Multi-context sensor security
Systems and techniques are provided for authenticating sensor data. For instance, a computing device can obtain a first line of data from a first sensor. The computing device can retrieve, from at least one memory, an intermediate hash associated with the first sensor. The computing device can determine a current intermediate hash based on sensor data in the first line of data. The computing device can store the current intermediate hash in the at least one memory for processing a second line of data associated with the first sensor.
1 . An apparatus for authenticating sensor data, comprising:
at least one memory; and at least one processor coupled to the at least one memory and configured to:
obtain a first line of data and a second line of data from a first sensor, wherein the first line of data and the second line of data are part of a set of lines;
determine a current intermediate hash based on sensor data in the first line of data;
store the current intermediate hash in the at least one memory for processing the second line of data associated with the first sensor;
determine the second line of data includes a message authentication code (MAC) value;
determine a calculated MAC based on the stored current intermediate hash and a portion of sensor data in the second line of data based on the determination that the second line of data includes the MAC value; and
compare the calculated MAC to the MAC value to authenticate the set of lines.
2 . The apparatus of claim 1 , wherein the at least one processor is further configured to:
retrieve, from the at least one memory, an intermediate hash associated with the first sensor, wherein the current intermediate hash is determined based on the retrieved intermediate hash.
3 . The apparatus of claim 1 , wherein each line of data includes a set of data blocks and wherein the current intermediate hash includes an intermediate hash value and data from a data block of a previous line of data.
4 . The apparatus of claim 1 , wherein a line of data from a second sensor is processed before processing the second line of data.
5 . The apparatus of claim 1 , wherein the at least one memory comprises at least one lookup table.
6 . The apparatus of claim 5 , wherein the at least one processor is further configured to:
associate a line of data with the first sensor based on virtual channel information in a header of the line of data; and store the current intermediate hash in the at least one lookup table based on the virtual channel information.
7 . The apparatus of claim 6 , wherein the at least one processor is further configured to:
store context data for a set of lines in the at least one lookup table based on the virtual channel information; and retrieve the stored context data and the current intermediate hash based on the virtual channel information.
8 . A method for authenticating sensor data, being implemented by at least one processor, comprising:
obtaining a first line of data and a second line of data from a first sensor, wherein the first line of data and the second line of data are part of a set of lines;
determining a current intermediate hash based on sensor data in the first line of data;
storing the current intermediate hash in at least one memory for processing the second line of data associated with the first sensor;
determining that the second line of data includes a message authentication code (MAC) value;
determining a calculated MAC based on the stored current intermediate hash and a portion of sensor data in the second line of data based on the determination that the second line of data includes the MAC value; and
comparing the calculated MAC to the MAC value to authenticate the set of lines.
9 . The method of claim 8 , further comprising:
retrieving, from the at least one memory, an intermediate hash associated with the first sensor, wherein the current intermediate hash is determined based on the retrieved intermediate hash.
10 . The method of claim 8 , wherein each line of data includes a set of data blocks and wherein the current intermediate hash includes an intermediate hash value and data from a data block of a previous line of data.
11 . The method of claim 8 , wherein a line of data from a second sensor is processed before processing the second line of data.
12 . The method of claim 8 , wherein the at least one memory includes at least one lookup table.
13 . The method of claim 12 , further comprising:
associating a line of data with the first sensor based on virtual channel information in a header of the line of data; and storing the current intermediate hash in the at least one lookup table based on the virtual channel information.
14 . The method of claim 13 , further comprising:
storing context data for a set of lines in the at least one lookup table based on the virtual channel information; and retrieving the stored context data and the current intermediate hash based on the virtual channel information.
15 . A non-transitory computer-readable medium having stored thereon instructions that, when executed by at least one processor, cause the at least one processor to:
obtain a first line of data and a second line of data from a first sensor, wherein the first line of data and the second line of data are part of a set of lines;
determine a current intermediate hash based on sensor data in the first line of data;
store the current intermediate hash in at least one memory for processing the second line of data associated with the first sensor;
determine the second line of data includes a message authentication code (MAC) value;
determine a calculated MAC based on the stored current intermediate hash and a portion of sensor data in the second line of data based on the determination that the second line of data includes the MAC value; and
compare the calculated MAC to the MAC value to authenticate the set of lines.
16 . The non-transitory computer-readable medium of claim 15 , wherein the instructions cause the at least one processor to:
retrieve, from the at least one memory, an intermediate hash associated with the first sensor, wherein the current intermediate hash is determined based on the retrieved intermediate hash.
17 . The non-transitory computer-readable medium of claim 15 , wherein each line of data includes a set of data blocks and wherein the current intermediate hash includes an intermediate hash value and data from a data block of a previous line of data.
18 . The non-transitory computer-readable medium of claim 15 , wherein a line of data from a second sensor is processed before processing the second line of data.
19 . The non-transitory computer-readable medium of claim 15 , wherein the at least one memory includes at least one lookup table.
20 . The non-transitory computer-readable medium of claim 19 , wherein the instructions cause the at least one processor to: associate a line of data with the first sensor based on virtual channel information in a header of the line of data; and store the current intermediate hash in the at least one lookup table based on the virtual channel information.