# US 2016/0366247 A1 · Over-the-air vehicle systems updating and associated security protocols

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2016/0366247 A1
- Document ID: US20160366247A1
- Status: Published application
- Kind: A1
- Application number: 15/247,329
- Filed: 2016-08-25
- Published: 2016-12-15
- Earliest claimed: 2010-06-25
- Assignees: Toyota Motor Engineering & Manufacturing North America, Inc.
- Applicants: Toyota Motor Engineering & Manufacturing North America, Inc.
- Inventors: Derek Lane Lewis
- Web page: https://patentgrep.com/patent/US20160366247A1

## CPC

- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- G01C 21/3896: {Transmission of map data from central databases}
- H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)}
- H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)}
- H04W 12/041: Key generation or derivation
- H04W 12/0471: Key exchange
- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04L 2209/80: Wireless
- H04L 2209/84: Vehicles
- H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning}
- H04W 84/042: {Public Land Mobile systems, e.g. cellular systems}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G01C: MEASURING DISTANCES, LEVELS OR BEARINGS; SURVEYING; NAVIGATION; GYROSCOPIC INSTRUMENTS; PHOTOGRAMMETRY OR VIDEOGRAMMETRY (measuring liquid level G01F; radio navigation, determining distance or velocity by use of propagation effects, e.g. Doppler effects, propagation time, of radio waves, analogous arrangements using other waves G01S)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method of updating a vehicle ECU includes establishing communication between a data communications module of a vehicle and an update server via a cellular network; validating the vehicle using a key exchange protocol between the data communications module and the update server; and sending update information from the update server to the data communications module of the vehicle via the cellular network, the update information configured to be used to update the vehicle ECU.

## Claims

### Claim 1

A vehicle comprising:
a vehicle ECU;
a data communications module; and
machine readable instructions stored in one or more memory modules that, when executed by a processor, cause the vehicle to:
send a first security key from the data communications module to an update server;
receive, at the data communications module, a request for an updated security key from the update server after sending the first security key;
send a second security key from the data communications module to the update server after receiving the request for the updated security key;
receive, at the data communications module, update information from the update server after sending the second security key; and
update the vehicle ECU with the update information.

### Claim 2 (depends on 1)

The vehicle of claim 1, further comprising a diagnostic ECU, wherein when executed by the processor, the machine readable instructions further cause the vehicle to provide the update information to the diagnostic ECU.

### Claim 3 (depends on 2)

The vehicle of claim 2, wherein when executed by the processor, the machine readable instructions further cause the vehicle to send the update information from the diagnostic ECU to the vehicle ECU.

### Claim 4 (depends on 3)

The vehicle of claim 3, further comprising a CAN network, wherein the diagnostic ECU sends the update information to the vehicle ECU over the CAN network.

### Claim 5 (depends on 1)

The vehicle of claim 1, wherein when executed by the processor, the machine readable instructions further cause the vehicle to send current ECU update version information and VIN number information from the data communications module to the update server.

### Claim 6 (depends on 1)

The vehicle of claim 1, wherein when executed by the processor, the machine readable instructions further cause the vehicle to encrypt at least one of the first security key and the second security key.

### Claim 7 (depends on 1)

The vehicle of claim 1, wherein the vehicle ECU is a navigation ECU.

### Claim 8 (depends on 1)

The vehicle of claim 1, wherein the vehicle ECU is an engine control unit.

### Claim 9

A method of updating a vehicle ECU, the method comprising:
determining that an ignition start of a vehicle has occurred;
a data communications module of the vehicle contacting an update server to determine whether an update to the vehicle ECU is available upon the ignition start of the vehicle;
receiving update information from the update server at the data communications module of the vehicle after contacting the update server; and
updating the vehicle ECU with the update information.

### Claim 10 (depends on 9)

The method of claim 9, further comprising:
the data communications module of the vehicle sending a first security key to the update server;
the data communications module of the vehicle receiving a request for an updated security key from the update server after sending the first security key; and
the data communications module of the vehicle sending a second security key to the update server after receiving the request for the updated security key.

### Claim 11 (depends on 10)

The method of claim 10, further comprising encrypting at least one of the first security key and the second security key.

### Claim 12 (depends on 9)

The method of claim 9, further comprising:
the data communications module of the vehicle receiving an indication of the availability of the update.

### Claim 13 (depends on 9)

The method of claim 9, further comprising:
the data communications module of the vehicle sending an indication that the data communications module is ready for the update.

### Claim 14 (depends on 9)

The method of claim 9, further comprising:
the data communications module of the vehicle sending current ECU update version information and VIN number information to the update server.

### Claim 15

A vehicle comprising:
a vehicle ECU;
a data communications module; and
machine readable instructions stored in one or more memory modules that, when executed by a processor, cause the vehicle to:
determine that an ignition start of the vehicle has occurred;
contact an update server to determine whether an update to the vehicle ECU is available upon the ignition start of the vehicle;
receive update information from the update server at the data communications module after contacting the update server; and
update the vehicle ECU with the update information.

### Claim 16 (depends on 15)

The vehicle of claim 15, wherein when executed by the processor, the machine readable instructions further cause the vehicle to:
send a first security key from the data communications module to the update server;
receive, at the data communications module, a request for an updated security key from the update server after sending the first security key; and
send a second security key from the data communications module to the update server after receiving the request for the updated security key.

### Claim 17 (depends on 16)

The vehicle of claim 16, wherein when executed by the processor, the machine readable instructions further cause the vehicle to:
encrypt at least one of the first security key and the second security key.

### Claim 18 (depends on 15)

The vehicle of claim 15, wherein when executed by the processor, the machine readable instructions further cause the vehicle to:
receive, at the data communications module, an indication of the availability of the update.

### Claim 19 (depends on 15)

The vehicle of claim 15, wherein when executed by the processor, the machine readable instructions further cause the vehicle to:
send an indication that the data communications module is ready for the update from the data communications module to the update server.

### Claim 20 (depends on 15)

The vehicle of claim 15, wherein when executed by the processor, the machine readable instructions further cause the vehicle to:
send current ECU update version information and VIN number information from the data communications module to the update server.