System and method for collecting traffic data using probe vehicles
View Patent ↗A system and method for authenticating the source and ensuring the integrity of traffic data collected from probe vehicles while maintaining the privacy of the data's source. This is accomplished by dividing the traffic analysis functionality into two distinct responsibilities: data collection, including authentication and verification, and data processing, and assigning each responsibility to a different entity, such the first entity has access to authentication information which identifies the data's source but not to traffic information such as the source's location, and the second entity has access to the traffic information but not to the authentication information which identifies the data's source.
1. A method of collecting data from and retaining the anonymity of a source, wherein the data is encrypted using a first key, said method comprising the steps of:
(a) encrypting first authentication and verification information for the source using a second key at the source;
(b) electronically sending the encrypted data and the encrypted first authentication and verification information to a first entity separate from the source;
(c) decrypting the first authentication and verification information using a second corresponding key, and electronically authenticating the source and verifying the data at the first entity;
(d) encrypting second authentication information for the first entity using a third key;
(e) electronically sending the encrypted data and the encrypted second authentication information to a second entity;
(f) decrypting the second authentication information using a third corresponding key, and electronically authenticating the first entity; and
(g) decrypting the data using a first corresponding key at the second entity, such that neither the first nor second entity can access both the data and the authentication and verification information for the source, and a secure connection is established between the source and second entity without the second entity accessing the information for the source.
2. The method as set forth in claim 1 , wherein the source is a probe vehicle and the data is traffic data.
3. The method as set forth in claim 2 , further including the step of analyzing the traffic data to determine a traffic characteristic.
4. The method as set forth in claim 1 , wherein authenticating the source at the first entity, and authenticating the first entity at the second entity, involves one or more password-based protocols.
5. The method as set forth in claim 1 , wherein the authentication information for the source is removed by the first entity and is not provided to the second entity.
6. A method of collecting traffic data from and retaining the anonymity of a probe vehicle, the method comprising the steps of:
(a) encrypting the traffic data using a first key at the probe vehicle, wherein the first key is a public key;
(b) encrypting first authentication and verification information for the probe vehicle using a second key;
(c) electronically sending the encrypted traffic data and the encrypted first authentication and verification information to a first entity;
(d) decrypting the first authentication and verification information using a second corresponding key, and electronically authenticating the probe vehicle and verifying an integrity of the traffic data, wherein the encrypted traffic data is not decryptable by the first entity;
(e) removing the first authentication and verification information at the first entity;
(f) encrypting second authentication information for the first entity using a third key;
(g) electronically sending the encrypted traffic data and the encrypted second authentication information to a second entity;
(h) decrypting the second authentication information using a third corresponding key, and electronically authenticating the first entity; and
(i) decrypting the traffic data using a first corresponding key at the second entity, such that neither the first nor second entity can access both the data and the authentication and verification information for the source, and a secure connection is established between the source and second entity without the second entity accessing the information for the source, wherein the first corresponding key is a private key, and analyzing the traffic data to determine a traffic characteristic.
7. The method as set forth in claim 6 , wherein authenticating the probe vehicle at the first entity, and authenticating the first entity at the second entity, involves one or more challenge/response-based protocols.
8. The method as set forth in claim 6 , wherein authenticating the probe vehicle at the first entity, and authenticating the first entity at the second entity, involves one or more password-based protocols.