# US 10,484,360 B2 · Method for providing an authenticated connection between at least two communication partners > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,360 B2 - Document ID: US10484360B2 - Status: Granted - Kind: B2 - Application number: 15/659,672 - Filed: 2017-07-26 - Published: 2018-02-01 - Granted: 2019-11-19 - Earliest claimed: 2016-07-26 - Assignees: Volkswagen Aktiengesellschaft - Applicants: Volkswagen AG - Inventors: Timo Winkelvos; Alexander Tschache; Martin Wuschke - Web page: https://patentgrep.com/patent/US10484360B2 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04W 12/50: Secure pairing of devices - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H04W 4/40: for vehicles, e.g. vehicle-to-pedestrians [V2P] - H04W 12/06: Authentication - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method for providing an authenticated connection between at least two communication partners and to a communication system. The method includes setting up an anonymous signal-conducting connection between the at least two communication partners; checking the authenticity of a signed certificate used by a first communication partner of the at least two communication partners by a second communication partner of the at least two communication partners; reproducing an authentication code by the second communication partner after the check of the authenticity of the signed certificate used by the first communication partner has been carried out; and confirming the authentication code reproduced by the second communication partner by a user by the first communication partner. The method provides a possibility which increases the security of a certificate-based authentication of a communication connection between at least two communication partners. ## Claims ### Claim 1 A method for providing an authenticated connection between at least two communication partners, the method comprising: setting up an anonymous signal-conducting connection between the at least two communication partners; checking an authenticity of a signed certificate used by a first communication partner of the at least two communication partners by a second communication partner of the at least two communication partners; displaying a first authentication code by the second communication partner after the check of the authenticity of the signed certificate used by the first communication partner has been carried out; displaying a second authentication code by the first communication partner on a display device of the first communication partner; comparing the first and second authentication codes displayed by the first and second communication partners; and confirming the first and second authentication codes displayed by the first and second communication partners match by a user, wherein the first communication partner is a vehicle-internal device, and the second authentication code displayed by the first communication partner is a vehicle-related code, wherein the signed certificate used by the first communication partner is signed with a signature certificate and the signature certificate is available to the second communication partner, and wherein checking the authenticity of the signed certificate used by the first communication partner by the second communication partner comprises checking, by the second communication partner, the signed certificate used by the first communication partner with the signature certificate available to the second communication partner. ### Claim 2 (depends on 1) The method of claim 1, wherein the second communication partner is a mobile terminal. ### Claim 3 (depends on 1) The method of claim 1, wherein the anonymous signal-conducting connection between the at least two communication partners is based on a transport layer security protocol. ### Claim 4 (depends on 1) The method of claim 1, wherein the signature certificate is a certificate which has been issued by a certification body. ### Claim 5 (depends on 1) The method of claim 1, wherein the first authentication code displayed by the second communication partner is displayed for the user by a display device of the second communication partner. ### Claim 6 (depends on 1) The method of claim 1, wherein the second authentication code displayed by the first communication partner is a vehicle identification number unique to a vehicle associated with the first communication partner. ### Claim 7 A communication system, comprising: at least two communication partners, wherein the at least two communication partners are configured to set up an anonymous signal-conducting connection to one another, wherein a second communication partner of the at least two communication partners is configured to check an authenticity of a signed certificate used by a first communication partner of the at least two communication partners and to display a first authentication code after the check of the authenticity of the signed certificate used by the first communication partner has been carried out, and wherein the first communication partner is configured to display a second authentication code on a display device of the first communication partner to allow a user to confirm a match of the first and second authentication codes displayed by the first and second communication partners by the first communication partner, wherein the first communication partner is a vehicle-internal device, and the second authentication code displayed by the first communication partner is a vehicle-related code, wherein the signed certificate used by the first communication partner is signed with a signature certificate and the signature certificate is available to the second communication partner, and wherein checking the authenticity of the signed certificate used by the first communication partner by the second communication partner comprises checking, by the second communication partner, the signed certificate used by the first communication partner with the signature certificate available to the second communication partner. ### Claim 8 (depends on 7) The communication system of claim 7, wherein the second communication partner is a mobile terminal. ### Claim 9 (depends on 7) The communication system of claim 7, wherein the anonymous signal-conducting connection between the at least two communication partners is based on a transport layer security protocol. ### Claim 10 (depends on 7) The communication system of claim 7, wherein the signed certificate used by the first communication partner is signed with a signature certificate and the signature certificate is available to the second communication partner, wherein the signature certificate is a certificate which has been issued by a certification body. ### Claim 11 (depends on 7) The communication system of claim 7, wherein the first authentication code displayed by the second communication partner for the user is displayed on a display device of the second communication partner. ### Claim 12 (depends on 7) The communication system of claim 7, wherein the second authentication code displayed by the first communication partner is a vehicle identification number unique to a vehicle associated with the first communication partner. ### Claim 13 A non-transitory computer readable medium comprising: a program including program code for carrying out a method for providing an authenticated connection between at least two communication partners when the program code is executed on a computer, on a processor, on a control module or on a programmable hardware component, the method comprising: setting up an anonymous signal-conducting connection between the at least two communication partners; checking an authenticity of a signed certificate used by a first communication partner of the at least two communication partners by a second communication partner of the at least two communication partners; displaying a first authentication code by the second communication partner after the check of the authenticity of the signed certificate used by the first communication partner has been carried out; displaying a second authentication code by the first communication partner by a display device of the first communication partner; comparing the first and second authentication codes displayed by the first and second communication partners; and confirming the first and second authentication codes displayed by the first and second communication partners match by a user, wherein the first communication partner is a vehicle-internal device, and the second authentication code displayed by the first communication partner is a vehicle identification number unique to a vehicle associated with the first communication partner, wherein the signed certificate used by the first communication partner is signed with a signature certificate and the signature certificate is available to the second communication partner, and wherein checking the authenticity of the signed certificate used by the first communication partner by the second communication partner comprises checking, by the second communication partner, the signed certificate used by the first communication partner with the signature certificate available to the second communication partner. ### Claim 14 (depends on 13) The communication system of claim 13, wherein the first communication partner is a vehicle-internal device and/or the second communication partner is a mobile terminal. ### Claim 15 (depends on 13) The communication system of claim 13, wherein the anonymous signal-conducting connection between the at least two communication partners is based on a transport layer security protocol. ### Claim 16 (depends on 13) The communication system of claim 13, wherein the signature certificate is a certificate which has been issued by a certification body. ### Claim 17 (depends on 13) The communication system of claim 13, wherein the first authentication code displayed by the second communication partner is displayed for the user by a display device of the second communication partner. ### Claim 18 (depends on 13) The communication system of claim 13, wherein the second authentication code displayed by the first communication partner is a vehicle identification number unique to a vehicle associated with the first communication partner.