IP Library › Granted Patent US 10,921,823
Granted Patent B2
US 10,921,823 · App. 15/856,851 · Granted Feb 16, 2021

Sensor-based anti-hacking prevention in platooning vehicles

Inventors: T. Stephen Miller, Jr. (Elyria, OH); Andrew J Pilkington (Avon Lake, OH)
Assignee: BENDIX COMMERCIAL VEHICLE SYSTEMS LLC
G05D1/0295G05D1/0246G05D1/0257G05D1/0278G05D1/0293G06F21/64G08G1/22H04L9/0816H04L9/3228H04L63/123H04L67/12H04W4/46H04W12/10B60W2050/0008B60W2556/65G05D2201/0213G08G1/161H04L63/0428H04L2209/84H04W12/02
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,921,823
App. No.
15/856,851
Granted
Feb 16, 2021
Kind
B2
Abstract

A platoon management control uses the GPS position of the rear of a lead vehicle. The lead vehicle deceleration demand is overlaid upon the position of the rear of the lead vehicle. The following vehicle uses its own GPS position along with the radar or vision system of the following vehicle to determine the rear of the lead vehicle. When a lead vehicle's deceleration signal is subtracted from the position of the rear of the forward vehicle as determined by the following vehicle, the deceleration profile must be within an acceptable window to be valid. Also, one or more local sensors on adjacent platooning vehicles are used to communicate encoding scheme selection information and also to communicate the deceleration command signals. This permits the following vehicle to decode the deceleration command signals using a decoding scheme corresponding to the encoding scheme indicated as being used by the leading vehicle.

Claims (97)

1. A system for determining authenticity of a signal received by an associated following vehicle from an associated leading vehicle of a platooning vehicle pair comprising the associated leading and following vehicles cooperatively travelling as a platoon along an associated roadway, the system comprising:

a platoon control unit configured to be disposed in the associated following vehicle of the platooning vehicle pair, the platoon control unit comprising:

a processor;

a non-transient memory device operatively coupled with the processor; and

logic stored in the non-transient memory and executable by the processor to determine authenticity of signals;

a communication receiver operatively coupled with the platoon control unit, the communication receiver being operable to:

receive a deceleration command signal from the associated leading vehicle of the platooning vehicle pair, the deceleration command signal comprising deceleration command data selectively usable by the associated following vehicle to effect a deceleration operation of the associated following vehicle; and

receive a first verification signal from the associated leading vehicle of the platooning vehicle pair, the first verification signal comprising first verification data representative of an encryption in accordance with an encryption algorithm by an associated platoon control unit of the associated leading vehicle of:

the deceleration command data;

physical characteristic data representative of a physical length characteristic of the associated leading vehicle; and

leading vehicle global position data representative of a position of the associated leading vehicle;

a global position sensor (GPS) receiver operatively coupled with the platoon control unit, the GPS receiver being operable to:

receive a global position signal from an associated source of global position information, the global position signal comprising following vehicle global position data, the following vehicle global position data being representative of a position of the associated following vehicle; and

a sensor operatively coupled with the platoon control unit and being configured to be disposed in the associated following vehicle, the sensor being operable to:

sense a relative position between the associated following vehicle and the associated leading vehicle; and

generate relative distance data representative of the sensed relative position between the associated following vehicle and the associated leading vehicle,

wherein the logic of the platoon control unit is executable by the processor to generate collective operational command data in accordance with a predetermined combination of the following vehicle global position data, the relative distance data, and the deceleration command data,

wherein the logic of the platoon control unit is executable by the processor to selectively determine authenticity of the deceleration command signal in accordance with a result of a comparison between the collective operational command data and the first verification data.

2. The system according to claim 1 , wherein the logic of the platoon control unit is executable by the processor to:

determine the deceleration command signal authentic in accordance with a matching result of the comparison between the collective operational command data and the first verification data; or

determine the deceleration command signal inauthentic in accordance with a mis-matching result of the comparison between the collective operational command data and the first verification data.

3. The system according to claim 2 , wherein the platoon control unit is operative to generate a deceleration demand signal responsive to determining the deceleration command signal authentic, the deceleration demand signal being used by the associated following vehicle to manage participation in the platoon together with the associated leading vehicle by initiating a deceleration in accordance with the deceleration command data received from the associated leading vehicle.

4. The system according to claim 2 , wherein

the logic of the platoon control unit is executable by the processor to generate collective operational command data in accordance with a predetermined sum combination of the global position data, the relative distance data, and the deceleration command data.

5. The system according to claim 4 , wherein

the logic of the platoon control unit is executable by the processor to generate the collective operational command data in accordance with a predetermined weighted sum combination of the following vehicle global position data, the relative distance data, and the deceleration command data.

6. The system according to claim 2 , wherein

the logic of the platoon control unit is executable by the processor to generate second verification data in accordance with a weighted sum combination of the following vehicle global position data with second deceleration command data of the associated following vehicle and physical characteristic data representative of a physical length characteristic of the associated following vehicle.

7. The system according to claim 6 , further comprising:

a transmitter operatively coupled with the platoon control unit, the transmitter being operable to:

convert the second verification data into a second verification signal;

convert the second deceleration command data of the associated following vehicle into a second deceleration command signal;

transmit the second verification signal from the associated following vehicle of the platooning vehicle pair; and

transmit the second deceleration command signal from the associated following vehicle of the platooning vehicle pair.

8. A method for determining authenticity of a signal received by an associated following vehicle from an associated leading vehicle of a platooning vehicle pair comprising the associated leading and following vehicles cooperatively travelling as a platoon along an associated roadway, the method comprising:

providing a platoon control unit in the associated following vehicle of the platooning vehicle pair, the platoon control unit comprising a processor, a non-transient memory device operatively coupled with the processor, and logic stored in the non-transient memory and executable by the processor to determine authenticity of signals;

receiving by an associated communication receiver operatively coupled with the platoon control unit:

a deceleration command signal from the associated leading vehicle of the platooning vehicle pair, the deceleration command signal comprising deceleration command data selectively usable by the associated following vehicle to effect a deceleration operation of the associated following vehicle; and

a first verification signal from the associated leading vehicle of the platooning vehicle pair, the first verification signal comprising first verification data representative of an encryption in accordance with an encryption algorithm by an associated platoon control unit of:

the associated leading vehicle of the deceleration command data;

physical characteristic data representative of a physical length characteristic of the associated leading vehicle; and

leading vehicle global position data representative of a position of the associated leading vehicle;

receiving by an associated global position sensor (GPS) receiver operatively coupled with the platoon control unit:

a global position signal from an associated source of global position information, the global position signal comprising following vehicle global position data, the following vehicle global position data being representative of a position of the associated following vehicle;

using an associated sensor operatively coupled with the platoon control unit and being configured to be disposed in the associated following vehicle:

sensing a relative position between the associated following vehicle and the associated leading vehicle; and

generating relative distance data representative of the sensed relative position between the associated following vehicle and the associated leading vehicle; and

executing the logic of the platoon control unit by the processor to:

generate collective operational command data in accordance with a predetermined combination of the following vehicle global position data, the relative distance data, and the deceleration command data; and

selectively determine authenticity of the deceleration command signal in accordance with a result of a comparison between the collective operational command data and the first verification data.

9. The method according to claim 8 , further comprising executing the logic of the platoon control unit by the processor to:

determine the deceleration command signal authentic in accordance with a matching result of the comparison between the collective operational command data and the first verification data; or

determine the deceleration command signal inauthentic in accordance with a mis-matching result of the comparison between the collective operational command data and the first verification data.

10. The method according to claim 9 , further comprising:

operating the platoon control unit to generate a deceleration demand signal responsive to determining the deceleration command signal authentic, the deceleration demand signal being used by the associated following vehicle to manage participation in the platoon together with the associated leading vehicle by initiating a deceleration in accordance with the deceleration command data received from the associated leading vehicle.

11. The method according to claim 9 , further comprising:

executing the logic of the platoon control unit by the processor to generate collective operational command data in accordance with a predetermined sum combination of the global position data, the relative distance data, and the deceleration command data.

12. The method according to claim 11 , further comprising:

executing the logic of the platoon control unit by the processor to generate collective operational command data in accordance with a predetermined weighted sum combination of the following vehicle global position data, the relative distance data, and the deceleration command data.

13. The method according to claim 9 , further comprising:

executing the logic of the platoon control unit by the processor to generate second verification data in accordance with a weighted sum combination of the following vehicle global position data with second deceleration command data of the associated following vehicle and physical characteristic data representative of a physical length characteristic of the associated following vehicle.

14. The method according to claim 13 , further comprising:

converting, by a transmitter operatively coupled with the platoon control unit, the second verification data into a second verification signal;

converting, by the transmitter, the second deceleration command data of the associated following vehicle into a second deceleration command signal;

transmitting, by the transmitter, the second verification signal from the associated following vehicle of the platooning vehicle pair; and

transmitting, by the transmitter, the second deceleration command signal from the associated following vehicle of the platooning vehicle pair.

15. A system for determining authenticity of a signal received by an associated following vehicle from an associated leading vehicle of a platooning vehicle pair comprising the associated leading and following vehicles cooperatively travelling as a platoon along an associated roadway, the system comprising:

a platoon control unit configured to be disposed in the associated following vehicle of the platooning vehicle pair, the platoon control unit comprising:

a processor;

a non-transient memory device operatively coupled with the processor; and

logic stored in the non-transient memory and executable by the processor to determine authenticity of signals;

a first sensor operatively coupled with the platoon control unit and being configured to be disposed in the associated following vehicle, the first sensor being operable to:

receive a first key verification signal from the associated leading vehicle of the platooning vehicle pair, the first key verification signal comprising first key verification data representative of a first encoding scheme selected by an associated platoon control unit of the associated leading vehicle used in generating by the associated leading vehicle an encoded deceleration command signal in accordance with the selected first encoding scheme; and

a second sensor operatively coupled with the platoon control unit and being configured to be disposed in the associated following vehicle, the second sensor being operable to:

receive the encoded deceleration command signal from the associated leading vehicle of the platooning vehicle pair, the encoded deceleration command signal comprising proffered deceleration command data selectively usable by the associated following vehicle to effect a deceleration operation of the associated following vehicle,

wherein the logic of the platoon control unit is executable by the processor to select a first decoding scheme in accordance with the first key verification data from the first key verification signal,

wherein the logic of the platoon control unit is executable by the processor to apply the selected first decoding scheme to the proffered deceleration command data of the encoded deceleration command signal to obtain potential deceleration command data,

wherein the logic of the platoon control unit is executable by the processor to selectively determine the potential deceleration command data to be authentic deceleration command data usable by the associated following vehicle to effect the deceleration operation in accordance with the potential deceleration command data having a substantially constant value within bounds of a predetermined threshold criteria over a predetermined time period.

16. The system according to claim 15 , wherein the logic of the platoon control unit is executable by the processor to selectively:

to be inauthentic deceleration command data not usable by the associated following vehicle to effect the deceleration operation in accordance with the potential deceleration command data having a substantially non-constant value within the bounds of the predetermined threshold criteria over the predetermined time period.

17. The system according to claim 15 , wherein the logic of the platoon control unit is executable by the processor to:

select a first decoding profile as the first decoding scheme in accordance with the first key verification data from the first key verification signal; and

apply the selected first decoding scheme by subtracting the first decoding profile from the encoded deceleration command signal to obtain the potential deceleration command data.

18. The system according to claim 17 , wherein the logic of the platoon control unit is executable by the processor to select the first decoding profile from among a plurality of predetermined decoding waveforms in accordance with the first key verification data from the first key verification signal.

19. A method for determining authenticity of a signal received by an associated following vehicle from an associated leading vehicle of a platooning vehicle pair comprising the associated leading and following vehicles cooperatively travelling as a platoon along an associated roadway, the method comprising:

providing a platoon control unit in the associated following vehicle of the platooning vehicle pair, the platoon control unit comprising a processor, a non-transient memory device operatively coupled with the processor, and logic stored in the non-transient memory and executable by the processor to determine authenticity of signals;

receiving by a first sensor operatively coupled with the platoon control unit a first key verification signal from the associated leading vehicle of the platooning vehicle pair, the first key verification signal comprising first key verification data representative of a first encoding scheme selected by an associated platoon control unit of the associated leading vehicle used in generating by the associated leading vehicle an encoded deceleration command signal in accordance with the selected first encoding scheme; and

receiving by a second sensor operatively coupled with the platoon control unit the encoded deceleration command signal from the associated leading vehicle of the platooning vehicle pair, the encoded deceleration command signal comprising proffered deceleration command data selectively usable by the associated following vehicle to effect a deceleration operation of the associated following vehicle;

executing the logic of the platoon control unit by the processor to select a first decoding scheme in accordance with the first key verification data from the first key verification signal;

executing the logic of the platoon control unit by the processor to apply the selected first decoding scheme to the proffered deceleration command data of the encoded deceleration command signal to obtain potential deceleration command data; and

executing the logic of the platoon control unit by the processor to selectively determine the potential deceleration command data to be authentic deceleration command data usable by the associated following vehicle to effect the deceleration operation in accordance with the potential deceleration command data having a substantially constant value within bounds of a predetermined threshold criteria over a predetermined time period.

20. The method according to claim 19 , further comprising executing the logic of the platoon control unit by the processor to selectively:

determine the potential deceleration command data to be inauthentic deceleration command data not usable by the associated following vehicle to effect the deceleration operation in accordance with the potential deceleration command data having a substantially non-constant value within the bounds of the predetermined threshold criteria over the predetermined time period.

21. The method according to claim 19 , further comprising:

executing the logic of the platoon control unit by the processor to select a first decoding profile as the first decoding scheme in accordance with the first key verification data from the first key verification signal; and

executing the logic of the platoon control unit by the processor to apply the selected first decoding scheme by subtracting the first decoding profile from the encoded deceleration command signal to obtain the potential deceleration command data.

22. The method according to claim 21 , further comprising executing the logic of the platoon control unit by the processor to select the first decoding profile from among a plurality of predetermined decoding waveforms in accordance with the first key verification data from the first key verification signal.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 21, 2018
From: MILLER, T. STEPHEN, JR.; PILKINGTON, ANDREW J.
To: BENDIX COMMERCIAL VEHICLE SYSTEMS LLC
Reel/Frame 047839/0728 →
Continuity (1)
Related Publication 20190204853A1 · Jul 4, 2019
Cited By (1)
US 12,630,179