Security system for an unmanned vehicle
An unmanned vehicle includes at least one navigation sensor configured to measure navigation data indicative of an environment, at least one status sensor configured to measure status data indicative of operating parameters of a hardware system and a computing system. The computing system includes a navigation engine configured to receive the navigation data and status data and plan a path through the environment and a security engine. The security engine is configured to detect that an unauthorized user is attempting to access the navigation data or the status data, send an alert to an authorized user indicating that the unauthorized user is attempting to access navigation data or status data, and send, to the unauthorized user, simulated data including one or both of simulated navigation data and simulated status data.
1. An unmanned vehicle comprising:
at least one navigation sensor configured to measure navigation data indicative of an environment;
at least one status sensor configured to measure status data indicative of operating parameters of a hardware system of the unmanned vehicle, the navigation data and the status data being measured data;
a computing system comprising:
a navigation engine comprising one or more processors configured to receive the navigation data and status data and plan a path through the environment;
a security engine comprising one or more processors configured to:
detect an unauthorized attempt by an unauthorized user to access the navigation data or the status data;
send an alert to an authorized user indicative of the unauthorized access attempt;
request simulated data including one or both of simulated navigation data and simulated status data from the navigation engine, wherein the simulated data is generated to correspond to commands received from the unauthorized user;
select, from among the measured data and the simulated data, at least a portion of the simulated data for sending to the unauthorized user;
send, to the unauthorized user, the selected simulated data including the one or both of the simulated navigation data and the simulated status data;
select, from among the measured data and the simulated data, at least a portion of the measured data; and
send, to the authorized user, the selected measured data.
2. The unmanned vehicle of claim 1 , wherein the hardware system comprises:
an engine configured to generate mechanical energy;
a generator motor coupled to the engine and configured to generate electrical energy from the mechanical energy generated by the engine; and
at least one rotor motor configured to drive at least one propeller of the unmanned vehicle to rotate, wherein the at least one rotor motor is powered by the electrical energy generated by the generator motor,
wherein the navigation engine is powered by the electrical energy generated by the generator motor.
3. The unmanned vehicle of claim 1 , further comprising a storage comprising a plurality of security tiers, a first security tier of the plurality having a first level of data security and a second security tier having a second level of data security that has at least one additional security requirement relative to the first level of data security.
4. The unmanned vehicle of claim 3 , wherein the storage is configured to store the navigation data in the first security tier and the status data in the second security tier.
5. The unmanned vehicle of claim 3 , wherein the second level of data security of the second security tier comprises at least one additional authentication requirement to access data stored in the second security tier relative to authentication requirements of the first level of data security of the first security tier.
6. The unmanned vehicle of claim 3 , wherein the second level of data security of the second security tier comprises a requirement of physical access to the unmanned vehicle to access data stored in the second security tier, and wherein the first level of data security of the first security tier comprises permission to remotely access data stored in the first security tier.
7. The unmanned vehicle of claim 1 , wherein the security engine is further configured to:
monitor transmissions received from the unauthorized user; and
classify a type of a cyberattack being used by the unauthorized user.
8. The unmanned vehicle of claim 7 , wherein classifying the type of the cyberattack being used by the unauthorized user comprises:
training a machine learning engine with training data comprising transmissions received during a plurality of different cyberattacks;
inputting the transmissions received from the unauthorized user into the machine learning engine; and
receiving, from the machine learning engine, data indicative of the type of the cyberattack being used by the unauthorized user.
9. The unmanned vehicle of claim 1 , wherein the security engine comprises a virtual machine, and wherein sending the simulated data comprises:
performing, in the virtual machine, a simulation of navigating the unmanned vehicle in response to data received from the unauthorized user to generate the simulation data; and
sending the data received from the unauthorized user to the authorized user.
10. The unmanned vehicle of claim 9 , wherein performing the simulation of navigating the unmanned vehicle in response to data received from the unauthorized user to generate the simulation data comprises:
simulating the unmanned vehicle using a digital twin of the unmanned vehicle;
simulating an environment within which the unmanned vehicle exists; and
navigating the digital twin of the unmanned vehicle within the simulated environment.
11. The unmanned vehicle of claim 1 , wherein detecting that an unauthorized user is attempting to access the navigation data or the status data comprises determining that the unmanned vehicle is deviating from a flight plan.
12. The unmanned vehicle of claim 1 , wherein detecting that an unauthorized user is attempting to access the navigation data or the status data comprises determining that at least one value of the status data or the navigational data deviates from an acceptable range.
13. The unmanned vehicle of claim 12 , wherein the acceptable range is user-specific and is determined based on previous navigation data or previous status data associated with a particular authorized user.
14. The unmanned vehicle of claim 1 , wherein detecting that an unauthorized user is attempting to access the navigation data or the status data comprises testing at least one status sensor or at least one navigational sensor to identify data spoofing.
15. The unmanned vehicle of claim 1 , wherein detecting that an unauthorized user is attempting to access the navigation data or the status data comprises determining that a particular pattern of requests for navigational data or status data is indicative of a cyberattack.
16. The unmanned vehicle of claim 1 , wherein the status data comprises, at least one of temperature data, a voltage output, an electrical current output, vibrational data, tachometric output, and a log of control commands.
17. The unmanned vehicle of claim 1 , wherein the navigational data comprises at least one of camera data, accelerometer data, gyroscopic data, ranging data, and global positioning system (GPS) coordinates.
18. A method for operating an unmanned vehicle, the method comprising:
receiving, by a computing system, navigation data indicative of an environment of the unmanned vehicle and status data indicative of operating parameters of a hardware system of the unmanned vehicle, the navigation data and the status data being measured data;
detecting, by the computing system, that an unauthorized user is attempting to access the navigation data or the status data;
sending an alert to an authorized user indicating that the unauthorized user is attempting to access navigation data or status data;
generating simulated data including one or both of simulated navigation data and simulated status data, the simulated data being generated to correspond to commands received from the unauthorized user;
selecting, from among the measured data and the simulated data, at least a portion of the simulated data for sending to the unauthorized user;
sending, to the unauthorized user, the simulated data including the one or both of the simulated navigation data and the simulated status data;
selecting, from among the measured data and the simulated data, at least a portion of the measured data; and
sending, to the authorized user, the selected measured data.
19. The method of claim 18 , wherein the hardware system comprises:
an engine configured to generate mechanical energy;
a generator motor coupled to the engine and configured to generate electrical energy from the mechanical energy generated by the engine; and
at least one rotor motor configured to drive at least one propeller of the unmanned vehicle to rotate, wherein the at least one rotor motor is powered by the electrical energy generated by the generator motor,
wherein the navigation engine is powered by the electrical energy generated by the generator motor.
20. The method of claim 18 , further comprising storing, in a storage comprising a plurality of security tiers, the navigation data and the status data, the storage comprising a first security tier of the plurality having a first level of data security and a second security tier having a second level of data security that has at least one additional security requirement relative to the first level of data security.
21. The method of claim 20 , wherein the storage is configured to store the navigation data in the first security tier and the status data in the second security tier.
22. The method of claim 20 , wherein the second level of data security of the second security tier comprises at least one additional authentication requirement to access data stored in the second security tier relative to authentication requirements of the first level of data security of the first security tier.
23. The method of claim 20 , wherein the second level of data security of the second security tier comprises a requirement of physical access to the unmanned vehicle to access data stored in the second security tier, and wherein the first level of data security of the first security tier comprises permission to remotely access data stored in the first security tier.
24. The method of claim 18 , further comprising:
monitoring, by the computing system, transmissions received from the unauthorized user; and
classifying, by the computing system, a type of a cyberattack being used by the unauthorized user.
25. The method of claim 24 , wherein classifying the type of the cyberattack being used by the unauthorized user comprises:
training a machine learning engine with training data comprising transmissions received during a plurality of different cyberattacks;
inputting the transmissions received from the unauthorized user into the machine learning engine; and
receiving, from the machine learning engine, data indicative of the type of the cyberattack being used by the unauthorized user.
26. The method of claim 18 , wherein sending the simulated data comprises:
performing, in a virtual machine of the computing system, a simulation of navigating the unmanned vehicle in response to data received from the unauthorized user to generate the simulation data; and
sending the data received from the unauthorized user to the authorized user.
27. The method of claim 26 , wherein performing the simulation of navigating the unmanned vehicle in response to data received from the unauthorized user to generate the simulation data comprises:
simulating the unmanned vehicle using a digital twin of the unmanned vehicle;
simulating an environment within which the unmanned vehicle exists; and
navigating the digital twin of the unmanned vehicle within the simulated environment.
28. The method of claim 18 , wherein detecting that an unauthorized user is attempting to access the navigation data or the status data comprises determining that the unmanned vehicle is deviating from a flight plan.
29. The method of claim 18 , wherein detecting that an unauthorized user is attempting to access the navigation data or the status data comprises determining that at least one value of the status data or the navigational data deviates from an acceptable range.
30. The method of claim 29 , wherein the acceptable range is user-specific and is determined based on previous navigation data or previous status data associated with a particular authorized user.
31. The method of claim 18 , wherein detecting that an unauthorized user is attempting to access the navigation data or the status data comprises testing at least one status sensor or at least one navigational sensor to identify data spoofing.
32. The method of claim 18 , wherein detecting that an unauthorized user is attempting to access the navigation data or the status data comprises determining that a particular pattern of requests for navigational data or status data is indicative of a cyberattack.
33. The method of claim 18 , wherein the status data comprises, at least one of temperature data, a voltage output, an electrical current output, vibrational data, tachometric output, and a log of control commands.
34. The method of claim 18 , wherein the navigational data comprises at least one of camera data, accelerometer data, gyroscopic data, ranging data, and global positioning system (GPS) coordinates.