Method and system for indirect sharing of sensor insights
A method at a first domain for obtaining at least one insight from a second domain, the method including synchronizing a permissions table at the first domain with a master permissions table at a network element; receiving a request for an insight from an application at a bridge in the first domain; confirming an identity of the application; verifying, at the bridge, application permissions using the permissions table at the first domain, the verifying confirming that the application has permission to access the insight; sending a request message from the first domain to the second domain, the request message being signed by a private key of the first domain and requesting the insight; and receiving the insight from the second domain.
1 . A method at a first domain for obtaining at least one insight from a second domain, the method comprising:
synchronizing a permissions table at the first domain with a master permissions table at a network element, the permissions table having an expiration time and comprising permissions for at least one application;
receiving a request for an insight from an application at a bridge in the first domain;
confirming an identity of the application;
verifying, at the bridge, application permissions using the permissions table at the first 1 domain and the identity of the application, the verifying confirming that the application has permission to access the insight;
signing a request message with a private key of the first domain, the request message requesting the insight from the second domain;
sending the request message from the first domain to the second domain by sending the request message to a gateway associated with a synthetic sensor on the second domain, the synthetic sensor providing the insight; and
receiving the insight from the second domain.
2 . The method of claim 1 , wherein a trust relationship exists between the bridge and the network element.
3 . The method of claim 2 , wherein the trust relationship is established based on a secure provisioning of the bridge.
4 . The method of claim 1 , wherein the first domain and second domain comprise rules when the first domain and the second domain are out of communication with the network domain and the permission table stored at the first domain has expired.
5 . The method of claim 1 , further comprising providing the insight to the application.
6 . The method of claim 1 , wherein the first domain and the second domain are domains within a vehicle.
7 . The method of claim 6 , wherein the first domain is an in-vehicle infotainment system within the vehicle.
8 . A computing device having a first domain for obtaining at least one insight from a second domain, the computing device comprising:
a processor; and
a communications subsystem,
wherein the computing device is configured to:
synchronize a permissions table at the first domain with a master permissions table at a network element, the permissions table having an expiration time and comprising permissions for at least one application;
receive a request for an insight from an application at a bridge in the first domain;
confirm an identity of the application;
verify, at the bridge, application permissions using the permissions table at the first domain and the identity of the application, the verifying confirming that the application has permission to access the insight;
sign a request message with a private key of the first domain, the request message requesting the insight from the second domain;
send the request message from the first domain to the second domain by sending the request message to a gateway associated with a synthetic sensor on the second domain, the synthetic sensor providing the insight; and
receive the insight from the second domain.
9 . The computing device of claim 8 , wherein a trust relationship exists between the bridge and the network element.
10 . The computing device of claim 9 , wherein the trust relationship is established based on a secure provisioning of the bridge.
11 . The computing device of claim 8 , wherein the first domain and second domain comprise rules when the first domain and the second domain are out of communication with the network domain and the at permission table stored at the first domain has expired.
12 . The computing device of claim 8 , further configured to provide the insight to the application.
13 . The computing device of claim 8 , wherein the first domain and the second domain are domains within a vehicle.
14 . The computing device of claim 13 , wherein the first domain is an in-vehicle infotainment system within the vehicle.
15 . A non-transitory computer readable medium for storing instruction code, which, when executed by a processor of computing device having a first domain for obtaining at least one insight from a second domain cause the computing device to:
synchronize a permissions table at the first domain with a master permissions table at a network element, the permissions table having an expiration time and comprising permissions for at least one application;
receive a request for an insight from an application at a bridge in the first domain;
confirm an identity of the application;
verify, at the bridge, application permissions using the permissions table at the first domain and the identity of the application, the verifying confirming that the application has permission to access the insight;
sign a request message with a private key of the first domain, the request message requesting the insight from the second domain;
send the request message from the first domain to the second domain by sending the request message to a gateway associated with a synthetic sensor on the second domain, the synthetic sensor providing the insight; and
receive the insight from the second domain.
16 . The non-transitory computer readable medium of claim 15 , wherein a trust relationship exists between the bridge and the network element.