Systems and methods for enabling trusted communications between controllers

1. A method implemented on a controller of a vehicle for communicating with a second controller of the vehicle, comprising:

receiving data and a controller signature from the second controller, wherein the data is destined for the controller and intended to be processed by the controller, and wherein the controller signature is generated by generating a hash value of the data and encrypting the generated hash value with a private key;

verifying the controller signature received from the second controller using a public key of the second controller;

transmitting the data and controller signature to a gateway of the vehicle;

receiving a gateway signature from the gateway, wherein the gateway signature is generated based on at least a portion of the data and transmitted to the controller after the gateway verifies the controller signature;

verifying the gateway signature; and

in response to verifying the gateway signature, processing the data.

2. The method of claim 1 , wherein the data is transmitted between the controller, the second controller, and the gateway by any of an internet connection, a private wide-area network connection, or a private local-area network connection.

3. The method of claim 1 , further comprising receiving a notification from the gateway that at least one of the data and the controller contains malicious software.

4. The method of claim 1 , wherein the gateway signature is transmitted to the controller after the gateway verifies that the controller is authorized to receive communications from the second controller.

5. The method of claim 1 , wherein the controller, the second controller, and the gateway are connected to a bus system.

6. The method of claim 5 , wherein the bus system is a controller-area network (CAN) bus system.

7. The method of claim 5 , wherein the data, the controller signature, and the gateway signature are received via the bus system and the data and the controller signature are transmitted via the bus system.

8. The method of claim 1 , wherein the controller signature is generated by the second controller using a private key associated with the second controller.

9. A controller of a vehicle, the controller comprising one or more processors configured to:

receive data and a controller signature from a second controller, wherein the data is destined for the controller and intended to be processed by the controller, and wherein the controller signature is generated by generating a hash value of the data and encrypting the generated hash value with a private key;

verify the controller signature received from the second controller using a public key of the second controller;

transmit the data and the controller signature to a gateway of the vehicle;

receive a gateway signature from the gateway, wherein the gateway signature is generated based on at least a second portion of the data and transmitted to the controller after the gateway verifies the controller signature;

verify the gateway signature; and

in response to verifying the gateway signature, process the data.

10. The controller of claim 9 , wherein the controller, the second controller, and the gateway are connected to a bus system.

11. The controller of claim 10 , wherein the bus system is a controller-area network (CAN) bus system.

12. The controller of claim 10 , wherein the data, the controller signature, and the gateway signature are received via the bus system, and the data and the controller signature are transmitted via the bus system.

13. The controller of claim 9 , wherein the gateway signature is transmitted to the controller after the gateway verifies that the controller is authorized to receive communication from the second controller.

14. The controller of claim 9 , wherein the controller signature is generated by the second controller using a private key associated with the second controller.

15. The controller of claim 9 , wherein the vehicle is one of a car, a motorbike, a boat, or an aircraft.

16. A non-transitory computer-readable storage medium storing instructions that when executed by a controller of a vehicle cause the controller to perform a method for communicating with a second controller of the vehicle, the method comprising:

receiving data and a controller signature from the second controller, wherein the data is destined for the controller and intended to be processed by the controller, and wherein the controller signature is generated by generating a hash value of the data and encrypting the generated hash value with a private key;

verifying the controller signature received from the second controller using a public key of the second controller;

transmitting the data and controller signature to a gateway of the vehicle;

receiving a gateway signature from the gateway, wherein the gateway signature is generated based on at least a portion of the data and transmitted to the controller after the gateway verifies the controller signature;

verifying the gateway signature; and

in response to verifying the gateway signature, processing the data.

17. The non-transitory computer-readable storage medium of claim 16 , wherein the controller signature is generated by the second controller using a private key associated with the second controller.

18. The non-transitory computer-readable storage medium of claim 16 , wherein the controller, the second controller, and the gateway are connected to a controller-area network (CAN) bus system.