SECURE VEHICULAR DATA MANAGEMENT WITH ENHANCED PRIVACY

• US 20150178999A1
• Filed: 12/19/2013
• Published: 06/25/2015
• Est. Priority Date: 12/19/2013
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Smith, Ned M., Willis, Thomas G., Heldt-Sheller, Nathan
• Granted Patent: US 9,953,467 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/085 using electronic data carriers
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

The present disclosure is directed to secure vehicular data management with enhanced privacy. A vehicle may comprise at least a vehicular control architecture (VCA) for controlling operation of the vehicle and a device. The VCA may record operational data identifying at least one vehicle operator and vehicular operational data recorded during operation of the vehicle by the at least one vehicle operator. The device may include at least a communication module and a trusted execution environment (TEE) including a privacy enforcement module (PEM). The PEM may receive the operational data from the VCA via the communication module, may generate filtered data by filtering the operational data based on privacy settings and may cause the filtered data to be transmitted via the communication module. The filtered data may be transmitted to at least one data consumer. The privacy settings may be configured in the PEM by the at least one operator.

Claims

1. A device, comprising:

a communication module to communicate with at least a vehicular control architecture for controlling operation of a vehicle in which the device is situated; and

a trusted execution environment including a privacy enforcement module to;

receive operational data from the vehicular control architecture via the communication module;

generate filtered data by filtering the operational data based on privacy settings; and

cause the filtered data to be transmitted by the communication module.

2. The device of claim 1, wherein the communication module is further to communicate with at least one data consumer.

3. The device of claim 2, wherein the at least one data consumer is situated outside of the vehicle.

4. The device of claim 2, wherein the privacy enforcement module is further to receive a request for the filtered data from the at least one data consumer via the communication module.

5. The device of claim 1, wherein the trusted execution environment is a secure workspace in which only known-good programs execute, the privacy enforcement module being a known-good program.

6. The device of claim 1, wherein the privacy enforcement module being to generate filtered data comprises the privacy enforcement module being to remove at least a portion of the operational data from the filtered data based on the privacy settings.

7. The device of claim 1, wherein the operational data comprises data identifying at least one vehicle operator and vehicular operational data recorded during operation of the vehicle by the at least one vehicle operator.

8. The device of claim 7, wherein the privacy enforcement module being to generate filtered data comprises the privacy enforcement module being to replace the data identifying the at least one vehicle operator with coded identification data or to alter the data identifying the at least one vehicle operator to render the at least one vehicle operator anonymous based on the privacy settings.

9. The device of claim 1, wherein the vehicular control architecture comprises a plurality of controllers for controlling different areas of vehicular operation.

10. The device of claim 9, wherein the plurality of controllers communicate using at least one of a bus communication architecture or an optical mesh communication architecture.

11. The device of claim 9, wherein at least one controller in the plurality of controllers is to control a user interface in the vehicle for allowing the privacy settings to be configured.

12. A method, comprising:

receiving operational data in a device from a vehicular control architecture for controlling a vehicle in which the device is situated;

generating filtered data by filtering the operational data based on privacy settings, the filtered data being generated by a privacy enforcement module included in a trusted execution environment in the device; and

causing the filtered data to be transmitted.

13. The method of claim 12, wherein causing the filtered data to be transmitted comprises causing the filtered data to be transmitted to at least one data consumer.

14. The method of claim 13, wherein the at least one data consumer is situated outside of the vehicle.

15. The method of claim 13, further comprising:

receiving a request for the filtered data from the at least one data consumer.

16. The method of claim 12, wherein the trusted execution environment is a secure workspace in which only known-good programs execute, the privacy enforcement module being a known-good program.

17. The method of claim 12, wherein generating filtered data comprises removing at least a portion of the operational data from the filtered data based on the privacy settings.

18. The method of claim 12, wherein the operational data comprises data identifying at least one vehicle operator and vehicular operational data recorded during operation of the vehicle by the at least one vehicle operator.

19. The method of claim 18, wherein generating filtered data comprises replacing the data identifying the at least one vehicle operator with coded identification data or altering the data identifying the at least one vehicle operator to render the at least one vehicle operator anonymous based on the privacy settings.

20. The method of claim 12, further comprising:

providing a user interface in the vehicle for allowing the privacy settings to be configured.

21. A system including at least one device, the system being arranged to perform the method of any of the claims 12 to 20.

22. A chipset arranged to perform the method of any of the claims 12 to 20.

23. At least one machine readable medium comprising a plurality of instructions that, in response to be being executed on a computing device, cause the computing device to carry out the method according to any of the claims 12 to 20.

24. At least one device configured for secure vehicular data management with enhanced privacy, the device being arranged to perform the method of any of the claims 12 to 20.

25. A device having means to perform the method of any of the claims 12 to 20.