Secure start system for an autonomous vehicle

Patent metadata

Field	Value
Publication number	US-10089116-B2
Application number	US-201615074892-A
Country	US
Kind code	B2
Filing date	Mar 18, 2016
Priority date	Mar 18, 2016
Publication date	Oct 2, 2018
Grant date	Oct 2, 2018

Abstract

A secure start system for an autonomous vehicle (AV) can include a compute stack and a communications router. The communications router can include an encrypted router drive and an input interface to receive a boot-loader that includes a basic decryption key to decrypt the encrypted router drive and enable network communications with a backend system. The secure start system can utilizes a tunnel key from the backend system to establish a private communications session with a backend data vault, and retrieve a set of decryption keys from the backend data vault, via the private communications session, to decrypt a plurality of encrypted drives of the AV.

First claim

What is claimed is:

1. A secure start system for an autonomous vehicle, the secure start system comprising:
a compute stack comprising a plurality of encrypted drives that, when decrypted, enable one or more functions of the autonomous vehicle; and
a communications router connected to the compute stack, the communications router comprising:
an encrypted router drive; and
an input interface to receive a boot-loader comprising a basic decryption key to (i) decrypt the encrypted router drive, and (ii) enable network communications with a backend system;
wherein the secure start system (i) utilizes a tunnel key from the backend system to establish a private communications session with a backend data vault, and (ii) retrieves a set of decryption keys from the backend data vault, via the private communications session, to decrypt the plurality of encrypted drives.

2. The secure start system of claim 1 , wherein the input interface comprises a universal serial bus (USB) interface, and wherein the boot-loader comprises a USB connected boot-up drive including the basic decryption key.

3. The secure start system of claim 1 , wherein upon enabling network communications, the communications router transmits credentials from the boot-loader to the backend system, and wherein the communications router receives the tunnel key when the backend system authenticates the credentials.

4. The secure start system of claim 3 , wherein the communications router transmits the credentials and receives the tunnel key using secure hypertext transfer protocol (HTTPS) communications with the backend system.

5. The secure start system of claim 1 , wherein the tunnel key comprises an Internet Protocol Security (IPsec) tunnel key, and wherein the private communications session comprises an IPsec tunnel to the backend data vault to retrieve the set of decryption keys.

6. The secure start system of claim 1 , wherein decryption of the plurality of encrypted drives using the set of decryption keys enables autonomous drive functions for the autonomous vehicle.

7. The secure start system of claim 1 , wherein the compute stack comprises encrypted data logs to store session data corresponding to a drive session of the autonomous vehicle.

8. The secure start system of claim 7 , wherein the data logs are accessible via insertion of a log reader into the input interface, and wherein the log reader includes a decryption key that decrypts the data logs to retrieve the session data.

9. An autonomous vehicle comprising:
a sensor system to dynamically generate sensor data indicating a situational environment of the autonomous vehicle;
acceleration, braking, and steering systems;
a compute stack comprising a plurality of encrypted drives that, when decrypted, (i) processes the sensor data to identify features when the autonomous vehicle operates in an autonomous drive mode, and (ii) utilizes the processed sensor data to operate the acceleration, braking, and steering systems in the autonomous drive mode; and
a secure start system connected to the compute stack, the secure start system comprising:
a communications router including an encrypted router drive; and
an input interface to receive a boot-loader comprising a basic decryption key to (i) decrypt the encrypted router drive, and (ii) enable network communications with a backend system;
wherein the secure start system (i) utilizes a tunnel key from the backend system to establish a private communications session with a backend data vault, and (ii) retrieves a set of decryption keys from the backend data vault, via the private communications session, to decrypt the plurality of encrypted drives.

10. The autonomous vehicle of claim 9 , wherein the input interface comprises a universal serial bus (USB) interface, and wherein the boot-loader comprises a USB connected boot-up drive including the basic decryption key.

11. The autonomous vehicle of claim 9 , wherein upon enabling network communications, the communications router transmits credentials from the boot-loader to the backend system, and wherein the communications router receives the tunnel key when the backend system authenticates the credentials.

12. The autonomous vehicle of claim 11 , wherein the communications router transmits the credentials and receives the tunnel key using secure hypertext transfer protocol (HTTPS) communications with the backend system.

13. The autonomous vehicle of claim 9 , wherein the tunnel key comprises an Internet Protocol Security (IPsec) tunnel key, and wherein the private communications session comprises an IPsec tunnel to the backend data vault to retrieve the set of decryption keys.

14. The autonomous vehicle of claim 9 , wherein decryption of the plurality of encrypted drives using the set of decryption keys enables autonomous drive functions for the autonomous vehicle.

15. The autonomous vehicle of claim 9 , wherein the compute stack comprises encrypted data logs to store session data corresponding to a drive session of the autonomous vehicle.

16. The autonomous vehicle of claim 15 , wherein the data logs are accessible via insertion of a log reader into the input interface, and wherein the log reader includes a decryption key that decrypts the data logs to retrieve the session data.

17. A non-transitory computer-readable medium storing instructions that, when executed by one or more processors of a secure start system for an autonomous vehicle, cause the one or more processors to:
retrieve a basic decryption key from a boot-loader to (i) decrypt a router drive, and (ii) enable network communications with a backend system;
transmit credentials to the backend system;
when the credentials are authenticated, receive a tunnel key from the backend system;
utilize the tunnel key to establish a private communications session with a backend data vault; and
retrieve a set of decryption keys from the backend data vault, via the private communications session, to (i) decrypt a plurality of encrypted drives of the autonomous vehicle, and (ii) initiate an autonomous mode of the autonomous vehicle.

18. The non-transitory computer-readable medium of claim 17 , wherein the executed instructions cause the one or more processors to transmit the credentials and receive the tunnel key using secure hypertext transfer protocol (HTTPS) communications with the backend system.

19. The non-transitory computer-readable medium of claim 17 , wherein the tunnel key comprises an Internet Protocol Security (IPsec) tunnel key, and wherein the private communications session comprises an IPsec tunnel to the backend data vault to retrieve the set of decryption keys.

20. The non-transitory computer-readable medium of claim 17 , wherein the executed instructions cause the one or more processors to retrieve the basic decryption key in response to the boot-loader being inserted into a universal serial bus (USB) interface of the router drive.

Assignees

• Uber Technologies Inc

Inventors

• Valasek Christopher
• Miller Charles

Classifications

• H04L63/164

  at the network layer · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• G06F21/575

  Secure boot · CPC title

• G06F21/57

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• H04L63/0272

  Virtual private networks · CPC title