System and method for providing vehicle information based on personal authentication and vehicle authentication

A vehicle device comprising:

• a communication module comprising communication circuitry configured to communicate with an electronic device;
• and
• a processor electrically connected with the communication module,
• wherein the processor is configured to:
• receive an encrypted session key set comprising at least one session key from the electronic device;
• decrypt the encrypted session key set using a secret key of the vehicle device to obtain the session key set;
• obtain first vehicle information of the vehicle device;
• encrypt the first vehicle information using a first session key of the at least one session key;
• and
• transmit, to the electronic device, second vehicle information in which the encrypted first vehicle information is signed using a secret key of the vehicle device.

A first server comprising:

• a communication module comprising communication circuitry connected to an electronic device;
• and
• a processor electrically connected with the communication module,
• wherein the processor is configured to:
• generate a session key set comprising at least one session key for a session with the vehicle device;
• encrypt the generated session key set using a public key of the vehicle device to transmit the encrypted session key set to the electronic device;
• receive, from the electronic device, vehicle information encrypted using a first session key of the at least one session key by the vehicle device and signed by the vehicle device and the electronic device;
• verify a signature of the vehicle device using a public key of the vehicle device and verify a signature of the electronic device using a public key of the electronic device;
• and
• decrypt the encrypted vehicle information using the first session key to obtain the vehicle information.

A non-transitory storage medium having stored therein instructions which, when executed by at least one processor, cause the at least one processor to perform at least one operation comprising:

• connecting to a vehicle device and a first server;
• receiving an encrypted session key set comprising at least one session key from the first server;
• transmitting the encrypted session key set to the vehicle device;
• receiving, from the vehicle device, second vehicle information in which first vehicle information of the vehicle device is encrypted using a first session key of the at least one session key and is signed using a secret key of the vehicle device;
• and
• delivering, to the first server, third vehicle information in which the received second vehicle information is signed using a secret key of a user.

A non-transitory computer-readable storage medium having stored therein instructions which, when executed by at least one processor, cause the at least one processor to perform at least one operation comprising:

• receiving an encrypted session key set comprising at least one session key from an electronic device;
• decrypting the encrypted session key set using a secret key of a vehicle device to obtain the session key set;
• obtaining first vehicle information of the vehicle device;
• encrypting the first vehicle information using a first session key of the at least one session key;
• and
• transmitting, to the electronic device, second vehicle information in which the encrypted first vehicle information is signed using a secret key of the vehicle device.

A non-transitory computer-readable storage medium having stored therein instructions which, when executed by at least one processor, cause the at least one processor to perform at least one operation comprising:

• connecting to a first server and an electronic device;
• generating a session key set comprising at least one session key for a session with a vehicle device;
• encrypting the generated session key set using a public key of the vehicle device to transmit the encrypted session key set to the electronic device;
• receiving, from the electronic device, vehicle information encrypted using a first session key of the at least one session key by the vehicle device and signed by the vehicle device and the electronic device;
• verifying a signature of the vehicle device using a public key of the vehicle device and a signature of the electronic device using a public key of the electronic device;
• and
• decrypting the encrypted vehicle information using the first session key to obtain the vehicle information.