Establishing secure communication between an interface device and control systems of an electric marine vessel

An apparatus comprising:

• a first network interface operable to communicate over a first network;
• a controller area network (CAN) bus interface operable to communicate over a CAN bus of an electric marine vessel;
• a processing device;
• and
• memory operatively coupled to the processing device, wherein the memory stores computer program instructions that, when executed, cause the processing device to carry out operations including:
• receiving an authentication request from an interface device through the first network interface;
• authenticating the interface device based on a token received with the authentication request;
• establishing, in response to authenticating the interface device, a secure communication tunnel between the interface device and one or more vessel components coupled to the CAN bus;
• and
• proxying communication between the interface device and the one or more vessel components through the secure communication tunnel.

A computer program product comprising:

• a set of one or more computer readable storage media;
• and
• computer program instructions, collectively stored in the set of one or more storage media, that when executed, cause a processor set to perform computer operations comprising:
• receiving, by a gateway device in an electric marine vessel, an authentication request from an interface device through a first network interface, wherein the gateway device is communicatively coupled to a controller area network (CAN) bus through a CAN bus interface;
• authenticating, by the gateway device, the interface device based on a token received with the authentication request;
• establishing, by the gateway device in response to authenticating the interface device, a secure communication tunnel between the interface device and one or more vessel components coupled to the CAN bus;
• and
• proxying, by the gateway device, communication between the interface device and the one or more vessel components through the secure communication tunnel.