Method and system for establishing trust for a cybersecurity posture of a V2X entity
A method at an Intelligent Transportation System (ITS) Transmitting Entity, the method including: generating an ITS message; augmenting the ITS message with an Integrity Report generated by an integrity detection function at the ITS Transmitting Entity to create an augmented ITS message; signing the augmented ITS message with an Authorization Certificate or Ticket, the Authorization Certificate or Ticket including an assurance indication from an Audit Certificate Authority for the integrity detection function; and sending the signed, augmented ITS message to an ITS Receiving Entity.
1. A method at an Intelligent Transportation System (ITS) Receiving Entity, the method comprising:
receiving an ITS message at the ITS Receiving Entity from an ITS Transmitting Entity;
determining whether the ITS message comprises an Integrity Report regarding a cybersecurity posture of the ITS Transmitting Entity, the Integrity Report comprising an integrity check of the ITS Transmitting Entity generated by an integrity detection function checking the cybersecurity posture at the ITS Transmitting Entity;
when the ITS message comprises the Integrity Report, determining whether the Integrity report indicates anomalies in the cybersecurity posture of the ITS Transmitting Entity exist; and
based on the ITS message not containing the Integrity Report or the Integrity Report indicating anomalies, performing a mitigating action at the ITS Receiving Entity.
2. The method of claim 1 , wherein the ITS message is signed with an Authorization Certificate or Ticket, the Authorization Certificate or Ticket including an assurance indication from an Audit Certificate Authority for the integrity detection function at the ITS Transmitting Entity.
3. The method of claim 2 , wherein the assurance indication from the Audit Certificate Authority is within a field of the Authorization Certificate or Ticket.
4. The method of claim 1 , wherein the Integrity Report is Boolean indicating whether an anomaly was detected.
5. The method of claim 1 , wherein the Integrity Report includes a level of an anomaly detected.
6. The method of claim 5 , wherein the mitigating action includes a degree of reaction based on the level of the anomaly detected.
7. The method of claim 1 , further comprising:
when the ITS message contains the Integrity Report and provides no indicating of anomalies, performing an action with no mitigation.
8. The method of claim 1 , wherein an action associated with the ITS message comprises applying brakes of a vehicle with a first force, and wherein the mitigating action comprises at least one of: applying brakes with a second force, the second force being less than the first force; pre-charging a braking system; or not applying brakes until corroborating evidence is received.
9. An Intelligent Transportation System (ITS) Receiving Entity,
the ITS Receiving Entity comprising:
a processor;
a memory; and
a communications subsystem,
wherein the memory storing instructions when executed by the processor cause the ITS Receiving Entity to:
receive an ITS message at the ITS Receiving Entity from an ITS Transmitting Entity using the communications subsystem;
determine whether the ITS message comprises an Integrity Report regarding a cybersecurity posture of the ITS Transmitting Entity, the Integrity Report comprising an integrity check of the ITS Transmitting Entity generated by an integrity detection function checking the cybersecurity posture at the ITS Transmitting Entity;
when the ITS message comprises the Integrity Report, determine whether the Integrity report indicates anomalies in the cybersecurity posture of the ITS Transmitting Entity exist; and
based on the ITS message not containing the Integrity Report or the Integrity Report indicating anomalies, perform a mitigating action at the ITS Receiving Entity.
10. The ITS Receiving Entity of claim 9 , wherein the ITS message is signed with an Authorization Certificate or Ticket, the Authorization Certificate or Ticket including an assurance indication from an Audit Certificate Authority for the integrity detection function at the ITS Transmitting Entity.
11. The ITS Receiving Entity of claim 10 , wherein the assurance indication from the Audit Certificate Authority is within a field of the Authorization Certificate or Ticket.
12. The ITS Receiving Entity of claim 9 , wherein the Integrity Report is Boolean indicating whether an anomaly was detected.
13. The ITS Receiving Entity of claim 9 , wherein the Integrity Report includes a level of an anomaly detected.
14. The ITS Receiving Entity of claim 13 , wherein the mitigating action includes a degree of reaction based on the level of the anomaly detected.
15. The ITS Receiving Entity of claim 9 , wherein the ITS Receiving Entity is further configured to:
when the ITS message contains the Integrity Report and provides no indicating of anomalies, perform an action with no mitigation.
16. The ITS Receiving Entity of claim 9 , wherein an action associated with the ITS message comprises applying brakes of a vehicle, and wherein the mitigating action comprises at least one of: applying brakes of a vehicle with a first force, and wherein the mitigating action comprises at least one of: applying brakes with a second force, the second force being less than the first force; pre-charging a braking system; or not applying brakes until corroborating evidence is received.
17. A non-transitory computer readable medium for storing instruction code which, when executed by a processor of an Intelligent Transportation System (ITS) Receiving Entity cause the ITS Receiving Entity to:
receive an ITS message at the ITS Receiving Entity from an ITS Transmitting Entity;
determine whether the ITS message comprises an Integrity Report regarding a cybersecurity posture of the ITS Transmitting Entity, the Integrity Report comprising an integrity check of the ITS Transmitting Entity generated by an integrity detection function checking the cybersecurity posture at the ITS Transmitting Entity;
when the ITS message comprises the Integrity Report, determine whether the Integrity report indicates anomalies in the cybersecurity posture of the ITS Transmitting Entity exist; and
based on the ITS message not containing the Integrity Report or the Integrity Report indicating anomalies, perform a mitigating action at the ITS Receiving Entity.