System and method for authenticating and authorizing devices

A system for communicating from a first device to a vehicle device disposed on a vehicle, the system comprising:

• the first device configured to:
• store, in memory, an asymmetric key pair including a first device private key and a first device public key;
• transmit the first device public key wirelessly to a second device;
• obtain a signature from the second device, the signature being based on the first device public key and a trusted private key;
• transmit the first device public key and the signature to the vehicle device;
• at least one of encrypt and sign a vehicle request with the first device private key;
• transmit at least one of an encrypted form of the vehicle request and a vehicle request signature to the vehicle device;
• and
• the vehicle device configured to:
• authenticate the first device by the vehicle device generating a cryptographic nonce for an authentication transaction and determining authenticity of the first device based on a cryptographic response to the cryptographic nonce generated by the first device using the first device private key;
• at least one of decrypt the encrypted form of the vehicle request and validate the vehicle request signature;
• and
• determine, using the first device public key, authorization of the first device based on at least one of decryption of the encrypted form of the vehicle request and validation of the vehicle request signature.

A device operable to transmit, to a vehicle device disposed on a vehicle, at least one of an encrypted form of a vehicle request or a vehicle request signature of the vehicle request, the device comprising:

• a communication interface operable to communicate wirelessly with the vehicle device and a trusted device;
• memory configured to store an asymmetric key pair including a device private key and a device public key;
• a controller configured to establish communication via the communication interface with the trusted device, the controller operable to transmit the device public key wirelessly to the trusted device, the controller operable to receive a signature from the trusted device, the signature being based on the device public key and a trusted private key;
• the controller configured to establish communication via the communication interface with the vehicle device, the controller operable to transmit the device public key and the signature to the vehicle device;
• the controller configured to at least one of 1) encrypt the vehicle request with the device private key to yield the encrypted form of the vehicle request and 2) generate the vehicle request signature based on the vehicle request and the device private key, the controller operable to transmit, to the vehicle device, at least one of the encrypted form of the vehicle request and the vehicle request signature;
• the controller configured to receive, from the vehicle device, a cryptographic nonce generated by the vehicle device for an authentication transaction, and to generate a cryptographic response to the cryptographic nonce using the device private key;
• and
• whereby the vehicle device is operable to determine at least one of authentication and authorization of the device based on at least one of validation of the vehicle request signature and decryption of the encrypted form of the vehicle request.

A method of communicating information from a first device to a vehicle device disposed on a vehicle, the method comprising:

• storing, in memory, an asymmetric key pair including a first device private key and a first device public key;
• transmitting the first device public key wirelessly to a second device;
• obtaining a signature from the second device, the signature being based on the first device public key and a trusted private key;
• transmitting the first device public key and the signature to the vehicle device;
• at least one of encrypting and signing a vehicle request with the first device private key;
• transmitting, to the vehicle device, at least one of an encrypted form of the vehicle request and a vehicle request signature;
• receiving, from the vehicle device, a cryptographic nonce generated by the vehicle device for an authentication transaction;
• generating, in the first device, a cryptographic response to the cryptographic nonce using the first device private key;
• in the vehicle device, at least one of 1) decrypting the encrypted form of the vehicle request and 2) validating the vehicle request signature;
• and
• determining at least one of authorization and authentication of the first device based on at least one of decryption of the encrypted form and validation of the vehicle request signature.