Vehicle data delivery

• US 9,407,635 B2
• Filed: 05/16/2014
• Issued: 08/02/2016
• Est. Priority Date: 05/16/2014
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Angus, Ian Gareth, Walker, Olga C.
• Primary Examiner(s): LANIER, BENJAMIN E
• Application Number:
  US14/279,434
• Publication Number:
  US 20150334113A1
• Time in Patent Office: 809 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

A system and method of delivering vehicle data. Reference data is received by a data processing system. The reference data comprises a reference identifying the vehicle data stored in a repository that is located off of a vehicle and reference authentication data identifying a source of the reference data. The data processing system uses the reference authentication data to determine whether the reference data is from an approved source for the reference data. The reference is used to retrieve the vehicle data from the repository by the data processing system when the reference data is determined to be from the approved source for the reference data. The vehicle data comprises authentication data identifying a source of the vehicle data. The data processing system uses the authentication data to determine whether the vehicle data is from an approved source for the vehicle data.

Claims

1. A method of delivering vehicle data, comprising:

receiving, by a data processing system, reference data comprising a reference identifying the vehicle data stored in a repository that is located off of a vehicle and a hash value for the vehicle data, and reference authentication data identifying a source of the reference data;

determining, by the data processing system, whether the reference data is from an approved source for the reference data using the reference authentication data;

retrieving, by the data processing system, the vehicle data from the repository using the reference when the reference data is determined to be from the approved source for the reference data, wherein the vehicle data comprises authentication data identifying a source of the vehicle data;

determining, by the data processing system, whether the vehicle data is from an approved source for the vehicle data using the authentication data; and

using the hash value, by the data processing system, to determine whether the vehicle data retrieved from the repository is unchanged from when the reference data was generated.

2. The method of claim 1, wherein the vehicle data retrieved from the repository is encrypted and further comprising at least one of:

decrypting the vehicle data using a decryption key from a key manager, wherein the decryption key is retrieved from the key manager using key manager information identifying the key manager and the decryption key, and wherein the key manager information is included with at least one of the reference data and the vehicle data retrieved from the repository;

decrypting the vehicle data using a decryption key that is derived by the data processing system; and

combining a plurality of separated pieces of the vehicle data that are distributed in the repository, wherein the reference data comprises a plurality of references identifying the plurality of separated pieces of the vehicle data distributed in the repository.

3. The method of claim 1, wherein:

the repository is selected from a content delivery network and storage provided as a service on the Internet.

4. The method of claim 1, wherein the reference comprises a uniform resource identifier.

5. The method of claim 1, wherein:

the vehicle data comprises aircraft data for delivery to an aircraft;

the authentication data comprises a digital signature identifying the source of the vehicle data;

the vehicle comprises the aircraft; and

the data processing system comprises an aircraft network data processing system on the aircraft.

6. The method of claim 1, wherein:

the vehicle data comprises aircraft data for delivery from an aircraft; and

the authentication data comprises a digital signature identifying the aircraft as the source of the vehicle data.

7. An apparatus, comprising:

a data receiver comprising hardware on a vehicle configured to receive reference data comprising a reference identifying vehicle data stored in a repository that is located off of the vehicle and a hash value for the vehicle data, and reference authentication data identifying a source of the reference data;

a data retriever comprising the hardware on the vehicle configured to retrieve the vehicle data from the repository using the reference, wherein the vehicle data comprises authentication data identifying a source of the vehicle data;

a data authenticator comprising the hardware on the vehicle configured to use the reference authentication data to determine whether the reference data is from an approved source for the reference data and to use the authentication data to determine whether the vehicle data is from an approved source for the vehicle data;

a decrypter comprising the hardware on the vehicle configured to decrypt the vehicle data retrieved from the repository; and

a data validator comprising the hardware on the vehicle configured to use the hash value to determine whether the vehicle data retrieved from the repository is unchanged from when the reference data was generated.

8. The apparatus of claim 7, wherein the decrypter is configured to decrypt the vehicle data by at least one of:

decrypting the vehicle data using a decryption key retrieved from a key manager using key manager information included with at least one of the reference data and the vehicle data retrieved from the repository, wherein the key manager information identifies the key manager and the decryption key;

decrypting the vehicle data using a decryption key for the vehicle that is derived by the decrypter on the vehicle; and

combining a plurality of separated pieces of the vehicle data that are distributed in the repository, wherein the reference data comprises a plurality of references identifying the plurality of separated pieces of the vehicle data distributed in the repository.

9. The apparatus of claim 7, wherein:

the repository is selected from a content delivery network and storage provided as a service on the Internet.

10. The apparatus of claim 7, wherein the reference comprises a uniform resource identifier.

11. The apparatus of claim 7, wherein:

the vehicle data comprises aircraft data for delivery to an aircraft; and

the vehicle comprises the aircraft.

12. The apparatus of claim 11, wherein the vehicle data comprises a software part for the aircraft.

13. A method of delivering aircraft data, comprising:

receiving, by a data processing system, reference data comprising a reference identifying the aircraft data stored in a repository that is located off of an aircraft and a hash value for the aircraft data, and reference authentication data identifying a source of the reference data;

determining, by the data processing system, whether the reference data is from an approved source for the reference data using the reference authentication data;

retrieving, by the data processing system, the aircraft data from the repository using the reference when the reference data is determined to be from the approved source for the reference data, wherein the aircraft data comprises authentication data identifying a source of the aircraft data;

determining, by the data processing system, whether the aircraft data is from an approved source for the aircraft data using the authentication data; and

using the hash value, by the data processing system, to determine whether the aircraft data retrieved from the repository is unchanged from when the reference data was generated;

wherein the aircraft data is signed by the source of the aircraft data with a digital signature identifying the source of the aircraft data to provide signed aircraft data;

wherein the signed aircraft data is encrypted to provide encrypted aircraft data; and

wherein the aircraft data stored in the repository that is located off of the aircraft comprises the encrypted aircraft data stored in the repository selected from a content delivery network and storage provided as a service on the Internet.

14. The method of claim 13, wherein the signed aircraft data is encrypted by at least one of:

encrypting the signed aircraft data using an encryption key provided by a key manager;

encrypting the signed aircraft data using an encryption key for a destination of the aircraft data; and

distributing a plurality of separated pieces of the signed aircraft data in the repository, wherein the reference data comprises a plurality of references identifying the plurality of separated pieces of the aircraft data distributed in the repository.

15. The method of claim 13, further comprising:

sending the reference data from the source of the aircraft data to an intermediate entity;

signing the reference data by the intermediate entity with a digital signature identifying the intermediate entity to provide signed reference data; and

sending the signed reference data from the intermediate entity to a destination for the aircraft data.

16. The method of claim 15, wherein the aircraft data comprises aircraft data for delivery to an aircraft, the destination for the aircraft data comprises the aircraft, and further comprising retrieving the aircraft data from the repository by the aircraft using the reference data.

17. The method of claim 16, wherein the aircraft data comprises a software part for the aircraft.

18. The method of claim 13, wherein the aircraft data comprises aircraft data for delivery from an aircraft, the source of the aircraft data comprises the aircraft, and further comprising retrieving the aircraft data from the repository by an operator of the aircraft using the reference data.