Darren Peter Shelcusky

Joseph Carl Beiser

Elizabeth Halash

Rajesh Balaji Vijayan

Tricia Tobolski

Kevin Burdette

Alan Daniel Gonzalez

John Russell Bielawski, Jr

John Correia

Satya Meenakshi Raparthi

David Ray Erkkila

Jason Bernard Johnson

Joseph Patrick Oravec

Robert Dekelbaum

Mandar Sadashiv Dalvi

Shayne Baugher

George Abraham

Edward Charles Esker

Leonie Tessa Tielert

Tahrik Alcodray

Simon John Hurr

A computer includes a processor and a memory, and the memory stores instructions executable by the processor to receive a first data block from a server remote from the computer and remote from a vehicle; while the computer is installed on board the vehicle, receive a second data block from an electronic control unit (ECU) on the vehicle; compare the first data block and the second data block; upon identifying a match between the first data block and the second data block, replace a stored odometer value on the computer with a first odometer value; and upon identifying a mismatch between the first data block and the second data block, maintain the stored odometer value on the computer. The first data block includes the first odometer value, and the second data block includes a second odometer value.

ECU replacement with odometer

A computing platform of a vehicle may receive a request, from a mobile application accessing a secure vehicle function, to create a secure tunnel between the computing platform and the mobile device; retrieve an application certificate from the mobile application; and validate the creation of the secure tunnel using the application certificate and a module certificate from a local policy table of the computing platform. A mobile device, connected to a computing platform of a vehicle may execute a mobile application requiring a secure vehicle function; send a request to create a secure tunnel with the computing platform responsive to access of by the mobile application of the secure vehicle function; and send to the computing platform an application certificate corresponding to the mobile application to validate creation of the secure tunnel.

Secure tunneling for connected application security

A system including one or more servers, programmed to responsive to receiving a token request from a vehicle to access content stored in a content cloud, validate the token request against pre-defined policies; responsive to a successful policy validation, verify token generating responsibility based on a validation result and pre-defined rules; and responsive to verifying the system has the token generating responsibility, generate a token for the token request.

Policy and token based authorization framework for connectivity

A vehicle can include methods and systems to update controls for a plurality of vehicle systems that operate using updatable controls, wherein each control is mounted in vehicle persistent memory as an image. The controls are stored in non-volatile vehicle memory that has a size less than twice a size of all of the controls loaded thereon. A core system provides access to the control images in the memory.

Vehicle control storage methods and systems

A computer-implemented method includes receiving, from a cloud server by a vehicle, a manifest indicating network locations of software updates determined according to an interrogator log generated by the vehicle; installing update binaries retrieved from the network locations to an inactive installation of a plurality of storage installations; and setting the inactive installation to be an active installation upon vehicle restart, in place of another of the storage installation currently set as the active partition.

Silent in-vehicle software updates

A computer-implemented authentication method includes receiving a request to access one or more features of a vehicle computing system (VCS) from an application running on a wireless device in communication with the VCS. The method further includes preparing a secure access rights request to a remote server including one or more characteristics associated with the application and sending the secure request from the VCS, through the wireless device to the remote server. The method additionally includes receiving a response to the request having been sent from the remote server through the wireless device. The method includes verifying the authenticity of the received response and updating a policy table including information from the received response, the information including at least an expiration trigger and access rights for the application. Also, the method includes validating the application for usage based at least on the information included in the updated policy table.

Method and apparatus for remote authentication

A vehicle may receive a software update to be installed to a vehicle electronic control unit (ECU). The vehicle ECU may download a software update received from a server to a first storage; generate a nonce value associated with the software update; send to the server, a swap authorization request including the generated nonce value; receive a swap authorization including the nonce value and a command-and-control signature from the server; validate the signature and the nonce value from the swap authorization; and reboot using the first storage instead of a second storage when the recovered nonce value matches the generated nonce value.

Multiple-stage secure vehicle software updating

In a first illustrative embodiment, a system includes a mobile device processor configured to communicate wirelessly with both a remote server and a vehicle computing system (VCS). The processor is further configured to query the VCS for a module version, relay the module version to a remote system and receive information relating to an updated module version and module. The processor is also configured to query the VCS for vehicle battery information, inform a user of battery sufficiency for a recommended installation of the updated module, and, responsive to a user instruction to proceed with installation, instruct the VCS to download and install the updated module.

Methods and apparatus for vehicle computing system software updates

In one or more embodiments, a vehicle resource usage control system includes a vehicle computer having security policies that define usage rules for one or more vehicle resources. One or more devices communicating with the vehicle computer may have installed in memory software applications that use one or more vehicle resources for operation. Programmed instructions may be received that define which of the one or more vehicle resources the software applications use for operation. These programmed instructions may be associated with the one or more security policies. The security policy associated with the software applications may be determined based on the programmed instructions. Operation of the software applications may be permitted according to the security policy.

Methods and systems for implementing and enforcing security and resource policies for a vehicle

A computer implemented method includes receiving a request for payment-related information at a wireless device. The method also includes communicating between the wireless device and a paired vehicle computing system (VCS) to verify the presence of a known vehicle. Further, the method includes transmitting requested payment-related information, responsive to the verification of the presence of the known vehicle.

Method and apparatus for identification verification and purchase validation

In one or more embodiments, two or more devices may interface with a computing system over multiple communication channels. A connection may be established between a computing system and two or more devices communicating data using different communication protocols. The communication protocol of the two or more devices may be determined and a general transport protocol for communicating data with the two or more devices based on the respective communication protocols may be imposed on the communication protocol of the two or more devices. Data may be communicated with the two or more devices based on the general transport protocol. An event may be performed at the vehicle computing system or the two or more devices based on the data.

Methods and systems for interfacing with a vehicle computing system over multiple data transport channels

A computer-implemented method includes determining that an infotainment system has been activated. The method further includes accessing a vehicle network containing at least a unique vehicle identifier. The method additionally includes comparing the unique vehicle identifier to a stored vehicle identifier. The method further includes permitting access to the infotainment system only if the unique vehicle identifier matches the stored vehicle identifier.

Method and apparatus for vehicle hardware theft prevention

Growing community of inventors

Plymouth, MI, United States of America

Michael Raymond Westra