Unified secure automatic ECU provisioning and ECU message validation

A system comprising:

• one or more hardware processors configured to:
• receive a provisioning message from a vehicle electronic control unit (ECU), the provisioning message having a signature from being signed by the ECU with a key unique to the ECU;
• check the signature of the provisioning message against a set of stored unique keys, to validate that the message is from a known ECU having the unique key and to determine which ECU the message is from based on the unique key;
• responsive to validating the signature, determine a vehicle identifier with which the ECU is to be associated, the vehicle identifier included in a message payload;
• store a relationship between the ECU and the vehicle identifier in a database such that the ECU is uniquely associated with a specific vehicle identifier;
• receive an alert message from the ECU, the message signed by the ECU with the unique key and including a vehicle identifier in a payload;
• based on the signature, validate the message and identify the ECU;
• extract the vehicle identifier from the payload of the message, responsive to validating and identifying the ECU;
• determine if the identified ECU has an existing stored relationship with the vehicle identifier based on information in the database;
• and
• validate the message based on the identified ECU having the existing stored relationship with the vehicle identifier as indicated in the database.