# US 10,313,134 B2 · System and method for authenticating and authorizing devices

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,313,134 B2
- Document ID: US10313134B2
- Status: Granted
- Kind: B2
- Application number: 15/796,180
- Filed: 2017-10-27
- Published: 2018-05-03
- Granted: 2019-06-04
- Earliest claimed: 2016-10-27
- Assignees: Denso Corporation
- Applicants: Denso Corporation
- Inventors: Eric John Smith; Raymond Michael Stitt; David Stuckless Meyer; Brian Ensink
- Web page: https://patentgrep.com/patent/US10313134B2

## CPC

- H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- G06F 21/33: using certificates
- G06F 21/44: Program or device authentication
- G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)}
- H04L 9/3247: {involving digital signatures}
- H04L 9/3271: {using challenge-response}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)}
- H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
- H04W 12/06: Authentication
- H04W 12/069: using certificates or pre-shared keys
- H04W 12/08: Access security
- H04W 76/10: Connection setup
- B60R 25/24: using electronic identifiers containing a code not memorised by the user
- G07C 9/00309: {operated with bidirectional data transmission between data carrier and locks}
- G07C 2209/63: Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle
- H04L 2209/80: Wireless
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- B60R: VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE

## Abstract

A system and method for a distributed security model that may be used to achieve one or more of the following: authenticate system components; securely transport messages between system components; establish a secure communications channel over a constrained link; authenticate message content; authorize actions; and distribute authorizations and configuration data amongst users' system components in a device-as-a-key system.

## Claims

### Claim 1

A system for communicating from a first device to a second device, said system comprising:
said first device configured to communicate wirelessly in an online mode with a network server, said first device configured to obtain authorization configuration information from the network server, wherein said authorization configuration information pertains to authorization for said first device to communicate with said second device, wherein said authorization configuration information includes data encrypted by a first key associated with said second device;
said second device coupled to an equipment component, said second device configured to communicate with said equipment component;
said second device configured to communicate wirelessly with said first device in an offline mode in which neither said first device nor said second device is able to communicate effectively with the network server;
wherein said first device and said second device are configured to establish a communication link for exchanging communications, wherein prior to establishing said communication link, said second device has received no information indicating said first device has obtained said authorization configuration information pertaining to at least one of authentication of said first device and authorization of said first device with respect to said second device; and
wherein said first device is configured to communicate, via said communication link, said authorization configuration information to said second device, wherein said second device, based on said authorization configuration information, authenticates an identity of said first device and determines if said first device is authorized with respect to said second device, whereby the second device is configured to determine authorization of the first device regardless of network connectivity to an external server.

### Claim 2 (depends on 1)

The system of claim 1 wherein said communication link established between said first device and said second device involves a challenge-response authentication process in which said second device authenticates said identity of said first device.

### Claim 3 (depends on 1)

The system of claim 1 wherein said second device authenticates said authorization configuration information issued from the network server based at least in part on decryption of said data of said authorization configuration information with a second key associated with said first key, wherein said first key is a private key and said second key is a public key.

### Claim 4 (depends on 3)

The system of claim 3 wherein said private key and said public key are established between the network server and said second device prior to communications between said first device and said second device.

### Claim 5 (depends on 1)

The system of claim 1 wherein said authorization configuration information includes a public key associated with said first device, wherein said first device stores a private key associated with said public key, and wherein said second device authenticates said identity of said first device based at least in part on decrypting data, received via said communication link, with said public key.

### Claim 6 (depends on 5)

The system of claim 5 wherein said first device authenticates an identity of said second device based on decrypting data received from said second device via said communication link.

### Claim 7 (depends on 1)

The system of claim 1 wherein said authorization configuration information includes authorization data pertaining to one or more authorizations of said first device with respect to one or more commands for said second device, wherein said authorization data is encrypted and only said second device is capable of decrypting said authorization data.

### Claim 8 (depends on 1)

The system of claim 1 wherein said authorization configuration information is a layered package having a plurality of layers, wherein each layer is encrypted in accordance with one key of an asymmetric key pair.

### Claim 9 (depends on 8)

The system of claim 8 wherein said authorization configuration information includes authentication information.

### Claim 10 (depends on 8)

The system of claim 8 wherein a layer of said authorization configuration information includes authorization data pertaining to one or more authorizations associated with at least one of communication and operation of said second device.

### Claim 11 (depends on 10)

The system of claim 10 wherein only said second device is capable of decrypting all of said plurality of layers.

### Claim 12 (depends on 10)

The system of claim 10 wherein an owner encrypted layer of said plurality of layers is encrypted by an owner device associated with said second device that is established as an authority over operation of said second device, and wherein encryption of said owner encrypted layer is indicative of said owner device having authorized said authorization data included in said layer.

### Claim 13

A control unit for communicating with an equipment component, said control unit comprising:
a communication interface operable to communicate wirelessly with a remote device;
a memory configured to store one or more encryption keys pertaining to authentication and authorization of the remote device;
an equipment interface operable to communicate with the equipment component;
a controller configured to establish a communication link with the remote device via the communication interface, the controller configured to receive authorization configuration information from the remote device, wherein the authorization configuration information includes authorization data that is encrypted, wherein only the controller is capable of decrypting the authorization data from the authorization configuration information;
wherein, based at least in part on the authorization data, the controller is configured to authenticate an identity of the remote device and determine if the remote device is authorized, whereby the controller is configured to determine authorization of the remote device regardless of network connectivity to an external server;
wherein the authorization configuration information is a layered package having a plurality of layers, wherein each layer is encrypted in accordance with one key of an asymmetric key pair; and
wherein an owner encrypted layer of the plurality of layers is encrypted by an owner device associated with the control unit that is established as an authority over operation of the control unit, and wherein encryption of the owner encrypted layer is indicative of the owner device having authorized the authorization data included in the layer.

### Claim 14 (depends on 13)

The control unit of claim 13 wherein said authorization configuration information includes authentication information.

### Claim 15 (depends on 13)

The control unit of claim 13 wherein a layer of the authorization configuration information includes the authorization data, wherein the authorization data relates to one or more authorizations associated with at least one of communication and operation.

### Claim 16 (depends on 13)

The control unit of claim 13 wherein only the control unit is capable of decrypting all of the plurality of layers.

### Claim 17

A method of communicating between a first device and a second device, said method comprising:
obtaining, in the first device, authorization configuration information from a network server, wherein the authorization configuration information includes data encrypted by a first key associated with the second device;
establishing a communication link for exchanging communications between the first device and the second device, wherein prior to establishing the communication link, the second device has received no information indicating the first device has obtained the authorization configuration information;
providing the authorization configuration information in the second device;
decrypting, in the second device, the authorization configuration information to obtain authorization data pertaining to one or more authorizations for the first device to communication with the second device;
authenticating an identity of the first device based on the authorization data obtained from the authorization configuration information; and
determining if the first device is authorized with respect to the second device, whereby the second device is configured to determine authorization of the first device regardless of network connectivity to an external server.

### Claim 18 (depends on 17)

The method of claim 17 further comprising encrypting at least a portion of the authorization configuration information with a second key established between the second device and the network server, wherein the authorization confirmation information includes authentication information.