Method for confidentially processing data of a vehicle
View Patent ↗The present invention concerns a method for confidentially processing the kinematic data of a vehicle, in particular a method for classifying this data in order to determine the driving style of the vehicle while respecting the confidentiality of the data in question. The data is encrypted by the vehicle by means of a symmetric encryption algorithm using a secret key generated by the vehicle. This secret key is encrypted by the vehicle by means of a homomorphic asymmetric encryption algorithm by using the public key of a vehicle service provider. The data encrypted by means of the secret key, and the homomorphically encrypted secret key, are transmitted by the vehicle to an access point that transcrypts them and transmits the homomorphically encrypted data to a calculation platform. The platform performs the confidential processing operation in the homomorphic domain and transmits the homomorphically encrypted results to the server of the vehicle service provider.
1. A method for confidentially processing data of a vehicle, the data being transmitted by an on-board gateway of the vehicle to an access point of a network external to the network and a processing result being transmitted to a server of a service provider, the service provider having generated a private key-public key pair of a homomorphic encryption asymmetric cryptosystem, the method comprising:
the vehicle generating a secret key of a symmetric encryption cryptosystem and encrypting said secret key by means of the homomorphic encryption public key;
the vehicle encrypting said data by means of the symmetric encryption secret key;
the vehicle transmitting the homomorphically encrypted secret key as well as the data thus encrypted to the access point, said access point performing a second encryption of the data thus encrypted, by means of the homomorphic encryption public key, to obtain doubly encrypted data and then, by means of the homomorphically encrypted secret key, a decryption of the doubly encrypted data in the homomorphic domain, to obtain homomorphically encrypted data, and transmitting the homomorphically encrypted data to a computing platform; and
the computing platform performing, in the homomorphic domain, the confidential processing of the data received from the access point and transmitting the processing result, in homomorphically encrypted form, to the server of the service provider.
2. The method for confidentially processing the data of the vehicle according to claim 1 , wherein the confidential processing is a classification of said data, the processing result giving one of a plurality of predetermined classes to which said data belong, or the respective probabilities that said data belong to those predetermined classes.
3. The method for confidentially processing the data of the vehicle according to claim 2 , wherein the classification is a hyperplane classification, each hyperplane being defined by an affine function in the cleartext domain.
4. The method for confidentially processing the data of the vehicle according to claim 2 , wherein said data comprises kinematic data of the vehicle.
5. The method for confidentially processing the data of the vehicle according to claim 4 , wherein the predetermined classes are driving dangerousness classes of the vehicle.
6. The method for confidentially processing the data of the vehicle according to claim 4 , wherein the classification is obtained by a classification function comprising, as an argument, the kinematic data of a plurality of vehicles.
7. The method for confidentially processing the data of the vehicle according to claim 1 , wherein the symmetric encryption is a key stream encryption.
8. The method for confidentially processing the data of the vehicle according to claim 1 , wherein the symmetric encryption by the secret key of said data is performed by means of the on-board gateway.
9. The method for confidentially processing the data of the vehicle according to claim 1 , wherein the on-board gateway is configured to establish a Wi-Fi connection, or according to a 3G/4G/5G telephone standard, with the access point.