System, method, and apparatus to extra vehicle communications control

Patent metadata

Field	Value
Publication number	US-11228496-B2
Application number	US-202017027187-A
Country	US
Kind code	B2
Filing date	Sep 21, 2020
Priority date	Sep 20, 2019
Publication date	Jan 18, 2022
Grant date	Jan 18, 2022

Abstract

An example system includes a vehicle having at least one network zone, and a policy manager circuit that interprets a policy including a local DNS, an authorization description, and a firewall configuration description. The system includes a configuration circuit that configures a gatekeeper interface circuit in response to the policy, where the gatekeeper interface circuit is interposed between one of the network zones and an external communication portal, and regulates communications between end points of the network zone and the external communication portal.

First claim

What is claimed is:

1. A system, comprising:
a vehicle having at least one network zone;
a policy manager circuit structured to interpret a policy comprising a local domain name server (DNS), an authorization description, and a firewall configuration description;
a configuration circuit structured to configure a gatekeeper interface circuit in response to the policy; and
a gatekeeper interface circuit interposed between the at least one network zone and an external communication portal selectively couplable to an external device, and further structured to regulate communications between end points of the at least one network zone and the external communication portal.

2. The system of claim 1 , wherein the local DNS further comprises local address values for each of the end points of the at least one network zone.

3. The system of claim 2 , wherein the local DNS further comprises non-local address values for each of the end points of the at least one network zone.

4. The system of claim 3 , wherein the policy further comprises an external data quantity description.

5. The system of claim 4 , wherein the policy further comprises an external data service description.

6. The system of claim 5 , wherein the authorization description further comprises an external data access description.

7. The system of claim 6 , wherein the external data access description further comprises an external communication permission value for each of the end points of the at least one network zone.

8. The system of claim 7 , wherein the authorization description further comprises a policy change authorization description.

9. The system of claim 1 , wherein the firewall configuration description comprises at least one of: a default behavior description; a data access description; or a data blocking description.

10. The system of claim 4 , wherein the external data quantity description comprises at least one data limit selected from the limits consisting of:
an amount of communicated data corresponding to a selected time period;
an amount of communicated data corresponding to a selected vehicle operating condition;
an amount of communicated data corresponding to a data provider associated with an application;
a bandwidth share of the external communication portal;
a bandwidth volume of the external communication portal;
a bandwidth share of a channel of the external communication portal; or
a bandwidth volume of a channel of the external communication portal.

11. A system, comprising:
a vehicle having at least one network zone;
a policy manager circuit structured to interpret a policy comprising a local domain name server (DNS), an external data quantity description, and an external data service description;
a configuration circuit structured to configure a gatekeeper interface circuit in response to the policy; and
a gatekeeper interface circuit interposed between the at least one network zone and an external communication portal selectively couplable to an external device, and further structured to regulate communications between end points of the at least one network zone and the external communication portal.

12. The system of claim 11 , wherein the external data quantity description comprises at least one data limit selected from the limits consisting of:
an amount of communicated data corresponding to a selected time period;
an amount of communicated data corresponding to a selected vehicle operating condition;
an amount of communicated data corresponding to a data provider associated with an application;
a bandwidth share of the external communication portal;
a bandwidth volume of the external communication portal;
a bandwidth share of a channel of the external communication portal; or
a bandwidth volume of a channel of the external communication portal.

13. The system of claim 12 , wherein the external data service description comprises:
an association between each of the end points of the at least one network zone and at least one of a plurality of local communicating devices; and
an association between each of the plurality of local communicating devices and a corresponding quality of service (QoS) value.

14. The system of claim 13 , wherein each QoS value comprises at least one service description selected from the service descriptions consisting of: a priority value; a packet delay value; a packet loss rate value; a data rate value; a maximum drop-out time value; an acknowledgment value; a data buffering priority value; a data buffering size value; or a data life cycle description.

15. The system of claim 14 , wherein the policy further comprises a firewall configuration description.

16. The system of claim 15 , wherein the firewall configuration description comprises at least one of: a default behavior description; a data access description; or a data blocking description.

17. The system of claim 15 , wherein the policy further comprises an authorization description.

18. The system of claim 17 , wherein the authorization description further comprises an external data access description.

19. The system of claim 18 , wherein the external data access description further comprises an external communication permission value for each of the end points of the at least one network zone.

20. The system of claim 17 , wherein the authorization description further comprises a policy change authorization description.

21. The system of claim 17 , wherein the local DNS further comprises local address values for each of the end points of the at least one network zone.

22. The system of claim 21 , wherein the local DNS further comprises non-local address values for each of the end points of the at least one network zone.

23. The system of claim 1 , further comprising:
wherein the at least one network zone comprises a first legacy network zone and a second high capability network zone;
wherein the policy further comprises an external communication value; and
wherein the gatekeeper interface circuit is further structured to regulate communication between the external device and an end point of at least one of the first legacy network zone or the second high capability network zone in response to the external communication value.

24. The system of claim 11 , further comprising:
wherein the at least one network zone comprises a first legacy network zone and a second high capability network zone;
wherein the policy further comprises an external communication value; and
wherein the gatekeeper interface circuit is further structured to regulate communication between the external device and an end point of at least one of the first legacy network zone or the second high capability network zone in response to the external communication value.

Assignees

• Sonatus Inc

Inventors

• Fang Yu
• Chen Yixiang
• Zong Xuanran
• Reed Robin
• Ling Andrew
• Trenchard Troy Michael
• Cardenas Jan

Classifications

• H04W4/40

  for vehicles, e.g. vehicle-to-pedestrians [V2P] · CPC title

• H04W12/67

  Risk-dependent, e.g. selecting a security level depending on risk profiles · CPC title

• H04W12/086

  using security domains · CPC title

• H04L61/4511

  using domain name system [DNS] · CPC title

• H04L43/0876

  Network utilisation, e.g. volume of load or congestion level · CPC title