Integrated secure device manager systems and methods for cyber-physical vehicles
Systems and methods are described for a cyber-physical vehicle management system generated by an Integrated Secure Device Manager (ISDM) Authority configured to manage licensing and approval of Cyber-Physical Vehicle (CPV)s, a public/private key pair and a unique ID for the Authority, create a self-signed Authority token signed by the private key, send the Authority token to a plurality of ISDM Node device configured to verify Module device authenticity and in communication with the Authority, store, by each Node, the Authority token, and mark, by each Node, the Authority token as trusted.
1. A method for determining authorization of an Integrated Secure Device Manager (ISDM) Module belonging to an ISDM system, wherein the ISDM Module is mechanically coupled to and associated with a Cyber-Physical Vehicle (CPV), comprising the steps of:
broadcasting, by the ISDM Module, of an ISDM Module message including a current time and an ISDM Module token associated with the ISDM Module and including an ISDM Module public key and an ISDM Module ID, wherein the ISDM Module message is signed under an ISDM Module private key;
receiving of the ISDM Module broadcast by an ISDM device of the ISDM system;
determining, by the ISDM device, whether the signature of the ISDM Module message is valid;
upon determining that the signature is invalid, identifying the ISDM Module as unauthorized;
upon determining that the signature is valid, extracting by the ISDM device of the ISDM Module token from the ISDM Module message;
upon extracting of the ISDM Module token, performing by the ISDM device of at least one authorization test, whereby the ISDM Module is identified as authorized if each of the at least one authorization test is passed.
2. The method for determining authorization of the ISDM Module mechanically coupled to and associated with the Cyber-Physical Vehicle (CPV) of claim 1 wherein the at least one authorization test includes determining whether the ISDM Module token includes a signature from a trusted ISDM Authority and the signature is for a valid time duration, wherein the Authority belongs to the ISDM system and is configured to manage CPV licensing and approval of CPVs, whereby the test is passed when the ISDM Module token is signed by the trusted Authority and the signature is for a valid time duration.
3. The method for determining authorization of the ISDM Module mechanically coupled to and associated with the CPV of claim 1 wherein the at least one authorization test includes determining by the ISDM device whether the ISDM Module public key corresponds to the ISDM Module private key by means of signature verification, and whether the ISDM Module private key has been revoked, whereby the test is passed when the ISDM Module public key matches the ISDM Module private key and the ISDM Module private key has not been revoked.
4. The method for determining authorization of the ISDM Module of claim 1 , wherein the at least one authorization test includes verifying that a position of the CPV and telemetry of the CPV are compliant with flight data previously authorized by an Authority belonging to the ISDM system, wherein the Authority belongs to the ISDM system and is configured to manage CPV licensing and approval of CPVs.
5. The method for determining authorization of the ISDM Module of claim 1 , wherein the ISDM device is one of a Node device of the ISDM system configured to verify ISDM Module authenticity, and a different ISDM Module.
6. The method for determining authorization of the ISDM Module of claim 5 , wherein the ISDM device is a different ISDM Module, and further comprising the step of establishing a two-way and trusted communication channel between the ISDM Module and the different ISDM Module.
7. The method for determining authorization of the ISDM Module of claim 1 , whereby the ISDM Module is identified as unauthorized if at least one of the at least one authorization test is failed.
8. The method for determining authorization of the ISDM Module of claim 7 , whereby the ISDM Module private key is revoked when the ISDM Module is identified as unauthorized.
9. The method for determining authorization of the ISDM Module of claim 1 , wherein the ISDM Module token is generated by an Authority and stored by the ISDM Module prior to broadcasting by the ISDM Module, wherein the Authority belongs to the ISDM system and is configured to manage CPV licensing and approval of CPVs.
10. The method for determining authorization of the ISDM Module of claim 1 , wherein the ISDM Module public key, the ISDM Module private key, and the ISDM Module ID are generated by the ISDM Module and stored on the ISDM Module.
11. An Integrated Secure Device Manager (ISDM) system, comprising:
a Cyber-Physical Vehicle (CPV);
an Integrated Secure Device Manager (ISDM) Module belonging to the ISDM system, wherein the ISDM Module is mechanically coupled to and associated with the CPV; and
at least one ISDM device belonging to the ISDM system and configured to receive ISDM broadcasts, wherein the ISDM system is configured to perform the steps of:
broadcasting, by the ISDM Module, of an ISDM Module message including a current time and an ISDM Module token associated with the ISDM Module and including an ISDM Module public key and an ISDM Module ID, wherein the ISDM Module message is signed under an ISDM Module private key;
receiving of the ISDM Module broadcast by the ISDM device;
determining, by the ISDM device, whether the signature of the ISDM Module message is valid;
upon determining that the signature is invalid, identifying the ISDM Module as unauthorized;
upon determining that the signature is valid, extracting by the ISDM device of the ISDM Module token from the ISDM Module message; and
upon extracting of the ISDM Module token, performing by the ISDM device of at least one authorization test, whereby the ISDM Module is identified as authorized if each of the at least one authorization test is passed.
12. The Integrated Secure Device Manager (ISDM) system of claim 11 , wherein the at least one authorization test includes determining whether the ISDM Module token includes a signature from a trusted ISDM Authority and the signature is for a valid time duration, wherein the Authority belongs to the ISDM system and is configured to manage CPV licensing and approval of CPVs, whereby the test is passed when the ISDM Module token is signed by the trusted Authority and the signature is for a valid time duration.
13. The Integrated Secure Device Manager (ISDM) system of claim 11 , wherein the at least one authorization test includes determining by the ISDM device whether the ISDM Module public key corresponds to the ISDM Module private key by means of signature verification, and whether the ISDM Module private key has been revoked, whereby the test is passed when the ISDM Module public key matches the ISDM Module private key and the ISDM Module private key has not been revoked.
14. The Integrated Secure Device Manager (ISDM) system of claim 11 , wherein the at least one authorization test includes verifying that a position of the CPV and telemetry of the CPV are compliant with flight data previously authorized by an Authority belonging to the ISDM system, wherein the Authority belongs to the ISDM system and is configured to manage CPV licensing and approval of CPVs.
15. The Integrated Secure Device Manager (ISDM) system of claim 11 , wherein the ISDM device is one of a Node device of the ISDM system configured to verify ISDM Module authenticity, and a different ISDM Module.
16. The Integrated Secure Device Manager (ISDM) system of claim 15 , wherein the ISDM device is a different ISDM Module, and further comprising the step of establishing a two-way and trusted communication channel between the ISDM Module and the different ISDM Module.
17. The Integrated Secure Device Manager (ISDM) system of claim 11 , whereby the ISDM Module is identified as unauthorized if at least one of the at least one authorization test is failed.
18. The Integrated Secure Device Manager (ISDM) system of claim 17 , whereby the ISDM Module private key is revoked when the ISDM Module is identified as unauthorized.
19. The Integrated Secure Device Manager (ISDM) system of claim 11 , wherein the ISDM Module token is generated by an Authority and stored by the ISDM Module prior to broadcasting by the ISDM Module, wherein the Authority belongs to the ISDM system and is configured to manage CPV licensing and approval of CPVs.
20. The Integrated Secure Device Manager (ISDM) system of claim 11 , wherein the ISDM Module public key, the ISDM Module private key, and the ISDM Module ID are generated by the ISDM Module and stored on the ISDM Module.