Secure start system for an autonomous vehicle

Patent metadata

Field	Value
Publication number	US-11966747-B2
Application number	US-202117145821-A
Country	US
Kind code	B2
Filing date	Jan 11, 2021
Priority date	Mar 18, 2016
Publication date	Apr 23, 2024
Grant date	Apr 23, 2024

Abstract

A secure start system for an autonomous vehicle can include a communications router comprising an input interface to receive a boot-loader to enable network communications with a backend system. The secure start system utilizes a tunnel key from the backend system to establish a private communications session with a backend data vault. The secure start system then retrieves a set of decryption keys from the backend data vault, via the private communications session, to decrypt a plurality of encrypted drives of the autonomous vehicle, which enables one or more functions of the autonomous vehicle.

First claim

What is claimed is:

1. A secure start system for an autonomous vehicle, the secure start system comprising:
encrypted data comprising an autonomous file system that enables one or more functions to be executed by the autonomous vehicle;
one or more processors; and
a non-transitory, computer-readable memory storing instructions that are executable by the one or more processors to cause the secure start system to perform operations, the operations comprising:
transmitting, to a remote system, a first authentication component;
obtaining, from the remote system, a set of decryption keys, wherein the set of decryption keys are secured on the remote system by a multi-factor authentication protocol based on the first authentication component from the autonomous vehicle and a second authentication component from a user device associated with a user of the autonomous vehicle; and
enabling the one or more functions of the autonomous vehicle by decrypting, using the set of decryption keys, the encrypted data.

2. The secure start system of claim 1 , wherein obtaining the set of decryption keys comprises:
obtaining, responsive to authentication of the first authentication component by the remote system, a tunnel key from the remote system;
establishing, via a communication router, a private communications session with a remote data vault associated with the remote system; and
obtaining, via the private communications session, the set of decryption keys from the remote data vault.

3. The secure start system of claim 1 , wherein the first authentication component comprises a credential associated with the autonomous vehicle.

4. The secure start system of claim 1 , wherein the second authentication component comprises a credential associated with the user.

5. The secure start system of claim 1 , wherein the second authentication component is based on biometric data associated with the user that is input to the user device.

6. The secure start system of claim 1 , wherein the remote system is configured to receive a time-limited access token responsive to authentication of the second authentication component.

7. The secure start system of claim 1 , wherein enabling the one or more functions of the autonomous vehicle comprises enabling an autonomous drive function of the autonomous vehicle.

8. The secure start system of claim 1 , wherein the secure start system is onboard the autonomous vehicle.

9. A computing system for securing an autonomous vehicle, the computing comprising:
one or more processors; and
a non-transitory, computer-readable memory storing instructions that are executable by the one or more processors to cause the secure start system to perform operations, the operations comprising:
receiving, from the autonomous vehicle, a first authentication component;
receiving, from a user device associated with a user of the autonomous vehicle, a second authentication component;
transmitting, based on authentication of the first authentication component and the second authentication component, a set of decryption keys to the autonomous vehicle, wherein the decryption keys are configured to enable one or more functions of the autonomous vehicle by decrypting, using the set of decryption keys, encrypted data comprising an autonomous file system that enables the one or more functions to be executed by the autonomous vehicle.

10. The computing system of claim 9 , wherein the operations comprise:
transmitting, responsive to the authentication of the first authentication component, a tunnel key to the autonomous vehicle, the tunnel key configured to establish, via a communication router, a private communications session with a remote data vault; and
transmitting, via the private communications session, the set of decryption keys from the remote data vault.

11. The computing system of claim 9 , wherein the first authentication component comprises a credential associated with the autonomous vehicle.

12. The computing system of claim 9 , wherein the second authentication component comprises a credential associated with the user.

13. The computing system of claim 9 , wherein the second authentication component is based on biometric data associated with the user that is input to the user device.

14. The computing system of claim 9 , wherein the operations comprise:
receiving a time-limited access token responsive to authentication of the second authentication component; and
transmitting, responsive to validation of the time-limited access token, the set of decryption keys to the autonomous vehicle.

15. The computing system of claim 9 , wherein enabling the one or more functions of the autonomous vehicle comprises enabling an autonomous drive function of the autonomous vehicle.

16. A computer-implemented method for securing an autonomous vehicle, the method comprising:
receiving, from the autonomous vehicle, a first authentication component;
receiving, from a user device associated with a user of the autonomous vehicle, a second authentication component;
transmitting, based on authentication of the first authentication component and the second authentication component, a set of decryption keys to the autonomous vehicle, wherein the decryption keys are configured to enable one or more functions of the autonomous vehicle by decrypting, using the set of decryption keys, encrypted data comprising an autonomous file system that enables the one or more functions to be executed by the autonomous vehicle.

17. The method of claim 16 , wherein the first authentication component comprises a credential associated with the autonomous vehicle.

18. The method of claim 16 , wherein the second authentication component comprises a credential associated with the user.

19. The method of claim 16 , wherein the second authentication component is based on biometric data associated with the user that is input to the user device.

20. The method of claim 16 , wherein enabling the one or more functions of the autonomous vehicle comprises enabling an autonomous drive function of the autonomous vehicle.

Assignees

• Uatc Llc

Inventors

• Valasek Christopher
• Miller Charles

Classifications

• G06F9/4403 Primary

  Processor initialisation · CPC title

• B60R25/04

  operating on the propulsion system, e.g. engine or drive motor · CPC title

• G06F9/4406

  Loading of operating system · CPC title

• G06F21/34

  involving the use of external additional devices, e.g. dongles or smart cards · CPC title

• G06F21/57

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title