Decentralized cloud-based authentication for autonomous vehicles
Systems, methods, and computer-readable media are disclosed for decentralized authentication for autonomous vehicles. Example autonomous vehicles may include at least one memory storing computer-executable instructions, and one or more computer processors coupled to the at least one memory. The one or more computer processors may be configured to execute the computer-executable instructions to receive biometric data of a user, determine extracted feature data using the biometric data, send the extracted feature data to a first server, and receive an access token from a second server. The access token may indicate the extracted feature data matched stored data associated with a user account of the user.
1. A method comprising:
receiving, by a first server from an autonomous vehicle, first extracted feature data, the first extracted feature data representing biometric features of a user;
determining, by the first server, that the first extracted feature data is associated with an authentication identifier;
sending, by the first server, the authentication identifier to a second server;
determining, by the second server, a first user account associated with a ride request for the autonomous vehicle;
determining, by the second server, that the first user account is associated with the authentication identifier; and
sending, by the second server, an access token to the autonomous vehicle,
wherein the autonomous vehicle is prevented from accessing the authentication identifier.
2. The method of claim 1 , wherein the authentication identifier is a first authentication identifier, the method further comprising:
receiving, by the first server, second extracted feature data from the autonomous vehicle;
determining, by the first server, that the second extracted feature data is associated with a second authentication identifier;
sending, by the first server, the second authentication identifier to the second server;
receiving, by the second server, the second authentication identifier from the first server;
determining, by the second server, a second user account associated with the second authentication identifier;
determining, by the second server, that the user account does not match an expected user account; and
sending, by the second server, a wrong rider token to the autonomous vehicle.
3. The method of claim 2 , wherein the wrong rider token comprises data related to a location of a different autonomous vehicle.
4. The method of claim 1 , further comprising:
deleting, by the second server, data associated with the ride request after sending the access token to the autonomous vehicle.
5. The method of claim 1 , wherein the first extracted feature data is derived from an image of a face of the user.
6. The method of claim 1 , wherein the first server uses a neural net for biometric authentication of the user.
7. The method of claim 1 , further comprising:
receiving, by the second server, the ride request comprising the first user account from a user device.
8. A method comprising:
receiving, by a first server from an autonomous vehicle, first extracted feature data, the first extracted feature data representing biometric features of a user;
determining, by the first server, that the first extracted feature data is associated with an authentication identifier;
sending, by the first server, the authentication identifier to a second server;
determining, by the second server, a first user account associated with a ride request for the autonomous vehicle;
determining, by the second server, that the first user account is associated with the authentication identifier;
sending, by the second server, an access token to the autonomous vehicle, wherein the authentication identifier is a first authentication identifier, the method further comprising:
receiving, by the first server, second extracted feature data from the autonomous vehicle;
determining, by the first server, that the second extracted feature data is associated with a second authentication identifier;
sending, by the first server, the second authentication identifier to the second server;
receiving, by the second server, the second authentication identifier from the first server;
determining, by the second server, a second user account associated with the second authentication identifier;
determining, by the second server, that the user account does not match an expected user account; and
sending, by the second server, a wrong rider token to the autonomous vehicle.
9. The method of claim 8 , wherein the wrong rider token comprises data related to a location of a different autonomous vehicle.
10. The method of claim 8 , wherein the autonomous vehicle is prevented from accessing the authentication identifier.