Abstract: A method is disclosed; the method may comprise: receiving, at each of a plurality of network computers, a security message from a gateway computer, wherein the security message identifies a current mode of the vehicle, wherein the current mode is indicative of a vehicle state; storing the current mode; receiving a data message; and based on the current mode, determining whether to accept the data message.

Abstract: A system includes a first computer including a processor programmed to receive, from a remote device, a first digital document including a digital signature from a server and specifying access to one or more vehicle systems for a user. The processor is further programmed to receive, from the server, a second digital document authorizing the specified access to the one or more vehicle systems; and provide, to the remote device, the specified access to the one or more vehicle systems based on the first digital document and second digital document.

Abstract: An onboard communication network of a vehicle is monitored to detect a request message that includes a first cipher based message authentication code (CMAC) and a request. A challenge message is determined based on the request message. The challenge message includes a counter and a random number output from a random number generator. A second CMAC is generated based on the challenge message and the request. The request message is authenticated based on determining that the second CMAC matches the first CMAC. The vehicle is operated based on the authenticated request message.

Abstract: The present disclosure relates to a system that allows engagement of an electronic plug-in device (EPID) with an on-board diagnostic II (OBD-II) port of a vehicle. The EPID includes an accelerometer and a processor. The accelerometer detects vibrations associated with engine operation. The processor, in communication with the accelerometer, executes instructions to receive an input waveform from the accelerometer. The processor may determine whether the input waveform from the accelerometer is associated with the engine operation. The processor may transition the EPID from a sleep state to a wake state if the input waveform is detected to be associated with the engine operation. In contrast, the processor may transition the EPID from the wake state to the sleep state when the input waveform is not associated with the engine operation.

Abstract: A Phone-as-a-Key (PaaK) system includes a pre-processor, a secure processor disposed in communication with the pre-processor, a cache memory associated with the pre-processor and the secure processor, and a memory for storing executable instructions. The pre-processor and the secured processor are configured to perform steps that can mitigate delay caused by mobile device authentication. For example, the pre-processor authenticates an authentication message associated with a mobile device used as a key for the vehicle, and stores the message in the cache memory. The pre-processor receives a door latch actuation signal, and initializes the secure processor in response. The pre-processor then provides access to the vehicle based on the secure processor initialization instruction, and the authentication message stored in the cache memory.

Abstract: A Phone-as-a-Key (PaaK) system includes a pre-processor, a secure processor disposed in communication with the pre-processor, a cache memory associated with the pre-processor and the secure processor, and a memory for storing executable instructions. The pre-processor and the secured processor are configured to perform steps that can mitigate delay caused by mobile device authentication. For example, the pre-processor authenticates an authentication message associated with a mobile device used as a key for the vehicle, and stores the message in the cache memory. The pre-processor receives a door latch actuation signal, and initializes the secure processor in response. The pre-processor then provides access to the vehicle based on the secure processor initialization instruction, and the authentication message stored in the cache memory.

Abstract: A method is disclosed; the method may comprise: receiving, at each of a plurality of network computers, a security message from a gateway computer, wherein the security message identifies a current mode of the vehicle, wherein the current mode is indicative of a vehicle state; storing the current mode; receiving a data message; and based on the current mode, determining whether to accept the data message.

Abstract: A system includes a first computer including a processor programmed to receive, from a remote device, a first digital document including a digital signature from a server and specifying access to one or more vehicle systems for a user. The processor is further programmed to receive, from the server, a second digital document authorizing the specified access to the one or more vehicle systems; and provide, to the remote device, the specified access to the one or more vehicle systems based on the first digital document and second digital document.