Secure message including a vehicle private key

• US 10,594,666 B2
• Filed: 12/19/2017
• Issued: 03/17/2020
• Est. Priority Date: 12/19/2017
• Status: Active Grant

• Current Assignee: Micron Technology, Inc.
• Original Assignee: Micron Technology, Inc.
• Inventors: Troia, Alberto, Mondello, Antonino
• Primary Examiner(s): Cheung, Calvin
• Application Number:
  US15/846,982
• Publication Number:
  US 20190190893A1
• Time in Patent Office: 819 Days
• CPC Class Codes: G05D 1/0088 characterized by the autonomous decision making process, e.g. artificial intelligence, predefined behaviours using knowledge based models G06N5/00
• CPC Class Codes: G06N 3/044 Recurrent networks, e.g. Hopfield networks
• CPC Class Codes: G06N 3/045 Combinations of networks
• CPC Class Codes: G06N 3/063 using electronic means
• CPC Class Codes: G06N 3/08 Learning methods
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

An example apparatus comprises a memory resource configured to store a private key associated with a vehicle and store a data matrix comprising data corresponding to operation of the vehicle. The apparatus may further include a processing resource configured to generate a first secure message comprising data corresponding to the vehicle, transmit the first secure message, receive a second secure message comprising an updated data matrix, and update the data matrix based, at least in part, on the updated data matrix.

Claims

1. An apparatus, comprising:

a memory resource configured to;

store a private key associated with a vehicle; and

store a weighing matrix comprising data corresponding to operation of the vehicle; and

a processing resource coupled to the memory resource, wherein the processing resource is configured to;

generate a first secure message comprising data corresponding to the vehicle and the private key and a message authentication code (MAC) based on the private key and an authentication protocol concatenated with the data corresponding to the vehicle and the private key;

transmit the first secure message;

receive a second secure message comprising an updated weighing matrix concatenated with the authentication protocol and the MAC; and

update the weighing matrix based, at least in part, on the updated weighing matrix.

2. The apparatus of claim 1, wherein the private key is generated based on a vehicle identification number assigned to the vehicle.

3. The apparatus of claim 1, wherein the authentication protocol is an anti-replay protocol.

4. The apparatus of claim 1, wherein the authentication protocol includes at least one of a timestamp, a cryptographic nonce value, a monotonically incrementable counter, or combinations thereof.

5. The apparatus of claim 1, wherein the processing resource is further configured to re-generate the authentication protocol prior to transmitting the first secure message.

6. The apparatus of claim 1, wherein the data corresponding to the vehicle includes data collected from vehicle sensors, photographic data collected from vehicle cameras, or combinations thereof.

7. The apparatus of claim 1, wherein the private key is not transferred via a communication bus coupled to the processing resource and the memory resource.

8. An apparatus, comprising:

a host computing device including a processing resource and a memory resource, wherein the host computing device is configured to;

store a private key associated with a vehicle;

store a weighing matrix comprising data corresponding to operation of the vehicle;

receive a first secure message from the vehicle, the first secure message comprising data collected by the vehicle and a message authentication code (MAC) based on a vehicle identification number associated with the vehicle and a private key assigned to the vehicle, wherein the private key is stored in the memory resource; and

transmit, to the vehicle, a second secure message comprising an updated weighing matrix responsive to receipt of the first secure message.

9. The apparatus of claim 8, wherein:

the first secure message comprises a message authentication code (MAC) based on the private key and an authentication protocol including an anti-replay mechanism concatenated with the data corresponding to the vehicle; and

the second secure message comprises the authentication protocol, and the MAC concatenated with the updated weighing matrix.

10. The apparatus of claim 8, wherein the host computing device is configured to generate the updated weighing matrix based on the received data collected by the vehicle.

11. The apparatus of claim 8, wherein the data corresponding to the vehicle includes data corresponding to unrecognizable objects detected by the vehicle, and wherein the data is collected from vehicle sensors and photographic data.

12. The apparatus of claim 8, wherein the private key is based, at least in part, on a vehicle identification number associated with the vehicle and wherein the private key is assigned to the vehicle and stored in the memory resource when the vehicle is made.

13. The apparatus of claim 8, wherein the private key is modifiable, but is not readable.

14. A system, comprising:

an artificial intelligence electronic control unit (ECU) disposed in a vehicle, the ECU comprising a controller and a memory resource, wherein the controller is configured to cause;

a first secure message including data collected by the vehicle to be transmitted to a host computing device communicatively coupled to the ECU via a gateway, wherein the host computing device is configured to transmit a second secure message including a weighing matrix to the ECU responsive to receipt of the first secure message; and

the second secure message to be processed to update the ECU using the received weighing matrix.

15. The system of claim 14, the data collected by the vehicle includes data corresponding to unrecognizable objects detected by the vehicle.

16. The system of claim 14, wherein the controller is configured to cause:

the first secure message to be encrypted using a hash-based message authentication code; and

the second message to be decrypted prior to updating the ECU using the received weighing matrix.

17. The system of claim 14, wherein the controller includes a hardware based artificial neural network.

18. The system of claim 17, wherein values associated with the weighing matrix represent firmware of the artificial neural network.

19. A method, comprising:

determining, by a plurality of sensors coupled to a vehicle, that at least one sensor among the plurality of sensors has detected an un-recognized object;

generating a first secure message comprising data corresponding to the un-recognized object;

transmitting the first secure message to a host computing device external to the vehicle; and

receiving, at the vehicle, a second secure message comprising updated data corresponding to the un-recognized object; and

updating firmware associated with the vehicle using the updated data.

20. The method of claim 19, wherein the first secure message further includes a message authentication code (MAC) and an authentication protocol concatenated with the data corresponding to the un-recognized object.

21. The method of claim 20, wherein the MAC is generated using a vehicle identification number corresponding to the vehicle, a private key corresponding to the vehicle, or combinations thereof.

22. The method of claim 19, wherein the second secure message further includes a message authentication code (MAC) and an authentication protocol concatenated with the updated data, and wherein the authentication protocol includes an anti-replay mechanism.

23. The method of claim 19, wherein the updated data is stored in a weighing matrix corresponding to firmware of an artificial neural network associated with the vehicle.

24. An apparatus, comprising:

a memory resource configured to;

store a private key associated with a vehicle; and

store a matrix comprising data corresponding to operation of the vehicle; and

a processing resource coupled to the memory resource, wherein the processing resource is configured to;

generate a first secure message comprising data corresponding to the vehicle and the private key, wherein the data corresponding to the vehicle includes data collected from vehicle sensors, photographic data collected from vehicle cameras, or combinations thereof;

transmit the first secure message;

receive a second secure message comprising an updated matrix; and

update the matrix based, at least in part, on the updated matrix.

25. An apparatus, comprising:

a host computing device including a processing resource and a memory resource, wherein the host computing device is configured to;

store a matrix comprising data corresponding to operation of a vehicle;

receive a first secure message from the vehicle, the first secure message comprising data collected by the vehicle; and

transmit, to the vehicle, a second secure message comprising an updated matrix responsive to receipt of the first secure message; and

generate the updated matrix based on the received data collected by the vehicle.

26. An apparatus, comprising:

a host computing device including a processing resource and a memory resource, wherein the host computing device is configured to;

store a matrix comprising data corresponding to operation of a vehicle;

receive a first secure message from the vehicle, the first secure message comprising data collected by the vehicle, a message authentication code (MAC) based on the private key, and an authentication protocol including an anti-replay mechanism concatenated with the data corresponding to the vehicle; and

transmit, to the vehicle, a second secure message comprising an updated matrix, the authentication protocol, and the MAC concatenated with the updated matrix responsive to receipt of the first secure message.