Systems and methods for implementing data security

Patent metadata

Field	Value
Publication number	US-11469906-B2
Application number	US-201916668459-A
Country	US
Kind code	B2
Filing date	Oct 30, 2019
Priority date	Nov 20, 2018
Publication date	Oct 11, 2022
Grant date	Oct 11, 2022

Abstract

Among other things, we describe systems and method for implementing data security in an autonomous vehicle system. The systems and methods can include inter-process communication security via key management, in which asymmetric cryptography and other validation techniques are used to validate data received from sensors. The systems and method can also include penetrative testing, in which valid sensor inputs are modified and transmitted throughout a distributed network through one or more sensors.

First claim

What is claimed is:

1. A method comprising:
for each of one or more sensors of an autonomous vehicle, digitally signing, using a private key, a portion of data associated with a respective sensor of the one or more sensors of the autonomous vehicle such that the portion of data is associated with a digital signature;
validating, by at least one processor, the digital signatures of the respective portion of data upon booting of each sensor of the autonomous vehicle;
generating, by the at least one processor, at least one session key;
encrypting, by the at least one processor, the at least one session key;
sending, by the at least one processor, the at least one encrypted session key to the one or more sensors after booting of the one or more sensors of the autonomous vehicle, wherein each of the booted one or more sensors of the autonomous vehicle receives the at least one session key and decrypts at least one session key using the at least one processor;
sending, by the one or more sensors of the autonomous vehicle, sensor data to the at least one processor, the sensor data including a message authentication code generated using the at least one session key; and
validating, by the at least one processor, the sensor data at least partially based on the message authentication code and a determination that the sensor data was received within a pre-determined period of time, wherein the at least one processor parses the validated sensor data.

2. The method of claim 1 , wherein digitally signing comprises storing at least one public key in the at least one processor, the at least one public key being associated with one of the one or more sensors of the autonomous vehicle.

3. The method of claim 1 , wherein the sensor data includes identification data associated with the one or more sensors of the autonomous vehicle, the method further comprising anonymizing the identification data before sending the sensor data to the at least one processor.

4. The method of claim 3 , wherein anonymizing the identification data comprises removing the identification data.

5. The method of claim 3 , wherein the identification data comprises at least one of location data, waveform data, or tag identification data.

6. The method of claim 3 , wherein anonymizing the identification data comprises obfuscating the identification data.

7. The method of claim 6 , wherein obfuscating the identification data comprises at least one of: substituting the identification data values with secondary identification data values, encrypting the identification data, and shuffling the identification data.

8. The method of claim 6 , wherein obfuscating the identification data comprises learning, by a machine learning coprocessor, secondary identification features associated with the identification data.

9. The method of claim 1 , wherein validating the sensor data comprises determining whether the sensor data is configured in either an expected format, an expected size, or both.

10. The method of claim 1 , wherein the sensor data includes movement of simulated objected.

11. The method of claim 1 , wherein the message authentication code is a hash-based message authentication code.

12. The method of claim 1 , wherein the at least one processor includes a controller circuit that generates the at least one session key.

13. The method of claim 1 , wherein the at least one processor includes a non-migratable key configured for decrypting the encrypted session key.

14. The method of claim 1 , wherein generating the at least one session key comprises generating at least one new session key each time the one or more sensors of the autonomous vehicle are booted.

15. The method of claim 1 , wherein generating the at least one session key comprises generating at least one new session key after each new message is received from the one or more sensors of the autonomous vehicle.

16. The method of claim 1 , wherein parsing the data comprises organizing the sensor data in accordance with at least one parsing rule.

17. The method of claim 1 , wherein the portion of data includes computer executable code.

18. A system comprising:
one or more computer processors; and
a non-transitory computer-readable storage medium storing instructions, which when executed by the one or more computer processors cause the one or more computer processors to:
for each of one or more sensors of an autonomous vehicle, digitally sign, using a private key, a portion of data associated with a respective sensor of the one or more sensors of the autonomous vehicle such that the portion of data is associated with a digital signature;
validate the digital signatures of the respective portion of data upon booting of each sensor of the autonomous vehicle;
generate at least one session key;
encrypt the at least one session key;
send the at least one encrypted session key to the one or more sensors of the autonomous vehicle after booting of the one or more sensors of the autonomous vehicle, wherein each of the booted one or more sensors of the autonomous vehicle receives the at least one session key and decrypts at least one session key using the one or more computer processors;
send, by the one or more sensors of the autonomous vehicle, sensor data to the one or more computer processors, the sensor data including a message authentication code generated using the at least one session key; and
validate the sensor data at least partially based on the message authentication code and a determination that the sensor data was received within a pre-determined period of time, wherein the one or more computer processors parse the validated sensor data.

19. A non-transitory computer-readable storage medium storing instructions, which when executed by one or more computer processors cause the one or more computer processors to:
for each of one or more sensors of an autonomous vehicle, digitally sign, using a private key, a portion of data associated with a respective sensor of the one or more sensors of the autonomous vehicle such that the portion of data is associated with a digital signature;
validate the digital signatures of the respective portion of data upon booting of each sensor;
generate at least one session key;
encrypt the at least one session key;
send the at least one encrypted session key to the one or more sensors of the autonomous vehicle after booting of the one or more sensors of the autonomous vehicle, wherein each of the booted one or more sensors of the autonomous vehicle receives the at least one session key and decrypts at least one session key using the one or more computer processors;
send, by the one or more sensors of the autonomous vehicle, sensor data to the one or more computer processors, the sensor data including a message authentication code generated using the at least one session key; and
validate the sensor data at least partially based on the message authentication code and a determination that the sensor data was received within a pre-determined period of time, wherein the one or more computer processors parse the validated sensor data.

20. The non-transitory computer-readable storage medium of claim 19 , wherein digitally signing comprises storing at least one public key in the one or more computer processors, the at least one public key being associated with one of the one or more sensors of the autonomous vehicle.

Assignees

• Motional Ad Llc

Inventors

• Venkateswaran Rajesh K
• Sanu Anurag
• Kim Junsung
• Miller Dana
• Sandler Brett
• Maeta Silvio
• Esper James
• Melgangolli Vasudeva Pai
• Xu Yunpeng
• Maass Michael
• Shah Parth
• Sweeny Scott

Classifications

• G06N7/01

  Probabilistic graphical models, e.g. probabilistic networks · CPC title

• H04W4/46

  for vehicle-to-vehicle communication [V2V] · CPC title

• H04L9/0819

  Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062) · CPC title

• H04L9/0891

  Revocation or update of secret information, e.g. encryption key update or rekeying · CPC title

• H04W4/40

  for vehicles, e.g. vehicle-to-pedestrians [V2P] · CPC title