摘要:
A system and method for assigning certificates and reducing the size of the certificate revocation lists in a PKI based architecture for a vehicle wireless communications system that includes separating a country, or other area, into geographic regions and assigning region-specific certificates to the vehicles. Therefore, a vehicle need only process certificates and certificate revocation lists for the particular region that it is traveling in. Vehicles can be assigned multiple certificates corresponding to more than one region in the vehicles vicinity as advance preparation for possible travel or transmission into nearby regions. Further, the expiration time of certificates assigned to vehicles corresponding to a given geographic region can be tailored to be inversely proportional to the distance from a registered home region of the vehicle. A scalable design for a back-end certifying authority with region-based certificates can also be provided.
摘要:
A vehicle-to-vehicle communications system that employs a challenge/response based process to ensure that information received from a vehicle is reliable. The subject vehicle transmits a challenge question to the suspect vehicle to determine whether the suspect vehicle is a reliable source of information. The process increases a number of tokens in a token bucket for the suspect vehicle if the response to the challenge question is correct, and decreases the number of tokens in the token bucket for the suspect vehicle if the response to the challenge question is incorrect. The subject vehicle accepts a message from the suspect vehicle if the number of tokens in the bucket for the suspect vehicle is greater than a predetermined upper threshold, and discards the message from the suspect vehicle if the number of tokens in the bucket for the suspect vehicle is less than a predetermined lower threshold.
摘要:
A vehicle-to-vehicle communications system that employs a challenge/response based process to ensure that information received from a vehicle is reliable. The subject vehicle transmits a challenge question to the suspect vehicle to determine whether the suspect vehicle is a reliable source of information. The process increases a number of tokens in a token bucket for the suspect vehicle if the response to the challenge question is correct, and decreases the number of tokens in the token bucket for the suspect vehicle if the response to the challenge question is incorrect. The subject vehicle accepts a message from the suspect vehicle if the number of tokens in the bucket for the suspect vehicle is greater than a predetermined upper threshold, and discards the message from the suspect vehicle if the number of tokens in the bucket for the suspect vehicle is less than a predetermined lower threshold.
摘要:
A system and method for assigning certificates and reducing the size of the certificate revocation lists in a PKI based architecture for a vehicle wireless communications system that includes separating a country, or other area, into geographic regions and assigning region-specific certificates to the vehicles. Therefore, a vehicle need only process certificates and certificate revocation lists for the particular region that it is traveling in. Vehicles can be assigned multiple certificates corresponding to more than one region in the vehicles vicinity as advance preparation for possible travel or transmission into nearby regions. Further, the expiration time of certificates assigned to vehicles corresponding to a given geographic region can be tailored to be inversely proportional to the distance from a registered home region of the vehicle. A scalable design for a back-end certifying authority with region-based certificates can also be provided.
摘要:
A method is provided for constructing a secret code in a processing unit when in communication with a portable security unit. Mutual authentication messages are exchanged between a linked portable security unit and processing unit. A first portion of the secret code is communicated to the processing unit. The processing unit combines the first portion and a second portion of the secret code stored in the non-volatile memory of the processing unit. The secret code is stored in a volatile memory of the processing unit. A secure operation is performed using the secret code. The portable security unit is de-linked from the processing unit. At least a portion of the secret code is deleted from the volatile memory of the processing unit.
摘要:
A system and method for a vehicle-to-vehicle communications system that provide active safety applications employing lightweight geographic authentication using one-time signatures. The system and method require each vehicle to construct a discretized representation of its trajectory, which captures its kinematical history to a tunable degree of accuracy and to a tunable extent in the past. This trajectory information is then signed using a one-time signature. Thus, with every periodic message, the sending vehicle transmits the usual application payload, a signed version of the trajectory as described, and the digital signature over all of the fields.