METHOD TO USE TELEMATICS TO AUTHENTICATE A MOBILE DEVICE TO A VEHICLE FOR VEHICLE ACCESS AND OPERATION

A method for authenticating a vehicle reservation by a user using a telematics authentication system includes opening a telematics authentication system application in a mobile device. A reservation for a vehicle is created via the telematics authentication system application including selecting the vehicle from multiple identified vehicles and identifying a reservation start date. The reservation is wirelessly submitted to a remotely located server. The server creates and downloads a valid certificate for the reservation to the vehicle. The vehicle sends a secret key to the mobile device after which the telematics authentication system application is closed. On the reservation start date the mobile device and the vehicle are positioned within a predefined wireless connection range and the telematics authentication system application is reopened in the mobile device to permit wireless authentication of the secret key for operation of the vehicle.

The present disclosure relates to systems and methods for authenticating communication links between mobile devices and automobile vehicles.

The reserved use of an automobile vehicle from a fleet of vehicles can be presently accomplished from a mobile device such as a smart phone using an authentication process including Bluetooth® low energy (BLE). BLE data transfer uses short-wavelength radio waves. The current BLE authentication process involves a user downloading an application to the mobile device. Using the application, the user forwards a reservation request to a base system, which in response forwards encrypted authentication data concerning the vehicle, the reservation data, and the vehicle identification data back to the mobile device. At the time and date of the reservation, the user approaches the vehicle and the mobile device communicates the reservation data to the vehicle, which permits the user to enter and start the vehicle.

The transfer of a large volume of security and identification data from the mobile device can require approximately 12 to 15 seconds. BLE data transfer is line-of-sight distance limited, and normally requires the mobile device be within a proximity range of approximately 10 meters up to approximately 300 meters of the vehicle. Data transfer may also be impacted by local conditions such as line-of-sight building interference and weather, therefore under worst case conditions the user may have to wait for the entire 15 second period for authentication to finish. This method therefore introduces latency and cannot be initiated until the mobile device is within BLE range of the vehicle.

Thus, while current methods to reserve a vehicle from a fleet of vehicles achieve their intended purpose, there is a need for a new and improved system and method for reserving a vehicle from a fleet of vehicles.

SUMMARY

According to several aspects, a method for authenticating a vehicle reservation by a user using a telematics authentication system includes: wirelessly submitting a vehicle reservation from a mobile device to a remotely located server, the server creating and forwarding a valid certificate to a vehicle and returning a secret key from the vehicle to a mobile device of a user; positioning the mobile device and the vehicle within a predefined wireless connection range to permit confirmation of the secret key with the vehicle; and opening a telematics authentication system application in the mobile device, the mobile device using the telematics authentication system application using the secret key to authorize operation of the vehicle.

In another aspect of the present disclosure, the method includes at a predetermined time before the start of the vehicle reservation, in a data transfer step the server forwarding an encrypted reservation certificate to the vehicle.

In another aspect of the present disclosure, the method includes saving the encrypted reservation certificate in a vehicle telematics module of the vehicle, the encrypted reservation certificate including an intermediate certificate and a user token.

In another aspect of the present disclosure, the method includes in a confirmation step the vehicle wirelessly transmits the secret key as an encrypted secret key defining in part a reproduction of the intermediate certificate or the user token to the server.

In another aspect of the present disclosure, the method includes upon receipt of the encrypted secret key, the mobile device decrypts the encrypted secret key and stores a decrypted secret key.

In another aspect of the present disclosure, the method includes verifying the authenticity of the decrypted secret key in a vehicle computer.

In another aspect of the present disclosure, the method includes: forwarding an intermediate certificate serial number from the vehicle telematics module to a computer in the vehicle; identifying using the computer if the intermediate certificate serial number represents a new certificate serial number, and returning a data request to the vehicle telematics module; forwarding the intermediate certificate from the vehicle telematics module to the computer; and the computer authenticating and storing the intermediate certificate.

In another aspect of the present disclosure, the method includes: the computer authenticating and storing a user certificate and generating the secret key as an encrypted secret key; and the computer forwarding the encrypted secret key to the vehicle telematics module.

In another aspect of the present disclosure, the positioning step further includes moving the mobile device toward the vehicle until the predefined wireless connection range is achieved.

In another aspect of the present disclosure, the positioning step further includes autonomously moving the vehicle toward the mobile device until the predefined wireless connection range is achieved.

According to several aspects, a method for authenticating a vehicle reservation by a user using a telematics authentication system includes: opening a telematics authentication system application in a mobile device; creating a reservation for a vehicle via the telematics authentication system application; wirelessly submitting the reservation to a remotely located server and closing the telematics authentication system application; the server creating and forwarding a valid certificate to the vehicle and sending a secret key to the mobile device; and reopening the telematics authentication system application in the mobile device to submit the secret key to the vehicle to authorize operation of the vehicle.

In another aspect of the present disclosure, the creating step includes selecting the vehicle and identifying a reservation start date.

In another aspect of the present disclosure, the reopening step is performed at a predetermined time on the reservation start date ahead of a user accessing the vehicle.

In another aspect of the present disclosure, the method includes positioning the mobile device and the vehicle within a predefined wireless connection range to permit submission of the secret key to the vehicle.

In another aspect of the present disclosure, the positioning step further includes one of: moving the mobile device toward the vehicle until the predefined wireless connection range is achieved; or if the vehicle is an autonomously operated vehicle autonomously moving the vehicle toward the mobile device until the predefined wireless connection range is achieved.

In another aspect of the present disclosure, the method includes uploading personalized data by the user at the time of generating the reservation including radio preferences, lighting preferences, seat positions, mirror positions, and climate control settings.

In another aspect of the present disclosure, the method includes uploading personalized data saved in the server to the vehicle at the time of generating the reservation including radio preferences, lighting preferences, seat positions, mirror positions, and climate control settings.

According to several aspects, a method for authenticating a vehicle reservation by a user using a telematics authentication system includes: opening a telematics authentication system application in a mobile device. A reservation for a vehicle is created via the telematics authentication system application including selecting the vehicle from multiple identified vehicles and identifying a reservation start date. The reservation is wirelessly submitted to a remotely located server. The server creates and downloads a valid certificate for the reservation to the vehicle. The vehicle sends a secret key to the mobile device after which the telematics authentication system application is closed. On the reservation start date the mobile device and the vehicle are positioned within a predefined wireless connection range and the telematics authentication system application is reopened in the mobile device to permit wireless authentication of the secret key for operation of the vehicle.

In another aspect of the present disclosure, the method includes operating a computer in the vehicle to authenticate the secret key.

In another aspect of the present disclosure, the method includes following authentication of the secret key the computer sending a response verification successful signal to the mobile device to authorize operation of the vehicle.

DETAILED DESCRIPTION

Referring toFIG. 1, a telematics authentication system10provides for a user12to open an application13on a mobile device14such as a smart phone which allows the user12to select a vehicle16from a variety of available vehicles identified in the application13. The selected vehicle16together with reservation information including but not limited to start date of use, expected duration of use, return date and time, and the like are wirelessly transmitted to a remote server18in a reservation step20. The server18confirms availability of the requested vehicle16for the reservation time frame and enters and saves the reservation data.

At a predetermined time before the start of the reservation, in a data transfer step22the server18forwards an encrypted reservation certificate24including an intermediate certificate and a user token to the vehicle16which is saved in a memory of a vehicle telematics module26of the vehicle16. To confirm receipt of the reservation certificate24, in a confirmation step28the vehicle16wirelessly transmits an encrypted secret key30defining in part a reproduction of the intermediate certificate or the user token back to the server18or to the mobile device14.

Upon receipt of the encrypted secret key30, the server18in a forwarding step32forwards the encrypted secret key30to the mobile device14which decrypts and stores the encrypted secret key30as a decrypted secret key30. The mobile device14is thereafter ready for secure communication with the vehicle16. The user12at this time closes the application13on the mobile device14.

At a predetermined time, for example approximately 7 to 15 minutes prior to start of vehicle operation, the user12reopens the application13in the mobile device14, and brings the mobile device14into a predefined wireless connection range34of the vehicle16, or the vehicle16moves within the predefined wireless connection range34with respect to the mobile device14of the user12. As previously noted, the wireless connection range34varies between approximately 10 meters up to approximately 300 meters.

The decrypted secret key30is exchanged between the vehicle16and the mobile device14. The vehicle16verifies the authenticity of the reservation details as described in greater in reference toFIG. 2herein using the decrypted secret key30, thereby allowing the user12to enter and operate the vehicle16for the predetermined time period of the reservation. The amount of data exchanged between the vehicle16and the mobile device14using a protocol such as BLE protocol over the limited or predefined wireless connection range34at the time when the user desires access to the vehicle16is minimized because a bulk of the reservation data had previously been exchanged directly between the server18and the vehicle16without requiring the presence of the user12. The time required for encrypted secret key30authentication, and therefore a maximum anticipated time for the user12to gain access to the vehicle16is approximately 4 seconds or less. Because the user12may be moving toward the vehicle16, or if the vehicle16is an autonomous vehicle moving toward the user12, the user12is not expected to be cognizant of a delay in accessing the vehicle16during the approximate4second authentication process.

Referring toFIG. 2and again toFIG. 1, multiple communication operations are delineated which the telematics authentication system10performs in a first stage36during a first time period38after the user12initiates the request for a reservation, but prior to the start of vehicle use. As previously noted the server18forwards the encrypted reservation certificate24including an intermediate certificate40and a user token42to the vehicle telematics module26. The vehicle telematics module26forwards an intermediate certificate serial number44to a computer46in the vehicle16. The computer46identifies if the intermediate certificate serial number44represents a new certificate serial number, and returns a data request48to the vehicle telematics module26. In response to the data request48, the vehicle telematics module26either forwards the intermediate certificate40if new, or forwards the user token42to the computer46. If the intermediate certificate40is received, the computer46in an authentication step50authenticates and stores the intermediate certificate40.

Using either the authenticated intermediate certificate40or the user token42, the computer46in a step52authenticates and stores a user certificate and generates the encrypted secret key30discussed above in reference toFIG. 2, and forwards the encrypted secret key30to the vehicle telematics module26. The encrypted secret key30is then forwarded from the vehicle telematics module26of the vehicle16to the server18, which forwards the encrypted secret key30to the mobile device14. In a step54and as previously noted the encrypted secret key30is decrypted and stored by the mobile device14for subsequent use. The user12at this time closes the application13on the mobile device14.

Once the encrypted secret key30is generated by the computer46, a valid certificate56indicating the reservation is complete and validated is generated by the computer46which is forwarded and saved in a vehicle module58. According to several aspects, the vehicle module58defines a Bluetooth® Low Energy module or a similar low energy, limited range wireless transmission system. Although the first time period38required for completion of all of the operations of the first stage36may range between approximately 12 seconds up to approximately 15 seconds, any of the operations of the first stage36can be delayed or rescheduled to suit the number or overlapping requirements of the reservations received by the server18. Delays occurring during the first stage36which may occur for example due to vehicle return delays, reservation cancellations, rescheduling, or vehicle maintenance are not apparent to the user12.

Following performance of the multiple communication operations in the first stage36, the following events occur in a second stage60during a second time period62when the mobile device14and the vehicle16are brought into the wireless connection range34to permit completion of the reservation. According to several aspects the second time period62is approximately 4 seconds or less.

When the user12reopens the reservation application13in the mobile device14, and after the mobile device14and the vehicle16are within the wireless connection range34, the mobile device14wirelessly transmits an authentication status query63which is received by the vehicle module58. The vehicle module58confirms the valid certificate56is present and returns a random challenge64to the mobile device14. Upon receipt of the random challenge64, the mobile device14in a step66retrieves the decrypted secret key30from memory and calculates a response. The calculated response is forwarded as a signal68verifying the secret key30was received to the vehicle module58. The vehicle module58in turn forwards the signal68to the computer46. If the computer46in an authentication step70authenticates the response received with the signal68the computer46sends a verification successful response signal72to the vehicle module58. The vehicle module58forwards the verification successful response signal72to the mobile device14to complete the authentication process, thereby allowing the user12to access the vehicle16.

Referring toFIG. 3and again toFIGS. 1 through 2, according to several aspects the vehicle16is equipped with multiple sensors that identify if the mobile device14and the vehicle16are together within the predefined wireless connection range34. These may include first, second, third and fourth sensors74,76,78,80which are spaced about a body82of the vehicle16, or to one or more bumpers84. An additional interior sensor86is positioned within the vehicle16, for example connected to or positioned within the vehicle module58. Although a response from any one of the first, second, third or fourth sensors74,76,78,80indicating the mobile device14and the vehicle16are together within the predefined wireless connection range34is sufficient to permit the user entrance into the vehicle16, a signal from the interior sensor86identifying the mobile device14is positioned within the vehicle16is required before the vehicle can be operated by the user12. The interior sensor86can therefore have a reduced sensitivity range compared to the first, second, third and fourth sensors74,76,78,80.

As previously noted the telematics authentication system10is operable to authenticate the secret key30when the mobile device14and the vehicle16are together within the predefined wireless connection range34. This occurs when the user12and therefore the mobile device14approaches the vehicle16, or if the vehicle16is an autonomously operated vehicle which approaches the user12and the mobile device14.

The telematics authentication system10using the server18notifies the vehicle16of the reservation details for the user12at the time the user12makes the reservation, and before the user12approaches within the predefined wireless connection range34of the vehicle16. Through the use of the telematics authentication system10a resultant authentication latency is reduced from a range of approximately 12 to 15 seconds for a system requiring all data to transfer from the user's mobile device to the vehicle to approximately 4 seconds or less.

The telematics authentication system10also permits personalized data of the user12to be uploaded by the user or by the system at the time of generating the reservation, therefore features and functions desired by the user12are ready when the user12enters the vehicle16. Such features and functions include but are not limited to radio preferences, lighting preferences, seat positions, mirror positions, climate control settings, and the like. This information can be uploaded by the user12at the time of making the reservation, or, if the user12has made a previous reservation using the telematics authentication system10this information can be retrieved from data stored in or accessed by the server18, or stored in the computer46.

The basic steps for obtaining a reservation are as follows. At specified time before the start of the reservation, user credentials are passed from a user's mobile device to a server and from the server to the vehicle using telematics. The vehicle performs device authorization and transmits a secret key to the server which then transmits the secret key to the mobile device. According to several aspects, the mobile device signals a status of the advanced reservation process and a confirmation signal or alert is issued to the user by the mobile device signifying receipt of the secret key defining a reservation complete signal. At a later date or time the mobile device exchanges encrypted communication with the vehicle to allow user access to the vehicle. In the event that there is no packet data connection to the vehicle, a secondary method of passing credentials through the mobile device to the vehicle using BLE is used. Prior to the first use of the mobile device with a vehicle, the authentication credentials are downloaded from the server to the vehicle using a telematics connection.

The location of the vehicle16at the time the user12initiates a reservation is not limiting, as the telematics authentication system10confirms from a vehicle availability schedule if the vehicle16will be available at the date and time the user12requests the use. The vehicle16may therefore be parked at the time of reservation, or may be in use with a different user. For autonomously operated vehicles, the telematics authentication system10will also identify when the vehicle16is currently in operation if the vehicle16can be routed to the user12to meet the user requested start time of the reservation, or if a different vehicle must be scheduled.

A method for authenticating a vehicle reservation by a user using a telematics authentication system of the present disclosure offers several advantages. These include providing the capability to download data concerning a vehicle reservation from a server to a vehicle before the start date of the reservation, with the vehicle storing the data. The method also provides for a secret key to be generated and submitted by the server via the vehicle to the mobile device of a user, ahead of the reservation date, that allows the user when the reservation start date arrives to open an application on the mobile device which automatically confirms the secret key with the vehicle to authorize the user's access to the vehicle. The amount of data required to be sent from the mobile device to the vehicle is therefore reduced, thereby limiting latency introduced by the secure transfer of the data on the reservation start date.