Abstract: Systems and methods relate to pairing a first electronic control unit (ECU) to a second ECU. First identification data of the first ECU is transmitted to the second ECU. Second identification data of the second ECU is received from the second ECU. After a request to pair, the first ECU receives session data from a server. The session data includes a session identifier (ID) to identify the pairing, a master session key (MSK), a first token, and security information of the second ECU. The first ECU derives session keys based on the MSK. The session ID and the first token's encryption first token are transmitted to the second ECU. The first ECU receives and decrypts encryption of a second token from the second ECU. Secure communication is established between the first ECU and the second ECU via the session keys after the first ECU validates the second token.

Abstract: A computer-implemented system and method relate to establishing a secure pairing between a first electronic control unit (ECU), which is identifiable by a first identifier, and a second ECU, which is identifiable by a second identifier. A first pairing request is received from the first ECU to pair with the second ECU. The first pairing request includes the second identifier. Session data is generated. The session data includes at least a session identifier and a master session key. A first message is transmitted to the first ECU. The first message includes the session identifier and the master session key. A second pairing request is received from the second ECU to pair with the first ECU. The second pairing request includes the session identifier and the first identifier. A second message is transmitted to the second ECU. The second message includes at least the master session key.