Private vehicle-to-vehicle communication

• US 10,390,221 B2
• Filed: 07/25/2016
• Issued: 08/20/2019
• Est. Priority Date: 07/25/2016
• Status: Active Grant

• Current Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Original Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Inventors: Lawlis, James Martin, Makke, Omar, Kadry, Haysam M.
• Primary Examiner(s): Lipman, Jacob
• Application Number:
  US15/218,945
• Publication Number:
  US 20180027600A1
• Time in Patent Office: 1,121 Days
• Field of Search: 713168
• CPC Class Codes: G06V 20/62 Text, e.g. of license plates, overlay texts or captions on TV images
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/047 without using a trusted network node as an anchor
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 76/14 Direct-mode setup

Abstract

Systems and methods are disclosed for private vehicle-to-vehicle communication. An example disclosed vehicle communication system includes sensors to monitor a target vehicle, and a controller. The example controller generates a pseudo-anonymous identifier based on an identifier and an attribute of the target vehicle. Additionally, the controller broadcasts a first message including the pseudo-anonymous identifier, a random number, and a public key. In response to receiving a second message including the identifier and the random number, the example controller broadcasts a third message encrypted with a symmetric key included in the second message.

Claims

1. A vehicle comprising:

sensors; and

a controller configured to;

detect, via the sensors, a dynamic attribute and a static identifier of a target vehicle;

generate a pseudo-anonymous identifier by hashing the identifier and the attribute;

broadcast a first message including the pseudo-anonymous identifier, a random number, and a public key; and

responsive to receiving a second message including a symmetric key, the identifier and the random number, broadcast a third message using the symmetric key.

2. The vehicle of claim 1, wherein the sensors include a camera and an ultrasonic sensor.

3. The vehicle of claim 1, wherein the identifier of the target vehicle is a license plate number and the attribute of the target vehicle is speed.

4. The vehicle of claim 1, the controller is further configured to:

responsive to receiving a second message, decrypt the second message with a private key corresponding to the public key to determine the identifier and the random number included in the second message.

5. The vehicle of claim 1, wherein the second message includes the symmetric key.

6. The vehicle of claim 1, wherein the controller is further configured to broadcast the third message without verifying an identity of the target vehicle with a trusted authority.

7. The vehicle of claim 1, wherein the controller is further configured to hash the identifier and the attribute by using a one-way hash function.

8. The vehicle of claim 1, wherein the controller is further configured to, prior to hashing the identifier and the attribute, round a value of the attribute.

9. The vehicle of claim 1, wherein the second message further includes the attribute, wherein the attribute and the identifier included in the second message are unhashed.

10. The vehicle of claim 9, wherein the controller is further configured to, responsive to the attribute and the identifier included in the second message matching the attribute and the identifier included in the first message, broadcast the third message using the symmetric key.

11. The method of claim 1, wherein the identifier is a static attribute of the target vehicle and the attribute is a variable attribute of the target vehicle.

12. The method of claim 11, wherein the attribute of the target vehicle is the target vehicle'"'"'s coordinates.

13. The method of claim 11, wherein the attribute of the target is the target vehicle'"'"'s compass direction.

14. A method to establish private communication with a target vehicle, the method comprising:

detecting, via sensors, an identifier and an attribute of the target vehicle;

generating, with a processor, a pseudo-anonymous identifier by hashing the identifier and the attribute of the target vehicle;

broadcasting a first message including the pseudo-anonymous identifier, a random number, and a public key; and

in response to receiving a second message including the identifier and the random number, broadcasting a third message encrypted with a symmetric key included in the second message.

15. The method of claim 14, wherein the identifier of the target vehicle is obtained with a camera and the attribute of the target vehicle is obtained with an ultrasonic sensor.

16. The method of claim 14, wherein the identifier of the target vehicle is a license plate number and the attribute of the target vehicle is speed.

17. The method of claim 14, including, in response to receiving a second message, decrypting the second message with a private key corresponding to the public key to determine the identifier and the random number included in the second message.

18. The method of claim 14, wherein the second message includes the symmetric key.

19. The method of claim 14, including broadcasting the third message without verifying an identity of the target vehicle with a trusted authority.

20. A method to privately communicate between a first and second vehicle comprising:

detecting, via sensors of the first vehicle, a discernible static identifier and a measurable dynamic attribute of the second vehicle;

generating, by the first vehicle, a first pseudo-anonymous identifier by hashing the discernible identifier and the measurable attribute of the second vehicle;

broadcasting, by the first vehicle, an initial message that includes the first pseudo-anonymous identifier, a random number, and a public key;

comparing, by the second vehicle, the first pseudo-anonymous identifier to a second pseudo-anonymous identifier generated by the second vehicle based on the discernible identifier and measurable attribute of the second vehicle;

in response to a match, generating, by the second vehicle, response message encrypted with the public key, the response message including the random number, the discernible identifier of the second vehicle, and a symmetric key;

communicating, by the first vehicle, with second vehicle using the symmetric key when the random number and the discernible identifier of the second vehicle in the response message match the discernible identifier used to generate the first pseudo-anonymous identifier and the random number in the initial message.