Systems and methods for cyber-physical vehicle management, detection and control
A cyber-physical device management system may allow for highly reliable and authentic identity management of cyber-physical systems, unforgeable legal interception devices, and robust relay nodes. A cyber-physical device management system may also provide for human and object bi-directional authenticity verification. In some cases, a cyber physical management system may enable a cyber physical vehicle (CPV) detection and intervention system which may be capable or detection, identification, capture, seizure, and immobilization of CPVs. In some embodiments the CPV detection and intervention system includes a geocoding laser subsystem for determining a location of a CPV.
1. A system for cyber-physical device management, comprising:
a cyber-physical device management computing system configured to:
receive and store authenticating information from an authentication authority for a plurality of authenticated cyber-physical devices,
receive and store authoritative cyber-physical command computing device registration information from an authoritative cyber-physical device command agency,
generate a cryptographic authentication token for at least one of the plurality of authenticated cyber-physical devices,
issue and send the cryptographic authentication token to the corresponding cyber-physical device, and
communicate with any one of the plurality of authenticated cyber-physical devices to verify, prior to and during operation, the authenticity of the data transmitted by the cyber-physical device using the cryptographic authentication token issued and stored on the cyber-physical device; and
at least one authoritative cyber-physical command computing device registered to the authoritative cyber-physical device command agency and configured to:
query the cyber-physical device, intercept the cyber-physical device transmissions,
send a challenge to the cyber-physical device,
receive a challenge response from the cyber-physical device,
authenticate the challenge response received from the cyber-physical device, and
determine if the cyber-physical device is authentic and authorized.
2. The system for cyber-physical device management of claim 1 , further comprising at least one relay node communication device configured to communicate with the cyber-physical device management computing system and establish mutually authenticated communication with the cyber-physical device.
3. The system for cyber-physical device management of claim 2 , wherein the relay node includes a relay node authentication component, a radio receiver, and a radio transmitter.
4. The system for cyber-physical device management of claim 2 , wherein the cyber-physical device management computing system is configured to verify an identity of each relay node communication device.
5. The system for cyber-physical device management of claim 1 , the cyber-physical device management computing system further comprising an authentication component, a cyber-physical device database, an agency database, and a user database.
6. The system for cyber-physical device management of claim 1 , the cyber-physical device management computing system further configured to:
receive data associated with a cyber-physical device operator including an operator license, a set of operator attributes, an operator cryptographic key; and
upon determining that the received operator attributes match the received operator license and no operator token had been previously issued for the operator license, generate a cryptographic authentication operator token including the operator attributes, the operator license, and the operator cryptographic key.
7. The system for cyber-physical device management of claim 6 , the cyber-physical device management computing system further configured to send the cryptographic authentication operator token to the cyber-physical device operator.
8. The system for cyber-physical device management of claim 1 , the creating of the cryptographic authentication token further comprising:
receiving data associated with the cyber-physical device including a cyber-physical device license, a set of cyber-physical device attributes, and a cyber-physical device cryptographic key,
generating the cryptographic authentication token upon determining that the received cyber-physical device attributes match the received cyber-physical device license and no cyber-physical device token had been previously issued for the cyber-physical device license, generate a cryptographic authentication operator token including the operator attributes, the operator license, and the operator cryptographic key.
9. The system for cyber-physical device management of claim 8 , wherein the generated cryptographic authentication operator token includes the operator attributes, the operator license, and the operator cryptographic key.
10. The system for cyber-physical device management of claim 1 , the cyber-physical device management computing system further configured to communicate with the at least one authoritative cyber-physical command computing device.
11. The system for cyber-physical device management of claim 10 , wherein the communication is over a confidential and authenticated communication channel.
12. The system for cyber-physical device management of claim 10 , wherein the communication includes receiving data from the one authoritative cyber-physical command computing device.
13. The system for cyber-physical device management of claim 12 , wherein the data comprises a device license, a plurality of device attributes, and a device cryptographic key.
14. The system for cyber-physical device management of claim 13 , the cyber-physical device management computing system further configured to determine that the device attributes match the device license and that no device token has been previously issued for the device license.
15. The system for cyber-physical device management of claim 14 , the cyber-physical device management computing system further configured to, upon determining that the device attributes match the device license and that no device token has been previously issued for the device license, generate a cryptographically signed device token including the device attributes, the device license and the device cryptographic key.