Secure vehicle to vehicle ptc communication

A vehicle-to-vehicle key exchange system, comprising:

• a central office server comprising one or more processors configured to:
• obtain, from a first on-board computer of a first vehicle, a first secret and a first public key;
• and
• obtain, from a second on-board computer of a second vehicle, a second secret and a second public key;
• and
• receive from the second on-board computer a digitally signed second public key based on a second private key associated with the second on-board computer;
• authenticate the first public key of the first vehicle based on the first private key associated with the first on-board computer of the first vehicle;
• authenticate the second public key of the second vehicle based on the second private key associated with the second on-board computer of the second vehicle;
• prevent a man-in-the-middle attack, by securing at least one of a first vehicle-to-central office communication, a central office-to-first vehicle communication, or a first vehicle-to-second vehicle, wherein the first vehicle-to-central office communication and the central office-to-first vehicle communication are authenticated based on a determined private key associated with a respective first vehicle on-board computer;
• send a message, with the central office server, to a vehicle associated with a conditional movement authority.

A computer program product comprising at least one non-transitory computer-readable medium including program instructions that, when executed by at least one processor,

• obtain a first secret and a first public key;
• and
• obtain a second secret and a second public key;
• authenticate the first public key of the first vehicle based on a first private key associated with the first vehicle;
• authenticate the second public key of the second vehicle based on a second private key associated with the second vehicle;
• prevent a man-in-the-middle attack, by securing at least one of a first vehicle-to-central office communication, a central office-to-first vehicle communication, or a first vehicle-to-second vehicle, wherein the first vehicle-to-central office communication and the central office-to-first vehicle communication are authenticated based on a determined private key associated with a respective first vehicle on-board computer;
• and
• send a message to a vehicle associated with a conditional movement authority.