# US 2019/0296919 A1 · Secure communication of iot devices for vehicles

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0296919 A1
- Document ID: US20190296919A1
- Status: Published application
- Kind: A1
- Application number: 16/412,247
- Filed: 2019-05-14
- Published: 2019-09-26
- Earliest claimed: 2010-04-30
- Assignees: T-Central, Inc.
- Applicants: T-Central, Inc.
- Inventors: David W. Kravitz; Donald Houston Graham, III; Josselyn L. Boudett; Russell S. Dietz; Kent William Stacy
- Web page: https://patentgrep.com/patent/US20190296919A1

## CPC

- H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]}
- H04L 9/0819: {Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062)}
- H04L 9/3255: {using group based signatures, e.g. ring or threshold signatures}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint}
- H04L 63/10: {for controlling access to devices or network resources}
- H04W 12/06: Authentication
- H04W 12/08: Access security
- H04L 2209/84: Vehicles
- H04W 12/71: Hardware identity
- H04W 12/76: Group identity
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Method for establishing secure communication between a plurality of IoT devices in one or more vehicles include: provisioning the plurality of IoT devices by providing a unique identification, a digital identity token and a cryptographic key to each of the plurality of IoT devices; establishing a secure communication line between the plurality of IoT devices by authenticating respective communication lines between respective IoT devices and issuing a digital certificate to the respective communication lines; grouping the plurality of IoT devices into different groups based on a predetermined criteria; and including a group membership for a group of the different groups in an attribute certificate indicating group characterization.

## Claims

### Claim 1

A method for establishing secure communication between a plurality of devices, each device including a hardware processor, associated memory, a unique identification, a digital identity token and a cryptographic key, the method comprising:
transmitting over a communication network an invitation to a second device by a first device to establish a communication line with the first device by receiving a digital identity token from the second device;
authenticating a communication line between the first device and the second device;
issuing a digital certificate to the communication line to establish a secure communication line between the first device and the second device; and
preventing a third device for which the secure communication line has not been established from communicating with said secure communication line.

### Claim 2 (depends on 1)

The method of claim 1, wherein the secure communication line includes a digital agreement establishing terms of use of said secure communication line between first device and the second device.

### Claim 3 (depends on 1)

The method of claim 1, further comprising grouping the plurality of devices into different groups based on a predetermined criteria and storing the different groups in a storage device.

### Claim 4 (depends on 3)

The method of claim 3, further comprising storing including group memberships for the different groups in respective attribute certificates of the respective devices; and preventing a device which is not a member of a group with an approved attribute certificate, from communicating with said any one of the plurality of devices.

### Claim 5 (depends on 3)

The method of claim 3, wherein each group is issued an attribute certificate which includes associated rules for group membership in the attribute certificate.

### Claim 6 (depends on 3)

The method of claim 3, wherein the different groups include sub-groups.

### Claim 7 (depends on 3)

The method of claim 3, further comprising establishing a second group of external devices; and establishing an attribute certificate for the second group to a member of one or more of said different groups.

### Claim 8 (depends on 6)

The method of claim 6, wherein the plurality of devices are in two or more vehicles and wherein each of the two or more vehicles has a different group and each sub-group of a respective group includes components of a respective vehicle.

### Claim 9 (depends on 1)

The method of claim 1, wherein the plurality of devices are in a vehicle, wherein the plurality of devices are Internet of Things (IoT) devices, and wherein one or more IoT devices are coupled to a controller area network (CAN) bus of the vehicle and establishes a secure communication line with another IoT device that is coupled to the CAN bus.

### Claim 10 (depends on 1)

The method of claim 1, wherein the plurality of devices are Internet of Things (IoT) devices, and wherein one or more IoT devices are coupled to a controller area network (CAN) bus of a vehicle and are made a member of a group of IoT devices that are characterized with the CAN bus as recorded on an attribute certificate, and wherein an attribute certificate associated with the group of IoT devices is utilized by an eligible originator for communicating between one or more of the group.

### Claim 11 (depends on 10)

The method of claim 10, wherein the secure communication line is utilized for communicating between one or more of the group consisting of Vehicle-to-vehicle (V2V), Vehicle-to-Infrastructure (V2I), Vehicle-to-Grid (V2G), Vehicle-to-X (V2X), and on-board diagnostics (OBD) of a vehicle.

### Claim 12 (depends on 10)

The method of claim 10, wherein a group for a particular vehicle includes variable identities for the particular vehicle for transmission to external devices.

### Claim 13 (depends on 12)

The method of claim 12, wherein the variable identities dynamically change based on one or more of certain mode or time of operation of the particular vehicle or its IoT devices.