Using supplemental encrypted signals to mitigate man-in-the-middle attacks on teleoperated systems

Patent metadata

Field	Value
Publication number	US-9686306-B2
Application number	US-201314438722-A
Country	US
Kind code	B2
Filing date	Oct 30, 2013
Priority date	Nov 2, 2012
Publication date	Jun 20, 2017
Grant date	Jun 20, 2017

Abstract

Methods and systems for securing remotely-operable devices are provided. A remotely-operable device can receive a command related to a component of the remotely-operable device operating in an environment. The remotely-operable device can include a reality-rules database (RRDB) that is configured to store a plurality of reality rules with each reality rule relating to a constraint on the remotely-operable device. The remotely-operable device can determine a reasonableness value for the command based on a constraint, where the constraint is determined based on a constraint related to at least one reality rule of the plurality of reality rules stored in the RRDB. The remotely-operable device can encode the reasonableness value for the command in a feedback message. The remotely-operable device can send the encoded feedback message from the remotely-operable device.

First claim

What is claimed:

1. A method, comprising:
receiving, at a remotely-operable device, a command related to a component of the remotely-operable device operating in an environment, the remotely-operable device comprising the component and a reality-rules database (RRDB), wherein the RRDB is configured to store a plurality of reality rules, and wherein each reality rule relates to a constraint on the remotely-operable device;
determining a first value for the command based on at least one constraint on at least the component of the remotely-operable device while operating in the environment, wherein the at least one constraint is determined based on at least one reality rule of the plurality of reality rules stored in the RRDB of the remotely-operable device, and wherein determining the first value for the command comprises:
determining a current status of the component of the remotely-operable device,
determining a possible-future status of the component based on the current status, wherein the possible-future status indicates a status in the event the command was executed,
providing a query to the RRDB related to the component,
in response to the query, receiving data regarding the at least one constraint on the remotely-operable device, and
determining the first value based on the possible-future status and the data regarding the at least one constraint on the remotely-operable device;

encoding the first value for the command in a feedback message for the remotely-operable device; and
sending the encoded feedback message from the remotely-operable device.

2. The method of claim 1 , wherein the plurality of reality rules comprise a plurality of reality rules applicable to the command, and wherein determining the first value for the command comprises:
determining the first value based on the plurality of reality rules applicable to the command.

3. The method of claim 1 , further comprising:
determining whether the first value exceeds a threshold value; and
after determining that the first value exceeds the threshold value, at least partially executing the command at the remotely-operable device.

4. The method of claim 1 , wherein the command comprises a backup command.

5. The method of claim 4 , further comprising:
determining whether the first value exceeds a threshold value; and
after determining that the first value does not exceed the threshold value, determining that the command is not feasible for at least partial execution.

6. The method of claim 5 , further comprising:
after determining that the command is not feasible for at least partial execution, determining whether the backup command is feasible for at least partial execution; and
after determining that the backup command is feasible for at least partial execution, at least partially executing the backup command.

7. The method of claim 6 , further comprising:
after determining that the backup command is not feasible for at least partial execution, performing a default operation for the remotely-operable device; and
sending information indicating that the default operation has been performed from the remotely-operable device.

8. The method of claim 1 , wherein the feedback message comprises a plurality of fields, and wherein encoding the first value for the command comprises encoding at least one field of the plurality of fields of the feedback message with the first value.

9. The method of claim 8 , wherein the first value for the command comprises one or more bits, and wherein encoding the first value for the command comprises encoding at least one field of the plurality of fields with at least one bit of the one or more bits of the first value.

10. The method of claim 1 , wherein the feedback message comprises an image, and wherein encoding the first value for the command comprises encoding the image with the first value.

11. The method of claim 10 , wherein the first value for the command comprises one or more bits, and wherein encoding the image with the first value comprises encoding the image with the one or more bits of the first value using a steganographic technique.

12. The method of claim 1 , wherein the plurality of reality rules comprise at least one rule selected from the group of rules consisting of: a rule about a range of motion of the component, a range of motion of the remotely-operable device, a rule about maximum velocity of the component, a rule about a maximum velocity of the remotely-operable device, a rule about a maximum acceleration of the component, a rule about a maximum acceleration of the remotely-operable device, a rule about a location for operating the remotely-operable device, a rule about a location for not operating the remotely-operable device, a rule about a stress on the component, a rule about a stress on the remotely-operable device, a rule about a distance between the component and another component of the remotely-operable device, and a rule about a minimum distance between the remotely-operable device and another device.

13. A remotely-operable device, comprising:
a component;
a processor; and
a non-transitory tangible computer readable medium configured to store at least a reality-rules database (RRDB) and executable instructions, wherein the RRDB is configured to store a plurality of reality rules, wherein each reality rule relates to a constraint on the remotely-operable device, and wherein the executable instructions, when executed by the processor, cause the remotely-operable device to perform functions comprising:
receiving a command related to the component operating in an environment;
determining a first value for the command based on at least one constraint on at least a portion of the remotely-operable device while operating in the environment, wherein the at least one constraint is determined based on at least one constraint related to at least one reality rule of the plurality of reality rules stored in the RRDB, and wherein determining the first value for the command comprises:
determining a current status of the component of the remotely-operable device,
determining a possible-future status of the component based on the current status, wherein the possible-future status indicates a status in the event the command was executed,
providing a query to the RRDB related to the component,
in response to the query, receiving data regarding the at least one constraint on the remotely-operable device, and
determining the first value based on the possible-future status and the data regarding the at least one constraint on the remotely-operable device;

encoding the first value for the command in a feedback message; and
sending the encoded feedback message.

14. The remotely-operable device of claim 13 , wherein the functions further comprise:
determining whether the first value exceeds a threshold value; and
after determining that the first value exceeds the threshold value, at least partially executing the command at the remotely-operable device.

15. The remotely-operable device of claim 13 , wherein the command comprises a backup command.

16. The remotely-operable device of claim 15 , wherein the functions further comprise:
determining whether the first value exceeds a threshold value; and
after determining that the first value does not exceed the threshold value, determining that the command is not feasible for at least partial execution.

17. The remotely-operable device of claim 16 , wherein the functions further comprise:
after determining that the command is not feasible for at least partial execution, determining w

Assignees

• Univ Washington Through Its Center For Commercialization

Inventors

• Chizeck Howard Jay
• Bonaci Tamara

Classifications

• G06F19/3418

  Physics · mapped topic

• G06F19/3481

  Physics · mapped topic

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• H04L12/12

  Arrangements for remote connection or disconnection of substations or of equipment thereof · CPC title

• H04L63/1441 Primary

  Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002) · CPC title