Data protection and security for in-vehicle systems
AssigneeHarman International Industries, Incorporated
InventorSouvik DATTA
Life of this patent
Estimating the term…
Abstract
Methods and systems for ensuring security of in-car systems in vehicles, particularly, user data privacy and protection of in-car systems from cyber attacks, hacking etc. is provided. After a two-level authentication process, wherein user identification data, token and passwords are used and matched to authenticate the user, a secure OS container is created for use for the user accessing the IVI system of the vehicle. This container is created on the host root file system such that the environments of the container and the host root file system of the IVI system are sandboxed from each other.
Claims15
A data protection method for an in-vehicle infotainment (IVI) system, the method comprising:
- receiving user identification data;
- generating a unique token on the basis of the user identification data;
- transmitting the token to a device for presentation to the user;
- receiving first user input data;
- transmitting the first user input data to the backend server;
- in response to determining that the first user input data corresponds to the token:
- generating a one-time password (OTP) on the basis of the token, and transmitting the OTP to the IVI system and to a mobile device of the user;
- receiving second user input data;
- and
- in response to determining that the second user input data corresponds to the OTP, creating a secure container within the IVI system for access by the user.
A system comprising:
- a backend server;
- and
- an in-vehicle infotainment (IVI) system;
- wherein:
- the backend server is arranged to receive user identification data;
- the backend server is arranged to generate a unique token on the basis of the user identification data;
- the backend server is arranged to transmit the token to a device for presentation to the user;
- the IVI system is arranged to receive first user input data;
- the IVI system is arranged to transmit the first user input data to the backend server;
- the backend server is arranged to, in response to determining that the first user input data corresponds to the token, generate a one-time password (OTP) on the basis of the token and transmit the OTP to the IVI system and a mobile device of the user;
- and
- the IVI system is arranged to receive second user data and, in response to determining that the second user input data corresponds to the OTP, create a secure container within the IVI system for access by the user.
A non-transitory computer-readable medium including instructions that, when executed by a processor, cause the processor to perform the steps of:
- receiving user identification data;
- generating a unique token on the basis of the user identification data;
- transmitting the token to a device for presentation to the user;
- receiving first user input data;
- transmitting the first user input data to the backend server;
- in response to determining that the first user input data corresponds to the token:
- generating a one-time password (OTP) on the basis of the token, and transmitting the OTP to the IVI system and to a mobile device of the user;
- receiving second user input data;
- and
- in response to determining that the second user input data corresponds to the OTP, creating a secure container within the IVI system for access by the user.
Dependencies are inferred from the claim text.