# US 12,192,383 B2 · Method and system for establishing trust for a cybersecurity posture of a V2X entity

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,192,383 B2
- Document ID: US12192383B2
- Status: Granted
- Kind: B2
- Application number: 18/318,230
- Filed: 2023-05-16
- Published: 2023-09-14
- Granted: 2025-01-07
- Earliest claimed: 2020-04-29
- Assignees: BlackBerry Limited
- Applicants: BlackBerry Limited
- Inventors: Stephen John Barrett; Nicholas James Russell; John Octavius Goyo
- Web page: https://patentgrep.com/patent/US12192383B2

## CPC

- G06F 21/44: Program or device authentication
- H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]}
- G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine
- G06F 21/577: {Assessing vulnerabilities and evaluating computer system security}
- G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures
- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/126: {the source of the received data}
- H04L 63/1425: {Traffic logging, e.g. anomaly detection}
- H04W 4/40: for vehicles, e.g. vehicle-to-pedestrians [V2P]
- H04W 4/44: for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]
- H04W 12/108: Source integrity
- H04L 2209/805: Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
- H04L 2209/84: Vehicles
- H04W 4/46: for vehicle-to-vehicle communication [V2V]
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method at an Intelligent Transportation System (ITS) Transmitting Entity, the method including: generating an ITS message; augmenting the ITS message with an Integrity Report generated by an integrity detection function at the ITS Transmitting Entity to create an augmented ITS message; signing the augmented ITS message with an Authorization Certificate or Ticket, the Authorization Certificate or Ticket including an assurance indication from an Audit Certificate Authority for the integrity detection function; and sending the signed, augmented ITS message to an ITS Receiving Entity.

## Claims

### Claim 1

A method at an Intelligent Transportation System (ITS) Receiving Entity, the method comprising:
receiving an ITS message at the ITS Receiving Entity from an ITS Transmitting Entity;
determining whether the ITS message comprises an Integrity Report regarding a cybersecurity posture of the ITS Transmitting Entity, the Integrity Report comprising an integrity check of the ITS Transmitting Entity generated by an integrity detection function checking the cybersecurity posture at the ITS Transmitting Entity;
when the ITS message comprises the Integrity Report, determining whether the Integrity report indicates anomalies in the cybersecurity posture of the ITS Transmitting Entity exist; and
based on the ITS message not containing the Integrity Report or the Integrity Report indicating anomalies, performing a mitigating action at the ITS Receiving Entity.

### Claim 2 (depends on 1)

The method of claim 1, wherein the ITS message is signed with an Authorization Certificate or Ticket, the Authorization Certificate or Ticket including an assurance indication from an Audit Certificate Authority for the integrity detection function at the ITS Transmitting Entity.

### Claim 3 (depends on 2)

The method of claim 2, wherein the assurance indication from the Audit Certificate Authority is within a field of the Authorization Certificate or Ticket.

### Claim 4 (depends on 1)

The method of claim 1, wherein the Integrity Report is Boolean indicating whether an anomaly was detected.

### Claim 5 (depends on 1)

The method of claim 1, wherein the Integrity Report includes a level of an anomaly detected.

### Claim 6 (depends on 5)

The method of claim 5, wherein the mitigating action includes a degree of reaction based on the level of the anomaly detected.

### Claim 7 (depends on 1)

The method of claim 1, further comprising:
when the ITS message contains the Integrity Report and provides no indicating of anomalies, performing an action with no mitigation.

### Claim 8 (depends on 1)

The method of claim 1, wherein an action associated with the ITS message comprises applying brakes of a vehicle with a first force, and wherein the mitigating action comprises at least one of: applying brakes with a second force, the second force being less than the first force; pre-charging a braking system; or not applying brakes until corroborating evidence is received.

### Claim 9

An Intelligent Transportation System (ITS) Receiving Entity,
the ITS Receiving Entity comprising:
a processor;
a memory; and
a communications subsystem,
wherein the memory storing instructions when executed by the processor cause the ITS Receiving Entity to:
receive an ITS message at the ITS Receiving Entity from an ITS Transmitting Entity using the communications subsystem;
determine whether the ITS message comprises an Integrity Report regarding a cybersecurity posture of the ITS Transmitting Entity, the Integrity Report comprising an integrity check of the ITS Transmitting Entity generated by an integrity detection function checking the cybersecurity posture at the ITS Transmitting Entity;
when the ITS message comprises the Integrity Report, determine whether the Integrity report indicates anomalies in the cybersecurity posture of the ITS Transmitting Entity exist; and
based on the ITS message not containing the Integrity Report or the Integrity Report indicating anomalies, perform a mitigating action at the ITS Receiving Entity.

### Claim 10 (depends on 9)

The ITS Receiving Entity of claim 9, wherein the ITS message is signed with an Authorization Certificate or Ticket, the Authorization Certificate or Ticket including an assurance indication from an Audit Certificate Authority for the integrity detection function at the ITS Transmitting Entity.

### Claim 11 (depends on 10)

The ITS Receiving Entity of claim 10, wherein the assurance indication from the Audit Certificate Authority is within a field of the Authorization Certificate or Ticket.

### Claim 12 (depends on 9)

The ITS Receiving Entity of claim 9, wherein the Integrity Report is Boolean indicating whether an anomaly was detected.

### Claim 13 (depends on 9)

The ITS Receiving Entity of claim 9, wherein the Integrity Report includes a level of an anomaly detected.

### Claim 14 (depends on 13)

The ITS Receiving Entity of claim 13, wherein the mitigating action includes a degree of reaction based on the level of the anomaly detected.

### Claim 15 (depends on 9)

The ITS Receiving Entity of claim 9, wherein the ITS Receiving Entity is further configured to:
when the ITS message contains the Integrity Report and provides no indicating of anomalies, perform an action with no mitigation.

### Claim 16 (depends on 9)

The ITS Receiving Entity of claim 9, wherein an action associated with the ITS message comprises applying brakes of a vehicle, and wherein the mitigating action comprises at least one of: applying brakes of a vehicle with a first force, and wherein the mitigating action comprises at least one of: applying brakes with a second force, the second force being less than the first force; pre-charging a braking system; or not applying brakes until corroborating evidence is received.

### Claim 17

A non-transitory computer readable medium for storing instruction code which, when executed by a processor of an Intelligent Transportation System (ITS) Receiving Entity cause the ITS Receiving Entity to:
receive an ITS message at the ITS Receiving Entity from an ITS Transmitting Entity;
determine whether the ITS message comprises an Integrity Report regarding a cybersecurity posture of the ITS Transmitting Entity, the Integrity Report comprising an integrity check of the ITS Transmitting Entity generated by an integrity detection function checking the cybersecurity posture at the ITS Transmitting Entity;
when the ITS message comprises the Integrity Report, determine whether the Integrity report indicates anomalies in the cybersecurity posture of the ITS Transmitting Entity exist; and
based on the ITS message not containing the Integrity Report or the Integrity Report indicating anomalies, perform a mitigating action at the ITS Receiving Entity.