US 12,284,179 B2
Authentication method and apparatus for defending against attacks on UAM aircraft
Young Bin Min, Busan (KR); and Seung Wook Park, Yongin-si (KR)
Assigned to Hyundai Motor Company, Seoul (KR); and Kia Corporation, Seoul (KR)
Filed by Hyundai Motor Company, Seoul (KR); and Kia Corporation, Seoul (KR)
Filed on Mar. 21, 2023, as Appl. No. 18/187,065.
Claims priority of application No. 10-2022-0097085 (KR), filed on Aug. 4, 2022.
Prior Publication US 2024/0048557 A1, Feb. 8, 2024
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/0869 (2013.01) [H04L 63/0807 (2013.01)] 16 Claims
OG exemplary drawing
 
1. A method performed by a pilot terminal assisting a pilot to remotely control an aircraft, the method comprising:
performing pilot authentication based on a first challenge-response process with an authentication server;
transmitting first flight information to the authentication server;
receiving a first authentication token provided in response to verification of the first flight information in the authentication server;
transmitting the first authentication token to an aircraft system;
receiving a second authentication token from the aircraft system, the second authentication token being transmitted by the aircraft system to the authentication server when authentication for a security manager boarding the aircraft succeeds based on a second challenge-response process performed between the aircraft system and the authentication server, wherein the second authentication token corresponds to that provided to the aircraft system in response to verification by the authentication server for second flight information; and
sharing a session key and a message authentication code (MAC) key, which will be used to transmit remote control related data, with the aircraft system, when mutual authentication between the pilot terminal and the aircraft system, which is performed based on the first authentication token and the second authentication token, succeeds, wherein the remote control related data is encrypted using the session key and transmitted in a predetermined data format, and the predetermined data format comprises a freshness value or a message authentication code MAC).