US 12,278,823 B2
Securing the connection between a vehicle and a remote management server for managing said vehicle
David Myara, Toulouse (FR)
Assigned to AMPERE S.A.S., Boulogne-Billancourt (FR); and NISSAN MOTOR CO., LTD., Yokohama (JP)
Appl. No. 18/000,670
Filed by RENAULT S.A.S, Boulogne-Billancourt (FR); and NISSAN MOTOR CO., LTD., Yokohama-Shi (JP)
PCT Filed May 27, 2021, PCT No. PCT/EP2021/064155
§ 371(c)(1), (2) Date Dec. 21, 2022,
PCT Pub. No. WO2021/244932, PCT Pub. Date Dec. 9, 2021.
Claims priority of application No. 20 05876 (FR), filed on Jun. 4, 2020.
Prior Publication US 2023/0262070 A1, Aug. 17, 2023
Int. Cl. H04W 12/45 (2021.01); H04L 9/40 (2022.01); H04W 4/44 (2018.01); H04W 12/03 (2021.01); H04W 12/121 (2021.01)
CPC H04L 63/1408 (2013.01) [H04W 4/44 (2018.02); H04W 12/03 (2021.01); H04W 12/121 (2021.01); H04W 12/45 (2021.01)] 10 Claims
OG exemplary drawing
 
1. A vehicle comprising:
circuitry configured to implement:
a communication module configured to use two telecommunication identifier cards, one relating to a subscription between a constructor of said vehicle and a telecommunications operator, an other relating to a subscription between a user of said vehicle and a telecommunications operator;
a trusted execution environment hosting security functions of the vehicle; and
a multimedia system execution environment hosting at least a part of said communication module,
wherein said trusted execution environment comprises a supervision module that monitors a connection between said vehicle and a remote management server of said vehicle, and when the supervision module detects an anomaly in the connection, the supervision module is configured to:
send a first instruction to the communication module, triggering a disabling of external communications for unsecured applications of the vehicle, when said communication module indicates that the cellular connection of the vehicle is unavailable for a time greater than a first predefined time interval, and
send a second instruction to the communication module, triggering a selection by the communication module of the telecommunication identifier card relating to the subscription of the constructor of said vehicle as a sole connection means, and the disabling by the communication module of any communication other than with said remote management server, when said communication module indicates that the cellular connection of the vehicle is unavailable for a time greater than a second predefined time interval greater than the first predefined time interval.