System, method, and apparatus for secure telematics communication

A telematics system, comprising:

• a plurality of vehicles with each vehicle having a control system and a telematics unit communicably coupled to the control system;
• and
• a controller communicably coupled to each telematics unit for each vehicle, the controller structured to:
• receive registration information regarding the telematics unit and the control system for each vehicle;
• receive a seed from the control system via a telematics unit responsive to reception of a telematics session request by the control system for a particular vehicle of the plurality of vehicles;
• authenticate the telematics unit and the control system for the particular vehicle based on information included with the seed and the registration information;
• generate a first encrypted key and a second encrypted key responsive to the authentication;
• and
• provide the first encrypted key to the telematics unit;
• provide the second encrypted key to the control system via the telematics unit to establish a proprietary data communication channel from the control system to the controller via the telematics unit for the particular vehicle;
• recognize an unregistered vehicle component associating with the telematics unit;
• and
• in response, at least one of terminate the proprietary data communication channel, provide a notification to an operator of the controller, or update a registration database associated with the controller.

A method, comprising:

• receiving, by a processing circuit, registration information regarding a telematics unit and a control system for each vehicle of a plurality of vehicles;
• receiving, by the processing circuit, a seed from the control system via a telematics unit for a particular vehicle in the plurality of vehicles responsive to reception of a telematics session request by the control system for the particular vehicle of the plurality of vehicles;
• authenticating, by the processing circuit, the telematics unit and the control system for the particular vehicle based on information included with the seed and the registration information;
• generating, by the processing circuit, a first encrypted key and a second encrypted key responsive to the authentication;
• providing, by the processing circuit, the first key to the telematics unit;
• and
• providing, by the processing circuit, the second encrypted key to the control system via the telematics unit to establish a proprietary data communication channel from the control system to the processing circuit via the telematics unit for the particular vehicle;
• recognizing, by the processing circuit, an unregistered vehicle component associating with the telematics unit;
• and
• in response to recognizing the unregistered vehicle component associating with the telematics unit, at least one of:
• terminating, by the processing circuit, the proprietary data communication channel;
• providing, by the processing circuit, a notification;
• or updating, by the processing circuit, a registration database based on the recognizing.