Privacy-aware signal monitoring systems and methods

• US 10,580,225 B2
• Filed: 03/31/2017
• Issued: 03/03/2020
• Est. Priority Date: 03/31/2017
• Status: Active Grant

• Current Assignee: Toyota Jidosha Kabushiki Kaisha (Toyota Motor Corporation)
• Original Assignee: Toyota Motor Engineering & Manufacturing North America Incorporated (Toyota Motor Corporation)
• Inventors: Deshmukh, Jyotirmoy V., Kapinski, James P., Jin, Xiaoqing, Nguyen, Luan V.
• Primary Examiner(s): Patel, Ashokkumar B
• Assistant Examiner(s): Farooqui, Quazi
• Application Number:
  US15/476,642
• Publication Number:
  US 20180286143A1
• Time in Patent Office: 1,068 Days
• Field of Search: 713150, 713189, 380 1
• CPC Class Codes: G07C 5/006 Indicating maintenance
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/0808 Diagnosing performance data testing of vehicles G01M17/00; testing of electrical installation on vehicles G01R31/005
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

Systems and methods are provided for monitoring time-series data relative to a temporal logic specification regarding expected behavior of a system, such as a vehicle. The time-series data and a threshold value(s) specified in the temporal logic specification may be encrypted and analyzed without decrypting the time-series data to maintain the privacy of a user(s) of the vehicle. Encryption of the time-series data and the threshold value(s) may be accomplished using an order preserving encryption scheme. Analysis of the time-series data may be accomplished utilizing a batch processing-type architecture or a continuous processing-type architecture. When utilizing the continuous processing-type architecture, historical time-series data may be stored and utilized to determine whether currently-monitored time-series data satisfies the temporal logic specification.

Claims

1. A method comprising:

receiving time-series data comprising a sequence of values associated with one or more signals generated by a system and representative of a characteristic of the system that has been encrypted according to an encryption scheme by mapping each of the sequence of values to one of a plurality of random values;

comparing the encrypted time-series data with a specification indicative of one or more expected behaviors of the system, wherein one or more threshold values set forth in the specification are encrypted by mapping the one or more threshold values to other random values of the plurality of random values;

determining, based upon the comparison and without decrypting any of the encrypted time-series data, the one or more threshold values, and a result of the comparison, whether the characteristic of the system comports with the one or more expected behaviors of the system; and

outputting one or more notifications based upon the determination.

2. The method of claim 1, wherein the time-series data are monitored over a period of time.

3. The method of claim 1, wherein an ordered relationship between each of the sequence of values and the one or more threshold values is maintained after encryption.

4. The method of claim 1, wherein an ordered relationship between each of the sequence of values and the one or more threshold values is maintained after encryption.

5. The method of claim 1 further comprising, comparing the encrypted time-series data with the one or more encrypted threshold values commensurate with a temporal logic formula defining the one or more expected behaviors of the system.

6. The method of claim 1, wherein the encryption scheme comprises an order preserving encryption scheme.

7. The method of claim 1, wherein at least one of the comparing and the determining operations is performed by one or more processors local to the system or one or more processors remotely located from the system.

8. The method of claim 7, wherein the one or more processors remotely located from the system comprises a non-decrypting cloud server.

9. The method of claim 8 further comprising, transmitting the encrypted time-series data and an encrypted threshold value specified in the specification to the non-decrypting cloud server in batches of encrypted packets.

10. The method of claim 8 further comprising, continuously transmitting the encrypted time-series data to the non-decrypting cloud server as a stream of encrypted time-series data.

11. The method of claim 10, wherein the comparing operation further comprises accounting for historical encrypted time-series data obtained during previous monitoring of the system.

12. The method of claim 10, wherein the encrypting of the time-series data comprises mapping each of the sequence of values to one of a plurality of random values, and wherein the plurality of random values is representative of a range of foreseeable values to which the sequence of values is mappable.

13. The method of claim 1 further comprising, generating a predictive maintenance judgment regarding the system, wherein the one or more notifications comprise one or more recommendations regarding predictive maintenance actions to put the system in compliance with the predictive maintenance judgment.

14. A system, comprising:

an analysis component adapted to;

analyze a sequence of time-series data in accordance with one or more specifications indicative of one or more expected behaviors of a vehicle, the one or more specifications specifying one or more threshold values, wherein the sequence of time-series data and the one or more threshold values are encrypted by a user device adapted to monitor one or more operating characteristics of the vehicle, the encryption comprising mapping the sequence of time-series data and the one or more threshold values to randomized values; and

transmit a predictive maintenance judgment from the analysis component to the user device regarding the one or more operating characteristics of the vehicle, without decrypting any of the sequence of time-series data, the one or more threshold values, or analysis of the sequence of time-series data, prompting one or more notifications to be generated, the one or more notifications indicating one or more suggested actions to be undertaken to put the vehicle in compliance with the one or more expected behaviors of the vehicle.

15. The system of claim 14, wherein the analysis component is implemented in a non-decrypting cloud server remotely located from the vehicle.

16. The system of claim 14, wherein the user device comprises:

a data encryption component adapted to generate the encrypted sequence of time-series data and the one or more encrypted threshold values; and

an encryption table initialization component adapted to create an encryption table utilized by the data encryption component to generate the encrypted sequence of time-series data and the one or more encrypted threshold values, the encryption table initialization component generating the encryption table in accordance with the randomized values to which the sequence of time-series data and the one or more threshold values is mapped by the data encryption component.

17. The system of claim 16, wherein the encryption table initialization component generates the encryption table based on a range of randomized values encompassing all possible values representative of the one or more operating characteristics of the vehicle, and to which the sequence of time-series data is mapped by the data encryption component.

18. The system of claim 14 further comprising, a data store that stores encrypted versions of previously monitored time-series data indicative of the one or more operating characteristics of the vehicle.

19. The system of claim 18, wherein the analysis component further analyzes the encrypted sequence of time-series data in accordance with the one or more specifications relative to the encrypted versions of the previously monitored time-series data.