Abstract: A system and method for securely providing a mobile device with a cryptographic key in a vehicle. The method includes generating a cryptographic key pair that includes a first and second cryptographic keys. One of the keys is used to create a scannable image which is then incorporated into a label that is displayed in the vehicle, either as a physical label mounted in the vehicle or via a display screen within the vehicle. The label containing the scannable image can then be read by a mobile device at the vehicle, thereby providing the one key to the mobile device for use in sending communications to the vehicle.

Abstract: A mobile vehicle communications system and a method of sending one or more secure short message service (SMS) messages using that system. The method includes the steps of: (a) determining at a sender a data quantity associated with zero or more proprietary data parcels (PDPs) to send within one or more SMS messages; (b) configuring an encrypted payload of each of the one or more configured SMS messages to carry the total number of PDPs, wherein when the size of the payload would result in an SMS message exceeding 140 bytes, the configuring step includes configuring a plurality of SMS messages to carry the payload; and (c) transmitting from the mobile originated device one or more configured SMS messages.

Abstract: A system and method for securely providing a mobile device with a cryptographic key in a vehicle. The method includes generating a cryptographic key pair that includes a first and second cryptographic keys. One of the keys is used to create a scannable image which is then incorporated into a label that is displayed in the vehicle, either as a physical label mounted in the vehicle or via a display screen within the vehicle. The label containing the scannable image can then be read by a mobile device at the vehicle, thereby providing the one key to the mobile device for use in sending communications to the vehicle.

Abstract: Methods and systems for unauthorized base station detection are disclosed herein. In an example of the method, an in-vehicle controller of a vehicle or an application of a mobile communications device scans a cellular radio environment to identify an available base station. By a signal detection unit in operative communication with the in-vehicle controller or the application, a strength of a signal of the available base station is detected. The in-vehicle controller or the application recognizes that the signal strength is out of the expected signal strength range, and determines that the available base station is the unauthorized base station. While in connection with the unauthorized base station, the in-vehicle controller or the application determines a location of the unauthorized base station. Other examples of the method are also disclosed herein.

Abstract: A method and system for establishing secure short range wireless communication between devices in a vehicle. The method involves obtaining a vehicle identifier associated with the vehicle and a module identifier associated with a vehicle module. Then, the method determines a secure pin number for the vehicle module and a similar pin for a vehicle telematics unit. Once the secure pin number is determined at both devices then the devices can communicate via short range wireless communication in a secure manner using the secure pin number.

Abstract: A system and a method implementing the method pertaining to securely providing a mobile device with a cryptographic key in a vehicle. The method includes generating a cryptographic key pair. The key pair may include at least a first cryptographic key and a second cryptographic key. The method may further include creating a label using a scannable image readable by a mobile device; the scannable image may be based on the second cryptographic key. And the method may include providing the label to the vehicle for displaying the scannable image.

Abstract: A system and a method using that system is provided for establishing a secure communication channel between a vehicle and a mobile device. The method may include providing at least one unique mobile device identifier and at least one unique vehicle telematics unit identifier associated with the mobile device identifier to a call center. At least one of the two identifiers may be provided to a wireless service provider. Two private keys may be generated—a first private key based on the at least one unique mobile identifier and a second private key based on the at least one unique vehicle telematics unit identifier. The first private key may be provided to the mobile device within a first cryptographic envelope signed with a first cryptographic key. And the second private key may be provided to the vehicle telematics unit within a second cryptographic envelope signed with a second cryptographic key.

Abstract: A method and system for utilizing a telematics unit on a telematics-equipped vehicle as a register for ECU Critical Information (ECI) associated with the ECUs in the vehicle, which may include their serial numbers, configurations, software images, and other data includes the telematics unit querying ECUs within the telematics-equipped vehicle such as, for example, when the vehicle is started. The ECUs may then provide the telematics unit with the ECI associated with each ECU. The ECI may be encrypted, and the telematics unit may provide each module that it queries with a nonce used in the encryption process. The telematics unit may then decrypt the ECI received from each of the ECUs and compare the received ECI to previously stored ECI. If the received ECI is different from the previously stored ECI, the telematics unit may send the new ECI to a TSP call center.

Abstract: A system is provided that includes a wireless communication device (or end device), a vehicle having a central module, and a key provisioning server. The key provisioning server is communicatively coupled to the wireless communication device and the central module via wireless connections. The central module can establish a wireless connection with the wireless communication device to initiate a current communication session. When the wireless connection is established with the central module, the wireless communication device communicates a request message to request temporary security information (e.g., public key and/or a digital certificate). The key provisioning server can then provide, in response to the request message, the temporary security information to the wireless communication device and/or the central module. The temporary security information can then be used to encrypt communications between the wireless communication device and the central module.

Abstract: A system and method of securely communicating information between a vehicle and a central facility includes receiving at a vehicle diagnostic tool a challenge query from the vehicle; establishing a wireless connection between the vehicle diagnostic tool and a central facility; transmitting the challenge query from the vehicle diagnostic tool to the central facility via the wireless connection; receiving at the vehicle diagnostic tool a response to the challenge query via the wireless connection; and accessing one or more vehicle modules on the vehicle using the received response to the challenge query.

Abstract: A mobile vehicle communications system and a method of sending one or more secure short message service (SMS) messages using that system. The method includes the steps of: (a) determining at a sender a data quantity associated with zero or more proprietary data parcels (PDPs) to send within one or more SMS messages; (b) configuring an encrypted payload of each of the one or more configured SMS messages to carry the total number of PDPs, wherein when the size of the payload would result in an SMS message exceeding 140 bytes, the configuring step includes configuring a plurality of SMS messages to carry the payload; and (c) transmitting from the mobile originated device one or more configured SMS messages.

Abstract: A system and method of securely communicating information between a vehicle and a central facility includes receiving at a vehicle diagnostic tool a challenge query from the vehicle; establishing a wireless connection between the vehicle diagnostic tool and a central facility; transmitting the challenge query from the vehicle diagnostic tool to the central facility via the wireless connection; receiving at the vehicle diagnostic tool a response to the challenge query via the wireless connection; and accessing one or more vehicle modules on the vehicle using the received response to the challenge query.

Abstract: A system and method for communicating between a vehicle having a vehicle telematics unit and a central facility includes establishing a virtual private network (VPN) connection between a vehicle and a central facility; constructing a data message for communication between the vehicle and the central facility using the VPN; transmitting the data message via the VPN using an unreliable transmission protocol; and determining if the transmitted data message arrived at its destination.

Abstract: A method, system, and computer readable medium containing programming for handling fully authenticated transmission of video or other data (content) from a provider to a recipient device via an intermediary device. An inner envelope containing the content and/or security features is prepared and digitally signed using a private cryptographic key. The signed inner envelope is then included in a second, outer envelope which may also include some or all of the content. The outer envelope is also digitally signed, thereby forming a data package which may be sent from the provider to the intermediary device. If the signature of the outer envelope is authenticated at the intermediary device, then the inner envelope is sent to the recipient device which then uses the inner signature to verify its authenticity. Authenticated content may then be presented or otherwise used at the recipient device.

Abstract: A method of communicating between a vehicle and a telematics subscription service includes wirelessly linking a vehicle telematics unit to a session initiation protocol (SIP) proxy server; placing a telephone call from the vehicle telematics unit that is received by the SIP proxy server via the wireless link; establishing a SIP connection between the vehicle telematics unit and a telematics subscription service using the SIP proxy server in response to the placed telephone call; and communicating packetized data between the vehicle telematics unit and the telematics subscription service via the SIP connection.

Abstract: A method and system for utilizing a telematics unit on a telematics-equipped vehicle as a register for ECU Critical Information (ECI) associated with the ECUs in the vehicle, which may include their serial numbers, configurations, software images, and other data includes the telematics unit querying ECUs within the telematics-equipped vehicle such as, for example, when the vehicle is started. The ECUs may then provide the telematics unit with the ECI associated with each ECU. The ECI may be encrypted, and the telematics unit may provide each module that it queries with a nonce used in the encryption process. The telematics unit may then decrypt the ECI received from each of the ECUs and compare the received ECI to previously stored ECI. If the received ECI is different from the previously stored ECI, the telematics unit may send the new ECI to a TSP call center.

Abstract: A method for programming a vehicle module via a secure programming system. The method carried out by the system involves generating a credentials media containing one or more secure credentials. Then, a credentials programmer programs one or more vehicle modules using the credentials media. During each stage of the vehicle module programming, the programming status is securely updated in the credential media. In case of a programming failure, the credentials media is used in a secondary credentials programmer to program the vehicle modules.

Abstract: A system and a method implementing the method pertaining to securely providing a mobile device with a cryptographic key in a vehicle. The method includes generating a cryptographic key pair. The key pair may include at least a first cryptographic key and a second cryptographic key. The method may further include creating a label using a scannable image readable by a mobile device; the scannable image may be based on the second cryptographic key. And the method may include providing the label to the vehicle for displaying the scannable image.

Abstract: A system and a method using that system is provided for establishing a secure communication channel between a vehicle and a mobile device. The method may include providing at least one unique mobile device identifier and at least one unique vehicle telematics unit identifier associated with the mobile device identifier to a call center. At least one of the two identifiers may be provided to a wireless service provider. Two private keys may be generated—a first private key based on the at least one unique mobile identifier and a second private key based on the at least one unique vehicle telematics unit identifier. The first private key may be provided to the mobile device within a first cryptographic envelope signed with a first cryptographic key. And the second private key may be provided to the vehicle telematics unit within a second cryptographic envelope signed with a second cryptographic key.

Abstract: Methods and systems for unauthorized base station detection are disclosed herein. In an example of the method, an in-vehicle controller of a vehicle or an application of a mobile communications device scans a cellular radio environment to identify an available base station. By a signal detection unit in operative communication with the in-vehicle controller or the application, a strength of a signal of the available base station is detected. The in-vehicle controller or the application recognizes that the signal strength is out of the expected signal strength range, and determines that the available base station is the unauthorized base station. While in connection with the unauthorized base station, the in-vehicle controller or the application determines a location of the unauthorized base station. Other examples of the method are also disclosed herein.