Apparatus and method for performing authentication for vehicle on-demand service

A method by which an integrated communication control unit performs authentication on a vehicle on-demand service, the method comprising:

• receiving a second option value related to a vehicle service from a DM server;
• obtaining or generating a private root private key and a private root certificate;
• generating, for each performance controller, a device certificate and a device private key signed with the private root private key;
• generating a service token for the second option value;
• and
• transmitting, for each performance controller, the generated service token, the private root certificate, and the device private key,
• wherein the generating of the service token comprises:
• encoding the second option value using an advanced encryption standard (AES) symmetric key and storing the same in a payload field in the service token;
• encoding the AES symmetric key using the device certificate and adding the same to a header field in the service token;
• and
• digitally signing the service token with the private root private key.

An integrated communication control unit for performing authentication on a vehicle on-demand service, wherein the integrated communication control unit:

• obtains a first option value related to a vehicle service received from a tool in factory (TIF) device;
• obtains or generates a private root private key and a private root certificate;
• generates, for each performance controller, a device certificate and a device private key signed with the private root private key;
• generates a service token for the first option value;
• and
• transmits, for each performance controller, the generated service token, the private root certificate, and the device private key,
• wherein the integrated communication control unit generates the service token for the first option value,
• by encoding the first option value using an advanced encryption standard (AES) symmetric key and storing the same in a payload field in the service token,
• encoding the AES symmetric key using the device certificate and adding the same to a header field in the service token,
• and digitally signing the service token with the private root private key.