Back to results
US 11,895,247 B2Granted
System and method for authenticating and authorizing devices
AssigneeDenso Corporation
InventorsEric John Smith, Raymond Michael Stitt, David Stuckless Meyer, Brian Ensink
Life of this patent
Estimating the term…
Abstract
A system and method for a distributed security model that may be used to achieve one or more of the following: authenticate system components; securely transport messages between system components; establish a secure communications channel over a constrained link; authenticate message content; authorize actions; and distribute authorizations and configuration data amongst users' system components in a device-as-a-key system.
Claims21
A control unit for communicating with an equipment component, the control unit comprising:
- a communication interface operable configured to communicate wirelessly with a remote device;
- a memory configured to store one or more encryption keys pertaining to authentication and authorization of the remote device;
- an equipment interface operable configured to communicate with the equipment component;
- a controller configured to establish a communication link with the remote device via the communication interface, the controller configured to receive a ledgers;
- the ledger includes an authorization node with authorization information pertaining to the equipment component and includes a chain of nodes that includes the authorization node and that begins with a root grant based on a root certificate, wherein:
- the ledger is a chain-based ledger with each node of the ledger being based at least in part on a hash of one or more prior nodes of the ledger, wherein
- the authorization information in the authorization node of the ledger including one or more rights for the equipment component is a layered package having a plurality of layers, each layer is encrypted in accordance with one key of an asymmetric key pair, and wherein
- a node of the ledger subsequent to the authorization node is based at least in part on a hash that is based at least in part on the one or more rights for the equipment component;
- and
- based at least in part on the authorization information of the ledger, the controller is configured to authenticate an identity of the remote device and determine whether the remote device is authorized with respect to the equipment component.
7 more elements
A control unit for granting a right to a remote device that pertains to an equipment component, the control unit comprising:
- a communication interface operable configured to communicate wirelessly with the remote device;
- a memory configured to store one or more encryption keys pertaining to granting rights to other devices, and a ledger having a chain of nodes that begins with a root grant based on a root certificate;
- a controller configured to establish a communication link with the remote device via the communication interface, wherein the controller configured to:
- generate ledger information that includes one or more rights for the equipment component, and a layered package having a plurality of layers, wherein each layer is encrypted in accordance with one key of an asymmetric key pair, and
- include the ledger information in the ledger as a new node, wherein the new node of the ledger is based at least in part on a hash of one or more prior nodes of the ledger, and wherein a node of the ledger subsequent to the new node is based at least in part on a hash that is based at least in part on the one or more rights for the equipment component;
- and
- the controller configured to transmit the ledger to the remote device, wherein the ledger includes the ledger information including the one or more rights for the equipment component.
4 more elements
A method for providing a ledger for granting rights with respect to an equipment component, the method comprising:
- providing the ledger with a chain of nodes that begins with a root grant based on a root certificate;
- generating a new node for the ledger including ledger information, that wherein:
- the ledger information includes one or more rights for the equipment component and a layered package having a plurality of layers, wherein each layer is encrypted in accordance with one key of an asymmetric key pair,
- the new node is based at least in part on a hash of one or more prior nodes of the ledger, and
- a node of the ledger subsequent to the new node is based at least in part on a hash that is based at least in part on the one or more rights for the equipment component;
- adding the new node to the chain of nodes;
- and
- verifying the chain of nodes of the ledger based at least in part on the root grant.
5 more elements
Dependencies are inferred from the claim text.