# US 12,762,230 B2 · Methods for handling a potential adversarial attack on an autonomous vehicle while driving a road > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,762,230 B2 - Document ID: US12762230B2 - Status: Granted - Kind: B2 - Application number: 18/805,751 - Filed: 2024-08-15 - Published: 2025-02-27 - Granted: 2026-10-13 - Earliest claimed: 2023-08-23 - Assignees: AUMOVIO Autonomous Mobility Germany GmbH - Applicants: Continental Autonomous Mobility Germany GmbH - Inventors: Bhanu Prakash Padiri - Web page: https://patentgrep.com/patent/US12762230B2 ## CPC - G06F 21/554: {involving event detection and direct action} - G06F 21/566: {Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities} - G06F 2221/034: Test or assess a computer or a system - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method of handling a potential adversarial attack on an autonomous vehicle while driving a road, the autonomous vehicle including an algorithm for navigating the autonomous vehicle based on monitoring data related to an environment of the vehicle, the adversarial attack being based on deceiving the algorithm by means of a manipulated traffic indicator arrangement in the environment of the autonomous vehicle and/or triggering the algorithm to stop the autonomous vehicle by means of a stop arrangement in the environment of the autonomous vehicle. ## Claims ### Claim 1 A method for handling a potential adversarial attack on an autonomous vehicle while driving a road, the autonomous vehicle including an algorithm for navigating the autonomous vehicle based on monitoring data related to an environment of the vehicle, the adversarial attack being based on deceiving the algorithm by means of a manipulated traffic indicator arrangement in the environment of the autonomous vehicle, wherein validated and/or certified first traffic indicator arrangement data for said environment is provided to the autonomous vehicle by a remote control center, the method comprising: a) Monitoring, by the autonomous vehicle, an environment of the vehicle in order to generate monitoring data related to a potential traffic indicator arrangement in said environment; b) Recognizing, from the monitoring data, a traffic indicator arrangement in said environment by means of the algorithm used in the autonomous vehicle in order to generate second traffic indicator arrangement data; c) Comparing the first traffic indicator arrangement data and the second traffic indicator arrangement data; and d) Based on the comparison, ignoring one of the first traffic indicator arrangement data and the second traffic indicator arrangement data and navigating the autonomous vehicle by using the other one of the second traffic indicator arrangement data and the first traffic indicator arrangement data. ### Claim 2 (depends on 1) The method according to claim 1, characterized in that step d) comprises: d1) Based on the comparison, transmitting, by the autonomous vehicle, an alert to a government and/or security agency, the remote control center and/or other vehicles in the environment. ### Claim 3 (depends on 1) The method according to claim 1, characterized in that the traffic indicator arrangement includes one or more traffic indicators and/or barriers, such as traffic lights, traffic road and/or lane markings, traffic signs, traffic cones, and/or construction site barriers and/or markings. ### Claim 4 (depends on 3) The method according to claim 3, characterized in that the first traffic indicator arrangement data and the second traffic indicator arrangement data are compared with respect to geolocation, ground offset, function, status, form, and/or nature of the one or more traffic indicators and/or barriers of the traffic indicator arrangement. ### Claim 5 (depends on 1) The method according to claim 1, characterized in that steps c) and d) comprise: c1) If the comparing results in a discrepancy between the first traffic indicator arrangement data and the second traffic indicator arrangement, transmitting, by the autonomous vehicle, the monitoring data to the control center; and: c2) By the control center, analyzing the monitoring data and/or receiving an analysis input related to the monitoring data and d2) causing the autonomous vehicle to ignore one of the first traffic indicator arrangement data and the second traffic indicator arrangement data and to navigate the autonomous vehicle by using the other one of the second traffic indicator arrangement data and the first traffic indicator arrangement data; and/or c3) By the control center, analyzing the monitoring data and/or receiving an analysis input related to the monitoring data and d3) updating the first traffic indicator arrangement data for said environment and providing the updated first traffic indicator arrangement data to the autonomous vehicle and/or to one or more other vehicles. ### Claim 6 A method for handling a potential adversarial attack on an autonomous vehicle while driving a road, the autonomous vehicle including an algorithm for navigating the autonomous vehicle based on monitoring data related to an environment of the vehicle, the adversarial attack being based on triggering the algorithm to stop the autonomous vehicle by means of a stop arrangement in the environment of the autonomous vehicle, the method comprising: e) Monitoring, by the autonomous vehicle, an environment of the vehicle in order to generate monitoring data related to a potential stop arrangement; f) Recognizing, from the monitoring data, a stop arrangement in said environment by means of the algorithm used in the autonomous vehicle; g) Transmitting the monitoring data to a remote control center; and h) By the control center, analyzing the monitoring data and/or receiving an analysis input related to the monitoring data and based on the analyzing and/or the received analysis input, causing the autonomous vehicle to initiate an adversarial attack defense mode and/or transmitting an alert to a government and/or security agency and/or to one or more other vehicles. ### Claim 7 (depends on 6) The method according to claim 6, characterized in that the stop arrangement includes one or more traffic indicators and/or barriers and/or one or more vulnerable road users. ### Claim 8 (depends on 6) The method according to claim 6, characterized in that the adversarial attack defense mode includes one, several or all of the following: h1) Activating one or more signal lights, a vehicle horn, and/or a sound alarm of the autonomous vehicle; and/or h2) Transmitting an alert to a government and/or security agency and/or to one or more other vehicles in the environment; and/or h3) Activating an unmanned aerial vehicle, such as a drone, installed at the autonomous vehicle. ### Claim 9 A non-transitory computer-readable medium having stored thereon instructions which, when executed by a processor, causes the processor to perform a method for handling a potential adversarial attack on an autonomous vehicle while driving a road, the autonomous vehicle including an algorithm for navigating the autonomous vehicle based on monitoring data related to an environment of the vehicle, the adversarial attack being based on triggering the algorithm to stop the autonomous vehicle by means of a stop arrangement in the environment of the autonomous vehicle, the method comprising: e) Monitoring, by the autonomous vehicle, an environment of the vehicle in order to generate monitoring data related to a potential stop arrangement; f) Recognizing, from the monitoring data, a stop arrangement in said environment by means of the algorithm used in the autonomous vehicle; g) Transmitting the monitoring data to a remote control center; and h) By the control center, analyzing the monitoring data and/or receiving an analysis input related to the monitoring data and based on the analyzing and/or the received analysis input, causing the autonomous vehicle to initiate an adversarial attack defense mode and/or transmitting an alert to a government and/or security agency and/or to one or more other vehicles.