Privacy protection mechanisms for connected vehicles

Patent metadata

Field	Value
Publication number	US-11240659-B2
Application number	US-201916707544-A
Country	US
Kind code	B2
Filing date	Dec 9, 2019
Priority date	Dec 9, 2019
Publication date	Feb 1, 2022
Grant date	Feb 1, 2022

Abstract

Various embodiments are generally directed to techniques for providing improved privacy protection against vehicle tracking for connected vehicles of a vehicular network. For example, at least one road side unit may: identify a set of vehicles that require pseudonym changes and send an invitation for a pseudonym change event to each of the vehicles, determine at least a total number of the acceptances, determine whether the total number meets or exceeds a predetermined threshold number, send acknowledgement messages to the accepting vehicles if the threshold number is met, and form a vehicle group to coordinate the pseudonym change event during a privacy period. During the privacy period, the RSU and the vehicles may communicate with each other in a confidential and private manner via key-session-based unicast transmission, and coordinate transmission power and vehicle trajectory adjustments to maximize the benefits for safety and obfuscation for privacy.

First claim

What is claimed is:

1. An apparatus, comprising:
memory to store instructions; and
processing circuitry, coupled to the memory, operable to execute the instructions, that when executed, cause the processing circuitry to:
identify a set of vehicles that require pseudonym changes;
send an invitation for a pseudonym change event to each of the identified vehicles, wherein the invitation includes at least a location and a time for the pseudonym change event;
determine which of the vehicles respond with an acceptance to the invitation and a total number of acceptances;
determine whether the total number of acceptances meets or exceeds a predetermined threshold acceptance number;
send acknowledgement (ACK) messages to the accepting vehicles if the total number of acceptances meets or exceeds the predetermined threshold acceptance number;
form a vehicle group, the vehicle group including at least the accepting vehicles; and
coordinate, for vehicles in the vehicle group, the pseudonym change event during a privacy period.

2. The apparatus of claim 1 , wherein the processing circuitry is further caused to determine whether the set of vehicles are within a first predefined distance of each other or determine whether the set of vehicles are within a second predefined distance from the apparatus.

3. The apparatus of claim 2 , wherein the processing circuitry is further caused to send the invitation for the pseudonym change event to each of the identified vehicles if the set of vehicles are within the first predefined distance of each other or within the second predefined distance from the apparatus.

4. The apparatus of claim 1 , wherein the processing circuitry is further caused to send negative-acknowledgement (NACK) messages to the accepting vehicles if the total number of acceptances does not meet the predetermined threshold acceptance number, the NACK messages indicating at least that the pseudonym change event will not occur.

5. The apparatus of claim 1 , wherein the pseudonym change event comprises the accepting vehicles to simultaneously change pseudonyms at the location and at the time.

6. The apparatus of claim 1 , wherein the processing circuitry is further caused to determine the location of the pseudonym change event, the location having at least high dynamic traffic.

7. The apparatus of claim 1 , wherein the coordination of pseudonym change event during the privacy period comprises the processing circuitry executing the instructions to establish an individual session key with each of the vehicles in the vehicle group via unicast, the individual session keys facilitating confidential communication channels between the apparatus and each of the vehicles.

8. The apparatus of claim 7 , wherein the processing circuitry is further caused to send driving data to each of the vehicle in the vehicle group during the privacy period, the driving data not including pseudonym change information for other vehicles in the vehicle group.

9. The apparatus of claim 7 , wherein the processing circuitry is further caused to instruct each vehicle in the vehicle group to change a transmitter power level from first level to a second level during the privacy period.

10. The apparatus of claim 7 , wherein the processing circuitry is further caused to determine new trajectories for each vehicle in the vehicle group, select a new trajectory, and instruct each vehicle to change an existing trajectory to the new trajectory during the privacy period.

11. The apparatus of claim 1 , wherein the apparatus is a road side unit (RSU) or a computing device of a vehicle.

12. The apparatus of claim 1 , wherein the set of vehicles require the pseudonym changes if the vehicles have not changed pseudonyms for a predefined duration of time or if there is a privacy leak associated with the vehicles or on a vehicular network the vehicles are connected to.

13. A system, comprising:
first processing circuitry, coupled to memory, operable to execute instructions, that when executed, cause the first processing circuitry to:
identify a set of vehicles that require pseudonym changes;
send an invitation for a pseudonym change event to each of the identified vehicles, wherein the invitation includes at least a location and a time for the pseudonym change event;
determine which vehicles respond with an acceptance to the invitation and a total number of acceptances;
determine whether the total number of acceptances meets or exceeds a predetermined threshold acceptance number;
send acknowledgement (ACK) messages to the accepting vehicles if the total number of acceptances meets or exceeds the predetermined threshold acceptance number;
form a vehicle group, the vehicle group including the accepting vehicles; and
coordinate, for vehicles in the vehicle group, the pseudonym change event during a privacy period.

14. The system of claim 13 , further comprising:
second processing circuitry, coupled to memory, operable to execute instructions, that when executed, cause the second processing circuitry to:
receive the invitation, determine whether to accept the invitation, and send the acceptance to the invitation;
enter into the privacy period; and
receive driving-related instructions during the privacy period.

15. The system of claim 14 , wherein the first processing circuitry is included in a road side unit (RSU) and the second processing circuitry is included in a vehicle of the identified set of vehicles.

16. The system of claim 13 , wherein the coordination of pseudonym change event during the privacy period comprises the first processing circuitry executing the instruction to establish a n individual session key with each of the vehicles in the vehicle group via unicast, the individual session keys facilitating confidential communication channels between the first processing circuitry and each of the vehicles.

17. The system of claim 16 , wherein the first processing circuitry is further caused to send driving data to each of the vehicle in the vehicle group during the privacy period, the driving data not including pseudonym change information for other vehicles in the vehicle group.

18. The system of claim 16 , wherein the first processing circuitry is further caused to instruct each vehicle in the vehicle group to change a transmitter power level from first level to a second level during the privacy period.

19. The system of claim 16 , wherein the first processing circuitry is further caused to determine new trajectories for each vehicle in the vehicle group, select a new trajectory, and instruct each vehicle to change an existing trajectory to the new trajectory during the privacy period.

20. At least one non-transitory machine-readable storage medium comprising instructions that when executed by at least one processor, causes the at least one processor to:
identify a set of vehicles that require pseudonym changes;
send an invitation for a pseudonym change event to each of the identified vehicles, wherein the invitation includes at least a location and a time for the pseudonym change event;
determine which vehicles respond with an acceptance to the invitation and a total number of acceptances;
determine whether the total number of acceptances meets or exceeds a predetermined threshold acceptance number;
send acknowledgement (ACK) messages to the accepting vehicles if the total number of acceptances meets or exceeds the predetermined threshold acceptance number;
form a vehicle group, the vehicle group including the accepting vehicles; and
c

Assignees

• Intel Corp

Inventors

• Liu Xiruo
• Ahmed Shabbir
• Graefe Ralf
• Gutierrez Christopher
• Juliato Marcio
• Rosales Rafael
• Sastry Manoj
• Yang Liuyang

Classifications

• H04L67/52

  specially adapted for the location of the user terminal · CPC title

• H04W4/46

  for vehicle-to-vehicle communication [V2V] · CPC title

• H04L67/125

  involving control of end-device applications over a network · CPC title

• H04W4/024

  Guidance services · CPC title

• H04L63/0407 Primary

  wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00) · CPC title