System and method for controlling access to encrypted vehicular data
AssigneeHuawei International Pte. Ltd.
InventorsCheng Kang Chu, Zhuo Wei, Chengfang Fang
Life of this patent
Estimating the term…
Abstract
A system for controlling access to encrypted vehicular data employs a hierarchical access control method that allows select encrypted vehicular data stored in a cloud server to be accessed by an authorized user in a hierarchical manner whereby the authorized user is then able to decrypt the select encrypted data and all child data associated with the select encrypted data.
Claims16
A system for controlling access to vehicular data comprising:
- a vehicle device;
- a cloud server;
- and
- a service device;
- wherein the vehicle device is configured to:
- collect a plurality of pieces of vehicular data of a vehicle, wherein each piece of vehicular data corresponds to an identity, wherein each identity corresponds to a node on a nodular tree structure, and wherein the nodular tree structure includes a root node associated with the vehicle and a plurality of other nodes;
- encrypt each piece of collected vehicular data using a corresponding child key, wherein each corresponding child key is generated based on a respective node corresponding to respective piece of vehicular data and a root key corresponding to the root node;
- and
- transmit the encrypted pieces of vehicular data and the corresponding nodes to the cloud server;
- wherein the cloud server is configured to:
- receive and store the encrypted pieces of vehicular data and the corresponding nodes transmitted from the vehicle device;
- wherein the service device is configured to:
- send a request to the cloud server, wherein the request includes a time period;
- receive pieces of encrypted vehicular data with corresponding nodes from the cloud server corresponding to the time period;
- determine a group of sub-nodes that is common to the corresponding nodes of the received pieces of encrypted vehicular data;
- request an aggregated key for the group of common sub-nodes;
- and
- generate a child key for each received piece of encrypted vehicular data based on the requested aggregated key and the respective node corresponding to the respective received piece of encrypted vehicular data, wherein each generated child key is for decrypting a corresponding piece of encrypted vehicular data.
A vehicle device provided in a vehicle for generating encrypted vehicular data, the vehicle device comprising a processor and a non-transitory memory having instructions stored thereon, wherein the instructions, when executed by the processor, facilitate:
- collecting a plurality of pieces of vehicular data of the vehicle, wherein each piece of vehicular data corresponds to an identity, wherein each identity corresponds to a node on a nodular tree structure, wherein the nodular tree structure includes a root node associated with the vehicle;
- encrypting each piece of collected vehicular data using a corresponding child key, wherein each corresponding child key is generated based on a respective node corresponding to a respective piece of vehicular data and based on a root key corresponding to the root node;
- and
- transmitting the encrypted pieces of vehicular data and the corresponding nodes to a cloud server.
A mobile device for controlling access to a plurality of pieces of vehicular data of a vehicle, wherein each piece of vehicular data corresponds to a node in a nodular tree structure, and wherein the plurality of pieces of vehicular data are encrypted by a vehicle device provided in the vehicle and stored in a cloud server, wherein the mobile device comprises a processor and a non-transitory memory having instructions stored thereon, wherein the instructions, when executed by the processor, facilitate:
- sending a request to the cloud server, wherein the request includes a time period;
- receiving pieces of encrypted vehicular data with corresponding nodes from the cloud server corresponding to the time period;
- determining a group of sub-nodes that is common to the corresponding nodes of the received pieces of encrypted vehicular data;
- requesting an aggregated key for the group of common sub-nodes;
- and
- generating a child key for each received piece of encrypted vehicular data based on the requested aggregated key and the respective node corresponding to the respective received piece of encrypted vehicular data, wherein each generated child key is for decrypting a corresponding piece of encrypted vehicular data.
Dependencies are inferred from the claim text.