US 2021/0176071 A1Published application

Cyber-security protocol

AssigneeMotional AD LLC

InventorsMichael MAASS, Karl ROBINSON, Lucky MUNRO

Life of this patent

Estimating the term…

Loading patent…

Abstract

This disclosure describes a cyber-security protocol for validating messages being exchanged between two devices of an autonomous vehicle. The protocol includes the independent generation of multiple encryption or session keys by both devices. The encryption keys are generated based on a random number provided by each device. In some embodiments, the random numbers can be accompanied by a shared secret key installed on both devices that can help prevent an unauthorized device from creating a shared set of encryption keys with one of the devices. Including a hash generated using one of the encryption keys and a message sequence counter value in each message can help prevent the injection of previously transmitted messages as a means of disturbing operation of the autonomous vehicle.

Claims20

Dependent claims

A method for authenticating communications received from a first device of an autonomous vehicle by a second device of the autonomous vehicle, the method comprising:

performing, using a processing circuit of the second device, a keying operation, comprising:
exchanging randomly generated numbers with the first device;
and
generating a plurality of encryption keys using the randomly generated numbers;
receiving at the second device a first message including:
a first message sequence counter value;
and
a first hash generated using a first encryption key of the plurality of encryption keys;
after receiving the first message, receiving a second message at the second device that includes a second message sequence counter value and a second hash generated using the first encryption key;
in accordance with a determination that the second message sequence counter value is greater than the first message sequence counter value, authenticating the second message as having been received from the first device;
after receiving the second message, receiving a third message that includes a third message sequence counter value and a third hash generated using the second encryption key of the plurality of encryption keys;
and
in accordance with a determination that the third message sequence counter value is less than the second message sequence counter value and the second encryption key used to generate the third hash is different than the first encryption key, authenticating the third message as having been received from the first device.

10 more elements

An autonomous vehicle, comprising:

a first device having a first processing circuit;
a second device having a second processing circuit;
and
memory storing one or more programs configured to be executed by the first and second processing circuits, the one or more programs including instructions for:
performing a keying operation, comprising:
exchanging randomly generated numbers between the first device and the second device;
and
generating a plurality of encryption keys using the randomly generated numbers;
transmitting to the second device using the first processing circuit a first message including a first message sequence counter value and a first hash generated using the first encryption key of the plurality of encryption keys;
receiving the first message at the second device;
after transmitting the first message, transmitting to the second device using the first processing circuit a second message that includes a second message sequence counter value that is greater than the first message sequence counter value and a second hash generated using the first encryption key;
receiving the second message at the second device;
in accordance with a determination by the second processing circuit that the second message sequence counter value is greater than the first message sequence counter value, authenticating the second message as having been received from the first device;
after transmitting the second message, transmitting to the second device using the first processing circuit a third message that includes a third message sequence counter value and a third hash generated using a second encryption key of the plurality of encryption keys;
and
in accordance with a determination by the second processing circuit that the third message sequence counter value is less than the second message sequence counter value and the second encryption key used to generate the third hash is different than the first encryption key, authenticating the third message as having been received from the first device.

13 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/104,482Filed 25 Nov 2020
Priority: 6 Dec 2019
Published: 10 Jun 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification18 codes

H04L 9/3247
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…
H04L 63/068
For supporting key management in a packet data network: using time-dependent keys, e.g. periodically changing keys
H04L 9/0869
Generation of secret information including derivation or calculation of cryptographic keys or passwords: involving random numbers or seeds
H04L 9/14
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: using a plurality of keys…

Family

Application62/944,987Us provisional application · filed 6 Dec 2019
US 11,750,399 B2Related patent
US 2021/0176071 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key