Method and system for connected vehicle communication
The invention is applicable for use in conjunction with a system for connected vehicle communications in which each vehicle in the system is issued a limited number of unique pseudonym certificates that are used by the vehicle to establish trust in messages sent by the vehicle by signing each message with a pseudonym certificate. A method is set forth for selecting a pseudonym certificate for use, from among the vehicle's pseudonym certificates, so as to protect the privacy of the vehicle's activity against attacks by eavesdroppers, including the steps of: tracking and storing vehicle location data; computing, from inputs that include the vehicle location data, the vehicle's relative achievable anonymity in particular geographical regions; prioritizing the pseudonym certificates; and selecting a pseudonym certificate for use from among the pseudonym certificates having a priority that is determined by the relative achievable anonymity for the geographical region in which the certificate is to be used. The method includes authenticating a safety message using the selected pseudonym certificate, and transmitting the authenticated message.
1. A computer-implemented method for selecting a pseudonym certificate for vehicle-to-vehicle communication, the method comprising:
tracking and storing location data corresponding to a vehicle;
determining, based on one or more received basic safety messages, a mapping of one or more other vehicle locations;
computing, based at least on the location data and the mapping of the one or more other vehicle locations, a relative achievable anonymity associated with the vehicle in a particular geographical region;
prioritizing a plurality of pseudonym certificates; and
selecting a pseudonym certificate for use from the plurality of pseudonym certificates having a priority that is determined by the relative achievable anonymity for the particular geographical region;
wherein prioritizing the plurality of pseudonym certificates is based on a number of times a respective pseudonym certificates from the plurality of pseudonym certificates has been used at a geographical location.
2. The method of claim 1 , wherein prioritizing the plurality of pseudonym certificates comprises partitioning the plurality of pseudonym certificates into a plurality of privacy risk groups.
3. The method of claim 2 , wherein the pseudonym certificate is selected from a relatively high privacy risk group from the plurality of privacy risk groups when the relative achievable anonymity is relatively low.
4. The method of claim 2 , wherein the plurality of privacy risk groups includes a privacy risk group of previously used pseudonym certificates and a privacy risk group of unused pseudonym certificates.
5. The method of claim 2 , wherein the pseudonym certificate is selected from a relatively low privacy risk group from the plurality of privacy risk groups when the relative achievable anonymity is relatively high.
6. The method of claim 1 , further comprising:
authenticating a safety message using the pseudonym certificate; and
transmitting the authenticated safety message.
7. The method of claim 1 , wherein the location data corresponding to the vehicle is based on inputs provided by a vehicle operator.
8. The method of claim 1 , wherein the location data corresponding to the vehicle is based on information associated with one or more routes traveled by the vehicle.
9. The method of claim 1 , wherein the location data corresponding to the vehicle includes information regarding an amount of time associated with a vehicle location.
10. The method of claim 1 , wherein computing a relative achievable anonymity comprises computing entropy of a region to be occupied by the vehicle.
11. The method of claim 1 , wherein the selected pseudonym certificate includes an indication of prior use in the particular geographical.
12. An apparatus for selecting a pseudonym certificate for vehicle-to-vehicle communication, comprising:
at least one memory; and
at least one processor coupled to the at least one memory and configured to:
track and store location data corresponding to a vehicle;
determine, based on one or more received basic safety messages, a mapping of one or more other vehicle locations;
compute, based at least on the location data and the mapping of the one or more other vehicle locations, a relative achievable anonymity associated with the vehicle in a particular geographical region; and
selecting a pseudonym certificate for use from a plurality of pseudonym certificates having a priority that is based on the relative achievable anonymity for the particular geographical region;
wherein the priority of the pseudonym certificate is further based on a number of times the pseudonym certificate has been used at the particular geographic region.
13. The apparatus of claim 12 , wherein the pseudonym certificate is selected from a group of pseudonym certificates associated with a high privacy risk when the relative achievable anonymity is relatively low.
14. The apparatus of claim 12 , wherein the pseudonym certificate is selected from a group of pseudonym certificates associated with a low privacy risk when the relative achievable anonymity is relatively high.
15. The apparatus of claim 12 , wherein the location data corresponding to the vehicle is based on information associated with one or more routes traveled by the vehicle.
16. The apparatus of claim 12 , wherein the location data corresponding to the vehicle includes information regarding an amount of time associated with a vehicle location.
17. The apparatus of claim 12 , wherein each of the plurality of pseudonym certificates includes an indication of use in one or more geographic regions.
18. An apparatus for selecting a pseudonym certificate for vehicle-to-vehicle communication, comprising:
at least one memory; and
at least one processor coupled to the at least one memory and configured to:
track and store location data corresponding to a vehicle;
determine, based on one or more received basic safety messages, a mapping of one or more other vehicle locations;
compute, based at least on the location data and the mapping of the one or more other vehicle locations, a relative achievable anonymity associated with the vehicle in a particular geographical region; and
selecting a pseudonym certificate for use from a plurality of pseudonym certificates having a priority that is based on the relative achievable anonymity for the particular geographical region;
wherein the pseudonym certificate is selected from a group of pseudonym certificates associated with (i) a low privacy risk when the relative achievable anonymity is relatively high or (ii) a high privacy risk when the relative achievable anonymity is relatively low.
19. The apparatus of claim 18 , wherein the priority of the pseudonym certificate is further based on a number of times the pseudonym certificate has been used at the particular geographic region.
20. The apparatus of claim 18 , wherein the location data corresponding to the vehicle is based on information associated with one or more routes traveled by the vehicle.
21. The apparatus of claim 18 , wherein the location data corresponding to the vehicle includes information regarding an amount of time associated with a vehicle location.
22. The apparatus of claim 18 , wherein each of the plurality of pseudonym certificates includes an indication of use in one or more geographic regions.