System, method, and apparatus for extra vehicle communications control
An example system includes a vehicle having a first network zone and a second network zone of a different type than the first network zone and a converged network device (CND) interposed between the first network zone and the second network zone. The CND includes a policy manager circuit structured to interpret a policy comprising a network regulation description and an external communication permission value; a configuration circuit structured to configure at least one network interface circuit in response to the policy and to configure at least one gatekeeper interface circuit in response to the policy; the at least one network interface circuit structured to regulate communications between end points of the first and second network zone; and the gatekeeper interface circuit configured to regulate communications between end points of at least one of the first network zone or the second network zone and an external device.
1. A system comprising:
a vehicle having a first network zone and a second network zone of a different type than the first network zone;
a converged network device (CND) interposed between the first network zone and the second network zone, the CND comprising:
a policy manager circuit structured to interpret a policy comprising a network regulation description and an external communication permission value;
a configuration circuit structured to configure at least one network interface circuit in response to the policy and to configure a gatekeeper interface circuit in response to the policy;
the at least one network interface circuit, wherein the at least one network interface circuit is structured to regulate communications between end points of the first network zone and end points of the second network zone; and
the gatekeeper interface circuit, wherein the gatekeeper interface circuit is configured to regulate communications between:
end points of at least one of the first network zone or the second network zone; and
an external device.
2. The system of claim 1 , wherein the policy manager circuit is further structured to receive a policy communication from the external device, and to interpret the policy by performing, in response to the policy communication, one of storing the policy or updating a stored policy.
3. The system of claim 2 , wherein the external device is communicatively coupled to the policy manager circuit through at least one of the first network zone or the second network zone.
4. The system of claim 2 , wherein the external device is communicatively coupled to the policy manager circuit via at least one of a wireless network connection or a cellular network connection.
5. The system of claim 2 , wherein the policy manager circuit is further structured to verify the policy before performing the one of storing the policy or updating the stored policy.
6. The system of claim 5 , wherein the policy manager circuit is further structured to provide a notification to the external device in response to the verifying the policy.
7. The system of claim 1 , wherein the policy comprises at least one data collection parameter.
8. The system of claim 1 , further comprising:
wherein the policy comprises a permission value corresponding to at least one of:
an end point of the first network zone;
an end point of the second network zone; or
the external device; and
wherein the permission value comprises at least one permission value selected from the values consisting of: a data collection permission value; a service publication permission value;
a service subscription permission value; or a policy permission value.
9. A method, comprising:
interpreting a policy comprising a network regulation description and an external communication permission value;
regulating, in response to the network regulation description, communications between end points of a first network zone of a vehicle and end points of a second network zone of the vehicle via performing one of an up-sampling operation or a down-sampling operation on the communication;
regulating communications, in response to the external communication permission value, between:
end points of at least one of the first network zone or the second network zone; and an external device; and
wherein the second network zone is of a different type than the first network zone.
10. The method of claim 9 , further comprising receiving a policy communication from the external device, and performing one of storing the policy or updating the policy in response to the policy communication.
11. The method of claim 10 , further comprising verifying the policy before performing the one of the storing the policy or updating the policy.
12. The method of claim 11 , further comprising providing a notification to the external device in response to the verifying the policy cannot be applied.
13. The method of claim 12 , wherein verifying the policy cannot be applied comprises at least one operation selected from the operations consisting of:
determining that the policy violates a security criteria of a previously stored policy or the policy communication;
determining that the policy cannot be implemented; determining that the policy cannot be implemented due to a network communication limit;
determining that the policy cannot be implemented due to a data storage limit; or
determining that the policy cannot be implemented due to an external communication limit.
14. The method of claim 9 , further comprising regulating external communications of end points of each of the first network zone and the second network zone in response to the policy.
15. The method of claim 9 , further comprising regulating communications between a first end point of the first network zone and a second end point of the first network zone in response to the policy.
16. The method of claim 9 , further comprising updating a local configuration file of a configurable ethernet switch in response to one of an implementation of the policy or an update of the policy.
17. The method of claim 9 , further comprising updating a local configuration file of a configurable edge gateway in response to one of an implementation of the policy or an update of the policy.
18. The method of claim 15 , wherein regulating the communication between a first end point of the first network zone and a second end point of the first network zone comprises performing one of an up-sampling operation or a down-sampling operation on the communication.
19. A system comprising:
a vehicle having a first network zone and a second network zone of a different type than the first network zone;
a means for regulating communications between end points of at least one of the first network zone or the second network zone and an external device, comprising:
a means for interpreting a network regulation description and an external communication permission value;
a means for configuring at least one network interface circuit and a gatekeeper interface circuit in response to the network regulation description and the external communication permission value;
the at least one network interface circuit, wherein the at least one network interface circuit is structured to regulate communications between end points of the first network zone and end points of the second network zone; and
the gatekeeper interface circuit, wherein the gatekeeper interface circuit is configured to regulate communications between end point of at least one of the first network zone or the second network zone and the external device.
20. The system of claim 19 , wherein the means for regulating communications between end points of at least one of the first network zone or the second network zone and an external device further comprises a means for applying a permission value corresponding to at least one of: an end point of the first network zone, an end point of the second network zone, or the external device.
21. The system of claim 20 , wherein the permission value comprises at least one permission value selected from the values consisting of: a data collection permission value, a service publication permission value, a service subscription permission value, or a policy permission value.
22. A method, comprising:
interpreting a policy comprising a network regulation description and an external communication permission value;
regulating communications between end points of a first network zone of a vehicle and end points of a second network zone of the vehicle in response to the network regulation description;
regulating communications, in response to the external communication permission value, between:
end points of at least one of the first network zone or the second network zone; and an external device; and
regulating, in response to the policy, communications between a first end point of the first network zone and a second end point of the first network zone via performing one of an up-sampling operation or a down-sampling operation on the communication;
wherein the second network zone is of a different type than the first network zone.
23. The method of claim 22 , further comprising receiving a policy communication from the external device, and performing one of storing the policy or updating the policy in response to the policy communication.
24. The method of claim 23 , further comprising verifying the policy before performing the one of the storing the policy or updating the policy.
25. The method of claim 24 , further comprising providing a notification to the external device in response to the verifying the policy cannot be applied.
26. The method of claim 25 , wherein verifying the policy cannot be applied comprises at least one operation selected from the operations consisting of:
determining that the policy violates a security criteria of a previously stored policy or the policy communication;
determining that the policy cannot be implemented; determining that the policy cannot be implemented due to a network communication limit;
determining that the policy cannot be implemented due to a data storage limit; or
determining that the policy cannot be implemented due to an external communication limit.
27. The method of claim 23 , further comprising regulating external communications of end points of each of the first network zone and the second network zone in response to the policy.
28. The method of claim 22 , further comprising updating a local configuration file of a configurable ethernet switch in response to one of an implementation of the policy or an update of the policy.
29. The method of claim 22 , further comprising updating a local configuration file of a configurable edge gateway in response to one of an implementation of the policy or an update of the policy.