Abstract: Communications between computing devices connected via a network can be secured with digital keys (e.g., encryption keys). The key may be updated based on states of a state machine. The computing device may receive a key update command to update a key value. In response to the key update command, the computing device may update the key value upon determining that the computing device is in a first state based on state data defining the first state, the state data including the key value, a machine mode specifying a current operating environment, and a lock value specifying that memory storing the key value is one of locked or unlocked.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving, by a vehicle, a request for a temporary valet passcode. The example method may also include determining, that a passive entry passive start (PEPS) key fob is not present inside the vehicle. The example method may also include presenting a request for a second passcode. The example method may also include determining that the second passcode has been input. The example method may also include determining that the second passcode matches a pre-established passcode that is stored in memory of the vehicle. The example method may also include generating, using an enhanced valet mode, a first temporary valet passcode based on the determination that the second passcode matches a pre-established passcode that is stored in the memory.

Abstract: A computer includes a processor and a memory, and the memory stores instructions executable by the processor to nondeterministically select a message from a plurality of messages, the messages including respective message authentication codes; set a current trust status by verifying the message authentication code from the selected message; and forward the selected message to a recipient in response to a previous trust status being trusted.

Abstract: A computer includes a processor and a memory, and the memory stores instructions executable by the processor to nondeterministically select a message from a plurality of messages, the messages including respective message authentication codes; set a current trust status by verifying the message authentication code from the selected message; and forward the selected message to a recipient in response to a previous trust status being trusted.

Abstract: Communications between computing devices connected via a network can be secured with digital keys (e.g., encryption keys). The key may be updated based on states of a state machine. The computing device may receive a key update command to update a key value. In response to the key update command, the computing device may update the key value upon determining that the computing device is in a first state based on state data defining the first state, the state data including the key value, a machine mode specifying a current operating environment, and a lock value specifying that memory storing the key value is one of locked or unlocked.

Abstract: A vehicle system includes a first control module, a plurality of second control modules, and a vehicle network. The vehicle network communicatively couples the first control module and the second control modules. The first control module is programmed to generate an update command including a plurality of authentication keys and transmit the update command over the vehicle network. The update command is functionally addressed to be receivable by the second control modules. Each second control module is programmed to receive a configuration file; in response to receiving the update command, identify the authentication keys in the update command that are associated with that second control module based on the configuration file; and update with the identified authentication keys.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving a request to enter a valet mode of the vehicle. The example method may also include enabling the valet mode of the vehicle. The example method may also include disabling, based on the valet mode of the vehicle being enabled, a secure idle mode of the vehicle, wherein the secure idle mode of the vehicle includes locking a gear shifter of the vehicle in a park position when an occupant of the vehicle is outside of a cabin of the vehicle.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving a request to enter a valet mode of the vehicle. The example method may also include enabling the valet mode of the vehicle. The example method may also include disabling, based on the valet mode of the vehicle being enabled, a secure idle mode of the vehicle, wherein the secure idle mode of the vehicle includes locking a gear shifter of the vehicle in a park position when an occupant of the vehicle is outside of a cabin of the vehicle.

Abstract: A vehicle system includes a first control module, a plurality of second control modules, and a vehicle network. The vehicle network communicatively couples the first control module and the second control modules. The first control module is programmed to generate an update command including a plurality of authentication keys and transmit the update command over the vehicle network. The update command is functionally addressed to be receivable by the second control modules. Each second control module is programmed to receive a configuration file; in response to receiving the update command, identify the authentication keys in the update command that are associated with that second control module based on the configuration file; and update with the identified authentication keys.

Abstract: A vehicle system includes a first control module. The first control module is programmed to generate an update command including a plurality of authentication keys and a mapping associating the authentication keys with a plurality of second control modules transmit the update command over a vehicle network. The update command is functionally addressed to be receivable by the second control modules.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving a request for a temporary valet passcode. The example method may also include generating a temporary valet passcode. The example method may also include displaying a request for entry of the temporary valet passcode. The example method may also include determining that an input has been received. The example method may also include determining that a mobile device is located within the vehicle or within a threshold distance from the vehicle. The example method may also include preventing the vehicle from starting based on authorization of the mobile device for a period of time subsequent to the input being received.

Abstract: The present disclosure is directed to an automotive computer in communication with a mobile device using an authentication manager to increase and/or reduce user privileges that determine a level of vehicle control or feature access that is granted to the user. The authentication manager may increase or decrease the user privilege to standard rider status until the authentication manager has confirmed elevated status for that user via a cloud security challenge question or via a local identification method such as using the mobile device authentication features. This process may be additionally triggered based on environmental or context-based use cases, such as a high traffic condition, local cyber-attack, or transportation of sensitive goods. The system may utilize the authentication to perform out of band pairing of the mobile device and the vehicle, which may add additional security.

Abstract: The present disclosure is directed to an automotive computer in communication with a mobile device using an authentication manager to increase and/or reduce user privileges that determine a level of vehicle control or feature access that is granted to the user. The authentication manager may increase or decrease the user privilege to standard rider status until the authentication manager has confirmed elevated status for that user via a cloud security challenge question or via a local identification method such as using the mobile device authentication features. This process may be additionally triggered based on environmental or context-based use cases, such as a high traffic condition, local cyber-attack, or transportation of sensitive goods. The system may utilize the authentication to perform out of band pairing of the mobile device and the vehicle, which may add additional security.

Abstract: A secured device has a secure storage area and is configured to communicate with an authentication manager of a key server. A salt and a key identifier of a key are received to the secured device from the key server. Information corresponding to the key identifier is embedded into the salt to create a combined identifier-salt value. The combined identifier-salt value is stored in the secure storage area. The combined identifier-salt value is utilized as additional input to a hash function along with a password. The key is identified using the information corresponding to the key identifier embedded into the salt.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving a request to enter a valet mode of the vehicle. The example method may also include enabling the valet mode of the vehicle. The example method may also include disabling, based on the valet mode of the vehicle being enabled, a secure idle mode of the vehicle, wherein the secure idle mode of the vehicle includes locking a gear shifter of the vehicle in a park position when an occupant of the vehicle is outside of a cabin of the vehicle.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving, by a vehicle, a request for a temporary valet passcode. The example method may also include determining, that a passive entry passive start (PEPS) key fob is not present inside the vehicle. The example method may also include presenting a request for a second passcode. The example method may also include determining that the second passcode has been input. The example method may also include determining that the second passcode matches a pre-established passcode that is stored in memory of the vehicle. The example method may also include generating, using an enhanced valet mode, a first temporary valet passcode based on the determination that the second passcode matches a pre-established passcode that is stored in the memory.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving a request for a temporary valet passcode. The example method may also include generating a temporary valet passcode. The example method may also include displaying a request for entry of the temporary valet passcode. The example method may also include determining that an input has been received. The example method may also include determining that a mobile device is located within the vehicle or within a threshold distance from the vehicle. The example method may also include preventing the vehicle from starting based on authorization of the mobile device for a period of time subsequent to the input being received.

Abstract: A secured device has a secure storage area and is configured to communicate with an authentication manager of a key server. A salt and a key identifier of a key are received to the secured device from the key server. Information corresponding to the key identifier is embedded into the salt to create a combined identifier-salt value. The combined identifier-salt value is stored in the secure storage area. The combined identifier-salt value is utilized as additional input to a hash function along with a password. The key is identified using the information corresponding to the key identifier embedded into the salt.

Abstract: Exemplary embodiments described in this disclosure are generally directed to systems and methods for securely creating passwords for performing various keyless operations upon a vehicle. In an exemplary method, a computer receives a request for creating a password for a phone-as-a-key (PaaK) device. The computer determines that the PaaK device is present inside the vehicle and that the vehicle engine has been placed in an accessory state or a run state by an authorized PaaK device located in the vehicle. The computer further determines that a passive entry passive start (PEPS) key fob is present inside the vehicle. A prompt is provided for entry of a password. The computer checks to determine if an entered password has been already assigned to another PaaK device. If unassigned, the computer links the password to the PaaK device and authorizes the entered password as a valid keyless starting password for the vehicle.

Abstract: A validity of a user input is determined by determining the user input (a) matches an identifier string and is valid or (b) does not match the identifier string and is invalid. Access to a vehicle is authorized based on the user input being valid. A number of invalid attempts are determined based on the user input being invalid. Based on the number of invalid attempts being less than a lockout number, a risk level of the user input is evaluated to adjust the lockout number. Then, upon determining the validity of a secondary user input, (a) access to the vehicle is authorized based on the secondary user input being valid or (b) a lockout of the vehicle is activated based on the secondary user input being invalid and the number of invalid attempts equaling the adjusted lockout number.