SYSTEM AND METHOD FOR ENABLING SECURE TRANSACTIONS USING FLEXIBLE IDENTITY MANAGEMENT IN A VEHICULAR ENVIRONMENT

• US 20140380442A1
• Filed: 09/12/2014
• Published: 12/25/2014
• Est. Priority Date: 01/14/2011
• Status: Abandoned Application

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Addepalli, Sateesh K., Maino, Fabio R., Bonomi, Flavio, Dai, Lillian Lei, Ermagan, Vina, Loukissas, Alexander, Lee, Erick D., Noll, Landon Curt
• Application Number:
  US14/484,664
• Publication Number:
  US 20140380442A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: B60R 16/023 for transmission of signals between vehicle parts or subsystems
• CPC Class Codes: B60W 50/10 Interpretation of driver requests or demands
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06F 3/167 Audio in a user interface, e.g. using voice commands for navigating, audio feedback
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications
• CPC Class Codes: H04L 1/008 where the control data relates to payload of a different packet
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 43/0858 One way delays
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 45/12 Shortest path evaluation
• CPC Class Codes: H04L 51/02 using automatic reactions or user delegation, e.g. automatic replies or chatbot-generated messages
• CPC Class Codes: H04L 61/2592 using tunnelling or encapsulation
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04Q 9/00 Arrangements in telecontrol or telemetry systems for selectively calling a substation from a main station, in which substation desired apparatus is selected for applying a control signal thereto or for obtaining measured values therefrom
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 28/0215 based on user or device properties, e.g. MTC-capable devices services for machine-to-machine communication [M2M] or machine type communication [MTC] H04W4/70; wireless resource selection or allocation plan definition based on terminal or device properties H04W72/51
• CPC Class Codes: H04W 28/06 : Optimizing the usage of the radio link, e.g. header compression, information sizing , discarding information system modifying transmission characteristic according to link quality by modifying frame length H04L1/0007; dynamic adaptation of the packet size for flow control or congestion control H04L47/365
• CPC Class Codes: H04W 36/0009 : for a plurality of users or terminals, e.g. group communication or moving wireless networks user group management H04W4/08; processing of subscriber group data H04W8/186
• CPC Class Codes: H04W 36/08 : Reselecting an access point
• CPC Class Codes: H04W 4/00 : Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 4/10 : Push-to-Talk [PTT] or Push-On-Call services
• CPC Class Codes: H04W 4/40 : for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 40/02 : Communication route or path selection, e.g. power-based or shortest path routing
• CPC Class Codes: H04W 40/20 : based on geographic position or location
• CPC Class Codes: H04W 48/02 : Access restriction performed under specific conditions
• CPC Class Codes: H04W 48/06 : based on traffic conditions
• CPC Class Codes: H04W 48/16 : Discovering, processing access restriction or access information
• CPC Class Codes: H04W 48/18 : Selecting a network or a communication service
• CPC Class Codes: H04W 52/0206 : in access points, e.g. base stations access point devices per se H04W88/08
• CPC Class Codes: H04W 52/0219 : where the power saving management affects multiple terminals
• CPC Class Codes: H04W 52/0264 : by selectively disabling software applications
• CPC Class Codes: H04W 52/12 : Outer and inner loops
• CPC Class Codes: H04W 52/143 : Downlink power control
• CPC Class Codes: H04W 52/225 : Calculation of statistics, e.g. average, variance
• CPC Class Codes: H04W 52/241 : taking into account channel quality metrics, e.g. SIR, SNR, CIR, Eb/lo
• CPC Class Codes: H04W 52/346 : distributing total power among users or channels
• CPC Class Codes: H04W 72/20 : Control channels or signalling for resource management
• CPC Class Codes: H04W 72/23 : in the downlink direction of a wireless link, i.e. towards a terminal
• CPC Class Codes: H04W 72/53 : based on regulatory allocation policies
• CPC Class Codes: H04W 76/45 : for Push-to-Talk [PTT] or Push-to-Talk over cellular [PoC] services
• CPC Class Codes: H04W 8/06 : Registration at serving network Location Register, VLR or user mobility server
• CPC Class Codes: H04W 8/08 : Mobility data transfer
• CPC Class Codes: H04W 8/26 : Network addressing or numbering for mobility support
• CPC Class Codes: H04W 80/02 : Data link layer protocols
• CPC Class Codes: H04W 84/005 : Moving wireless networks
• CPC Class Codes: H04W 84/12 : WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 92/18 : between terminal devices
• CPC Class Codes: Y02A 30/60 : Planning or developing urban green infrastructure
• CPC Class Codes: Y02D 30/70 : in wireless communication networks

Abstract

A method in one embodiment includes authenticating a first agent to an on board unit (OBU) of a vehicle if the first agent validates a first set of one or more authentication requirements and identifying a first identity profile corresponding to the first agent. The method also includes determining a role of the first agent in the vehicle and configuring the vehicle with the first identity profile, where the vehicle is configured based, at least in part, on the role of the first agent. In this embodiment, the first identity profile is one of a plurality of identity profiles provisioned on the OBU. In specific embodiments, each one of a plurality of agents corresponds to a respective one of the plurality of identity profiles, and includes one or more of a human agent, a machine device, a software agent, an authorized entity, and a mobile device.

Claims

1. A method, comprising:

authenticating a first agent to an on board unit (OBU) of a vehicle if the first agent validates a first set of one or more authentication requirements;

identifying a first identity profile corresponding to the first agent;

determining a role of the first agent in the vehicle; and

configuring the vehicle with the first identity profile, the vehicle configured based, at least in part, on the role of the first agent,

wherein the first identity profile is one of a plurality of identity profiles provisioned on the OBU.

2. The method of claim 1, wherein the first agent is a human agent.

3. The method of claim 1, wherein each one of a plurality of agents corresponds to a respective one of the plurality of identity profiles, wherein the plurality of agents includes one or more of a human agent, a machine device, a software agent, an authorized entity, and a mobile device.

4. The method of claim 1, further comprising:

establishing a network connection from the OBU to a remote node of an identity service provider; and

downloading the first identity profile from the remote node to the OBU.

5. The method of claim 1, further comprising:

authenticating a second agent to the OBU if the second agent validates a second set of one or more authentication requirements;

identifying a second identity profile corresponding to the second agent;

determining the role of the second agent in the vehicle; and

configuring the vehicle with the second identity profile, wherein the vehicle is configured based, at least in part, on the role of the second agent.

6. The method of claim 1, further comprising:

determining the first agent has priority over a second agent if the first and second agents are authenticated to the OBU concurrently,

wherein any preferences in a second identity profile associated with the second agent conflicting with preferences in the first identity profile are overridden by the preferences associated with the first identity profile.

7. The method of claim 1, wherein the first identity profile of the first agent is stored on the OBU of the vehicle and on one or more other OBUs of one or more other vehicles, respectively.

8. The method of claim 1, further comprising:

determining whether one or more limitations are set for the first identity profile; and

applying the one or more limitations when the vehicle is configured with the first identity profile.

9. One or more non-transitory media that includes code for execution and when executed by a processor is operable to perform operations comprising:

authenticating a first agent to an on board unit (OBU) of a vehicle if the first agent validates a first set of one or more authentication requirements;

identifying a first identity profile corresponding to the first agent;

determining a priority of the first agent in the vehicle; and

configuring the vehicle with the first identity profile, the vehicle configured based, at least in part, on the priority of the first agent,

wherein the first identity profile is one of a plurality of identity profiles provisioned on the OBU.

10. The one or more non-transitory media of claim 9, wherein each one of a plurality of agents corresponds to a respective one of the plurality of identity profiles, wherein the plurality of agents includes one or more of a human agent, a machine device, a software agent, an authorized entity, and a mobile device.

11. The one or more non-transitory media of claim 9, wherein the configuring the vehicle with the first identity profile includes configuring vehicle settings based, at least in part, on a role of the first agent.

12. The one or more non-transitory media of claim 9, wherein the configuring the vehicle with the first identity profile includes configuring preferences indicated in the first identity profile.

13. The one or more non-transitory media of claim 12, the operations further comprising:

determining the first agent has priority over a second agent if the first and second agents are authenticated to the OBU concurrently,

wherein any preferences in a second identity profile associated with the second agent that conflict with the preferences in the first identity profile are overridden by the preferences in the first identity profile.

14. The one or more non-transitory media of claim 9, wherein the code for execution, when executed by a processor, is operable to perform further operations comprising:

establishing a network connection from the OBU to a remote node of an identity service provider when the first agent is authenticated; and

performing one of adding, removing, or updating a virtual subscriber identity module (VSIM) in the first identity profile.

15. The one or more non-transitory media of claim 9, wherein configuring the vehicle with the first identity profile includes configuring a network interface account and network configurations on the OBU for one or more mobile devices identified in the first identity profile.

16. An apparatus, comprising:

at least one memory element configured to store data;

an agent provisioning module; and

at least one processor operable to execute instructions associated with the data and the agent provisioning module to;

authenticate a first agent to the apparatus if the first agent validates a first set of one or more authentication requirements, the apparatus configured for operation in a vehicle;

identify a first identity profile corresponding to the first agent;

determine a role of the first agent in the vehicle; and

configure the vehicle with the first identity profile, wherein the vehicle is configured based, at least in part, on the role of the first agent,

wherein the first identity profile is one of a plurality of identity profiles provisioned in the memory element.

17. The apparatus of claim 16, further comprising:

an identity profile provisioning module, wherein the processor is operable to execute further instructions associated with the data and the identity profile provisioning module to;

establish a network connection from the apparatus to a remote node of an identity service provider;

download the first identity profile from the remote node to the apparatus; and

store the first identity profile in the memory element in an encrypted format.

18. The apparatus of claim 16, wherein configuring the vehicle with the first identity profile includes configuring preferences indicated in the first identity profile.

19. The apparatus of claim 16, wherein configuring the vehicle with the first identity profile includes configuring a network interface account and network configurations indicated in the first identity profile for one or more mobile devices identified in the first identity profile.

20. The apparatus of claim 16, further comprising:

a virtual subscriber identity module (VSIM) provisioning module, wherein the processor is operable to execute further instructions associated with the data and the VSIM provisioning module to;

establish a network connection from the apparatus to a remote node of an identity service provider when the first agent is authenticated; and

perform one of adding, removing, or updating a virtual subscriber identity module (VSIM) in the first identity profile.