Cryptographically secure mechanism for remotely controlling an autonomous vehicle
Disclosed are techniques for remotely controlling autonomous vehicles. In one embodiment, a method is disclosed comprising receiving a message from a first autonomous vehicle, the message including a signed body portion and a triple including components selected from the group consisting of a public identifier of the first autonomous vehicle, a public key of the first autonomous vehicle, and a certificate of the first autonomous vehicle; authenticating the message by verifying the certificate of the first autonomous vehicle; logging the message into a blockchain storage structure, the blockchain storage structure storing a plurality of blocks, each blocking including the signed body portion; and executing one or more orders included within the signed body portion.
1. A system comprising:
a first autonomous vehicle configured to generate a message, the message including a signed order, a public identifier, a public key, and a certificate; and
a second autonomous vehicle, the second autonomous vehicle configured to:
receive the message;
verify the certificate;
execute the signed order; and
transmit a second message to the first autonomous vehicle, the second message including a second signed body portion that includes a response to the signed order to remotely control the second autonomous vehicle.
2. The system of claim 1 , the second autonomous vehicle further configured to generate the message using a Device Identify Composition Engine-Robust Internet of Things (DICE-RIoT) core layer.
3. the system of claim 1 , the second autonomous vehicle further configured to sign the message using a private key corresponding to the public key of the first autonomous vehicle.
4. The system of claim 1 , wherein the message comprising a freshness indicator.
5. The system of claim 1 , wherein authenticating the message comprises doubly decrypting the message and cmparing a result to the public identifier.
6. The system of claim 1 , wherein authenticating the message further comprises confirming an identity of the first autonomous vehicle by querying a remote database using the message.
7. The system of claim 1 , wherein executing the signed order comprises controlling movement of the second autonomous vehicle.
8. A method comprising:
receiving, by a second autonomous vehicle, a message including a signed order, a public identifier, a public key, and a certificate;
verifying the certificate;
executing the signed order; and
transmitting a second message to a first autonomous vehicle, the second message including a second signed body portion that includes a response to the signed order to remotely control the second autonomous vehicle.
9. The method of claim 8 , further comprising generating the message using a Device Identify Composition Engine-Robust Interned of Things (DICE-RIoT) core layer.
10. The method of claim 8 , further comprising signing the message using a private key corresponding to the public key of the first autonomous vehicle.
11. The method of claim 8 , wherein the message comprises a freshness indicator.
12. The method of claim 8 , wherein authenticating the message comprises doubly decrypting the message and comparing a result to the public identifier.
13. The method of claim 8 , wherein authenticating the message further comprises confirming an identity of the first autonomous vehicle by querying a remote data base using the message.
14. the method of claim 8 , wherein executing the signed order comprises controlling movement of the secnd autonomous vehicle.
15. A non-transitory computer-readable storage medium for tangibly storing computer program instructions capable of being executed by a computer processor, the computer program instruction defining steps of:
receiving, by a second autonomous vehicle, a message from a first autonomous vehicle, the message including a signed order, a public identifier, a public key, and a certificate;
verifying the certificate;
executing the signed order; and
transmitting a second message to the first autonomous vehicle, the second message including a second signed body portion that includes a response to the signed order to remotely control the second autonomous vehicle.
16. The non-transitory computer-readable storage medium of claim 15 , the steps further comprising signing the message using a private key corresponding to the public key of the first autonomous vehicle.
17. The non-transitory computer-readable storage medium of claim 15 , wherein the message comprises a freshness indicator.
18. The non-transitory computer-readable storage medium of claim 15 , wherein authenticating the message comprises doubly decrypying the message and comparing a result to the public identifier.
19. The non-transitory computer-readable storage medium of claim 15 , wherein authenticating the message further comprises confirming an identity of the first autonomous vehicle by querying a remote database using the message.
20. The non-transitory computer-readable storage medium of claim 15 , wherein executing the signed order comprises controlling movement of the second autonomous vehicle.