Systems and methods for enabling trusted communications between controllers

1. A gateway of a vehicle, the gateway comprising:

one or more processors connected to a memory storing instructions that, when executed by the one or more processors, cause the one or more processors to:

receive a controller signature and data from a first controller of the vehicle, wherein the controller signature was generated by a second controller of the vehicle based at least in part on a portion of the data, wherein the second controller is configured to provide the data to the first controller and wherein the first controller is configured to relay the data to the gateway;

verify the controller signature;

obtain a gateway signature, wherein the gateway signature is generated based on at least a portion of the data using a private key of the gateway; and

transmit the gateway signature to the first controller, wherein the first controller is configured to process the data after the controller signature has been verified by the gateway.

2. The gateway of claim 1 , wherein the gateway is coupled to the first controller and the second controller via a bus system.

3. The gateway of claim 2 , wherein the bus system is a controller-area network (CAN) bus system.

4. The gateway of claim 1 , wherein the one or more processors are configured to verify the controller signature by generating a hash value of the data, decrypting the controller signature, and comparing the decrypted controller signature with the generated hash value of the data.

5. The gateway of claim 4 , wherein the gateway signature is generated by encrypting a hash value of the data with the private key of the gateway.

6. The gateway of claim 1 , wherein the gateway signature is a digital signature.

7. The gateway of claim 1 , wherein the one or more processors are further configured to transmit the data to the first controller.

8. The gateway of claim 1 , wherein the one or more processors are further configured to verify that the second controller is authorized to send a communication to the first controller by accessing a policy controller.

9. The gateway of claim 8 , wherein the one or more processors are further configured to determine that the data is in accordance with one or more policies associated with the policy controller.

10. The gateway of claim 1 , wherein the one or more processors are further configured to verify that the data does not include any known malicious software code or instructions.

11. The gateway of claim 1 , wherein the one or more processors are further configured to verify that that the first controller and the second controller are active.

12. A method implemented on a gateway of a vehicle, comprising:

receiving a controller signature and data from a first controller of the vehicle, wherein the controller signature was generated by a second controller of the vehicle based at least in part on a portion of the data, wherein the second controller is configured to provide the data to the first controller and wherein the first controller is configured to relay the data to the gateway;

verifying the controller signature;

obtaining a gateway signature, wherein the gateway signature is generated based on at least a portion of the data using a private key of the gateway; and

transmitting the gateway signature to the first controller, wherein the first controller is configured to process the data after the controller signature has been verified by the gateway.

13. The method of claim 12 , wherein verifying the controller signature comprises generating a hash value of the data, decrypting the controller signature, and comparing the decrypted controller signature with the generated hash value of the data.

14. The method of claim 12 , wherein the gateway signature is generated by encrypting a hash value of the data with the private key of the gateway.

15. The method of claim 12 , wherein the gateway signature is a digital signature.

16. A non-transitory computer-readable storage medium storing instructions that when executed by one or more processors cause the one or more processors to:

receive a controller signature and data from a first controller of a vehicle, wherein the controller signature was generated by a second controller of the vehicle based at least in part on a portion of the data, wherein the second controller is configured to provide the data to the first controller and wherein the first controller is configured to relay the data to a gateway;

verify the controller signature;

obtain a gateway signature, wherein the gateway signature is generated based on at least a portion of the data using a private key of the gateway; and

transmit the gateway signature to the first controller, wherein the first controller is configured to process the data after the controller signature has been verified by the gateway.

17. The non-transitory computer-readable storage medium of claim 16 , wherein the instructions cause the one or more processors to verify that the second controller is authorized to send a communication to the first controller by accessing a policy controller.

18. The non-transitory computer-readable storage medium of claim 17 , wherein the instructions cause the one or more processors to determine that the data is in accordance with one or more policies associated with the policy controller.

19. The non-transitory computer-readable storage medium of claim 16 , wherein the instructions cause the one or more processors to verify that the data does not include any known malicious software code or instructions.

20. The non-transitory computer-readable storage medium of claim 16 , wherein the gateway is coupled to the first controller and the second controller via a bus system.