IP Library Granted Patent US 11,966,747
Granted Patent B2
US 11,966,747 · App. 17/145,821 · Granted Apr 23, 2024

Secure start system for an autonomous vehicle

Inventors: Christopher Valasek (Pittsburgh, PA); Charles Miller (St. Louis, MO)
Assignee: UATC, LLC
G06F9/4403B60R25/04G06F9/4406G06F21/34G06F21/57G06F21/575G06F21/606H04L9/0822H04L9/0897H04L9/14H04L9/3226H04L63/0428H04L63/06H04W12/02H04W12/03H04W12/04H04W12/06G06F21/73G06F21/88G06F2221/2105H04L63/0272H04L63/062H04L63/164H04L63/168H04L67/02H04L67/12H04L2209/84
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,966,747
App. No.
17/145,821
Granted
Apr 23, 2024
Kind
B2
Abstract

A secure start system for an autonomous vehicle can include a communications router comprising an input interface to receive a boot-loader to enable network communications with a backend system. The secure start system utilizes a tunnel key from the backend system to establish a private communications session with a backend data vault. The secure start system then retrieves a set of decryption keys from the backend data vault, via the private communications session, to decrypt a plurality of encrypted drives of the autonomous vehicle, which enables one or more functions of the autonomous vehicle.

Claims (41)

1. A secure start system for an autonomous vehicle, the secure start system comprising:

encrypted data comprising an autonomous file system that enables one or more functions to be executed by the autonomous vehicle;

one or more processors; and

a non-transitory, computer-readable memory storing instructions that are executable by the one or more processors to cause the secure start system to perform operations, the operations comprising:

transmitting, to a remote system, a first authentication component;

obtaining, from the remote system, a set of decryption keys, wherein the set of decryption keys are secured on the remote system by a multi-factor authentication protocol based on the first authentication component from the autonomous vehicle and a second authentication component from a user device associated with a user of the autonomous vehicle; and

enabling the one or more functions of the autonomous vehicle by decrypting, using the set of decryption keys, the encrypted data.

2. The secure start system of claim 1 , wherein obtaining the set of decryption keys comprises:

obtaining, responsive to authentication of the first authentication component by the remote system, a tunnel key from the remote system;

establishing, via a communication router, a private communications session with a remote data vault associated with the remote system; and

obtaining, via the private communications session, the set of decryption keys from the remote data vault.

3. The secure start system of claim 1 , wherein the first authentication component comprises a credential associated with the autonomous vehicle.

4. The secure start system of claim 1 , wherein the second authentication component comprises a credential associated with the user.

5. The secure start system of claim 1 , wherein the second authentication component is based on biometric data associated with the user that is input to the user device.

6. The secure start system of claim 1 , wherein the remote system is configured to receive a time-limited access token responsive to authentication of the second authentication component.

7. The secure start system of claim 1 , wherein enabling the one or more functions of the autonomous vehicle comprises enabling an autonomous drive function of the autonomous vehicle.

8. The secure start system of claim 1 , wherein the secure start system is onboard the autonomous vehicle.

9. A computing system for securing an autonomous vehicle, the computing comprising:

one or more processors; and

a non-transitory, computer-readable memory storing instructions that are executable by the one or more processors to cause the secure start system to perform operations, the operations comprising:

receiving, from the autonomous vehicle, a first authentication component;

receiving, from a user device associated with a user of the autonomous vehicle, a second authentication component;

transmitting, based on authentication of the first authentication component and the second authentication component, a set of decryption keys to the autonomous vehicle, wherein the decryption keys are configured to enable one or more functions of the autonomous vehicle by decrypting, using the set of decryption keys, encrypted data comprising an autonomous file system that enables the one or more functions to be executed by the autonomous vehicle.

10. The computing system of claim 9 , wherein the operations comprise:

transmitting, responsive to the authentication of the first authentication component, a tunnel key to the autonomous vehicle, the tunnel key configured to establish, via a communication router, a private communications session with a remote data vault; and

transmitting, via the private communications session, the set of decryption keys from the remote data vault.

11. The computing system of claim 9 , wherein the first authentication component comprises a credential associated with the autonomous vehicle.

12. The computing system of claim 9 , wherein the second authentication component comprises a credential associated with the user.

13. The computing system of claim 9 , wherein the second authentication component is based on biometric data associated with the user that is input to the user device.

14. The computing system of claim 9 , wherein the operations comprise:

receiving a time-limited access token responsive to authentication of the second authentication component; and

transmitting, responsive to validation of the time-limited access token, the set of decryption keys to the autonomous vehicle.

15. The computing system of claim 9 , wherein enabling the one or more functions of the autonomous vehicle comprises enabling an autonomous drive function of the autonomous vehicle.

16. A computer-implemented method for securing an autonomous vehicle, the method comprising:

receiving, from the autonomous vehicle, a first authentication component;

receiving, from a user device associated with a user of the autonomous vehicle, a second authentication component;

transmitting, based on authentication of the first authentication component and the second authentication component, a set of decryption keys to the autonomous vehicle, wherein the decryption keys are configured to enable one or more functions of the autonomous vehicle by decrypting, using the set of decryption keys, encrypted data comprising an autonomous file system that enables the one or more functions to be executed by the autonomous vehicle.

17. The method of claim 16 , wherein the first authentication component comprises a credential associated with the autonomous vehicle.

18. The method of claim 16 , wherein the second authentication component comprises a credential associated with the user.

19. The method of claim 16 , wherein the second authentication component is based on biometric data associated with the user that is input to the user device.

20. The method of claim 16 , wherein enabling the one or more functions of the autonomous vehicle comprises enabling an autonomous drive function of the autonomous vehicle.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 14, 2024
From: UATC, LLC
To: AURORA OPERATIONS, INC.
Reel/Frame 067733/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 17, 2021
From: VALASEK, CHRISTOPHER; MILLER, CHARLES
To: UBER TECHNOLOGIES, INC.
Reel/Frame 055324/0809 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 17, 2021
From: UBER TECHNOLOGIES, INC.
To: UATC, LLC
Reel/Frame 055325/0029 →