Transferring control of vehicles

• US 10,515,550 B1
• Filed: 05/31/2018
• Issued: 12/24/2019
• Est. Priority Date: 05/31/2018
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Montemurro, Michael Peter, Lepp, James Randolph Winter, Dever, Jeffrey Scott
• Primary Examiner(s): Odom, Curtis B
• Application Number:
  US15/994,576
• Publication Number:
  US 20190371176A1
• Time in Patent Office: 572 Days
• CPC Class Codes: B60W 30/06 Automatic manoeuvring for parking
• CPC Class Codes: B62D 15/0285 Parking performed automatically
• CPC Class Codes: G08G 1/0112 from the vehicle, e.g. floating car data [FCD]
• CPC Class Codes: G08G 1/143 inside the vehicles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

In some examples, an electronic device includes a communication interface and at least one processor configured to exchange information with another device via the communication interface to allow transfer of control of operable aspects of a vehicle from a source entity to a target entity. In further examples, a method includes exchanging, by an electronic device, information with another device over a communication medium to allow transfer of control of operable aspects of a vehicle from a source entity to a target entity.

Claims

1. An electronic device comprising:

a communication interface; and

at least one processor configured to;

send an enrollment request to a server to enroll a source entity;

receive, from the server in response to the server verifying an identity of the source entity responsive to the enrollment request, an enrollment response comprising information useable by the source entity to authenticate with a target entity to which transfer of control of a vehicle is to be performed; and

exchange the information with another device via the communication interface to allow transfer of control of operable aspects of the vehicle from the source entity to the target entity.

2. The electronic device of claim 1, wherein the information comprises policy elements useable by the target entity to gain control of the operable aspects of the vehicle.

3. The electronic device of claim 2, wherein the policy elements comprise a policy element specifying a restriction in an operation of the vehicle by the target entity.

4. The electronic device of claim 3, wherein the restriction in the operation of the vehicle comprises one or more of a maximum operating condition of driving of the vehicle, a geofence that restricts movement of the vehicle geographically, a restriction in access to a portion of the vehicle, a restriction in access of data of the vehicle.

5. The electronic device of claim 1, wherein the information comprises a credential selected from among a key, a certificate, and an electronic cryptographic element.

6. The electronic device of claim 1, wherein the information allows the target entity to remotely control the vehicle that is a driverless vehicle.

7. The electronic device of claim 1, wherein the source entity is selected from among:

an owner of the vehicle, an operator of the vehicle, a government entity that provides a license or registration in association with the vehicle, a law enforcement entity, a finance entity that has provided a loan on the vehicle, an insurance entity that provides insurance coverage for the vehicle, and a manufacturer of the vehicle.

8. The electronic device of claim 1, wherein the operable aspects of the vehicle comprise a first set of operable aspects of the vehicle, and wherein the at least one processor is configured to:

exchange information with a further device via the communication interface to allow transfer of a second set of operable aspects of the vehicle from the source entity to another entity different from the target entity, wherein the second set of operable aspects is different from the first set of operable aspects.

9. The electronic device of claim 1, wherein the information specifies that the target entity is allowed to transfer control of the vehicle to a further entity different from the target entity and the source entity.

10. The electronic device of claim 1, wherein the information specifies a time at which an ability to control the vehicle by the target entity expires.

11. The electronic device of claim 1, further comprising selecting the operable aspects of the vehicle to which control is passed from the source entity to the target entity based on a selected profile of a plurality of profiles that govern different types of control transfer of the vehicle.

12. The electronic device of claim 1, wherein the at least one processor is configured to establish a secure connection with the another device using a credential of the source entity and a credential of the target entity.

13. The electronic device of claim 12, wherein the at least one processor is configured to exchange the information with the another device by:

sending, by the electronic device, an authentication request to the another device, and

receiving, by the electronic device, an authentication response from the another device, the authentication request and the authentication response allowing the electronic device and the another device to authenticate one another; and

establish a secure connection between the electronic device and the another device responsive to the authenticating of one another.

14. The electronic device of claim 13, wherein the at least one processor is configured to receive policy information from the server, the policy information specifying operable aspects of the vehicle that the source entity is permitted to transfer to other entities.

15. The electronic device of claim 1, wherein the at least one processor is configured to:

exchange further information with the another device to deauthorize control of the vehicle by the target entity.

16. The electronic device of claim 1, wherein the operable aspects transferred from the source entity to the target entity are selected from one or more of:

remote driving of the vehicle, control of a door lock of the vehicle, and control of a window of the vehicle.

17. The electronic device of claim 1, wherein the exchange of the information with the another device sets a restriction on an operation of the vehicle after the transfer, the restriction comprising one or more of:

a maximum speed of the vehicle, a maximum acceleration of the vehicle, a maximum number of engine revolutions of the vehicle, a maximum braking rate of the vehicle.

18. The electronic device of claim 1, wherein the exchange of the information with the another device sets a restriction on an operation of the vehicle after the transfer, the restriction comprising one or more of:

a restriction on a part of the vehicle that is accessible, a restriction on access of a control interface that enables access of stored information, and a restriction on access of a control interface to modify a setting or configuration of the vehicle.

19. A method comprising:

sending, by an electronic device, an enrollment request to a server to enroll a source entity;

receiving, from the server in response to the server verifying an identity of the source entity responsive to the enrollment request, an enrollment response comprising information useable by the source entity to authenticate with a target entity to which transfer of control of a vehicle is to be performed; and

exchanging, by the electronic device, the information with another device over a communication medium to allow transfer of control of operable aspects of the vehicle from the source entity to the target entity.

20. The method of claim 19, wherein the information comprises policy elements, the method further comprising:

exchanging the policy elements with the another device for use in accessing the operable aspects of the vehicle during control of the vehicle by the target entity.

21. The method of claim 19, wherein the enrollment request comprises the identity of the source entity, vehicle information identifying the vehicle, and control parameter information indicating the operable aspects to be transferred, and

wherein the enrollment response is received responsive to the server verifying the identity of the source entity and a capability of the source entity to transfer the operable aspects.

22. The method of claim 19, wherein exchanging the information with the another device comprises:

sending, by the electronic device, an authentication request to the another device, and

receiving, by the electronic device, an authentication response from the another device, the authentication request and the authentication response allowing the electronic device and the another device to authenticate one another, the method further comprising;

establishing, by the electronic device, a secure connection with the another device responsive to the authenticating of one another.

23. One or more machine-readable storage media storing instructions that upon execution cause an electronic device to:

send an enrollment request to a server to enroll a source entity;

receive, from the server in response to the server verifying an identity of the source entity responsive to the enrollment request, an enrollment response comprising information useable by the source entity to authenticate with a target entity to which transfer of control of a vehicle is to be performed; and

exchange information with another device over a communication medium to allow transfer of control of operable aspects of the vehicle from the source entity to the target entity.

24. The one or more machine-readable storage media of claim 23, wherein the instructions upon execution cause the electronic device to:

exchange further information with the another device to deauthorize control of the vehicle by the target entity.