Vehicle Policy Control Using Signed Subsystem Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicle systems lack the flexibility and security in managing autonomous and assisted driving operations due to physical interconnections via CAN buses, which restrict information exchange and do not provide sophisticated network connection technologies, making it challenging to enforce policies for safe vehicle operations.
Innovation Solution
A vehicle control system that uses cryptographically signed information from vehicle subsystems and external systems to enforce policies, allowing for secure and flexible management of autonomous and assisted driving operations by verifying trusted credentials and digital signatures, and interacting with policy service providers for policy updates and validation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical interconnections via CAN buses are used to connect vehicle subsystems, then system reliability is improved, but information exchange flexibility and security are worsened
Solution Approach 1:
The patent introduces a gateway as an intermediary component between the CAN bus subsystems and external network connections. The gateway translates and mediates communication between the traditional CAN protocol and modern network protocols, enabling flexible information exchange while maintaining the reliability of the existing CAN bus architecture. This intermediary layer allows the system to benefit from both physical interconnections and sophisticated network technologies without compromising either.
2Reliability
If physical interconnections via CAN buses are used to connect vehicle subsystems, then system reliability is improved, but security in managing autonomous operations is worsened
Solution Approach 1:
The gateway serves as a security intermediary that filters, validates, and authenticates information before allowing it to pass between the CAN bus and external systems. It implements security policies that prevent unauthorized access and malicious operations, protecting the autonomous driving system from harmful factors while preserving the reliable CAN bus communication infrastructure.
Solution Approach 2:
The patent replaces reliance on physical connection security with cryptographic security mechanisms. Instead of depending solely on the physical CAN bus infrastructure for security, the system uses digital signatures, encryption, and authentication protocols to verify the integrity and authenticity of control commands and sensor data, thereby addressing security weaknesses without altering the reliable physical interconnection structure.
3Object-affected harmful factors
If cryptographic verification of subsystem information is implemented, then security and policy compliance are improved, but system complexity is worsened
Solution Approach 1:
The patent implements self-service cryptographic verification where subsystems automatically generate and attach digital signatures to their own data packets. Each subsystem maintains its own cryptographic credentials and performs self-verification, reducing the need for complex centralized verification infrastructure. The gateway provides policy enforcement, but the cryptographic burden is distributed across individual subsystems that service themselves.
Data Source
AI summary
This disclosure relates to, among other things, managing the operation of a vehicle in accordance with one or more policies. Consistent with various aspects of the disclosed embodiments, a vehicle control system may be used to enforce policy in connection with various vehicle operations based, at least in part, on trusted information provided by one or more vehicle subsystems and/or other systems. A vehicle control system may verify the received information and use the verified information to determine whether the vehicle may engage in a particular operation and/or enter a particular operational mode in accordance with one or more policies.