KR20180130200A - Method for secure communication with nomadic device using vehicle gateway - Google Patents

Abstract

A vehicle gateway and a method for secure communication with a nomadic device performed thereby are disclosed. The method for secure communication with a nomadic device performed by a vehicle gateway according to the present invention includes the steps of: determining whether the nomadic device requesting authentication is a previously registered device; establishing a secure connection with the registered nomadic device; receiving a request for service information from the nomadic device; analyzing traffic corresponding to the nomadic device to verify the nomadic device; and transmitting vehicle-related information to the nomadic device which is completely verified. Accordingly, the present invention can secure the privacy and safety of a vehicle.

Description

METHOD FOR SECURITY COMMUNICATION WITH NOMADIC DEVICE USING VEHICLE GATEWAY < RTI ID = 0.0 >

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technology for secure connection between a vehicle gateway and a nomadic device, and more particularly, to a technique for minimizing the risk of hijacking a vehicle by allowing only a proven nomadic device to access the vehicle gateway.

With the development of the Internet and wireless communication technologies and the emergence of smartphones, users can use Internet-based applications anytime and anywhere in their daily lives. Users can easily send and receive e-mails using games, web surfing, news, social services, etc. via the Internet.

On the other hand, ICT technology converged in automobiles, evolved into a smart car that improves safety and improves convenience while driving, and many ICT-based services have begun to be applied to automobiles that provided only mobility.

Such services are generally implemented in such a way that a smart device such as a smart phone is connected to a telematics / infotainment device mounted on a head unit of an automobile. In addition, the smart device is provided with various information that the vehicle recognizes, such as traffic information including accident information and vehicle diagnosis information when driving the vehicle. At this time, smart devices and automobile telematics / infotainment devices require communication between vehicle-to-nomadic devices (V2N).

V2N communication is advantageous in that the user can receive vehicle-related services directly from a non-multimedia device such as a user's smart phone. However, by exploiting the V2N communication, infiltration of malicious code through the telematics / infotainment device or attempted hacking can cause serious problems on the privacy and safety of the vehicle.

There are cases of hacking using a vehicle self-diagnosis device or a remote control function and cases of malicious code transfer through hacking of a dealer inspection tool. Technological measures are required to solve this problem, but conventional technologies have little solution .

Korean Patent No. 10-1620205, May 12, 2016 (Name: V2X communication apparatus and transmission power control method thereof)

An object of the present invention is to make it possible to secure the privacy and safety of a vehicle by allowing only the nomadic device that has been authenticated to access the vehicle.

It is also an object of the present invention to enable a vehicle gateway mounted on a vehicle to perform authentication for a nomadic device.

It is also an object of the present invention to ensure reliability of an application installed in a nomadic device.

It is another object of the present invention to enable mutual authentication and secure channel between an application installed in a nomadic device and a service module of a vehicle.

It is also an object of the present invention to enable access control corresponding to rights of an application installed in a nomadic device and a nomadic device.

It is also an object of the present invention to analyze communication traffic between a vehicle and a nomadic device to detect malicious traffic and hacking attempts.

According to another aspect of the present invention, there is provided a method for secure communication with a nomadic device performed by a vehicle gateway, the method comprising: determining whether a nomadic device requesting authentication is a pre-registered device; Establishing a secure connection with the MAC device, receiving a service information request from the nomadic device, analyzing traffic corresponding to the nomadic device, performing verification of the nomadic device, and verifying And transmitting the vehicle-related information to the completed nomadic device.

In this case, in the step of transmitting the vehicle-related information to the verified non-verbal device, the vehicle-related information corresponding to the authority of the previously registered non-verbal device may be transmitted to the nominal device.

At this time, the vehicle-related information may include at least one of information corresponding to communication between vehicles, information corresponding to communication between the vehicle and the road infrastructure, and vehicle diagnostic information.

The method may further include receiving the authentication request from the nomadic device that has performed authentication for at least one application installed in the nomadic device.

In this case, if the nomadic device requesting the authentication is not previously registered, the step of setting the rights of the nomadic device and the nomadic device with respect to the vehicle-related information may include registering the nomadic device .

Also, the vehicle gateway according to an embodiment of the present invention includes a nomadic device authentication unit for determining whether the nomadic device requesting authentication is a pre-registered device, a security setting unit for establishing a secure connection with the registered nomadic device A vehicle network analyzer for analyzing the traffic corresponding to the nomadic device and performing verification of the nomadic device, and a controller for receiving a service information request from the nomadic device, And a communication unit for transmitting related information.

The access control unit may further include an access control unit for controlling access of the nomadic device based on the privilege information of the nomadic device previously registered.

At this time, the vehicle-related information may include at least one of information corresponding to communication between vehicles, information corresponding to communication between the vehicle and the road infrastructure, and vehicle diagnostic information.

At this time, the communication unit may receive the authentication request from the nomadic device that has performed authentication for one or more applications installed in the nomadic device.

In this case, when the nomadic device requesting the authentication is not registered, the nomadic device management unit sets the rights of the nomadic device and the nomadic device with respect to the vehicle related information and registers the nomadic device .

According to the present invention, only the nomadic device that has been authenticated can be accessed by the vehicle, thereby ensuring the privacy and safety of the vehicle.

Further, according to the present invention, a vehicle gateway mounted on a vehicle can perform authentication for a nomadic device.

Further, according to the present invention, reliability of an application installed in the nomadic device can be ensured.

Further, according to the present invention, mutual authentication and secure channel between the application installed in the nomadic device and the service module of the vehicle can be formed.

Also, according to the present invention, it is possible to perform access control corresponding to authority of an application installed in a nomadic device and a nomadic device.

Also, according to the present invention, communication traffic between the vehicle and the nomadic device can be analyzed to detect malicious traffic and hacking attempts.

FIG. 1 is a schematic view illustrating an environment for performing secure communication between a vehicle gateway and a nomadic device according to an exemplary embodiment of the present invention. Referring to FIG.
2 is a block diagram illustrating a configuration of a vehicle gateway according to an embodiment of the present invention.
3 is a block diagram illustrating a configuration of a nomadic device according to an embodiment of the present invention.
4 is a flowchart illustrating a method for secure communication with a nomadic device performed by a vehicle gateway according to an embodiment of the present invention.
5 is an exemplary view showing a configuration of a vehicle diagnostic system including a vehicle gateway and a nomadic device according to an embodiment of the present invention.
6 is a block diagram illustrating a computer system in accordance with an embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail.

It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In the present application, the terms "comprises" or "having" and the like are used to specify that there is a feature, a number, a step, an operation, an element, a component or a combination thereof described in the specification, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the relevant art and are to be interpreted in an ideal or overly formal sense unless explicitly defined in the present application Do not.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In order to facilitate the understanding of the present invention, the same reference numerals are used for the same constituent elements in the drawings and redundant explanations for the same constituent elements are omitted.

FIG. 1 is a schematic view illustrating an environment for performing secure communication between a vehicle gateway and a nomadic device according to an exemplary embodiment of the present invention. Referring to FIG.

As shown in FIG. 1, the vehicle gateway 200 provided in the vehicle 100 is connected to the nomadic device 300 through a secure connection. The vehicle gateway 200 and the nomadic device 300 may perform vehicle-to-nomadic device (V2N) communication between the vehicle and the nomadic device to provide the vehicle related service to the user.

The vehicle 100 may communicate with the nomadic device 300 through at least one of an internally provided central gateway, a head unit, and an on-board unit (OBU) A central gateway, a head unit, and an OBU.

When the vehicle gateway 200 receives a request for authentication from the nomadic device 300, the vehicle gateway 200 first determines whether the nomadic device 300 requesting authentication is a registered nomadic device. If the nomadic device 300 is a registered nomadic device, It is possible to verify whether the nomadic device 300 is forged or not.

If it is determined that the nomadic device 300 is not forged, the vehicle gateway 200 establishes a secure connection with the nomadic device 300. In addition, the vehicle gateway 200 may transmit the service information request to the nomadic device 300 and may analyze the corresponding traffic to the nomadic device 300 to perform verification of the nomadic device 300. After the final verification of the nomadic device 300 is completed, the vehicle gateway 200 may send the vehicle related information to the nomadic device 300.

The nomadic device 300 includes a V2N service application such as a diagnostic application and is connected to the vehicle gateway 200 of the vehicle 100 and is provided with various vehicle related information corresponding to the vehicle 100. [ Here, the nomadic device 300 may mean a smart device such as a smart phone or a smart pad, and the type of the smart device is not limited thereto.

At this time, the nomadic device 300 may authenticate one or more applications installed in the nomadic device, and then send an authentication request to the vehicle gateway 200. When the vehicle gateway 200 receives the authentication request from the corresponding nomadic device 300, Related information from the vehicle gateway 200 only when authentication and verification of the application installed in the nomadic device 300 are successful.

On the other hand, if the authentication and verification of the application of the nomadic device 300 or the nomadic device 300 fails, the vehicle gateway 200 determines that the nomadic device 400 is an illegal nomadic device 400 that illegally accesses the corresponding nomadic device Related information to the abnormal non-parametric device 400, and can block the access of the abnormal non-parametric device 400.

That is, the vehicle gateway 200 can verify whether the application installed in the nomadic device 300 is a normal application and restrict access to the vehicle gateway 200 only to the application of the verified nomadic device 300 have.

The vehicle gateway 200 may be connected to one or more nomadic devices 300 and the vehicle gateway 200 may be connected to the one or more nomadic devices 300. For example, The nomadic device 300 may be coupled to a vehicle gateway 200 corresponding to one or more vehicles 100.

Hereinafter, the configuration of a vehicle gateway according to an embodiment of the present invention will be described in more detail with reference to FIG.

2 is a block diagram illustrating a configuration of a vehicle gateway according to an embodiment of the present invention.

2, the vehicle gateway 200 includes a communication unit 210, a nomadic device authentication unit 220, a security connection unit 230, a vehicle network analysis unit 240, an access control unit 250, And a device management unit 260.

First, the communication unit 210 receives an authentication request and a service information request from the nomadic device 300, and transmits the vehicle-related information to the verified device 300 that has been verified. Here, the nomadic device 300 for transmitting an authentication request to the communication unit 210 may refer to a nomadic device that has performed authentication for one or more applications installed in the nomadic device.

The nomadic device authentication unit 220 determines whether the nomadic device 300 that transmitted the authentication request is a registered nomadic device. The nomadic device authentication unit 220 determines whether the nomadic device 300 requesting the authentication is registered in the nomadic device management unit 260 to be described later and determines whether the nomadic device 300 is registered It is possible to judge whether it is a nomadic device or not.

Next, when it is determined that the nomadic device 300 is a previously registered nomadic device, the secure connection unit 230 establishes a secure connection with the corresponding nomadic device 300. The security connection unit 230 can establish a security connection based on a security protocol such as vehicle PKI-based SSL / TLS communication.

The vehicle network analyzer 240 analyzes the traffic corresponding to the nomadic device 300 and performs verification of the nomadic device. The vehicle network analyzer 240 may analyze the traffic including the information transmitted by the applications installed in the nomadic device 300 or the nomadic device 300 to detect hacking or intrusion attempts.

The vehicle network analyzer 240 can analyze the traffic in real time or non-real time as needed. If a hacking or intrusion attempt is detected as a result of analyzing the traffic, the vehicle network analyzer 240 analyzes the traffic of the nomadic device 300 ), And can provide the result of analyzing the traffic to the user.

Next, the access control unit 250 controls the access of the nomadic device 300 based on the privilege information of the registered nomadic device. Here, the rights information of the nomadic device may be stored and managed in the nomadic device management unit 260, and the access control unit 250 may extract the rights setting information corresponding to the nomadic device 300, Can be utilized.

For example, it is assumed that the authority for traffic safety-related information is set for the A application of the first nomadic device, and the authority for the vehicle diagnostic information is not set. At this time, when the A application of the first nomadic device transmits a service information request, the access control part 250 permits access to the traffic safety related information corresponding to the permission setting information of the A application of the first nomadic device , The traffic safety related information can be transmitted to the corresponding nomadic device.

In addition, when the A application of the first nomadic device transmits a service information request for the vehicle diagnostic information for which the authority is not set, the access control unit 250 may restrict access to the vehicle diagnostic information, The result of the information request can be provided.

Finally, when the nomadic device 300 requesting authentication is not registered, the nomadic device management unit 260 sets the rights of the nomadic device, registers the nomadic device, Manage device information.

Hereinafter, the configuration of the nomadic device according to an embodiment of the present invention will be described in detail with reference to FIG.

3 is a block diagram illustrating a configuration of a nomadic device according to an embodiment of the present invention.

3, the nomadic device 300 includes a security management unit 310, an authentication token issuing unit 320, and a secure communication unit 330. [

First, the security management unit 310 operates at all times in the background of the nomadic device 300 and operates the at least one of the application installed in the nomadic device 300, the authentication token issuance unit 320 and the security communication unit 330 Can be checked.

At this time, the security management unit 310 can determine whether the application is forged or falsified by using the signature information of the application, the size of the application at the time of installing the application, and the installation date information. In addition, the security management unit 310 may check whether the authentication token issuer 320 and the security communication unit 330 are falsified or not.

If it is determined that the certificate is not forged, the security manager 310 requests the authentication token issuing unit 320 to issue a V2N communication vehicle PKI certificate and issue a secret key.

Next, the authentication token issuing unit 320 issues an authentication token corresponding to the authentication mechanism. The authentication token issuing unit 320 may use a public key certificate / secret key for secure authentication, and may use a CAMP Vehicular PKI that can be used in a vehicle, and may issue a vehicle PKI certificate for V2N communication. For convenience of explanation, the authentication token issuing unit 320 has been described as issuing the vehicle PKI certificate, but the type of the authentication mechanism is not limited thereto.

The security communication unit 330 is activated when the application of the nomadic device 300 is executed and connects to the vehicle gateway 200 of the vehicle 100. [ At this time, the security communication unit 330 can perform an authentication and session key exchange procedure through a security protocol for security, and ensures the confidentiality and integrity of data transmitted to and from the vehicle gateway 200 based on the exchanged session key can do.

Here, the security protocol may be Secure Socket Layer (SSL) / Transport Layer Security (TLS) or a similar protocol, and the type of the security protocol is not limited thereto.

Hereinafter, a secure communication method with a nomadic device performed by a vehicle gateway according to an embodiment of the present invention will be described in detail with reference to FIG.

4 is a flowchart illustrating a method for secure communication with a nomadic device performed by a vehicle gateway according to an embodiment of the present invention.

First, the vehicle gateway 200 receives an authentication request from the nomadic device 300 (S410).

Then, the vehicle gateway 200 determines whether the nomadic device 300 transmitting the authentication request is a previously registered nomadic device (S420).

The vehicle gateway 200 determines whether the information on the nomadic device 300 that transmitted the authentication request is stored in the nomadic device management section and determines whether the nomodic device 300 is a device can do. At this time, if it is not a previously registered nomadic device, the vehicle gateway 200 may set a rights and register the corresponding nomadic device 300 (S430).

The vehicle gateway 200 receives the registration of the unregistered nomadic device from the user, and can register the nomadic device 300. At this time, the vehicle gateway 200 can set the authority of the nomadic device 300 and register it.

For convenience of explanation, it is determined in step S420 whether the nomadic device 300 is a registered nomadic device, and the nonregistered device 300 is registered in step S430. However, the present invention is not limited to this, The gateway 200 determines whether the application installed in the nomadic device 300 is an already registered application in step S420 or registers an application that is not registered in step S430.

In addition, the vehicle gateway 200 can perform a process of verifying that the nomadic device 300, which transmitted the authentication request, is a registered nomadic device and that the corresponding nomadic device 300 has not been tampered with.

At this time, the vehicle gateway 200 can verify whether the corresponding nomadic device 300 is forged or falsified by using the authentication information included in the USIM card of the nomadic device 300. Also, the vehicle gateway 200 can verify whether the nomadic device 300 is forged or not by utilizing the device fingerprint information of the nomadic device 300 without going through a third party such as a communication company. Here, the device fingerprint information may be a radio wave fingerprint, and the type of the device fingerprint information is not limited thereto.

The vehicle gateway 200 has been described as terminating the secure communication process with the nomadic device after performing the step S430. However, the vehicle gateway 200 is not limited to the nomadic device 300, And then, the process after step S420 of FIG. 2 can be performed again.

If it is determined that the nomadic device 300 has not been forged or falsified, the vehicle gateway 200 performs authentication for the nomadic device 300, (Step S440).

The vehicle gateway 200 receives a service information request from the nomadic device 300 (S450).

The service information request received from the nomadic device 300 may include the type of vehicle-related information requesting. Here, the vehicle-related information may include, but is not limited to, information corresponding to inter-vehicle communication, information corresponding to communication between the vehicle and the road infrastructure, and vehicle diagnostic information.

The nomadic device 300 may send a service information request to the vehicle gateway 200 via one or more applications. For example, the A application of the nomadic device 300 may request access to traffic safety related information and vehicle diagnostic information, and the B application may request access to vehicle diagnostic information.

The vehicle gateway 200 receiving the service information request from the application of the nomadic device 300 can control the access based on the rights setting information for the nomadic device 300 and the application of the nomadic device 300.

If the authority setting information of the A application is set only for the traffic safety related information and the authority for the vehicle diagnosis information is not set, the vehicle gateway 200 restricts access to the vehicle diagnostic information of the A application . On the other hand, when the permission setting information of the B application is set to allow access to the vehicle diagnostic information, the vehicle gateway 200 can allow the B application to access the vehicle diagnostic information.

In addition, the vehicle gateway 200 analyzes the traffic corresponding to the communication with the nomadic device 300 and performs verification (S460).

The vehicle gateway 200 may analyze traffic including information transmitted by the at least one application installed in the nomadic device 300 and the nomadic device 300 to detect a hacking or intrusion attempt. At this time, the vehicle gateway 200 can analyze traffic in real time or in non-real time.

In this manner, the vehicle gateway 200 can protect the vehicle gateway 200 from external attacks by detecting malicious traffic and hacking attempts through traffic analysis.

Finally, the vehicle gateway 200 transmits the vehicle-related information to the nomadic device 300 that has been verified (S470).

The vehicle gateway 200 transmits the vehicle-related information corresponding to the request for service information received from the nomadic device 300 to the corresponding nomadic device 300. At this time, the nomadic device 300 receiving the vehicle-related information is a nomadic device previously registered in the vehicle gateway 200, and is a native nomadic device 300 that is not copied, and includes an application that is not forged. In addition, the nomadic device 300 receiving the vehicle-related information means the nomadic device 300 determined to have not caused a hacking or intrusion attempt as a result of traffic analysis.

The vehicle-related information transmitted from the vehicle gateway 200 to the nomadic device 300 corresponds to the request for the service information. The vehicle-related information corresponds to the request of the nomadic device 300 and the nomadic device 300, Vehicle-related information corresponding to the set authority.

Further, the vehicle gateway 200 is connected to a vehicle control unit (ECU), which includes at least one of electronic control units (ECU) related information in a CAN (Controller Area Network), various traffic safety related information received via V2V / V2I, And may provide information corresponding to the rights of the nomadic device 300 and the application.

The vehicle gateway 200 may transmit the vehicle-related information to the nomadic device 300 through the secure connection established in step S440.

Hereinafter, the operation of the vehicle diagnostic system including the vehicle gateway and the nomadic device according to another embodiment of the present invention will be described in more detail with reference to FIG.

5 is an exemplary view showing a configuration of a vehicle diagnostic system including a vehicle gateway and a nomadic device according to an embodiment of the present invention.

As shown in FIG. 5, the vehicle gateway 600 may communicate with one or more nomadic devices 500.

When the replicated nomadic device 700 wants to access the vehicle's gateway 600 by replicating the application and other authentication information of the normal nomadic device 500 and the appropriate security measures are not performed, The device 700 can also access the vehicle gateway 600.

In addition, the nomadic device may modulate the application of the normal nomadic device 500 to attempt an unauthorized privilege access violating the normal rights configuration information, or may attempt to hack using the currently connected communication.

In this case, when the application and the vehicle gateway 600 can not know whether or not the application is forged or falsified, the application can request the vehicle-related information exceeding the preset authority when the application normally accesses and authenticates. The vehicle related information can be transmitted to a place contrary to the intention of the user, and it is possible to attempt a denial-of-service attack, a buffer overflow attack, or the like on the currently connected network, and a serious influence on the privacy of the user and the safety of the vehicle Lt; / RTI >

When the application of the nomadic device 500 does not normally access the vehicle gateway 600 of the target vehicle when the security session is created after the mutual authentication process in the V2N communication, , It can not be confirmed whether the vehicle gateway 600 is normally communicating with the application. As a result, it is possible to attack the middle man, and the content of the communication may be exposed to the third party according to the vulnerability of the protocol used in the lower layer or may be forged.

Accordingly, the vehicle gateway 600 according to an embodiment of the present invention performs authentication of the vehicle gateway 600 of the vehicle with respect to the nomadic device 500, and the application included in the nomadic device 500 is not forgiven The reliability of the application can be guaranteed.

In addition, the vehicle gateway 600 performs mutual authentication between the application of the nomadic device 500 and the vehicle gateway 600, forms a secure channel, accesses the nomadic device 500 and the application by authority , V2N traffic in the vehicle can be analyzed to detect malicious traffic and hacking attempts.

5, the secure connection module 530 of the nomadic device 500 may be included in a library form in a V2N service application, such as the diagnostic app 540. [ When the diagnostic application 540 is executed, the secure connection module 530 requests verification of the diagnostic application 540 to the security management module 510, and transmits an authentication request to the vehicle gateway 600 upon successful verification .

If the vehicle PKI client module 520 and the secure connection module 530 are forged, the normal security function does not work. Accordingly, the security management module 510 can perform a process of verifying that the vehicle PKI client module 520 and the secure connection module 530 have not been tampered with, as well as the diagnostic application 540. [ Accordingly, the nomadic device 500 according to an exemplary embodiment of the present invention can ensure the reliability of the diagnostic application (application) of the nomadic device 500. [

The vehicle PKI client module 520 of the nomadic device 500 issues and stores a vehicle PKI certificate and a secret key to securely authenticate using a trusted / secure connected security protocol. The security management module 510 of the nomadic device 500 may then generate and store the secret key itself.

In addition, the security management module 510 may provide security information to the secure connection module 530 when the secure connection module 530 desires to transmit an authentication request to the vehicle gateway 600. For example, when performing TLS communication, the security management module 510 may generate necessary certificate information, authentication information using a secret key, session key exchange information, and the like, and transmit the same to the secure connection module 530.

Upon receiving the authentication request, the vehicle gateway 600 performs authentication for the nomadic device 500 and the diagnostic application (application) through the device / application authentication module 620, Lt; RTI ID = 0.0 > trusted / secure < / RTI >

The device / application authentication module 620 may determine whether the device is a nomadic device registered in the nomadic device management module 610 and perform authentication for the nomadic device 500. In addition, the device / application authentication module 620 performs a process of confirming that the nomadic device 500 is not replicated and that the application has not been tampered with, and performs authentication for the nomadic device and the application can do.

If the authentication is successful, the secure connection module 630 can establish a secure connection (secure connection) using a secure protocol such as vehicle PKI-based SSL / TLS communication. That is, the secure connection module 630 establishes a secure connection, performs mutual authentication between the application of the nomadic device 500 and the vehicle gateway 600, forms a secure channel, and performs secure communication.

On the other hand, when receiving the service information request from the nomadic device 500, the nomadic device access control module 640 of the vehicle gateway 600 determines whether the nomadic device 500 corresponding to the service information request And performs access control accordingly. And the vehicle gateway 600 may transmit the vehicle-related information corresponding to the authority to the nomadic device 500 and the application.

The vehicle network analysis module 650 of the vehicle gateway 600 analyzes the traffic including information transmitted by the nomadic device 500 that is a V2N device and the application to detect hacking or intrusion attempts, And the vehicle gateway 600 can perform secure communication.

3 corresponds to the nomadic device 300 of FIG. 3, and each of the security management module 510, the vehicle PKI client module 520, and the secure connection module 530 corresponds to the security Management unit 310, the authentication token issuing unit 320, and the secure communication unit 330, and redundant description will be omitted.

And the vehicle gateway 600 of FIG. 5 may correspond to the vehicle gateway 200 of FIG. Each of the nomadic device management module 610, the device / application authentication module 620, the secure connection module 630, the nomadic device access control module 640, and the vehicle network analysis module 650 of FIG. 2, the nomadic device management unit 260, the nomadic device authentication unit 220, the secure connection unit 230, the access control unit 250, and the vehicle network analysis unit 240, It is omitted.

6 is a block diagram illustrating a computer system in accordance with an embodiment of the present invention.

Referring to FIG. 6, embodiments of the present invention may be implemented in a computer system 800, such as a computer readable recording medium. 8, a computer system 800 includes one or more processors 810, a memory 830, a user input device 840, a user output device 850, and a storage 850, which communicate with one another via a bus 820. [ 860 < / RTI > In addition, the computer system 800 may further include a network interface 870 connected to the network 880. The processor 810 may be a central processing unit or a semiconductor device that executes the processing instructions stored in the memory 830 or the storage 860. [ Memory 830 and storage 860 may be various types of volatile or non-volatile storage media. For example, the memory may include ROM 831 or RAM 832.

Thus, embodiments of the invention may be embodied in a computer-implemented method or in a non-volatile computer readable medium having recorded thereon instructions executable by the computer. When computer readable instructions are executed by a processor, the instructions readable by the computer are capable of performing the method according to at least one aspect of the present invention.

As described above, the method for secure communication with the vehicle gateway and the nomadic device performed by the vehicle gateway according to the present invention is not limited to the configuration and method of the embodiments described above, All or some of the embodiments may be selectively combined so as to allow the modification to be made.

100: vehicle 200: vehicle gateway
210: communication unit 220: nomadic device authentication unit
230: security connection unit 240: vehicle network analysis unit
250: access control unit 260: nomadic device management unit
300: Nomadic device 310: Security manager
320: Authentication token issuing unit 330: Security communication unit
400: Abnormal Nomadic Device 500: Nomadic Device
510: Security Management Module
520: vehicle PKI client module
530: Secure Access Module 540: Diagnostic App
600: Vehicle gateway 610: Nomadic device management module
620: device / application authentication module 630: security access module
640: Nomadic device access control module
650: Vehicle Network Analysis Module
700: Replicated nomadic device
800: computer system 810: processor
820: bus 830: memory
831: ROM 832: RAM
840: user input device 850: user output device
860: Storage 870: Network Interface
880: Network

Claims (1)

A method for secure communication with a nomadic device performed by a vehicle gateway,
Determining whether the nomadic device requesting authentication is a pre-registered device,
Establishing a secure connection with the previously registered nomadic device,
Receiving a service information request from the nomadic device,
Analyzing traffic corresponding to the nomadic device and performing verification of the nomadic device, and
And transmitting vehicle-related information to the nomadic device that has been verified.

Images