METHOD AND APPARATUS FOR SECURE DATA TRANSFER PERMISSION HANDLING

• US 20140282827A1
• Filed: 03/15/2013
• Published: 09/18/2014
• Est. Priority Date: 03/15/2013
• Status: Abandoned Application

• Current Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Original Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Inventors: Mitchell, David Chase, Westra, Michael Raymond, Marchwicki, Julius, Halash, Elizabeth
• Application Number:
  US13/838,583
• Publication Number:
  US 20140282827A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

A vehicle-based system includes a processor configured to receive policy table updates issued from a remote server. The processor is further configured to update a local policy table based on the updates. The processor is additionally configured to receive a request from a remote application for data access. The processor is further configured to determine, based on the local policy table, if the data access requires user consent. The processor is also configured to determine if required consent is stored in the local policy table and provide data access to the remote application based on stored required consent.

Claims

1. A vehicle-based system comprising:

a processor configured to;

receive policy table updates issued from a remote server;

update a local policy table based on the updates;

receive a request from a remote application for data access;

determine, based on the local policy table, if the data access requires user consent;

determine if required consent is stored in the local policy table; and

provide data access to the remote application based on stored required consent.

2. The system of claim 1, wherein the remote server is an OEM-controlled server.

3. The system of claim 1, wherein the policy table updates include changes in secure data definitions.

4. The system of claim 3, wherein secure data definitions relate to secure data including data requiring user permission for transfer from a vehicle to a remote device.

5. The system of claim 1, wherein the request from the remote application is received from a device wireless connected to the processor.

6. The system of claim 1, wherein the processor is further configured to request user consent and store a response to the request in the local policy table.

7. The system of claim 6, wherein the stored required consent resulted from a user consent request issued during a previous communication session between the processor and the remote application.

8. The system of claim 6, wherein the processor is further configured to report the stored response to the remote server.

9. A computer-implemented method comprising:

receiving policy table updates issued from a remote server;

updating a local policy table based on the updates;

receiving a request from a remote application for data access;

determining, based on the local policy table, if the data access requires user consent;

determining if required consent is stored in the local policy table; and

providing data access to the remote application based on stored required consent.

10. The method of claim 9, wherein the remote server is an OEM-controlled server.

11. The method of claim 9, wherein the policy table updates include changes in secure data definitions.

12. The method of claim 11, wherein secure data definitions relate to secure data including data requiring user permission for transfer from a vehicle to a remote device.

13. The method of claim 9, wherein the request from the remote application is received from a device wireless connected to the processor.

14. The method of claim 9, further including requesting user consent and storing a response to the request in the local policy table.

15. The method of claim 14, wherein the stored required consent resulted from a user consent request issued during a previous communication session between the processor and the remote application.

16. The method of claim 14, further including reporting the stored response to the remote server.

17. A non-transitory computer-readable storage medium storing instructions that, when executed by a processor, cause the processor to perform the method comprising:

receiving policy table updates issued from a remote server;

updating a local policy table based on the updates;

receiving a request from a remote application for data access;

determining, based on the local policy table, if the data access requires user consent;

determining if required consent is stored in the local policy table; and

providing data access to the remote application based on stored required consent.

18. The storage medium of claim 17, wherein the remote server is an OEM-controlled server.

19. The storage medium of claim 17, wherein the policy table updates include changes in secure data definitions.

20. The storage medium of claim 19, wherein secure data definitions relate to secure data including data requiring user permission for transfer from a vehicle to a remote device.