Systems and methods for managing a compromised autonomous vehicle server
Systems and methods for managing a compromised autonomous vehicle server are described herein. A processor may obtain an indication of a first server configured to control an autonomous vehicle being compromised. The autonomous vehicle may have previously been provisioned with a first public key. The first public key may be paired with a first private key. A processor may compile command information. The command information may include a command for the autonomous vehicle and a digital certificate of a second server configured to control the autonomous vehicle in the event of the first server being compromised. The digital certificate may include a second public key and may be signed with the first private key. The command may be signed with a second private key associated with the second server. The second private key may be paired with the second public key.
1. A system for managing a compromised autonomous vehicle server, the system comprising:
one or more processors; and
one or more memories storing instructions that, when executed by the one or more processors, cause the system to perform:
obtaining an indication of a first server configured to control an autonomous vehicle being compromised, the autonomous vehicle having previously been provisioned with a first public key, the first public key being paired with a first private key, wherein the autonomous vehicle is part of a fleet of autonomous vehicles such that operations of the system are performed for individual autonomous vehicle of the fleet of autonomous vehicles;
compiling command information, the command information including a command for the autonomous vehicle and a digital certificate of a second server configured to control the autonomous vehicle in the event of the first server being compromised, the digital certificate including a second public key and being signed with the first private key, the command being signed with a second private key associated with the second server, the second private key being paired with the second public key; and
wherein the command information facilitates:
verifying, at the autonomous vehicle, the digital certificate using the first public key;
in response to the digital certificate being verified, extracting, from the digital certificate, the second public key;
verifying, at the autonomous vehicle, the command using the second public key; and
in response to the command being verified, executing, at the autonomous vehicle, the command.
2. The system of claim 1 , wherein the command includes instructions to perform a safety stop by the autonomous vehicle.
3. The system of claim 1 , wherein the command includes instructions to connect to a third server configured to control the autonomous vehicle.
4. The system of claim 1 , wherein the step of compiling the command information is performed at the second server.
5. The system of claim 1 , wherein executing the instructions further cause the system to perform encrypting and decrypting the command information.
6. The system of claim 1 , wherein the system further performs the steps of:
verifying, at the autonomous vehicle, the digital certificate using the first public key;
in response to the digital certificate being verified, extracting, from the digital certificate, the second public key;
verifying, at the autonomous vehicle, the command using the second public key; and
in response to the command being verified, executing, at the autonomous vehicle, the command.
7. The system of claim 1 , wherein the first server is a Security Operation Center.
8. A method for managing a compromised autonomous vehicle server, the method comprising:
obtaining an indication of a first server configured to control an autonomous vehicle being compromised, the autonomous vehicle having previously been provisioned with a first public key, the first public key being paired with a first private key, wherein the autonomous vehicle is part of a fleet of autonomous vehicles such that the method is performed for individual autonomous vehicle of the fleet of autonomous vehicles;
compiling command information, the command information including a command for the autonomous vehicle and a digital certificate of a second server configured to control the autonomous vehicle in the event of the first server being compromised, the digital certificate including a second public key and being signed with the first private key, the command being signed with a second private key associated with the second server, the second private key being paired with the second public key; and
wherein the command information facilitates:
verifying, at the autonomous vehicle, the digital certificate using the first public key;
in response to the digital certificate being verified, extracting, from the digital certificate, the second public key;
verifying, at the autonomous vehicle, the command using the second public key; and
in response to the command being verified, executing, at the autonomous vehicle, the command.
9. The method of claim 8 , wherein the command includes instructions to perform a safety stop by the autonomous vehicle.
10. The method of claim 8 , wherein the command includes instructions to connect to a third server configured to control the autonomous vehicle.
11. The method of claim 8 , wherein the step of compiling the command information is performed at the second server.
12. The method of claim 8 , wherein the method further comprises encrypting and decrypting the command information.
13. The method of claim 8 , wherein the method further performs the steps of:
verifying, at the autonomous vehicle, the digital certificate using the first public key;
in response to the digital certificate being verified, extracting, from the digital certificate, the second public key;
verifying, at the autonomous vehicle, the command using the second public key; and
in response to the command being verified, executing, at the autonomous vehicle, the command.
14. The method of claim 8 , wherein the first server is a Security Operation Center.
15. A non-transitory computer-readable storage medium configured with instructions executable by one or more processors to cause the one or more processors to perform operations comprising:
obtaining an indication of a first server configured to control an autonomous vehicle being compromised, the autonomous vehicle having previously been provisioned with a first public key, the first public key being paired with a first private key, wherein the autonomous vehicle is part of a fleet of autonomous vehicles such that the instructions are performed for individual autonomous vehicle of the fleet of autonomous vehicles;
compiling command information, the command information including a command for the autonomous vehicle and a digital certificate of a second server configured to control the autonomous vehicle in the event of the first server being compromised, the digital certificate including a second public key and being signed with the first private key, the command being signed with a second private key associated with the second server, the second private key being paired with the second public key; and
wherein the command information facilitates:
verifying, at the autonomous vehicle, the digital certificate using the first public key;
in response to the digital certificate being verified, extracting, from the digital certificate, the second public key;
verifying, at the autonomous vehicle, the command using the second public key; and
in response to the command being verified, executing, at the autonomous vehicle, the command.
16. The non-transitory computer-readable storage medium of claim 15 , wherein the command includes instructions to perform a safety stop by the autonomous vehicle.
17. The non-transitory computer-readable storage medium of claim 15 , wherein the command includes instructions to connect to a third server configured to control the autonomous vehicle.
18. The non-transitory computer-readable storage medium of claim 15 , wherein the step of compiling the command information is performed at the second server.
19. The non-transitory computer-readable storage medium of claim 15 , wherein the operations further comprise:
verifying, at the autonomous vehicle, the digital certificate using the first public key;
in response to the digital certificate being verified, extracting, from the digital certificate, the second public key;
verifying, at the autonomous vehicle, the command using the second public key; and
in response to the command being verified, executing, at the autonomous vehicle, the command.