Trust-based methodology for securing vehicle-to-vehicle communications
A vehicle-to-vehicle communications system that employs a challenge/response based process to ensure that information received from a vehicle is reliable. The subject vehicle transmits a challenge question to the suspect vehicle to determine whether the suspect vehicle is a reliable source of information. The process increases a number of tokens in a token bucket for the suspect vehicle if the response to the challenge question is correct, and decreases the number of tokens in the token bucket for the suspect vehicle if the response to the challenge question is incorrect. The subject vehicle accepts a message from the suspect vehicle if the number of tokens in the bucket for the suspect vehicle is greater than a predetermined upper threshold, and discards the message from the suspect vehicle if the number of tokens in the bucket for the suspect vehicle is less than a predetermined lower threshold.
1. A method for determining whether information received from a vehicle is reliable in a vehicle-to-vehicle communications system, said method comprising:
receiving a message from a suspect vehicle by a subject vehicle;
determining whether there is a memory bucket stored on the subject vehicle for the suspect vehicle;
creating a memory bucket for the suspect vehicle if a memory bucket for the suspect vehicle does not exist on the subject vehicle;
transmitting a challenge question from the subject vehicle to the suspect vehicle to determine whether the suspect vehicle is reliable;
increasing a number of tokens in the bucket for the suspect vehicle if the suspect vehicle responds to the challenge question with a correct answer;
decreasing the number of tokens in the token bucket for the suspect vehicle if the response to the challenge question is incorrect;
accepting the message from the suspect vehicle if a number of tokens in the bucket for the suspect vehicle is greater than a predetermined upper threshold; and
discarding the message from the suspect vehicle if the number of tokens in the bucket for the suspect vehicle is less than a predetermined lower threshold.
2. The method according to claim 1 further comprising accepting the message from the suspect vehicle with a predetermined probability if the number of tokens in the bucket is between the upper threshold and the lower threshold.
3. The method according to claim 1 wherein the probability is:
P
=
T
k
-
L
th
U
th
-
L
th
where P is the probability, T k is the number of tokens in the token bucket, L th is the lower threshold and U th is the upper threshold.
4. The method according to claim 1 further comprising determining whether a number of wrong answers previously received from the suspect vehicle is greater than a predetermined threshold, and if so, setting a number of challenge questions to be asked of the suspect vehicle to a first fraction of a predetermined number of questions.
5. The method according to claim 4 further comprising determining whether the number of tokens in the bucket for the suspect vehicle is greater than the upper threshold, and if so, setting the number of challenge questions to be asked of the suspect vehicle to a second fraction of the predetermined number of questions.
6. The method according to claim 5 further comprising determining whether the number of tokens in the bucket for the suspect vehicle is less than the lower threshold, and if so, setting the number of challenge questions to be asked of the suspect vehicle to a third fraction of the predetermined number of questions.
7. The method according to claim 6 further comprising setting the number of challenge questions to be asked of the suspect vehicle to the predetermined number of questions if the number of wrong answers previously received from the suspect vehicle is not greater than the predetermined threshold, the number of tokens in the bucket for the suspect vehicle is less than the upper threshold and the number of tokens in the bucket for the suspect vehicle is greater than the lower threshold.
8. The method according to claim 1 wherein decreasing the number of tokens in the token bucket includes decreasing the number of tokens by a fraction of the number of tokens in the bucket if the response to the challenge question is incorrect.
9. The method according to claim 1 wherein the challenge question is a location of the suspect vehicle.
10. The method according to claim 1 further comprising deleting the token bucket for a suspect vehicle if the subject vehicle has not received a message from the suspect vehicle for a predetermined period of time.
11. A method for determining whether information received from a vehicle is reliable in a vehicle-to-vehicle communications system, said method comprising:
receiving a message from a suspect vehicle by a subject vehicle;
determining whether there is a memory bucket stored on the subject vehicle for the suspect vehicle;
creating a memory bucket for the suspect vehicle if a memory bucket for the suspect vehicle does not exist on the subject vehicle;
transmitting a challenge question from the subject vehicle to the suspect vehicle to determine whether the suspect vehicle is reliable;
increasing a number of tokens in the bucket for the suspect vehicle if the suspect vehicle responds to the challenge question with a correct answer;
decreasing the number of tokens in the token bucket for the suspect vehicle if the response to the challenge question is incorrect;
accepting the message from the suspect vehicle if a number of tokens in the bucket for the suspect vehicle is greater than a predetermined upper threshold;
discarding the message from the suspect vehicle if the number of tokens in the bucket for the suspect vehicle is less than a predetermined lower threshold;
accepting the message from the suspect vehicle with a predetermined probability if the number of tokens in the bucket is between the upper threshold and the lower threshold; and
deleting the token bucket for a suspect vehicle if the subject vehicle has not received a message from the suspect vehicle or a predetermined period of time.
12. The method according to claim 11 wherein the probability is:
P
=
T
k
-
L
th
U
th
-
L
th
where P is the probability, T k is the number of tokens in the token bucket, L th is the lower threshold and U th is the upper threshold.
13. The method according to claim 11 further comprising determining whether a number of wrong answers previously received from the suspect vehicle is greater than a predetermined threshold, and if so, setting a number of challenge questions to be asked of the suspect vehicle to a first fraction of a predetermined number of questions.
14. The method according to claim 13 further comprising determining whether the number of tokens in the bucket for the suspect vehicle is greater than the upper threshold, and if so, setting the number of challenge questions to be asked of the suspect vehicle to a second fraction of the predetermined number of questions.
15. The method according to claim 14 further comprising determining whether the number of tokens in the bucket for the suspect vehicle is less than the lower threshold, and if so, setting the number of challenge questions to be asked of the suspect vehicle to a third fraction of the predetermined number of questions.
16. The method according to claim 15 further comprising setting the number of challenge questions to be asked of the suspect vehicle to the predetermined number of questions if the number of wrong answers previously received from the suspect vehicle is not greater than the predetermined threshold, the number of tokens in the bucket for the suspect vehicle is less than the upper threshold and the number of tokens in the bucket for the suspect vehicle is greater than the lower threshold.
17. The method according to claim 11 wherein decreasing the number of tokens in the token bucket includes decreasing the number of tokens by a fraction of the number of tokens in the bucket if the response to the challenge question is incorrect.
18. The method according to claim 11 wherein the challenge question is a location of the suspect vehicle.