Autonomous Vehicle Data Privacy Management via Trusted Execution Environments

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The challenge in the autonomous/semi-autonomous driving sector is ensuring passenger and driver trust in data privacy, as existing systems lack clear mechanisms for controlling data collection, retention, and sharing, which is essential for the success of personalized commute services.

Innovation Solution

The implementation of a management system within autonomous/semi-autonomous vehicles and cloud servers that allows passengers/drivers to specify data privacy preferences, generates unique passcodes for trust verification, and regulates data collection and sharing based on these preferences, ensuring compliance with data privacy requirements.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If comprehensive data collection is implemented for personalized commute services, then service quality and personalization improve, but data privacy concerns and trust issues worsen

Engineering Contradiction:
Improvepersonalization capabilityVSAvoiddata privacy trust
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments data collection and processing into multiple trusted execution environments (TEEs) with distinct security domains. Each TEE handles specific data types (e.g., personal information, location data, payment information) separately, allowing comprehensive data collection for personalization while isolating sensitive data in secure enclaves that enforce strict access controls and privacy policies.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces trusted execution environments as intermediary layers between data collection and data processing. These TEEs act as secure mediators that verify data handling operations, enforce privacy policies, and provide cryptographic proof of compliant processing, thereby building trust while enabling comprehensive data utilization for personalized services.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If data is shared with third parties for service improvement, then service quality improves, but control over data access and usage worsens

Engineering Contradiction:
Improveservice improvement efficiencyVSAvoiddata access control
Core Design Contradiction:
ProductivityVSEase of operation

Solution Approach 1:

The patent implements preliminary action by establishing data usage policies, access controls, and cryptographic permissions before data is shared with third parties. Trusted execution environments pre-configure security parameters, define permissible operations, and set expiration times for data access, enabling efficient third-party collaboration while maintaining granular control over data usage throughout the service lifecycle.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent applies dynamics by making data access controls adaptive and time-dependent. Trusted execution environments dynamically adjust data sharing permissions based on context, user preferences, and policy requirements. Access rights can be modified, revoked, or extended without re-collecting data, allowing flexible control over third-party data usage while maintaining service productivity.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS11528275B2Autonomous/semi-autonomous driving method and apparatus with trusted data collection, retention and/or sharing
Publication Date: 2022.12.13 INTEL CORP
  • US11528275B2 patent drawing
  • US11528275B2 patent drawing
  • US11528275B2 patent drawing

AI summary

Apparatus, method and computer readable medium associated with autonomous/semi-autonomous driving are disclosed herein. In embodiments, an apparatus for autonomous/semi-autonomous driving may comprise a management system to be disposed in an autonomous/semi-autonomous vehicle. The management system may include a reservation subsystem to receive, from a cloud server, a reservation of the autonomous or semi-autonomous vehicle for a passenger or a driver, and an access control subsystem to control access to the autonomous or semi-autonomous vehicle that includes a trust function to gain trust of the passenger or driver with respect to the passenger or driver's data privacy requirements will be met, when the passenger or driver attempts to exercise the reservation. Other embodiments may be disclosed or claimed.