Patent Grant
7742603
A vehicle-to-vehicle and vehicle-to-infrastructure wireless communication system creates a large number of potential uses that include crash avoidance, communications, law enforcement, and entertainment. One such system is the Dedicated Short Range Communications (DSRC). This system can include a common message set, broadcast by each vehicle, that is comprised of relevant kinematical and location information including GPS/vehicle position, velocity, vehicular dimensions, as well as other relevant vehicle information.
For a typical crash avoidance system, a vehicle would analyze any received information, determine if a crash was imminent, send a confirmation message to the other vehicle, and exchange information with vehicle sub-systems to mitigate vehicle/occupant damage/injury before crashing. For example, once the accident seems likely, the vehicle sub-systems such as airbags and seatbelts can be instructed to prepare for a crash.
The present invention encompasses a vehicle communication system for anonymous transmission of encrypted data. The method provides anonymous broadcast message security between a wireless terminal and a base station. In one embodiment, the terminal is located in a vehicle and the base station is a roadway infrastructure base station. The method comprises storing only a first portion of a common private key in the terminal. The common private key is made up of at least two portions. The remaining portion of the common private key is not stored in the terminal. The remaining portion is generated at power-up of the terminal in response to a configuration of the terminal. In the embodiment where the terminal is in a vehicle, the configuration of the vehicle is used to generate the remaining portion of the common private key.
Further embodiments of the invention include methods and apparatus of varying scope.
In the following detailed description of the invention, reference is made to the accompanying drawings that form a part hereof and in which is shown, by way of illustration, specific embodiments in which the invention may be practiced. In the drawings, like numerals describe substantially similar components throughout the several views. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. Other embodiments may be utilized and structural, logical, and electrical changes may be made without departing from the scope of the present invention. The following detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present invention is defined only by the appended claims and equivalents thereof.
The vehicles 100, 101 are each capable of transmitting and receiving data messages. The data messages may be comprised of vehicle velocity and vehicle location as well as other necessary information. As described subsequently, the data messages are sent in an encrypted format to prevent monitoring of the information and/to protect the user/infrastructure from attacks from hackers.
The vehicles 100, 101 are also in communication with the roadway infrastructure 102. The infrastructure 102 is comprised of a large quantity of low power transmitters/receivers to communicate wirelessly with the vehicles 100, 101 as they travel along roads.
The system controller 200 is coupled to system memory 201. The memory block 201 of
The vehicular system is further comprised of the system components such as the relatively low power radio 203 and antenna 204 that are used to communicate with other vehicles or the roadway infrastructure. In one embodiment, this transceiver 203 communicates within a range measured in tens of feet since higher power systems might cause conflicts with other data traffic in other parts of the system.
A global positioning satellite (GPS) receiver 206 is used to determine the vehicles position in relation to three or more GPS satellites. This position information can then be transmitted to the system controller 200 for storage or use in generating data messages for transmission. The present invention is not limited to just GPS navigation. Alternate embodiments can use alternate satellite navigation systems, an internal vehicular inertial navigation system, or some type of ground-based navigation system.
An engine controller 208 is used to control operation of the engine. The engine controller 208 may be responsible for controlling engine timing/performance in response to received parameters such as throttle position, exhaust gas composition, stored performance data in memory, or other types of parameters.
The brake system 210 is comprised of the hardware/software necessary to control operation of the vehicle brakes. This system 210 can include anti-lock brakes and traction control.
The system of
The modules of
The above-described vehicular components can all be identified by the system controller 200 by an electronic serial number (ESN), or other identification, assigned to each particular system block 203, 206, 208, 210. The ESN is a unique identification, not necessary numeric, that is assigned by the component manufacturer and stored in the component in order to uniquely identify that component to a system capable of reading such an identification. These ESN identifiers are used, as described subsequently, in generating the desired encryption keys of the present invention.
The certificate is generated by the certification authority (CA) from multiple components. One component is an identification of the certification authority 301. The certification authority is the entity or organization that is responsible for generating, distributing, and revoking certificates. The identification of the CA 301 may be the CA name, a CA number, or some other unique identifier 301.
The scope of the certification 303 is data that indicates what the certificate “certifies”. In other words, the certificate's scope 303 indicates what the vehicular system is authorized to provide.
The vehicle public key 305 is also part of the certificate 300. The public key 305 is a decryption key that is issued to a plurality of public vehicles and is used to decrypt or authenticate encrypted or signed data sent to the vehicle.
The certificate signature 307 is a hash value of the other certificate components 301, 303, 305 that is encrypted using the certificate authority's private key. As is well known in the art, in public/private key cryptography, the private key is generally kept secret, while the public key may be widely distributed. One key “locks” the information while the other is required to “unlock” it. It should not be possible to deduce the private key of a pair of keys given the public key.
Also as is well known in the art, a hash value is a fixed length, electronic identifier that is generated from an encryption routine (i.e., hash function) in response to an algorithm. Two different inputs are unlikely to hash to the same hash value. Hash values are used in computing as a way to verify whether a piece of information, like a computer program or data, has been altered.
The validity of the certificate 300 can be determined by the vehicle by performing a decryption with the signature from the certificate and the certificate authority's public key. The result is then compared with the hash value from the hash algorithm 309. If they match, the certificate 309 is valid.
The certificate provides each of these vehicles with the public key that corresponds to the private key used by the vehicle sending the message. The vehicle's private key thus provides the vehicle with the ability to sign messages that will work with that particular certificate.
If the certificate is valid, it contains the valid public key for the vehicle and can be used to perform a similar validation on a received message from a vehicle or the infrastructure. The public key is used to decode, and thereby validate the message signature.
The certificate is shared by a large number of other vehicles to provide anonymity for the sending vehicle, and it provides a validatable key that can be used to authenticate a message signed by the vehicle's private key. In this way, the infrastructure system cannot immediately determine who sent the message, only that it was a valid message from a legitimate vehicle.
The vehicle's private key is generated in such a way as to attest to the validity of the vehicle configuration, and to conform to the public key contained in the certificate. In this way, the use of a private key that corresponds to the public key in the certificate attests to the validity of the vehicle terminal.
In order to attest to the legitimacy of the vehicle system configuration, the vehicle's private key is derived from an observed and certified configuration of the vehicle components. This is accomplished by generating the private key from two components: the Configuration key and the Certification key. The certification key is derived from the specifically observed and certified configuration of the vehicle system components; for example by obtaining performing an algorithm on the electronic serial numbers of the various system components. The certification key is derived by the Certificate Authority in such a way that an algorithm performed on both the certification key and the configuration key generates the private key that is contained in the certificate described above.
As described previously with reference to
The identifiers are read by a configuration key generation algorithm 410. The algorithm 410 uses this information to generate a configuration key 400 that is unique to that particular configuration of components in the vehicle. If the vehicle configuration is ever changed, such as changing one of the components or changing the binary code running the system, the configuration key 400 will also change. To this end, the configuration key 400 is erased after being used during the certification process described subsequently. This key 400 is not stored in the vehicle but is generated anew each time the vehicle is started. This provides verification that the vehicle configuration has not been altered after completion of the certification process since a component that has been exchanged with one having a different identifier will produce a different configuration key 400. As will be seen subsequently, if the configuration key is altered after the certification process, the vehicle will not be able to sign messages that can be authenticated using the public key contained in the certificate, because the private key generated from the derived configuration key and the stored certification key will not correspond to the public key in the certificate.
The certification process of the present invention is performed by the certification authority and involves generating a common private key and using that key in conjunction with the configuration key to generate a certification key. The fact that the certification key algorithmically combined with the configuration key produces a private key that corresponds to or encodes data that can be decoded by, the public key in the certificate provides certification that the vehicle configuration is the same as it was when the certification key was created, and this the vehicle represents a legitimate system.
The certification key 603 is comprised of the vehicle's configuration key 400 and the common private key 500. These keys are operated on by a certification key generation algorithm 601 to generate the certification key 603.
Alternate embodiments of the present invention can use multiple certification keys that, when combined with one or more algorithmically derived configuration keys result in a plurality of private keys corresponding to a plurality of public keys contained in a plurality of certificates to make compromising the keys more difficult for hackers or other unauthorized people desiring to access the system. For example, one system might have 1000 certification keys with 1000 sets of associated public keys.
The method is comprised of generating the message to be signed 701. If the message is coming from a vehicle, the message may be the vehicle's velocity, location, status, or some other vehicle message.
The message 701 is combined 703 with the common private key 500. Since the common private key is used by many vehicles, the signed message 705 is unrelated to the vehicle sending the message, yet it can only have been signed by a vehicle with a configuration of components that is the same as the configuration that was observed and certified when the vehicle's certification key was generated by the certification authority.
In one embodiment, only a portion of the message is encrypted. This results in faster encryption/decryption than having to encrypt/decrypt the entire message.
In one embodiment, the embodiments for the method for anonymously securing wireless broadcast messages is performed in a dedicated short range communications (DSRC) system. Such a system could involve automobiles as the vehicles. However, the present invention is not limited to transportation. Other systems requiring such anonymous security can also use the present invention. For example, between a wireless terminal and a base station, or between any system wherein the specific configuration of components is relevant to the authenticity of the signed or encrypted message.
In summary, the embodiments of the present invention provide a means for asymmetric message encryption without storing a private key in the vehicle. The private key is generated from two pieces of information: the identifying configuration of the vehicle and only an algorithmically related portion of the private key (i.e., the certification key) that was provided to the vehicle during certification. The vehicle is required to generate the configuration as the remaining algorithmically related portion of the private key every time the vehicle is started since neither the entire private key nor the configuration key is stored in the vehicle.
Although specific embodiments have been illustrated and described herein, it will be appreciated by those of ordinary skill in the art that any arrangement that is calculated to achieve the same purpose may be substituted for the specific embodiments shown. Many adaptations of the invention will be apparent to those of ordinary skill in the art. Accordingly, this application is intended to cover any adaptations or variations of the invention. It is manifestly intended that this invention be limited only by the following claims and equivalents thereof.
| Number | Name | Date | Kind |
|---|---|---|---|
| 6819245 | Dilling | Nov 2004 | B1 |
| 7486795 | Eschenauer et al. | Feb 2009 | B2 |
| 20040003234 | Reinold et al. | Jan 2004 | A1 |
| 20050147245 | Hassan et al. | Jul 2005 | A1 |
| 20060039341 | Ptasinski et al. | Feb 2006 | A1 |
| 20060173694 | Itabashi | Aug 2006 | A1 |
| 20070200671 | Kelley et al. | Aug 2007 | A1 |
| 20070206796 | Iino et al. | Sep 2007 | A1 |
| 20070264973 | Dowek et al. | Nov 2007 | A1 |
| 20080095374 | Schreyer | Apr 2008 | A1 |
| 20080232382 | Iwama et al. | Sep 2008 | A1 |
| Number | Date | Country | |
|---|---|---|---|
| 20070222555 A1 | Sep 2007 | US |
