Digital receiver and method for receiving secure group data

Technical Field

0001The present invention generally relates to radio receivers and, more particularly, to the communication and selection of secure data in a digital receiver, such as a digital radio frequency (RF) receiver in a vehicle.

Background of the Invention

0002Automotive vehicles are commonly equipped with audio radios for receiving broadcast radio frequency (RF) signals and broadcasting audio information to passengers in the vehicle. More recently, satellite based digital audio radio (SDAR) services have become available that offer digital radio service covering a large geographic area, such as North America. Currently, a couple of satellite based digital audio radio services are available in North America, both of which generally employ either geo-stationary orbit satellites or highly elliptical orbit satellites that receive uplinked programming which, in turn, is rebroadcast directly to digital radios in vehicles on the ground that subscribe to the service. Additionally, a number of terrestrial (ground based) transmission repeaters are currently employed in certain areas susceptible to satellite signal blockage to provide a clean and uninterrupted radio signal broadcast. Each vehicle subscribing to the digital service generally includes a digital radio having a receiver and antennas for receiving the satellite and terrestrial signal broadcasts:

0003The radio receivers are programmed to receive and unscramble the digital data signals, which typically include many channels of digital audio. In addition to broadcasting the encoded digital quality audio signals, the satellite based digital audio radio service may also transmit data within a data bandwidth that may be used for various applications. The additional information may include information about the broadcast, such as song title, artist, and genre of music for display on the radio. The signal may also include further information for other reasons, such as advertising, informing the driver of warranty issues, providing information about the broadcast audio information, and providing news, sports, and entertainment broadcasting, in addition to other information. In addition to providing a general signal transmission to subscribing members, the satellite based digital audio radio service may also make available data bandwidth to certain groups, such as vehicle manufacturers, to provide the ability for the vehicle manufacturer to transmit data to select vehicles. In order to do so, it is generally desirable to be able to target the data communication to specific types of vehicles and/or receivers. Some data may be very sensitive to the vehicle and related systems, thus requiring various levels of security. Examples of such systems are disclosed in <patcit id="pcit0001" dnum="US5309516A"><text>US 5,309,516</text></patcit>, <patcit id="pcit0002" dnum="US4531020A"><text>US 4,531,020</text></patcit> and <patcit id="pcit0003" dnum="US20020184037A"><text>US 2002/0184037</text></patcit>.

0004There are many secure data communication techniques currently available to encrypt broadcast data, including secure keys, public keys, and public/private key methods. While data encryption techniques are generally employed in various data communication applications, it is desirable to provide for a receiver and method for securely communicating data to selected groups of vehicles and/or receivers in a vehicle.

Summary of the Invention

0005According to an aspect of the present invention there is provided a digital receiver according to claim 1.

0006According to another aspect of the present invention there is provided a method of decrypting an encrypted data stream according to claim 10.

0007In accordance with the teachings of the present invention, a digital radio receiver and method are provided for receiving a signal including a data stream having a key selector and encrypted data including a message and deciphering information relevant to the receiver environment. According to one aspect of the present invention, the receiver includes an input for receiving a signal having a data stream including a key selector encrypted data including a message. The receiver further includes a data decryption circuit including memory for storing one or more groups of decryption keys based on a characteristic of the receiver environment.

0008The data decryption circuit selects a group key based on the key selector and decrypts the message based on the selected group key.

0009According to another aspect of the present invention, a method for decrypting an encoded data stream including a key selector and encrypted data including a message in a signal broadcast is provided. The method includes the steps of receiving a signal including a data stream having a key selector and encrypted data including a message, and providing one or more groups of decryption keys based on a characteristic of the receiving environment. The method also includes a step of selecting a group key based on the key selector. The method further includes the step of decrypting the message based on the selected group key. Accordingly, the receiver and method of the present invention advantageously allow for the deciphering of secure information intended for a targeted group of receivers, such as a group of vehicles each equipped with a receiver.

0010These and other features, advantages and objects of the present invention will be further understood and appreciated by those skilled in the art by reference to the following specification, claims and appended drawings.

Brief Description of the Drawings

0011The present invention will now be described, by way of example, with reference to the accompanying drawings, in which: <ul id="ul0001" list-style="none" compact="compact"><li><figref idref="f0001">FIG. 1</figref> is a block diagram illustrating a vehicle equipped with a digital radio receiver for receiving RF signals broadcast by a digital audio radio service;</li><li><figref idref="f0002">FIG. 2</figref> is a block diagram illustrating a data decryption circuit in the radio receiver for decrypting encrypted messages;</li><li><figref idref="f0003">FIG. 3</figref> is a flow diagram illustrating a method of decrypting the messages according to the present invention;</li><li><figref idref="f0002">FIG. 4</figref> illustrates a data packet including a data message header and encrypted data message;</li><li><figref idref="f0002">FIG. 5</figref> is a lookup table for storing a plurality of groups of decryption keys;</li><li><figref idref="f0004">FIG. 6</figref> is a block diagram illustrating decryption using a plurality of decryption keys according to one embodiment; and</li><li><figref idref="f0005">FIG. 7</figref> is a block diagram illustrating decryption using a master decryption key according to another embodiment.</li></ul>

Description of the Preferred Embodiments

0012Referring to <figref idref="f0001">FIG. 1</figref>, a vehicle 10 is generally illustrated having a digital radio receiver 12 for receiving wireless RF signal broadcasts of a satellite based digital audio radio service (SDAR). The vehicle 10 generally includes a satellite antenna 14 for receiving RF signals broadcast from satellite-based transmitters. Additionally, the vehicle 10 is also shown equipped with a terrestrial antenna 16 for receiving RF digital data signals broadcast from terrestrial (ground based) transmitters (repeaters). While satellite and terrestrial based antennas 14 and 16, respectively, are shown and described herein, it should be appreciated that the vehicle 10 may be equipped with one or more antennas for receiving broadcast RF digital data signals from a digital audio radio service that communicates a selector key and encrypted data message as described herein.

0013The digital radio receiver 12 is programmed to receive and unscramble primary and secondary service digital data signals. The primary service data typically includes the audio service, while the secondary service data typically includes other information. The digital radio receiver 12 include an RF tuner 18 receiving RF signals received by each of satellite antenna 14 and terrestrial antenna 16. The RF tuner 18 selects a frequency bandwidth (channel) of digital audio to pass each of the RF signals (SAT1, SAT2, and TERR) within a tuned frequency bandwidth received by the antennas 14 and 16. The digital radio receiver 12 also includes a digital demodulator circuit 20 which receives analog signals output from tuner 18 and creates a digital time division multiplexed (TDM) data stream 22. The digital radio receiver 12 includes a source decoder circuit 24 that receives the time division multiplexed data stream 22 and selects the information contained in designated signal channels for both audio and data information contained within the data stream. The time division multiplexed data stream selection may occur prior to the source decoder circuit 24. The selected time division multiplexed digital channels containing the digital primary service audio information 26 are decompressed and passed on to an audio digital-to-analog converter 28 for outputting an analog audio output 29 for audio broadcast to passengers within the vehicle. The digital radio receiver 12 has a microcontroller 30 communicating with the RF tuner 18, digital modulator circuit 20, source decoder circuit 24, and audio digital-to-analog converter 28 by way of a communication bus.

0014The secondary service data including encrypted data 32 is separated from the primary service audio information at or before source decoder circuit 24. The digital radio receiver 12 of the present invention employs a data decryption circuit 36 for decrypting the encrypted data 32 as described herein. The data decryption circuit 36 receives the digital data including the encrypted data 32 from decoder circuit 24 and a key selection control signal 34 from microcontroller 30. By decrypting the encrypted data 32 with the use of decryption keys as described herein, selected secure data that is relevant to the receiver environment may be obtained and presented in data output 38 to the user of the digital radio receiver 12, such as a passenger in the vehicle 10.

0015Referring to <figref idref="f0002">FIG. 2</figref>, the data decryption circuit 36 is further illustrated including a microprocessor and memory 40. The microprocessor may include a conventional microprocessor having the capability for processing algorithms and data as described herein. The memory may include read-only memory (ROM), random access memory (RAM), flash memory, and other commercially available volatile and non-volatile memory devices. Stored and processed within the microprocessor memory 40 are one or more decryption algorithm(s) 42 and groups of decryption keys 44 as explained herein. The decryption keys 44 include groups of decryption keys that may be selected depending upon defined group criteria. According to one embodiment, the groups may include the vehicle manufacturer, the vehicle model, and the vehicle model year. Within each group of decryption keys, there are various individual decryption keys stored in memory which may be selected based on a unique identifier such as the vehicle identification number and/or receiver identification number.

0016Referring to <figref idref="f0003">FIG. 3</figref>, a method 100 is illustrated for decrypting the encrypted data message according to the present invention. The method 100 begins at step 102 and initializes the data decryption circuit in step 104. The initialization of the data decryption circuit includes obtaining the radio (receiver) identification number (RIN) and the vehicle identification number (VIN), which are unique identifiers of the digital radio receiver and vehicle, respectively. The radio identification number may be obtained from the radio receiver itself, while the vehicle identification number may be obtained from a vehicle controller, such as the engine controller. Following the initialization step 104, method 100 creates a unique decryption key based on the radio identification number and the vehicle identification number in step 106. The unique decryption key may alternately be determined based on the vehicle identification number or radio identification number, instead of the combination. The unique decryption key is unique to the digital radio receiver, and allows for private decryption to communicate secure data to a single receiver.

0017The method 100 uses the vehicle identification number to obtain group keys from a database stored in non-volatile memory in step 108. According to one embodiment, the database is a lookup table as illustrated in <figref idref="f0002">FIG. 5</figref> which includes a plurality of groups of decryption keys labeled group key 1 through group key M. Each of the group keys labeled key 1 through key M includes individual decryption keys 72. Within group key 1 are a plurality of decryption keys labeled key 11 through key 1N. Likewise, group key 2 includes a plurality of decryption keys labeled key 21 through key 2N. The Mth group key labeled key M similarly includes a plurality of decryption keys labeled key M1 through key MN. Within each group key, N may or may not be the same number.

0018It should be appreciated that each of the groups in group key 1 through group key M includes selectable decryption keys based on a characteristic of the receiving environment, such as a characteristic of the vehicle. In one embodiment, one set of group keys (e.g., key 1) may be based on the vehicle manufacturer (e.g., key 11 = Chevy, key 12 = Pontiac, key 13 = Saturn, key 14 = Lincoln, key 15 = Dodge, ..., and key 1N = Ford). Another group keys (e.g., key 2) may be based on the model type of vehicle (e.g., key 21 = Chevy Tahoe, key 22 = Chevy Monte Carlo, ..., and key 2N = Chevy Malibu). A further group key (e.g., key M) may be based on the model year of the vehicle (e.g., key M1 = 1998, key M2 = 1999, key M3 = 2000, key M4 = 2001, key M5 = 2002, ..., and key MN = 2030). Other groups could include service providers who would target certain receivers based on any number of factors, such as home area, gender, or coupled service interface including telematics, navigation, local FM, etc.

0019Returning to <figref idref="f0003">FIG. 3</figref>, the method 100 stores specific group keys in the digital radio receiver in step 110. In step 112, method 100 receives and processes the data message. The data message is a data stream that is shown in <figref idref="f0002">FIG. 4</figref>, according to one example. The data message includes a data message header 50 and encrypted data 60 which includes a message 62. The data message header 50 includes non-encrypted data with key selectors 52A-52M that select which group keys are to be employed to decrypt the encrypted data 60. The data message header 50 may also contain message length message identification, and other unencrypted information that may be required to define the message. Each of the key selectors 52A-52M may include a binary bit of "0" or "1," with a binary bit "1" indicating use of the corresponding group key, and a binary bit "0" representing non-use of the corresponding binary key. Additionally, the data message header 50 includes a unique key indicator which indicates use of the key unique 74 stored in the digital radio receiver lookup table to communicate private secure messages. The encrypted data 60 includes an encrypted message 62 which, with the use of the appropriate decryption key(s), may be decrypted and presented to the vehicle and/or passengers. Additionally, the encrypted data includes a verification message 64 which verifies whether proper decryption of the data has been performed.

0020Returning to <figref idref="f0003">FIG. 3</figref>, method 100 selects the appropriate keys based on the message header in step 116. This is achieved by selecting the appropriate decryption key from the memory lookup table for each group key selector 52A-52M that has been set with a binary bit "1." The encrypted data message is then decoded based on the selected decryption keys in step 118. This includes applying known decryption techniques to decrypt the data message with the decryption algorithm associated with each selected decryption key. Proceeding to decision step 120, method 100 checks whether the decoded message is verified as okay by reading the decrypted verification message 64 and determining if the decryption was proper. The decrypted verification message may include a cyclic redundant code (CRC) type check. If the decoded message is verified as okay, method 100 uses and/or outputs the decoded message with authentication in step 122 before returning to step 112. If the message is not verified as okay, method 100 returns to step 112 without authentication. Authenticated messages are presented or made available to the vehicle and its passengers. If the message is not authenticated, the message may be ignored.

0021Referring to <figref idref="f0004">FIG. 6</figref>, one example of a decryption circuit 80 is illustrated therein including three serial connectable shift registers 82A-82C for selecting combinations of keys for decrypting the data message. The serial shift registers 82A-82C are interconnected via switches 84A-84D to connect combinations of decryption algorithms for key 1, key 2, and key 3, respectively, in series. The switches 84A-84D are controlled to selectively switch in or out each of the serial shift register algorithms 82A-82C by way of a header/key control algorithm 88. The header/key controller algorithm 88 may be processed by the microprocessor and memory 40.

0022Referring to <figref idref="f0005">FIG. 7</figref>, a decryption circuit 80' is shown according to a second embodiment employing a master key algorithm 90. The master key algorithm 90 is made up of multiple shift registers 92A-92C that use the sum total of decryption key 1, key 2, and key 3, which are shown connected in parallel via switches 94A-94C. The switches 94A-94C are controlled by way of header/key controller algorithm 98 which may be processed by the microprocessor and memory 40. The decryption circuit 80' provides a single master key 90 as a summation of the individual decryption key 1 through key 3 to decrypt the data message according to known decryption techniques.

0023The use of a master key is shown in <figref idref="f0005">FIG. 7</figref> may require a more complex algorithm due to a larger bit encryption, whereas using multiple keys as shown in <figref idref="f0004">FIG. 6</figref> may use multiple, less complex algorithms. It should be appreciated that various decryption algorithms are known and may be associated with the master key and individual decryption keys as should be readily apparent to those skilled in the art. It should further be appreciated that the secure decryption keys can be constant or may change with time (rolling). With a rolling set of decryption keys, the data encryption may be more difficult to break. With a rolling set of keys, a time reading can be sent to the message header information to indicate what rolling key to use.

0024Accordingly, the receiver and method of the present invention advantageously decrypts data based on a selected group or groups of decryption keys that are relevant to a characteristic of the receiver environment. The receiver and method are particularly useful for use on a vehicle 10 for communicating secure messages with passengers in the vehicle. In the vehicle application, a vehicle manufacturer is able to communicate secure data to passengers in the vehicle which pertain to a selected vehicle manufacturer, vehicle model, vehicle model year, and other designated group classifications, so as to target certain vehicles, while the broadcast message is ignored by vehicles which do not have the characteristics specified in the selected group. This allows for multiple levels of message control by content suppliers and does not require that hardware manufacturers have a predetermined decryption key in advance.