Gm Global Technolgoy Operations, Inc.

Robert Boschgmbh

Bayerische Motoren Werke Aktiengesellschaft

Daimler Chrysler Ag

Freescale Semiconductor,inc.

Nxp B.v.

Koninklijke Philips Corporation N.V.

Motorola Corporation

Decomsys—dependable Computer Systems, Hardware Und Software Entwicklung Gmbh

Thomas M Forest

Kevin M Baltes

David T Proefke

Kerfegar Khurshed Katrak

Ansaf Ibrahem Alrabady

Mohamed A Layouni

Brian Farrell

Markus Jochim

Arnold W Millsap

David M Nairn

Peter Fuhrmann

Thomas E Utter

Christopher Temple

Martin Peller

Josef Berwanger

James K Thomas

Anton Schedl

Bernd Hedenetz

Karl B Leboeuf

Thomas Führer

Florian Hartwich

William A Biondo

Robert Hugel

Christian Ebner

Joseph E Ploucha

Florian Bogenberger

Manfred Bruno Zinke

Bernd Elend

Mathias Rausch

Bernd Müller

Harald Eisele

Ralf Belschner

Jörn Ungermann

Harald Weiler

Peter Lohrmann

Patrick Willem Heuts

Thomas Wuerz

Matthias Kühlewein

Axel Nix

Kenneth William Junk

Robert A Hrabak

Mark Henry Costin

Jarvis Chau

William E Mazzara, Jr

Nadav Lavi

Kenneth L Peirce

John Sergakis

Aaron P Creguer

Vadim Draluk

Padma Sundaram

James T Kurnik

Sandeep Menon

Ron Y Asmar

J David Rosa

David W Racklyeft

Manohar Reddy Nanjundappa

Alan D Wist

Mohammed Abdulla Yousuf

Anthony Anderson

Ronald J Gaynier

Thomas W Pfeffer

Michael L Imel

Corey Wideman

Gregor Pokorny

Marcelleaus P Baines

Carol L Daprai

Michael J Kachman

Vinaya Rayapeta

Ing Ralf Belschner

George D Nakis

Peter H G Hansson

A message authentication system for a network includes a private communication system including one or more private nodes in electronic communication with one another, a public communication system including one or more public nodes in electronic communication with one another, and a security proxy device that electronically connects the private communication system to the public communication system. The security proxy device includes a processing unit in electronic communication with a network device. The network device includes a security module integrated into the security proxy device, a private domain including one or more unique ports and storing one or more transmit keys for authenticating messages generated by one of the private nodes of the private communication system, and a public domain including one or more public ports.

Message authentication system including a network device having security proxy support

A system for establishing a wireless connection between a mobile device and a vehicle includes a human-machine interface (HMI), a vehicle communication system, where the vehicle communication system includes a wireless connection transceiver, a speaker, a microphone, a controller in electrical communication with the HMI, the vehicle communication system, the speaker, and the microphone. The controller is programmed to activate a wireless connection mode of the controller based at least in part on a signal from the microphone and transmit a vehicle wireless connection identifier using the speaker. The controller is further programmed to confirm a vehicle wireless connection passcode using at least one of the speaker and the microphone and establish a wireless connection between the mobile device and the controller using the wireless connection transceiver in response to confirming the vehicle wireless connection passcode.

Establishing a connection between a mobile device and a vehicle

A message authentication system for a network includes a private communication system including one or more private nodes in electronic communication with one another, a public communication system including one or more public nodes in electronic communication with one another, and a security proxy device that electronically connects the private communication system to the public communication system. The security proxy device includes a processing unit, a security module, and a lightweight security module that is electronic communication with the one or more private nodes of the private communication system. The lightweight security module generates message authentication codes for messages transmitted by the private communication system that are sent to the public communication system.

Message authentication system including a network device having a lightweight security module

A system comprises a computer including a processor and a memory. The memory includes instructions such that the processor is programmed to: receive, at a device driver, an Ethernet frame from an Automotive Open System Architecture (AUTOSAR) communication stack, determine, at the device driver, whether the Ethernet frame is a spoofed Ethernet frame, and transmit a cancelation command to at least one layer of the AUTOSAR communication stack when the device driver determines the Ethernet frame is spoofed.

Detecting spoofed ethernet frames within an autosar communication stack

A system includes a vehicle external to a back office portal. The back office portal is operational to generate a signed update mode record. The vehicle has multiple devices and a component. The component is in communication with the devices, and operational to receive the signed update mode record, verify that the signed update mode record is from the back office portal and was created for the component, erase credentials within the component that establish the component as valid to the plurality of devices in response to the verification of the signed update mode record, perform an irreversible action within the component, enter a software update mode, exit the software update mode, and reject each request from the plurality of devices to the component that relies on the credentials that were erased from the component.

Software update protection system

An apparatus has a communication bus, a first circuit, and a second circuit. The first circuit is operational to generate a package, calculate a check value of payload data in the package with a particular cyclic redundance check variant and an obfuscation type, store an encrypted check value in a footer of the package, store an encrypted obfuscation code in a header of the package, and transmit the package on the communication bus. The second circuit is operational to receive the package from the communication bus, decrypt the encrypted check value to determine the check value calculated by the first circuit, determine an obfuscation type from the encrypted obfuscation code, perform a payload verification of the payload data with the particular cyclic redundancy check variant with the obfuscation type applied and the check value, and signal that the payload data is valid in response to passage of the payload verification.

Data integrity checking between circuits

The present application relates to a method and apparatus for intelligent wireless protocol optimization including storing, in a memory, a first customer key and a second customer key, receiving, by a processor, a secret key, decrypting, by the processor, the secret key using a first customer key to extract a master key, provisioning, by the processor, an electronic control unit in response to the master key, and deleting, by the processor, the second customer key in response to the provisioning of electronic control unit in response to the master key.

Method and apparatus for providing an individually secure system to multiple distrusting parties

The present application relates to a method and apparatus for providing fault tolerant provisioning verification for cryptographic keys including receiving, via an interface, a first security key, a second security key, and a first verification data generated in response to the first security key and the second security key, coupling, by a processor, the first security key and the second security key to an electronic controller, receiving, by the processor, a second verification data generated by the electronic controller in response to the first security key and the second security key, and marking, by the processor, the controller as provisioned in response to the first verification data matching the second verification data.

Fault tolerant provisioning verification for cryptographic keys

Authentication methods, systems and computer readable storage medium are provided. In an embodiment, an authentication method includes obtaining from an authentication template a first template portion, including an encoding of features, and a second template portion, including an identification of a location in the first template portion that is not usable. The method further includes revising the first template portion by setting a value at the location to a selected value to form a revised first template portion. Also, the method includes creating an authentication codeword from the revised first template portion and from public recovery data. The method further includes performing an error correction process to generate a corrected authentication codeword from the authentication codeword and from the second template portion and decoding the corrected authentication codeword.

Authentication methods and systems

An impairment detection system is provided and includes an emitter, first and second beam selectors, a reference reflector, a sensor and a control module. The emitter is configured to emitter a first light signal. The first beam selector is configured to forward the first light signal to a touch probe. The reference reflector is configured to reflect the first light signal received from the first beam selector to generate a second reflected signal. The second beam selector is configured to receive (i) a first reflected signal from the touch probe based on reflection of the first light signal on an area of a person, and (ii) the second reflected signal. The sensor is configured to receive from the second beam selector the first reflected signal and the second reflected signal. The control module is configured to determine an impairment level of the person based on an output of the sensor.

Optical based impairment detection systems and methods

A system and method of wireless communication between a location-based wireless communications device and a vehicle, the method including the steps of: detecting when the vehicle is within an operating range of the location-based wireless communications device; establishing a short-range wireless communication (SRWC) connection between the location-based wireless communications device and the vehicle, wherein the SRWC connection is carried out over at least a first frequency band that enables a multi-Gbps data transfer rate; and transferring data between the location-based wireless communications device and the vehicle over the SRWC connection.

Location-based vehicle wireless communications

A method of transmitting data within a vehicle includes: storing two copies of a data message; constructing at an electronic control unit (ECU) a serial bus message that includes one copy of the data message and a message authentication code (MAC) created using a secret key stored at the ECU, a MAC algorithm, and a different copy of the data message; transmitting the serial bus message to a receiving ECU over a vehicle bus; authenticating the serial bus message at the receiving ECU using a copy of the key stored at the receiving ECU by creating a copy of the MAC from the data message included in the serial bus message and the copy of the key; comparing the MAC from the serial bus message with the copy of the MAC created at the receiving ECU; and rejecting or accepting the data message based on the comparison.

Authenticating messages sent over a vehicle bus that include message authentication codes

A relay attack deterrence system includes a mobile platform including a plurality of mobile platform transmitter components and a mobile platform receiver component provided therein. The system further includes a fob device having a fob receiver component, a fob transmitter component, and a motion sensor component configured to produce motion information. The fob device is configured to receive, at the fob receiver component, one or more first signals from at least one of the plurality of mobile platform transmitter components and to selectably transmit, to the mobile platform receiver component, a second signal based on the motion information and position information derived from the one or more first signals.

Relay-attack deterrence relay-attack deterrence

Methods and systems are provided for bypassing an authenticity check for a secure control module. In one embodiment, a method includes: receiving authenticity data from a secure source, wherein the authenticity data includes a signature and an identifier that is unique to the control module; programming the control module with the authenticity data; and bypassing the authenticity check of a control program of the control module based on the authenticity data.

Methods and systems for bypassing authenticity checks for secure control modules

A method provides secure communication between a first module and a second module within a vehicle communication network. A first anti-replay counter is provided within the first module, and a second anti-replay counter is provided within the second module. A message is transmitted from the first module to the second module over the vehicle communication network. The message includes a partial counter including only a portion of the contents of the first anti-replay counter, and the message is authenticated based on the partial counter.

Methods and apparatus for secure communication in a vehicle-based data communication system

Growing community of inventors

Macomb, MI, United States of America

Thomas M Forest