Collective Perception Message Identifier Changes for ITS Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Intelligent Transport Systems (ITS) lack a privacy strategy for the broadcast of perceived objects through Collective Perception Messages (CPMs), which could compromise the existing pseudonym change strategy and lead to tracking of ITS stations.
Innovation Solution
A method and system that dynamically change the identifiers of perceived objects in Collective Perception Messages (CPMs) in response to detected changes in Authorisation Tickets (ATs), ensuring that even if intercepted, the tracking of these objects is made difficult.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ITS stations use fixed identifiers in Collective Perception Messages, then object tracking is simplified and reliable, but privacy is compromised and tracking becomes possible
Solution Approach 1:
The patent applies dynamics by making the object identifier dynamic rather than fixed. The identifier changes automatically when the Authorisation Ticket changes, ensuring that the same physical object may have different identifiers in different time contexts. This dynamic behavior prevents tracking while maintaining reliable object reference within the same AT context.
Solution Approach 2:
The patent changes the parameter of the object identifier based on the Authorisation Ticket status. When the AT changes, the object identifier is updated to a new value. This parameter change strategy ensures that tracking across different AT periods becomes impossible, while objects remain identifiable within the same AT context.
2Object-affected harmful factors
If ITS stations implement pseudonym change strategy, then privacy is improved and tracking is prevented, but compatibility with existing AT change strategies is compromised
Solution Approach 1:
The patent implements feedback by having the receiving station monitor the AT changes of transmitting stations and automatically adjust the object identifiers in response. When a transmitting station changes its AT, the receiving station detects this change and updates the corresponding object identifiers, ensuring continuous privacy protection without disrupting existing AT change mechanisms.
Solution Approach 2:
The patent applies preliminary action by pre-establishing the linkage between AT changes and object identifier changes in the receiving station's processing logic. When an AT change is detected, the station already has the mechanism in place to automatically update object identifiers, ensuring seamless integration with existing AT change strategies.
3Ease of operation
If receiving stations broadcast perceived objects with static identifiers, then message processing is simplified, but privacy protection is weakened and objects can be tracked
Solution Approach 1:
The patent makes the object identifier dynamic by automatically updating it when the associated AT changes. This dynamic behavior adds minimal complexity to message processing while significantly improving privacy protection, as the identifier changes are triggered automatically by AT changes rather than requiring manual intervention.
Solution Approach 2:
The receiving station performs self-service by automatically detecting AT changes and updating object identifiers without external intervention. The station monitors its own AT status and autonomously adjusts the identifiers in broadcast messages, simplifying the overall system operation while maintaining strong privacy protection.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention concerns a method, intended for an Intelligent Transport System (ITS) comprising transmitting and receiving ITS stations, the method comprising the following steps, at a transmitting ITS station: transmitting (1105) a first message including a first identifier identifying the transmitting ITS station, and including a first object identifier for identifying an object detected by the transmitting ITS station; and, transmitting a second message identifying the transmitting ITS station with a second identifier different from the first identifier, the second message including a second object identifier for identifying the object previously identified with the first object identifier, the second object identifier being different from the first object identifier.