System and method for an Internet of Things (IoT) gas pump or charging station implementation

A system comprising:

• an automotive Internet of Things (IoT) device to be integrated within a vehicle of a user;
• a gas pump or charging station in communication with the automotive IoT device;
• an IoT service comprising IoT device authentication and management logic to authenticate the identity of the automotive IoT device to be integrated within the vehicle;
• a client device in communication with the automotive IoT device, the client device to obtain identification data associated with the gas pump or charging station and to establish a secure communication channel with the IoT service, the client device of the user providing the identification data associated with the gas pump or charging station and second identification information associated with the automotive IoT device to the IoT service;
• the IoT service to authenticate the automotive IoT device based on the second identification information and responsively establish a second communication channel with the automotive IoT device to transmit a command to the automotive IoT device through the second communication channel, the automotive IoT device to establish a third communication channel with the gas pump or charging station and to forward the command to the gas pump or charging station through the third communication channel authorizing use of the gas pump or charging station by the user;
• a first encryption engine on the IoT service comprising key generation logic to generate a service public key and a service private key, wherein the key generation logic comprises a hardware security module (HSM);
• a second encryption engine on the automotive IoT device comprising key generation logic to generate a device public key and a device private key;
• the first encryption engine to transmit the service public key to the second encryption engine and the second encryption engine to transmit the device public key to the first encryption engine;
• the first encryption engine to use the device public key and the service private key to generate a secret;
• the second encryption engine to use the service public key and the device private key to generate the same secret;
• and
• wherein once the secret is generated, the first encryption engine and the second encryption engine encrypt and decrypt data packets transmitted between the first encryption engine and the second encryption engine using the secret or using data structures derived from the secret.