AUTHENTICATED MESSAGES BETWEEN UNMANNED VEHICLES

• US 20160285864A1
• Filed: 03/27/2015
• Published: 09/29/2016
• Est. Priority Date: 03/27/2015
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Canavor, Darren Ernest, Gopalakrishnan, Varadarajan, Johansson, Jesper Mikael, McClintock, Jon Arron, Porter, Brandon William, Roths, Andrew Jay
• Granted Patent: US 9,930,027 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: B64U 2201/20 Remote controls
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/102 Route integrity, e.g. using trusted paths
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

An unmanned vehicle communicates with other unmanned vehicles. When the unmanned vehicle receives a message from another unmanned vehicle, the unmanned vehicle verifies authenticity of the message. For at least some types of messages, if determined that the message is authentic, the unmanned vehicle updates a set of operations the unmanned vehicle will perform in accordance with information in the message.

Claims

1. An unmanned aerial vehicle, comprising:

a propulsion subsystem configured to propel the unmanned aerial vehicle between locations; and

a transceiver configured to receive and transmit messages;

an on-board computer system including;

one or more processors; and

memory that stores;

a set of tasks to be completed by the unmanned aerial vehicle; and

instructions that, when executed by the one or more processors, cause the on-board computer system to;

determine a task for the set of tasks based at least in part a first message received via the transceiver;

at a time after determining the task, cryptographically verifying that a second message received through the transceiver is trustworthy;

recalculate the task based at least in part on information in the received second message; and

control at least the propulsion subsystem to complete the recalculated task.

2. The unmanned aerial vehicle of claim 1, wherein:

the second message is received through the transceiver with a first digital certificate and a digital signature; and

the instructions that cause the on-board computer system to cryptographically verify that the second message is trustworthy, when executed by the one or more processors, cause the on-board computer system to;

use a locally stored second digital certificate to verify the received first digital certificate; and

use the first digital certificate to verify the received digital signature.

3. The unmanned aerial vehicle of claim 1, wherein recalculation of the task comprises recalculating a route for the task to avoid an area corresponding to a location specified in the second message.

4. The unmanned aerial vehicle of claim 1, wherein the instructions that cause the on-board computer system to recalculate the task, when executed by the one or more processors, cause the on-board computer system to select the task as a result of information in the second message being applicable to fulfillment of the task.

5. A computer-implemented method, comprising:

under the control of an on-board computer system of an unmanned vehicle,

storing information specifying a set of operations to be performed by the unmanned vehicle;

receiving, from another unmanned vehicle, a message and authentication information for the message, the authentication information specific to an originator of the message;

determining, based at least in part on the authentication information, that the message is authentic; and

modifying the information based at least in part on the message.

6. The computer-implemented method of claim 5, wherein:

the authentication information comprises a digital signature for the message and a first digital certificate; and

determining that the message is authentic includes using a second digital certificate to verify the first digital certificate and using the first digital certificate to validate the digital signature.

7. The computer-implemented method of claim 5, wherein:

the information specifies a set of tasks each with a corresponding subset of the set of operations; and

the method further comprises selecting a task based at least in part on the message and recalculating the task.

8. The computer-implemented method of claim 5, wherein modifying the information comprises modifying a route to a destination based at least in part on information in the message.

9. The computer-implemented method of claim 5, further comprising transmitting the message to a second unmanned vehicle that is different from the other unmanned vehicle.

10. The computer-implemented method of claim 5, wherein the unmanned vehicle and the other unmanned vehicle are unmanned aerial vehicles.

11. The computer-implemented method of claim 5, wherein:

the message indicates untrustworthiness of a second unmanned vehicle different from the other unmanned vehicle;

at least a portion of the information is reliant on information in a message received from the second unmanned vehicle; and

modifying the information includes recalculating the portion of the information independently of the information received in the message from the second unmanned vehicle.

12. The computer-implemented method of claim 5, wherein:

the message has a type of a plurality of message types; and

modifying the information is further based at least in part on the type.

13. A non-transitory computer-readable storage medium having stored thereon executable instructions that, when executed by one or more processors of a computer system of an unmanned vehicle, cause the computer system to at least:

store an operational plan specifying a set of operations the unmanned vehicle is to perform;

receive a message;

use authentication information specific to another unmanned aerial vehicle to cryptographically verify whether the message originated from the other unmanned vehicle; and

update the operational plan in accordance with information in the message if the message is cryptographically verified as having originated from the other unmanned vehicle.

14. The non-transitory computer-readable storage medium of claim 13, wherein:

the message is received with a digital signature and a digital certificate; and

the instructions that cause the computer system to cryptographically verify whether the message originated from the other unmanned vehicle, when executed by the one or more processors, cause the computer system to;

verify the digital certificate; and

use the digital certificate to verify the digital signature.

15. The non-transitory computer-readable storage medium of claim 13, wherein the message is received directly from the other unmanned aerial vehicle.

16. The non-transitory computer-readable storage medium of claim 13, wherein:

the message includes a command to delete stored information; and

the instructions that cause the computer system to update the operational plan, as a result of the command, include instructions that cause the computer system to delete the operational plan.

17. The non-transitory computer-readable storage medium of claim 13, wherein the instructions further comprise instructions that, when executed by the one or more processors, cause the computer system to:

receive a second message from the other unmanned vehicle, the second message specifying a command;

cryptographically verify whether the second message originated from a command and control facility computer system; and

fulfill the command contingent on successful verification that the second message originated form the command and control facility computer system.

18. The non-transitory computer-readable storage medium of claim 13, wherein the instructions further comprise instructions that, when executed by the one or more processors, cause the computer system to:

generate a digital signature for the received message; and

provide the received message and the generated digital signature to a second unmanned vehicle different from the other unmanned vehicle.

19. The non-transitory computer-readable storage medium of claim 13, wherein:

the message indicates revocation of a digital signature; and

the instructions further comprise instructions that, when executed by the one or more processors, cause the computer system to;

store the message;

determine to transmit another message to a second unmanned vehicle different from the other unmanned vehicle; and

as a result of determining to transmit the other message, transmit the other message with the stored message to the second unmanned vehicle.

20. The non-transitory computer-readable storage medium of claim 13, wherein the instructions further comprise instructions that, when executed by the one or more processors, cause the computer system to reject the message if the computer system is unable to cryptographically verify that the message originated from the other unmanned vehicle.