AV Image Sensor Authentication Through Cross-Frame Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Autonomous vehicle (AV) sensor security and authentication are inadequately addressed, particularly when an adversary has physical access to the sensor system, leading to potential data tampering and compromised safety-critical functions.

Innovation Solution

Implementing a smart sensor system that compares image data from multiple image sensors to detect invalid data streams, generates notifications for compromised sensors, and uses adaptive impact analysis configurations to filter out non-safety related faults, ensuring the integrity of image sensor data and enhancing AV safety.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If image data from multiple sensors is compared to detect invalid data streams, then sensor security and data integrity are improved, but system complexity and processing time increase

Engineering Contradiction:
Improvesensor securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the sensor system into multiple independent image sensors (first image sensor, second image sensor) that can be individually monitored and compared. This segmentation allows the system to detect invalid data streams from specific sensors without compromising the entire system, thereby improving sensor security while managing complexity through modular comparison.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary processing mechanism that compares image data from multiple sensors and generates notifications about invalid data streams. This intermediary layer acts as a mediator between the raw sensor data and the autonomous vehicle's decision-making systems, improving data integrity while centralizing the complexity of comparison logic in a dedicated component.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If consecutive frames are analyzed to reduce false positives, then measurement precision is improved, but processing time and computational load increase

Engineering Contradiction:
Improvedata validation accuracyVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent applies preliminary action by analyzing consecutive frames in advance to establish a baseline of normal sensor behavior before making security determinations. By pre-processing and comparing multiple frames, the system reduces false positives in invalid data detection while preparing validation results ahead of time, thereby improving measurement precision without proportionally increasing processing delays during critical operations.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If fault detection and notification systems are implemented, then safety-critical function reliability is improved, but device complexity and energy consumption increase

Engineering Contradiction:
Improvesafety-critical function reliabilityVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements self-service through automatic fault detection and notification systems that monitor sensor data integrity without requiring continuous human intervention. The system autonomously compares image data, identifies invalid streams, and generates notifications, thereby improving safety-critical function reliability while minimizing energy consumption by automating monitoring tasks rather than requiring manual oversight.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11854269B2Autonomous vehicle sensor security, authentication and safety
Publication Date: 2023.12.26 WAYMO LLC
  • US11854269B2 patent drawing
  • US11854269B2 patent drawing
  • US11854269B2 patent drawing

AI summary

A method includes receiving, from a sensing system of an autonomous vehicle (AV), image data including first image data and second image data. The method further includes determining, for a frame, whether an amount of image data matching between the first image data and the second image data satisfies a first threshold condition, in response to determining that the amount of image data matching satisfies a first threshold condition, identifying the frame as invalid, determining whether a number of consecutive frames determined to be invalid satisfies a second threshold condition, and in response to determining that the number of consecutive frames determined to be invalid satisfies the second threshold condition, generating a notification that the sensing system is outputting invalid data.