# US 2018/0026949 A1 · System and method for providing vehicle information based on personal authentication and vehicle authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0026949 A1
- Document ID: US20180026949A1
- Status: Published application
- Kind: A1
- Application number: 15/612,235
- Filed: 2017-06-02
- Published: 2018-01-25
- Earliest claimed: 2016-07-21
- Assignees: Samsung Electronics Co., Ltd.
- Applicants: Samsung Electronics Co., Ltd.
- Inventors: Soungkwan KIMN; Amol Mahadev GANDIGUDE; Wonchang LEE
- Web page: https://patentgrep.com/patent/US20180026949A1

## CPC

- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 9/0822: {using key encryption key}
- H04L 9/0827: {involving distinctive intermediate devices or communication paths (network architectures or network communication protocols using different networks H04L63/18)}
- H04L 9/083: {involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]}
- H04L 9/3247: {involving digital signatures}
- H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]}
- H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W 12/041: Key generation or derivation
- H04W 12/0431: Key distribution or pre-distribution; Key agreement
- H04W 12/0433: Key management protocols
- H04W 12/06: Authentication
- H04W 12/069: using certificates or pre-shared keys
- H04W 12/08: Access security
- H04L 2209/80: Wireless
- H04L 2209/84: Vehicles
- H04L 2463/062: applying encryption of the keys
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

An electronic device and method for providing vehicle information based on personal authentication and vehicle authentication are disclosed. According to various example embodiments, an electronic device includes a communication module comprising communication circuitry configured to communicate with a vehicle device and a first server and a processor electrically connected with the communication module, in which the processor is configured to receive an encrypted session key set including at least one session key from the first server, to transmit the encrypted session key set to the vehicle device, receive, from the vehicle device, second vehicle information in which first vehicle information of the vehicle device is encrypted using a first session key of the at least one session key and is signed using a secret key of the vehicle device, and to transmit, to the first server, third vehicle information in which the received second vehicle information is signed using a secret key of a user.

## Claims

### Claim 1

An electronic device comprising:
a communication module comprising communication circuitry configured to communicate with a vehicle device and a first server; and
a processor electrically connected with the communication module,
wherein the processor is configured to:
receive an encrypted session key set comprising at least one session key from the first server;
transmit the encrypted session key set to the vehicle device;
receive, from the vehicle device, second vehicle information in which first vehicle information of the vehicle device is encrypted using a first session key of the at least one session key and is signed using a secret key of the vehicle device; and
transmit, to the first server, third vehicle information in which the received second vehicle information is signed using a secret key of a user.

### Claim 2 (depends on 1)

The electronic device of claim 1, wherein the processor is further configured to receive an authentication certificate of the vehicle device from the vehicle device, to transmit an authentication certificate of the electronic device to the vehicle device, and to verify the received authentication certificate of the vehicle device using a public key of a second server.

### Claim 3 (depends on 2)

The electronic device of claim 2, wherein the processor is further configured to generate a public key and a secret key for issuing an authentication certificate, to transmit the generated public key to the second server, and to receive, together with the public key of the second server, the authentication certificate of the electronic device signed using a secret key of the second server, from the second server.

### Claim 4 (depends on 3)

The electronic device of claim 3, wherein the authentication certificate comprises at least one of: an extension identifier (ID), a vehicle ID, an electronic device ID, a first server ID, a user ID, a service ID, user driving information, service information, a service area, and country information.

### Claim 5 (depends on 1)

The electronic device of claim 1, wherein the processor is further configured to perform authentication with respect to a user of the electronic device and to be connected to a session with the first server.

### Claim 6

A vehicle device comprising:
a communication module comprising communication circuitry configured to communicate with an electronic device; and
a processor electrically connected with the communication module,
wherein the processor is configured to:
receive an encrypted session key set comprising at least one session key from the electronic device;
decrypt the encrypted session key set using a secret key of the vehicle device to obtain the session key set;
obtain first vehicle information of the vehicle device;
encrypt the first vehicle information using a first session key of the at least one session key; and
transmit, to the electronic device, second vehicle information in which the encrypted first vehicle information is signed using a secret key of the vehicle device.

### Claim 7 (depends on 6)

The vehicle device of claim 6, wherein the processor is further configured to receive an authentication certificate of the electronic device from the electronic device and to verify the received authentication certificate of the electronic device using a public key of a second server.

### Claim 8 (depends on 6)

The vehicle device of claim 6, wherein the processor is further configured to generate a public key and a secret key for issuing an authentication certificate, to transmit the generated public key to the second server, and to receive, together with the public key of the second server, the authentication certificate of the vehicle device signed using a secret key of the second server, from the second server.

### Claim 9 (depends on 8)

The vehicle device of claim 8, wherein the authentication certificate comprises at least one of: an extension identifier (ID), a vehicle ID, an electronic device ID, a first server ID, a user ID, a service ID, user driving information, service information, a service area, and country information.

### Claim 10

A first server comprising:
a communication module comprising communication circuitry connected to an electronic device; and
a processor electrically connected with the communication module,
wherein the processor is configured to:
generate a session key set comprising at least one session key for a session with the vehicle device;
encrypt the generated session key set using a public key of the vehicle device to transmit the encrypted session key set to the electronic device;
receive, from the electronic device, vehicle information encrypted using a first session key of the at least one session key by the vehicle device and signed by the vehicle device and the electronic device;
verify a signature of the vehicle device using a public key of the vehicle device and verify a signature of the electronic device using a public key of the electronic device; and
decrypt the encrypted vehicle information using the first session key to obtain the vehicle information.

### Claim 11

A non-transitory storage medium having stored therein instructions which, when executed by at least one processor, cause the at least one processor to perform at least one operation comprising:
connecting to a vehicle device and a first server;
receiving an encrypted session key set comprising at least one session key from the first server;
transmitting the encrypted session key set to the vehicle device;
receiving, from the vehicle device, second vehicle information in which first vehicle information of the vehicle device is encrypted using a first session key of the at least one session key and is signed using a secret key of the vehicle device; and
delivering, to the first server, third vehicle information in which the received second vehicle information is signed using a secret key of a user.

### Claim 12 (depends on 11)

The non-transitory computer-readable storage medium of claim 11, wherein the at least one operation further comprises:
receiving an authentication certificate of the vehicle device from the vehicle device;
transmitting an authentication certificate of the electronic device to the vehicle device; and
verifying the received authentication certificate of the vehicle device using a public key of a second server.

### Claim 13 (depends on 12)

The non-transitory computer-readable storage medium of claim 12, wherein the at least one operation further comprises:
generating a public key and a secret key for issuing an authentication certificate;
transmitting the generated public key to the second server; and
receiving, together with a public key of the second server, an authentication certificate of the electronic device signed with a secret key of the second server, from the second server.

### Claim 14 (depends on 13)

The non-transitory computer-readable storage medium of claim 13, wherein the authentication certificate comprises at least one of: an extension identifier (ID), a vehicle ID, an electronic device ID, a first server ID, a user ID, a service ID, user driving information, service information, a service area, and country information.

### Claim 15 (depends on 11)

The non-transitory computer-readable storage medium of claim 11, wherein the at least one operation further comprises:
performing authentication with respect to a user of the electronic device; and
connecting to a session with the first server.

### Claim 16

A non-transitory computer-readable storage medium having stored therein instructions which, when executed by at least one processor, cause the at least one processor to perform at least one operation comprising:
receiving an encrypted session key set comprising at least one session key from an electronic device;
decrypting the encrypted session key set using a secret key of a vehicle device to obtain the session key set;
obtaining first vehicle information of the vehicle device;
encrypting the first vehicle information using a first session key of the at least one session key; and
transmitting, to the electronic device, second vehicle information in which the encrypted first vehicle information is signed using a secret key of the vehicle device.

### Claim 17 (depends on 16)

The non-transitory computer-readable storage medium of claim 16, wherein the at least one operation further comprises:
receiving an authentication certificate of the electronic device from the electronic device; and
verifying the received authentication certificate of the electronic device using a public key of a second server.

### Claim 18 (depends on 16)

The non-transitory computer-readable storage medium of claim 16, wherein the at least one operation further comprises:
generating a public key and a secret key for issuing an authentication certificate;
transmitting the generated public key to the second server; and
receiving, together with a public key of the second server, an authentication certificate of the vehicle device signed with a secret key of the second server, from the second server.

### Claim 19 (depends on 18)

The non-transitory computer-readable storage medium of claim 18, wherein the authentication certificate comprises at least one of: an extension identifier (ID), a vehicle ID, an electronic device ID, a first server ID, a user ID, a service ID, user driving information, service information, a service area, and country information.

### Claim 20

A non-transitory computer-readable storage medium having stored therein instructions which, when executed by at least one processor, cause the at least one processor to perform at least one operation comprising:
connecting to a first server and an electronic device;
generating a session key set comprising at least one session key for a session with a vehicle device;
encrypting the generated session key set using a public key of the vehicle device to transmit the encrypted session key set to the electronic device;
receiving, from the electronic device, vehicle information encrypted using a first session key of the at least one session key by the vehicle device and signed by the vehicle device and the electronic device;
verifying a signature of the vehicle device using a public key of the vehicle device and a signature of the electronic device using a public key of the electronic device; and
decrypting the encrypted vehicle information using the first session key to obtain the vehicle information.