Multi-level Vehicle Data Access Control via Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Autonomous vehicles generate vast amounts of data from sensors that remain underutilized and unshared with other vehicles and devices in urban environments, limiting public access to information crucial for safety and traffic management.
Innovation Solution
A system and method for broadcasting vehicle data, segmenting it into non-public and public data, and encrypting public data into multiple levels based on access levels, allowing secure transmission to various electronic devices for improved safety and traffic management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If vehicle sensor data is shared publicly to improve safety and traffic management, then public access to information is improved, but data security and privacy protection deteriorate
Solution Approach 1:
The patent segments vehicle data into multiple classification levels (public, semi-public, private) and creates corresponding data partitions for different access levels. This allows selective sharing of only appropriate data portions with different devices, improving public access while maintaining security through controlled segmentation of information.
Solution Approach 2:
The patent applies different encryption and access control mechanisms to different data partitions based on their classification level. Each data partition has tailored security properties matching its sensitivity, allowing public data to be freely accessible while sensitive data receives stronger protection, thus resolving the contradiction between accessibility and security.
2Object-affected harmful factors
If multi-level access control is implemented to protect sensitive data, then data security is improved, but system complexity deteriorates
Solution Approach 1:
The access control system is segmented into standardized components including data classification modules, encryption modules, and access control modules that operate independently. This modular segmentation reduces overall system complexity by allowing each component to be developed and maintained separately while working together to provide comprehensive security.
Solution Approach 2:
The patent uses parameter-based access control where devices present credentials and receive access decisions based on predefined parameters and policies. This parameter-driven approach simplifies the control logic compared to complex rule-based systems, as access decisions are made by comparing device parameters against stored access level parameters.
3Object-affected harmful factors
If vehicle data is segmented and encrypted into multiple levels, then data security is improved, but data processing time deteriorates
Solution Approach 1:
The patent performs data segmentation, classification, and encryption into multiple levels during the data generation phase before transmission. This preliminary processing ensures that when data is received by electronic devices, the security structure is already in place, eliminating the need for time-consuming real-time classification and encryption operations at the receiving end.
Solution Approach 2:
Different data partitions are encrypted with appropriate security measures matching their sensitivity level. Public data partitions use lighter encryption or no encryption, while sensitive partitions use stronger encryption. This localized application of security measures reduces overall processing time compared to uniformly encrypting all data at the highest security level.
Data Source
AI summary
A method comprises receiving vehicle data comprising information associated with a plurality of sensors of autonomous vehicle and segmenting the received vehicle data into non-public data and public data. The method further comprises partitioning the public data into a plurality of data partitions and generating a plurality of data levels of the public data. Each data level of the plurality of data levels is generated according to an access level of a plurality of access levels and includes one or more data partitions of the plurality of data partitions in an encrypted form. The method further comprises transmitting the generated plurality of data levels to a group of electronic devices. Each electronic device of the group of electronic devices retrieves, according to one of the plurality of access levels, at least a portion of the public data from the transmitted plurality of data levels.