Dynamic domain key exchange for authenticated device to device communications

A method for secure message exchanges by a vehicle traversing multiple autonomous domains using i) a domain key agent, a wireless supplicant, and a domain keystore at a vehicle, ii) a domain key service and a wireless authenticator at a domain key broker, iii) a domain key factory service at a remote domain key distribution center, and iv) an enrollment service at a remote enrollment server, the method comprising:

• scanning, by the wireless supplicant on the vehicle, a wireless network for at least one domain of the autonomous domains by a service set identifier (SSID) and channel for the domain;
• retrieving, by the domain key agent on the vehicle, a group public key, a member private key and a member certificate from the domain keystore on the vehicle for the domain SSID;
• inspecting, by the domain key agent on the vehicle, the retrieved member certificate for validity of the member certificate;
• performing, by the domain key agent on the vehicle, an authentication ceremony with the wireless authenticator of the domain key broker;
• querying, by the domain key agent on the vehicle from the wireless authenticator on the domain key broker, a domain key service address and service port for the domain;
• requesting, by the domain key agent on the vehicle, from the domain key service, the group public key, the member private key and the member certificate for the domain SSID;
• storing, by the domain key agent on the vehicle, the received group public key, the member private key and the member certificate for the domain SSID in the domain keystore on the vehicle;
• signing, by the domain key agent on the vehicle, messages to other vehicles in the domain using the retrieved member private key for the vehicle in the domain;
• and
• verifying, by the domain key agent on the vehicle, messages from other vehicles in the domain using the retrieved group public key for the domain.