Automobile data archive system having securely authenticated instrumentation data storage

• US 6,490,513 B1
• Filed: 08/22/2001
• Issued: 12/03/2002
• Est. Priority Date: 08/22/2001
• Status: Expired due to Term

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Braun, David, Johnson, Stephen, Bushmitch, Dennis, Fish, Robert, Chang, Chieh-Chung, Li, Luyang, Rahman, Mahfuz
• Primary Examiner(s): Camby, Richard M.
• Application Number:
  US09/934,928
• Time in Patent Office: 468 Days
• Field of Search: 701/35, 701/29, 701/33, 340/438, 340/439, 340/937, 348/143, 348/148, 348/155
• US Class Current: 701/35
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/085 using electronic data carriers
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A vehicle data archive system is provided. An instrumentation interface receives at least one sensory data signal of the vehicle. A memory stores the at least one sensory data signal. A first transponder responds to a periodic provider signal of a trusted third party (TTP)/service provider for creating a corresponding shared encryption key, which is used to generate a digital signature from the stored data, the signature may be stored with the data or returned to the TTP/service provider. The signature is used to authenticate the data stored in the archive system. The encryption value used to generate the signature may be stored locally in the data archive or obtained from the TTP/service provider. The data in the data archive may also be stored without encryption. The system also allows an authorized user to delete a portion of the stored encrypted sensory data.

Claims

1. A vehicle data archive system, comprising:

an sensory data interface for receiving at least one sensory data signal of the vehicle;

a data processor which associates the at least one sensory data signal with a data signature, the data signature being derived by the data processor from the sensory data using an encryption key;

a memory for storing the sensory data signal and associated data signature; and

an operator interface for selectively deleting at least a portion of the sensory data signal from the memory.

2. The data archive system of claim 1, wherein the at least one sensory data signal is encrypted and stored with the data signature in the memory.

3. The vehicle data archive system of claim 1, further comprising a service provider communications module for transmitting data to and receiving data from a service provider, wherein the vehicle data archive system uses data received from the service provider to generate the encryption key and to generate the data signature which is transmitted to the service provider.

4. The vehicle data archive system of claim 1, further comprising a service provider communications module for transmitting data to a service provider, wherein the vehicle data archive system transmits the data signature to the service provider.

5. The vehicle data archive system of claim 1, further comprising a GPS communication module responsive to global positioning signals for providing information identifying a location of the vehicle data archive system.

6. The vehicle data archive system of claim 1, wherein the memory includes circular buffer memory for storing the sensory data.

7. The vehicle data archive system of claim 6, wherein the at least one sensory data signal includes a plurality of sensory data signals and the data processor is responsive to an event indicated by a predetermined one of the plurality of sensory data signals to generate the signature data for a predetermined amount of the sensory data stored in the circular buffer memory.

8. The vehicle data archive system of claim 7, wherein the predetermined amount of sensory data is defined by two separate time constants, representing an amount of data stored before the event (TIME BEFORE) and an amount of data stored after the event (TIME AFTER), respectively.

9. The vehicle data archive system of claim 1, further comprising an emergency transponder for emitting a signal for use in locating the data archive.

10. A vehicle data archive system, comprising:

an sensory data interface for receiving at least one sensory data signal of the vehicle;

a data processor which encrypts the at least one sensory data signal using an encryption key to produce an encrypted sensory data signal;

a memory for storing the encrypted sensory data signal; and

a communications module for transmitting data to and receiving data from a service provider, wherein the vehicle data archive system uses data received via the communications module to generate the encryption key.

11. The vehicle data archive system of claim 10, wherein the data processor further includes means for generating a digital signature from the stored encrypted sensory data signal and for transmitting the digital signature value to the service provider using the communications module.

12. The vehicle data archive system of claim 11, wherein the data received via the communications module that is used to generate the encryption key is provided by a trusted third party.

13. The vehicle data archive system of claim 12, wherein the data received via the communications module that is used to generate the encryption key is received from the service provider, wherein the service provider receives the data from the trusted third party.

14. The vehicle data archive of claim 10, further comprising:

a power supply for powering the data archive when vehicle power is disrupted; and

a sound producing transducer for alerting an operator that the local power supply is in use and to assist in locating the archive.

15. The vehicle data archive of claim 14, further comprising:

an emergency transponder for providing an electronic signal for locating the data archive.

16. The vehicle data archive of claim 15, wherein the emergency transponder is responsive to a signal received by the communications module to provide the electronic signal for locating the data archive.

17. An automobile data archive system, comprising:

an instrumentation interface for receiving at least one sensory data signal of the automobile;

a circular buffer memory for storing the at least one sensory data signal;

a first transponder responsive to a periodic provider signal of a service provider for obtaining a corresponding periodic encryption key and for returning an encrypted data signature to the service provider; and

a data processor for creating the encrypted data signature with the encryption key to authenticate the at least one sensory signal,

wherein the signature provided to the service provider serves to authenticate the archive of the at least one sensory data signal.

18. The automobile data archive system of claim 17 wherein the data processor applies a hash function to the at least one sensory data signal to produce a hash value and encrypts the hash value using an encryption key to generate the signature data.

19. The automobile data archive system of claim 18, wherein the periodic encryption key is provided by the service provider.

20. The automobile data archive system of claim 18, wherein the periodic encryption key is a shared encryption key generated from data received from the service provider.

21. The automobile data archive system of claim 17 further comprising a global positioning system (GPS) communication module responsive to global positioning signals for identifying a cartographic location of the modular data archive.

22. The automobile data archive system of claim 21, wherein data archive system receives time reference data from the GPS communications module and uses the time reference data to generate the encrypted data signature.

23. The vehicle data archive system of claim 17, wherein a the at least one sensory data signal includes a plurality of sensory data signals and the data processor is responsive to a predetermined one of the plurality of sensory data signals to generate the encrypted data signature from the stored at least one sensory data signal.

24. A vehicle data archive system, comprising:

means for receiving at least one sensory data signal from the vehicle;

means for storing the at least one sensory data signal;

means for obtaining an encryption key; and

means for creating an electronic signature with the encryption key to authenticate the stored at least one sensory data signal.

25. A method of authenticating at least one sensory data signal of a vehicle data archive, comprising:

receiving at least one sensory data signal from the vehicle;

storing the at least one sensory data signal;

obtaining an encryption key; and

creating an electronic signature with the encryption key to authenticate the stored at least one sensory data signal.