Method and system for sharing sensor insights based on application requests
A method at a first domain for obtaining at least one insight from a second domain, the method including registering an application with an anchor in the first domain; providing, from the anchor to the application, a first message signed by the anchor; sending, from the first domain to a network domain, the signed message; receiving, from the network domain, at least one signed token, each of the at least one signed token being for a synthetic sensor on the second domain, where the synthetic sensor provides an insight; sending a request message to the second domain, the request message requesting the insight and including the at least one token; and receiving the insight from a synthetic sensor associated with the at least one token.
1. A method at a primary anchor module of a cloud domain for providing secure insight sharing, the method comprising:
receiving, from an application of a first domain in a vehicle, a first message, the first message comprising an information package signed with a private key of an anchor of the first domain, the information package comprising a name, version, package signature hash of the application, and a vehicle identifier of the vehicle;
retrieving permissions for the application on the vehicle;
creating a token for the application based on the permissions, the token identifying an insight the application may access;
sending the token to the application.
2. The method of claim 1 , further comprising authenticating the first message with a public key of the first domain.
3. The method of claim 1 , wherein the first message comprises an application identifier for the application and is signed by an application signature of the application.
4. The method of claim 1 , wherein the first message indicates a time period during which the first message is valid.
5. The method of claim 1 , wherein the first message is received over an encrypted connection and the token is sent over the encrypted connection.
6. The method of claim 1 , further comprising signing the token with a private key of the primary anchor module.
7. The method of claim 1 , wherein the token identifies a Synthetic Sensor (SS) for providing the insight.
8. The method of claim 1 , wherein the token indicates a time period during which the token is valid.
9. A network element comprising:
a processor;
a communications subsystem;
wherein the network element is configured to:
receive, from an application of a first domain in a vehicle, a first message, the first message comprising an information package signed with a private key of an anchor of the first domain, the information package comprising a name, version, package signature hash of the application, and a vehicle identifier of the vehicle
retrieve permissions for the application on the vehicle;
create a token for the application based on the permissions, the token identifying an insight the application may access;
send the token to the application.
10. The network element of claim 9 , further configured to authenticate the first message with a public key of the first domain.
11. The network element of claim 9 , wherein the first message comprises an application identifier for the application and is signed by an application signature of the application.
12. The network element of claim 9 , wherein the first message indicates a time period during which the first message is valid.
13. The network element of claim 9 , wherein the first message is received over an encrypted connection and the token is sent over the encrypted connection.
14. The network element of claim 9 , further configured to sign the token with a private key of the primary anchor module.
15. The network element of claim 9 , wherein the token identifies a Synthetic Sensor (SS) for providing the insight.
16. The network element of claim 9 , wherein the token indicates a time period during which the token is valid.
17. A non-transitory computer readable medium having stored thereon executable code for execution by a processor of a network element, the executable code comprising instructions for:
receiving, from an application of a first domain in a vehicle, a first message, the first message comprising an information package signed with a private key of an anchor of the first domain, the information package comprising a name, version, package signature hash of the application, and a vehicle identifier of the vehicle;
retrieving permissions for the application on the vehicle;
creating a token for the application based on the permissions, the token identifying an insight the application may access;
sending the token to the application.