Privacy-enhanced car data distribution
View Patent ↗In accordance with some embodiments, data may be collected from vehicles, and then reported to various subscribers with different levels of access privileges and pursuant different levels of security. In some embodiments, the data may be authenticated by a cloud service without revealing the identity of vehicle owner. This may provide enhanced privacy. At the same time, some types of the data may be encrypted for security and privacy reasons. Different information may be provided under different circumstances to different subscribers, such as the government, family members, location based services providers, etc.
1. A computer implemented method comprising:
collecting at a trusted service, from a vehicle, sensor data together with an attestation of the authenticity of the data, which attestation does not reveal the identity of the vehicle owner;
identifying data from each of at least two sensors and associating said data with a subscriber of said data;
sending sensor data from the vehicle to a server for distribution to subscribers;
receiving a first public key from a first subscriber, encrypt different sensor data with said first public key;
receiving a second public key from a second subscriber, encrypt different sensor data with said second public key;
authenticating the sensor data from said vehicle at the trusted service;
reporting the collected and authenticated sensor data from said vehicle without identifying the vehicle owner;
sending different encrypted information to two different subscribers depending on a subscriber's authority to receive information granted by an owner of the vehicle;
encrypting data sent to the first subscriber using said first key and encrypting data sent to the second subscriber using said second key; and
preventing a subscriber from identifying a vehicle owner using privacy preserving public keys to verify data as coming from a pre-defined group of vehicles.
2. The method of claim 1 including collecting the data using an apparatus with an embedded private key.
3. The method of claim 2 including authenticating the collected data using a public key.
4. The method of claim 1 including proceeding an attestation with said data.
5. A non-transitory computer readable medium storing instructions to enable a computer to:
collect at a trusted service, from a vehicle, sensor data together with an attestation of the authenticity of the data, which attestation does not reveal the identity of the vehicle owner;
identify data from each of at least two sensors and associating said data with a subscriber of said data;
send sensor data from the vehicle to a server for distribution to subscribers;
receive a first public key from a first subscriber, encrypt different sensor data with said first public key;
receive a second public key from a second subscriber, encrypt different sensor data with said second public key;
authenticate the sensor data from said vehicle at the trusted service;
report the collected and authenticated sensor data from said vehicle without identifying the vehicle owner;
send different encrypted information to two different subscribers depending on a subscriber's authority to receive information granted by an owner of the vehicle;
encrypt data sent to the first subscriber using said first key and encrypting data sent to the second subscriber using said second key; and
prevent a subscriber from identifying a vehicle owner using privacy preserving public keys to verify data as coming from a pre-defined group of vehicles.
6. The medium of claim 5 further storing instructions to collect the data using an apparatus with an embedded private key.
7. The medium of claim 6 further storing instructions to authenticate the collected data using a public key.
8. The medium of claim 6 further storing instructions to proceed an attestation with said data.
9. An apparatus comprising:
a device to:
collect from a vehicle, sensor data together with an attestation of the authenticity of the data, which attestation does not reveal the identity of the vehicle owner;
identify data from each of at least two sensors and associating said data with a subscriber of said data
send sensor data from the vehicle to a server for distribution to subscribers;
receive a first public key from a first subscriber, encrypt different sensor data with said first public key;
receive a second public key from a second subscriber, encrypt different sensor data with said second public key;
report the collected and authenticated sensor data from said vehicle without identifying the vehicle owner;
send different encrypted information to two different subscribers depending on a subscriber's authority to receive information granted by an owner of the vehicle;
encrypt data sent to the first subscriber using said first key and encrypting data sent to the second subscriber using said second key;
prevent a subscriber from identifying a vehicle owner using privacy preserving public keys to verify data as coming from a pre-defined group of vehicles; and
a private key embedded in said device.
10. The apparatus of claim 9 , said device to authenticate the collected data using a public key.