Abstract: A vehicle system includes a first control module, a plurality of second control modules, and a vehicle network. The vehicle network communicatively couples the first control module and the second control modules. The first control module is programmed to generate an update command including a plurality of authentication keys and transmit the update command over the vehicle network. The update command is functionally addressed to be receivable by the second control modules. Each second control module is programmed to receive a configuration file; in response to receiving the update command, identify the authentication keys in the update command that are associated with that second control module based on the configuration file; and update with the identified authentication keys.

Abstract: A vehicle system includes a first control module. The first control module is programmed to generate an update command including a plurality of authentication keys and a mapping associating the authentication keys with a plurality of second control modules transmit the update command over a vehicle network. The update command is functionally addressed to be receivable by the second control modules.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving a request for a temporary valet passcode. The example method may also include generating a temporary valet passcode. The example method may also include displaying a request for entry of the temporary valet passcode. The example method may also include determining that an input has been received. The example method may also include determining that a mobile device is located within the vehicle or within a threshold distance from the vehicle. The example method may also include preventing the vehicle from starting based on authorization of the mobile device for a period of time subsequent to the input being received.

Abstract: The present disclosure is directed to an automotive computer in communication with a mobile device using an authentication manager to increase and/or reduce user privileges that determine a level of vehicle control or feature access that is granted to the user. The authentication manager may increase or decrease the user privilege to standard rider status until the authentication manager has confirmed elevated status for that user via a cloud security challenge question or via a local identification method such as using the mobile device authentication features. This process may be additionally triggered based on environmental or context-based use cases, such as a high traffic condition, local cyber-attack, or transportation of sensitive goods. The system may utilize the authentication to perform out of band pairing of the mobile device and the vehicle, which may add additional security.

Abstract: The present disclosure is directed to an automotive computer in communication with a mobile device using an authentication manager to increase and/or reduce user privileges that determine a level of vehicle control or feature access that is granted to the user. The authentication manager may increase or decrease the user privilege to standard rider status until the authentication manager has confirmed elevated status for that user via a cloud security challenge question or via a local identification method such as using the mobile device authentication features. This process may be additionally triggered based on environmental or context-based use cases, such as a high traffic condition, local cyber-attack, or transportation of sensitive goods. The system may utilize the authentication to perform out of band pairing of the mobile device and the vehicle, which may add additional security.

Abstract: A secured device has a secure storage area and is configured to communicate with an authentication manager of a key server. A salt and a key identifier of a key are received to the secured device from the key server. Information corresponding to the key identifier is embedded into the salt to create a combined identifier-salt value. The combined identifier-salt value is stored in the secure storage area. The combined identifier-salt value is utilized as additional input to a hash function along with a password. The key is identified using the information corresponding to the key identifier embedded into the salt.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving a request for a temporary valet passcode. The example method may also include generating a temporary valet passcode. The example method may also include displaying a request for entry of the temporary valet passcode. The example method may also include determining that an input has been received. The example method may also include determining that a mobile device is located within the vehicle or within a threshold distance from the vehicle. The example method may also include preventing the vehicle from starting based on authorization of the mobile device for a period of time subsequent to the input being received.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving a request to enter a valet mode of the vehicle. The example method may also include enabling the valet mode of the vehicle. The example method may also include disabling, based on the valet mode of the vehicle being enabled, a secure idle mode of the vehicle, wherein the secure idle mode of the vehicle includes locking a gear shifter of the vehicle in a park position when an occupant of the vehicle is outside of a cabin of the vehicle.

Abstract: Systems, methods, and computer-readable media are disclosed for an enhanced valet mode for vehicles. An example method may include receiving, by a vehicle, a request for a temporary valet passcode. The example method may also include determining, that a passive entry passive start (PEPS) key fob is not present inside the vehicle. The example method may also include presenting a request for a second passcode. The example method may also include determining that the second passcode has been input. The example method may also include determining that the second passcode matches a pre-established passcode that is stored in memory of the vehicle. The example method may also include generating, using an enhanced valet mode, a first temporary valet passcode based on the determination that the second passcode matches a pre-established passcode that is stored in the memory.

Abstract: A secured device has a secure storage area and is configured to communicate with an authentication manager of a key server. A salt and a key identifier of a key are received to the secured device from the key server. Information corresponding to the key identifier is embedded into the salt to create a combined identifier-salt value. The combined identifier-salt value is stored in the secure storage area. The combined identifier-salt value is utilized as additional input to a hash function along with a password. The key is identified using the information corresponding to the key identifier embedded into the salt.

Abstract: Exemplary embodiments described in this disclosure are generally directed to systems and methods for securely creating passwords for performing various keyless operations upon a vehicle. In an exemplary method, a computer receives a request for creating a password for a phone-as-a-key (PaaK) device. The computer determines that the PaaK device is present inside the vehicle and that the vehicle engine has been placed in an accessory state or a run state by an authorized PaaK device located in the vehicle. The computer further determines that a passive entry passive start (PEPS) key fob is present inside the vehicle. A prompt is provided for entry of a password. The computer checks to determine if an entered password has been already assigned to another PaaK device. If unassigned, the computer links the password to the PaaK device and authorizes the entered password as a valid keyless starting password for the vehicle.

Abstract: A validity of a user input is determined by determining the user input (a) matches an identifier string and is valid or (b) does not match the identifier string and is invalid. Access to a vehicle is authorized based on the user input being valid. A number of invalid attempts are determined based on the user input being invalid. Based on the number of invalid attempts being less than a lockout number, a risk level of the user input is evaluated to adjust the lockout number. Then, upon determining the validity of a secondary user input, (a) access to the vehicle is authorized based on the secondary user input being valid or (b) a lockout of the vehicle is activated based on the secondary user input being invalid and the number of invalid attempts equaling the adjusted lockout number.

Abstract: Exemplary embodiments described in this disclosure are generally directed to systems and methods for securely creating passwords for performing various keyless operations upon a vehicle. In an exemplary method, a computer receives a request for creating a password for a phone-as-a-key (PaaK) device. The computer determines that the PaaK device is present inside the vehicle and that the vehicle engine has been placed in an accessory state or a run state by an authorized PaaK device located in the vehicle. The computer further determines that a passive entry passive start (PEPS) key fob is present inside the vehicle. A prompt is provided for entry of a password. The computer checks to determine if an entered password has been already assigned to another PaaK device. If unassigned, the computer links the password to the PaaK device and authorizes the entered password as a valid keyless starting password for the vehicle.

Abstract: Exemplary embodiments described in this disclosure are generally directed to systems and methods for ensuring password security when starting a vehicle having a keyless engine starting system. In an exemplary method, a computer detects a depression of an engine start push button when no phone-as-a-key (PaaK) device or passive-entry-passive-start (PEPS) key fob is present in the vehicle. The computer responds by executing a verification procedure prior to password validation. The verification procedure can include operations such as determining that no PaaK device or PEPS key fob is present either inside the vehicle or within a defined geofence outside the vehicle. If the verification procedure is successful, the computer displays a prompt upon a display screen for entering of a password. The computer then uses various security measures when verifying the validity of an entered password, followed by displaying of a message indicating acceptance or rejection of the password.

Abstract: A vehicle includes: (i) a main telematics module, (ii) a connectivity module including antenna(s) and processor(s). The connectivity module is configured to: (a) authenticate a mobile device via a vehicle-access-key (VAK); (b), if (a), issue an ephemeral-session-key (DSK) to the mobile device; (c), if (b), establish an active session with the mobile device; (d) encrypt all messages to the mobile device with the VAK during (a) and with the DSK during (c). The connectivity module is configured to automatically revoke the DSK upon expiration of a predetermined time interval.

Abstract: A vehicle system includes a controller configured to receive a vehicle state signal indicative of a vehicle being in an emergency state, repeatedly transmit a request, via Bluetooth Low Energy (BLE), to a personal communication device (PCD) to contact an emergency provider in response to receiving the vehicle state signal, and stop transmitting the request to contact the emergency provider in response to receiving an acknowledgement from the PCD that the emergency provider was contacted.

Abstract: A vehicle includes: (i) a main telematics module, (ii) a connectivity module including antenna(s) and processor(s). The connectivity module is configured to: (a) authenticate a mobile device via a vehicle-access-key (VAK); (b), if (a), issue an ephemeral-session-key (DSK) to the mobile device; (c), if (b), establish an active session with the mobile device; (d) encrypt all messages to the mobile device with the VAK during (a) and with the DSK during (c). The connectivity module is configured to automatically revoke the DSK upon expiration of a predetermined time interval.

Abstract: A measuring instrument for detection of electrical properties in a liquid includes a main body configured to hold a tester, a first pole extending from the main body, and a second pole extending from the main body that is spaced apart from the first pole. The first pole carries a positive probe for attachment to the tester, and the second pole carries a negative probe for attachment to the tester. When the probes are placed in the liquid, electrical properties in the liquid are detected by the tester.

Abstract: In at least one embodiment, an apparatus for reserving and accessing a vehicle is provided. The apparatus includes a transceiver and a controller. The controller is positioned in the vehicle and is configured to receive a first signal indicative of a reservation time for a user to gain access of the vehicle from a vehicle share server. The controller is further configured to activate the transceiver at a predetermined time prior to the reservation time to monitor for the presence of a mobile device.

Abstract: In at least one embodiment, an apparatus includes a controller coupled to a first sensor positioned on a first object external to a vehicle and configured to receive first information indicative of a height of the first object from the first sensor via Bluetooth Low Energy (BLE) and store second information corresponding to a height of the vehicle. The controller is further configured to receive third information corresponding to a height of overhead obstacle positioned external to the vehicle and to compare at least one of the first information and the second information to the third information. The controller is further configured to generate an alert based on the comparison of the at least one of the first information and the second information to the third information.