Cryptographically secure mechanism for remotely controlling an autonomous vehicle
Disclosed are techniques for remotely controlling autonomous vehicles. In one embodiment, a method is disclosed comprising receiving a message from a first autonomous vehicle, the message including a signed body portion and a triple including components selected from the group consisting of a public identifier of the first autonomous vehicle, a public key of the first autonomous vehicle, and a certificate of the first autonomous vehicle; authenticating the message by verifying the certificate of the first autonomous vehicle; logging the message into a blockchain storage structure, the blockchain storage structure storing a plurality of blocks, each blocking including the signed body portion; and executing one or more orders included within the signed body portion.
1. A method comprising:
receiving, by a second autonomous vehicle, a message from a first autonomous vehicle, the message including a signed body portion and a triple, the signed body portion comprising an order to remotely control the second autonomous vehicle and the triple comprising a public identifier of the first autonomous vehicle, a public key of the first autonomous vehicle, and a certificate of the first autonomous vehicle, wherein the public identifier is generated at least in part on a unique device secret of the first autonomous vehicle and wherein the certificate comprises an encrypted ciphertext generated by encrypting the public key;
authenticating the message by verifying the certificate of the first autonomous vehicle;
logging the message into a blockchain storage structure, the blockchain storage structure storing a plurality of blocks, each blocking including the signed body portion;
executing one or more orders included within the signed body portion; and
transmitting a second message to the first autonomous vehicle, the second message including a second signed body portion that includes a response to the order to remotely control the second autonomous vehicle.
2. The method of claim 1 , the triple generated using a Device Identity Composition Engine (DICE)-Robust Internet of Things (RIoT) core layer.
3. The method of claim 1 , the signed body portion signed using a private key corresponding to the public key of the first autonomous vehicle.
4. The method of claim 1 , the authenticating the message comprising doubly decrypting the triple to obtain a result and comparing the result to the public identifier.
5. The method of claim 1 , the authenticating the message further comprising confirming an identity of the first autonomous vehicle by querying a remote database using the triple.
6. A non-transitory computer readable storage medium for tangibly storing computer program instructions capable of being executed by a computer processor, the computer program instructions defining steps of:
receiving, by a second autonomous vehicle, a message from a first autonomous vehicle, the message including a signed body portion and a triple, the signed body portion comprising an order to remotely control the second autonomous vehicle and the triple comprising a public identifier of the first autonomous vehicle, a public key of the first autonomous vehicle, and a certificate of the first autonomous vehicle, wherein the public identifier is generated at least in part on a unique device secret of the first autonomous vehicle and wherein the certificate comprises an encrypted ciphertext generated by encrypting the public key;
authenticating the message by verifying the certificate of the first autonomous vehicle;
logging the message into a blockchain storage structure, the blockchain storage structure storing a plurality of blocks, each blocking including the signed body portion;
executing one or more orders included within the signed body portion; and
transmitting a second message to the first autonomous vehicle, the second message including a second signed body portion that includes a response to the order to remotely control the second autonomous vehicle.
7. The non-transitory computer readable storage medium of claim 6 , the triple generated using a Device Identity Composition Engine (DICE)-Robust Internet of Things (RIoT) core layer.
8. The non-transitory computer readable storage medium of claim 6 , the authenticating the message comprising doubly decrypting the triple to obtain a result and comparing the result to the public identifier.
9. The non-transitory computer readable storage medium of claim 6 , the authenticating the message further comprising confirming an identity of the first autonomous vehicle by querying a remote database using the triple.
10. A device comprising:
a processor; and
a storage medium for tangibly storing thereon program logic for execution by the processor, the stored program logic comprising logic performing steps of:
receiving, by a second autonomous vehicle, a message from a first autonomous vehicle, the message including a signed body portion and a triple, the signed body portion comprising an order to remotely control the second autonomous vehicle and the triple comprising a public identifier of the first autonomous vehicle, a public key of the first autonomous vehicle, and a certificate of the first autonomous vehicle, wherein the public identifier is generated at least in part on a unique device secret of the first autonomous vehicle and wherein the certificate comprises an encrypted ciphertext generated by encrypting the public key;
authenticating the message by verifying the certificate of the first autonomous vehicle;
logging the message into a blockchain storage structure, the blockchain storage structure storing a plurality of blocks, each blocking including the signed body portion;
executing one or more orders included within the signed body portion; and
transmitting a second message to the first autonomous vehicle, the second message including a second signed body portion that includes a response to the order to remotely control the second autonomous vehicle.
11. The device of claim 10 , the triple generated using a Device Identity Composition Engine (DICE)-Robust Internet of Things (RIoT) core layer.
12. The device of claim 10 , the authenticating the message comprising doubly decrypting the triple to obtain a result and comparing the result to the public identifier.
13. The device of claim 10 , the authenticating the message further comprising confirming an identity of the first autonomous vehicle by querying a remote database using the triple.
14. The method of claim 4 , wherein doubly decrypting the triple to obtain a result and comparing the result to the public identifier comprises:
decrypting the certificate of the first autonomous vehicle using the public key of the first autonomous vehicle to obtain a resulting key; and
decrypting the public identifier of the first autonomous vehicle using the resulting key to obtain the result.