System for authenticating and authorizing access to and accounting for wireless access vehicular environment consumption by client devices
AssigneePaxgrid Cdn Inc.
InventorMARTIN D. NATHANSON
Life of this patent
Estimating the term…
Abstract
A system and method are disclosed for authenticating and authorizing access to and accounting for consumption of bandwidth for IPv6 connectivity to the Internet over Wireless Access Vehicular Environment (WAVE) service channels by client devices using an Authentication, Authorization and Accounting (AAA) server. The AAA server authenticates and authorizes client devices to access WAVE service channels, and accounts for bandwidth consumption by the client devices using WAVE service channels to access the Internet. The AAA server enables an RSU infrastructure operator to quantify wireless bandwidth consumption by in-vehicle devices using the WAVE Service Channels, on a per-device basis.
Claims6
An On-board unit (OBU), compliant with Wireless Access Vehicular Environment (WAVE), running at least one application level computer program adapted to request authentication and authorization from an Authentication, Authorization and Accounting (AAA) server, using an enrollment certificate, an identification certificate, or other certifying credential to digitally sign a request, and operable to encrypt Personal Identifying Information (PII) using a public key associated with a Security Credentials and Management System (SCMS) enrollment certificate issued to said AAA Server, for access to any service subscribed thereby, either on behalf of a neighboring non-Dedicated Short-Rangrequeste Communications (DSRC) mobile device or for itself, and configured with an extended IPv6 Management Information Base (MIB) operable to retrieve the addresses of neighboring devices when a new entry is inserted in a routing table, using either a synchronous method based on SNMP GET to retrieve the routing table periodically, or an asynchronous method based on SNMP TRAP to report “real-time” changes in the routing table.
A mobile device, configured to communicate with an OBU for IPv6 connectivity to Internet, wherein, following transmission of an authorization request with SCMS credentials issued for a multicast service, as identified by a PSID encapsulated in the request, an ECIES decryption is used to decrypt ECIES-encrypted parameters and keying material necessary for symmetric decryption of a payload of multicast “push notifications” provided by said multicast service.
A system facilitating communication between and among On-board Units (OBUs) and Roadside Units (RSUs) utilizing Dedicated Short-Range Communications (DSRC) to communicate through Internet with a plurality of user devices and/or the OBUs operating a subnet for one or more user devices, said system comprising:
- a server transmitting messages among and between the OBUs and the RSUs, said server comprising at least one processor running at least one computer program adapted to authenticate the user device, authorize the user device to have access to Wireless Access Vehicular Environment (WAVE) service channels, and account for bandwidth consumption by each of said user devices having been duly authenticated and authorized by said AAA server, wherein the AAA server is configured as a Certificate Management Entity and operable to issue Internet Subscription certificates for IPv6-addressable user devices and to transmit said Internet Subscription certificates to said user devices over a secure communications channel, said Internet Subscription certificates including the domain name of said AAA server.
Dependencies are inferred from the claim text.