Establishing secure communication for vehicle diagnostic data

摘要

A vehicle diagnostic communication system and a method of establishing a secure diagnostic session at a vehicle is disclosed. The method includes the steps of: providing a seed value from an electronic control unit (ECU) to a vehicle diagnostics tool; determining a first challenge response at the diagnostics tool, a remote server coupled to the diagnostics tool, or both, wherein the first challenge response is calculated using the seed value and one or more iterations of a key derivation function; providing the first challenge response to the ECU; and if the first challenge response is validated at the ECU, conducting a diagnostic session between the diagnostics tool and the ECU.

主权项

1. A method of establishing a secure diagnostic session at a vehicle, comprising the steps of:
providing a seed value from an electronic control unit (ECU) to a vehicle diagnostics tool (VDT); in response to providing the seed value to the VDT, receiving at the ECU a first challenge response; determining a session key at the ECU using the seed value as an input to a first key derivation function (KDF); determining a second challenge response using the session key as an input to a second KDF; determining at the ECU whether the first challenge response is valid based on the second challenge response; and when the first challenge response is valid, then initiating at the ECU a diagnostic session between the VDT and the ECU.