[go: up one dir, main page]

GB2627228A - AEVIS automated cyber security computer - Google Patents

AEVIS automated cyber security computer Download PDF

Info

Publication number
GB2627228A
GB2627228A GB2302172.8A GB202302172A GB2627228A GB 2627228 A GB2627228 A GB 2627228A GB 202302172 A GB202302172 A GB 202302172A GB 2627228 A GB2627228 A GB 2627228A
Authority
GB
United Kingdom
Prior art keywords
vehicle
vehicles
network
car
blockchain
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
GB2302172.8A
Other versions
GB202302172D0 (en
Inventor
Cabrera Fernandez Florencio
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Quantum Light Ltd
Original Assignee
Quantum Light Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Quantum Light Ltd filed Critical Quantum Light Ltd
Priority to GB2302172.8A priority Critical patent/GB2627228A/en
Publication of GB202302172D0 publication Critical patent/GB202302172D0/en
Publication of GB2627228A publication Critical patent/GB2627228A/en
Withdrawn legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
    • H04L9/3239Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/64Protecting data integrity, e.g. using checksums, certificates or signatures
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C5/00Registering or indicating the working of vehicles
    • G07C5/08Registering or indicating performance data other than driving, working, idle, or waiting time, with or without registering driving, working, idle or waiting time
    • G07C5/0841Registering performance data
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/50Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/84Vehicles

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Bioethics (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Health & Medical Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

A retrofit hardened and tamper-proof vehicle computer device is designed to be installed in different possible internal locations of any type of vehicle, in order to provide cyber security protection in the form of an intelligent and active firewall for protecting and authenticating all wireless communications to and from any type of vehicle, by means of specialised electronic circuits. This device provides secure upload for vehicular software updates and critical vehicle firmware for any type of existing vehicle. A new type of vehicular retrofit computer is purposefully designed to prevent any tampering with the internal CAN (Computer Area Network) of the vehicle by any wireless and remote means. The device is a retrofit car computer comparable to a hardened firewall for all wireless communications to and from existing connected vehicles. A custom ASIC architecture implements different possible security embodiments meant to deliver the most secure firmware and critical software uploads to vehicles. The hardware may be available for installation in the after-market for compatible retrofit to vehicles including cars, trucks, coaches, lorries, military vehicles, tanks and to any other type of electric, self-driving, automated, construction vehicles, aircraft, ships, motorcycles, and any other type of vehicular equipment.

Description

Automated Electronic Vehicle Information System -A.E.V.I.S. Description [001] A.E.V.I.S. or "Automated Electronic Vehicle Information System" is a retrofit device designed for installation in all types of vehicles with the goal of securing vehicle wireless communications with any existing or future network of "Connected Autonomous Vehicles." We believe that in global industry terms, the automotive computer and communications industries are in a state of convergence in terms of their architecture for the Internet-of-cars, however the problem of securing wireless communications to connected cars is widespread.
This invention relates generally to the field of wireless cyber security retrofit electronics for protecting the computerized systems for automobiles and other vehicles; and more particularly, for protecting infrastructure-to-vehicle communications, as well as preventing unauthorized remote access to vehicle CAN electronics. This invention is designed to solve the very complex problem posited by the fact there are over 10 million vehicles on UK roads, most of which if connected wirelessly, are probably NOT able to download and install secure software updates, compliant with the 2018 Automated and Electric Vehicle Act of Parliament, which requires cars with any level of software automation, to be able to download in a secure manner a software and firmware update.
An Accident resulting from unauthorized software alterations or failure to update software An insurance policy in respect of an automated vehicle may exclude or limit the insurer's liability under section 2(1) for damage suffered by an insured person arising from an accident occurring as a direct result of-Software alterations made by the insured person, or with the insured person's knowledge, that are prohibited under the policy, or A failure to install safety-critical software updates that the insured person knows, or ought reasonably to know, are safety-critical.
But as regards liability for damage suffered by an insured person who is not the holder of the policy, subsection (1)(a) applies only in relation to software alterations which, at the time of the accident, the person knows are prohibited under the policy.
CO
This problem of insecure car electronics and open "Controller Area Network" systems in existing cars, will not be solved by advances in car manufacturing, which may indeed incorporate these kinds of firmware update solutions sometime in the future, but will not be able to address the existing shortcomings CO of cars today. Therefore, my goal as Inventor is to provide a simple yet powerful retrofittable solution that may be installed in a tamper-proof manner to up to millions of cars in the United Kingdom through advanced communications and tamper-proof hardware, allow for compliance with the laws: 1 httosii ion:.go ukiukr al2018/13isecUonMieno.cied Subsection (4) applies where an amount is paid by an insurer under section 2(1) in respect of damage suffered, as a result of an accident, by someone who is not insured under the policy in question.
(4) If the accident occurred as a direct result of- (a)software alterations made by an insured person, or with an insured person's knowledge, that were prohibited under the policy, or (b)a failure to install safety-critical software updates that an insured person knew, or ought reasonably to have known, were safety-critical, the amount paid by the insurer is recoverable from that person to the extent provide for by the policy.
But as regards recovery from an insured person who is not the holder of the policy, subsection (4)(a) applies only in relation to software alterations which, at the time of the accident, the person knew were prohibited under the policy.
For the purposes of this section-Software alterations" and "software updates", in relation to an automated vehicle, mean (respectively) alterations and updates to the vehicle's software; Software updates are "safety-critical" if it would be unsafe to use the vehicle in question without the updates being installed. Cr)
[2] In today's world of vehicle manufacturing, intense competition is driving technology and rapid product innovation in search for a more fully integrated vehicle. Most modern-day cars incorporate an electronic control unit that manages a network of sensors and electronic engine systems, all integrated to provide engine and vehicle control, manage sensor information and provide CO feedback to specialized users.
[3] It is increasingly evident that automobiles are becoming more integrated as "personal networked objects" with the Internet. This need has created an opportunity to invent a new automotive electronic blockchain information device, with the goal to incorporate advances of blockchain distributed ledger technology to vehicle manufacturing and after-market value chains. The car manufacturing industry is converging with the information network, creating new risks, challenges and problems that must be solved by inventions that leverage benefits offered by diverse blockchain software protocols. At the moment, once could say that the blockchain distributed ledger technology, which was originally created by the bitcoin crypto currency revolution, has now expanded beyond the realm of financial technology to the "Internet of Cars." [4] This invention leverages advances in electronics and information management by means of digital encrypted ledgers, which authenticate transactions, records and may also incorporate vehicle performance, service, maintenance, repairs; ownership records, financing, insurance, as well as increasingly important vehicle regulatory data. An electronic logic control and communications unit is to be integrated within a hardened heavy-duty enclosure for custom installation in all types of vehicles, via open standard auto industry interface protocols with all vehicles or with analog vehicles in an alternative stand alone, completely retrofit, independent system integration.
The AEVIS vehicular universal computer is an end-to-end system for "Connected Autonomous Vehicle" -i.e. CAV car-to-car and car-toinfrastructure applications: 1. High Performance Computer & Storage Unit 2. Optical Communications Security Module 3. Integrated Blockchain Operating System 4. Vehicular Delay Tolerant Mesh Network 5. Artificial Intelligence On-Board Machine AEVIS is prototyped and designed with embedded circuit boards for a POC using an FPGA modular roadmap towards an application-specific integrated circuit and software architecture. Our model is to provide every vehicle owner with a revenue generating, secure "car computing" platform. A tamper-proof retrofit vehicular "super-data-box" for distributed ledger protocols, secured by optical and digital firewalls for mesh networking. Our AEVIS retrofit secure vehicular computer is to become a revenue platform for our users.
[005] There are significant problems for security presented by hacking threats, which have been successful tested in academia and government, against "smart objects" belonging to the "Internet of Things" (loT) and also pose a significant risk for autonomous vehicles and the "Internet of Cars" (loC).
CO [006] As the car industry moves increasingly towards self-driving artificial intelligence vehicles, it becomes ever more critical to invent new solutions that offer robust network security from hacking intruders. This problem presents a significant risk for users and also for car manufacturers, as the costs of insurance coverage reflect implicit security risks in today's digital economy. The dangers posited by rogue self-driving vehicles are evident. We disclose a hardware and software electronic control device capable of providing an enhanced level of encrypted communications with cars, as well as provide authentication of valuable original car records in the aftermarket.
[7] The incorporation of encrypted distributed ledger technology is directly into the circuit logic design of the "Application Specific Integrated Circuit" (ASIC) disclosed herein as part of the preferred embodiment of this system. AEVIS resolves several key problems with security and reliability of new cars and old, by compatible retrofit of this "plug-and-play" user friendly blockchain distributed ledger application for the car manufacturing industry. And most importantly, designed with the car owner in mind.
[8] One of the problems is that most cars were not originally manufactured thinking about the rapidly evolving internet connectivity with "things" and especially with other wireless smart devices. Cars have evolved and do incorporate increasingly sophisticated communications with computer systems.
[9] Therefore, there is today a critical need for car security protocols, mostly because automated electronics developed gradually up to the point where the engine and electronic systems of modern cars are now controlled by a computerized system which could make them easily accessible to hackers and others seeking to do us harm.
[010] Despite significant advances in automotive electronic control systems and network communication protocols, overall the car network continues to provides an obscure interface to most owners and users. The ECU diagnostic port and OBD code system is mostly only for mechanics and specialized diagnostic professionals, in order to troubleshoot and communicate with the car's Electronic Control Unit or ECU.
Inventive Steps As an inventive step and a clear improvement over existing technologies and in clear contrast with the body of prior art in the field of automotive electronic control methods and other types of retrofit devices, our Invention is specifically designed for cyber security protection of the wireless communications to and from the vehicle and is designed to PREVENT remote control of ANY of the normal functions found in typical Controller Area Networks (CAN) of vehicles.
Most of the body of US and WO patents and applications which this Inventor has searched and reviewed, have to do with specifications on how to introduce controls into the mechanisms and operations of the vehicles themselves, and therefore it was not obvious to those skilled in the art, the imperative and dire need to introduce a new class of cybersecurity devices, capable of delivery of the kinds of compliance with UK Law as those that are now required by the CO 2018 Automated and Electronic Vehicle Act2. In specific, those skilled in the prior art, could not foresee the need for secure download and upload for automated vehicle firmware by wireless means. Such requirements are sorely missing from most of the 10 million vehicles that are on UK roads today and therefore, are in fact in violation of UK laws in terms of the insecure and CO sometimes impossibility to complete such critical software uploads.
Selected US and WO Patent Citations of Improvements For example, one may consider the types of prior art patents granted in the United States like US 10,167,015 B2 Rust et a13. for a "System for Retrofitting Vehicle Automation." This patent is characteristic of most of the prior patents researched by this Inventor and it shows that most of the prior efforts have been focused on introducing retrofit direct controls into the actual operations of the vehicle. For example, in this case, which introduces a vehicular computer with the purpose of controlling vehicle breaking and vehicle acceleration. Two mission critical functions that may actually place in danger the very life of the vehicle occupant if for some reason this type of retro fit device where to malfunction. In contrast, our disclosure teaches those skilled in the vehicular control art, that it is NOT desirable to introduce ANY controls that may directly impact the operations of breaking or acceleration in any type of vehicle.
i '0 I 3 https ecT,c 27cyn tpubl In addition, we can reference the body of prior art that is cited by Rust et al and continue to confirm that it was not obvious to those skilled in the art of vehicular retrofit computer control, the need to design and invent a new type of vehicular computer that is solely responsible for wireless cybersecurity and communications to and from the vehicle. As well as capable of deriving surplus energy in order to complete heavy computational duties for commercial uses.
Among other prior art patent citations, we have reviewed: US 6,820,715 B by Laurent -which is a retrofit type of device designed for assisted steering of the vehicle, which operates without any mechanical linkages between the steering wheel and is referred to as "electrical steering." US 7,364,482 B1 by Wong -it is also related to hydraulic steering systems and in particular to multiple hydraulic systems. This patent is more directly related to watercraft as boats and is not considered as useful for terrestrial vehicles.
US 7,497,528 by Reuter -again this type of patent was issued for disclosure of a retro-fit device designed to introduce a "break-by-wire" system and more specifically for control of electrical and hybrid types of vehicles. This disclosure is again intended to introduce direct controls into the vehicular CAN network and it is not evident to those experts in the art the need for remaining carefully CO outside of direct braking or acceleration control of the vehicle.
US 7,894,951 B2 by Norris et al -"Systems and Methods for Switching between Autonomous and Manual Operation of a Vehicle" -this type of prior art discloses a mechanical control system that can receive manual inputs from CO a mechanical operation by the driver of the vehicle. It also provides for electronic control of the retrofit system for automated "actuator control" in order to introduce into the vehicular CAN control over steering, braking, throttle and transmission. All of which are NOT desirable from the security perspective.
[011] Vehicle owners along with vehicle manufacturers need to have a much better interface with the vehicle network and electronics, however a large proportion of the current vehicle fleet is dated and does not have ECU components. Newer models with ECU electronics are easier to retrofit with new applications, but for the most part vehicles are largely "insulated" or "disconnected" from the global computer network.
This "car information opacity" presents significant problems. An insulated and opaque car (in terms of real-time or current information) creates risk for its owner and for the different vehicle industry stakeholders, including insurers and regulators. Therefore, despite the technological marvels offered by connected cars today (like driving a collection of small computers on wheels) we are still not safe in terms of Cybersecurity since each one element of this automotive "Controller Area Network" does not have encryption and no way to update Al firmware wirelessly under secure authentication. There are no software "patches" possible to a hardware problem.
The automotive industry has NO shared security standards for different automotive vendors of electronic parts. Since each new part has no built-in credible Cybersecurity... once connected to the Internet, cars could become a hacking target. (2) Hacking attacks on a "Connected Car" pose a significant risk due to the fact the car's "Controller Area Network" manages in-car messages from different mission critical car systems, which many times may be life-critical to the driver and to the safety of other cars in proximity to the vehicle. The most vulnerable "attack vectors" are of course the user credentials & smartphone devices, which are also prone to hacking security keys and it's best not to mention other attack vectors that pose significant "fleet" risk.
AEVIS is designed as a heavy-duty car computer device to be installed in the boot of most cars in order to provide computation and perfectly secure connectivity via different standard and digital radios, in addition to having Optical Security capabilities. There is a large amount of surplus energy generated by the internal combustion engine of all types of vehicles and AEVIS is a secure computing platform and network that is able to monetize that surplus energy by transforming it to computation.
Therefore, despite the technological marvels offered by connected cars today (like driving a collection of small computers on wheels) we are still not safe in terms of Cybersecurity since each one element of this automotive "Controller CO Area Network" does not have encryption and no way to update Al firmware wirelessly under secure authentication. There are no software "patches" possible to a hardware problem.
The automotive industry has NO shared security standards for different CO automotive vendors of electronic parts. Since each new part has no built-in credible Cybersecurity... once connected to the Internet, cars could become a hacking target. (2) Hacking attacks on a "Connected Car" pose a significant risk due to the fact the car's "Controller Area Network" manages in-car messages from different mission critical car systems, which many times may be life-critical to the driver and to the safety of other cars in proximity to the vehicle. The most vulnerable "attack vectors" are of course the user credentials & smartphone devices, which are also prone to hacking security keys and it's best not to mention other attack vectors that pose significant "fleet" risk.
[012] The gradual incorporation of communication network devices and the advent of the "Controlled Automobile Network" (CAN) protocols have enabled an increasingly easier access to vehicle on-board networks, unfortunately it has made access easier also for hackers. By installing the AEVIS unit to vehicles, a new level of value is possible for car manufacturers who are increasingly incorporating a multi-level service offering, bundled around the car in what is being referred to as "digital car" sales.
[13] Despite the preceding view, the fact is cars are isolated "information islands," vulnerable to tampering, to misrepresentation of hidden faults and results in devaluation of their long-term investment value which is critical in the classic car aftermarket. An important market segment for certain multinational car manufacturers, who depend on their vehicles holding investment value and derive from such market's prestige, brand recognition and most importantly, car manufacturers derive customer loyalty.
[14] Once installed, this electronic vehicular system will enable vehicle manufacturers to more closely integrate sales, leasing, finance and insurance, maintenance, parts service, repairs and aftermarket sales into a seamless and flexible digital product offering which is designed to enhance and protect the value of cars so as to drive sales. At the same time, this invention provides a new level of security for cars from hacking threats, while providing a higher level of assurance to owners and buyers of high-value car brands.
[15] There are also significant problems in the automobile aftermarket due to the lack of complete service records and documentation about original replacement parts which many times are replaced with lower-quality parts and used without knowledge of the car owner, affecting the overall performance of the car and creating unknown hazards which may become more significant with the advent of self-driving cars. In the future, it will not be possible to allow self-driving cars on the roads without a system for certification of the roadworthiness and reliability of such autonomous systems. Therefore, the need for incorporation of the blockchain ledger technology to vehicle manufacturing is becoming increasingly necessary, in order to resolve the issues of safety and system integrity for the future of Al autonomous vehicles.
[16] The incorporation of retrofit technology to the automobile OEM ecosystem would enable robust digital identity and tracking, which would become easily visible to car owners and fleet managers. Suppliers in the value chain of the car would be incorporated into the blockchain system and would establish the trust and identity of all participants in the final product.
[17] Implementation of the AEVIS device would enable collection of significant production, cost and usage information which could help streamline and upgrade the OEM supply chain and provide insightful intelligence to automobile engineers and parts designers from real world data that would be collected at different points during the life of the car.
[18] There are a number of stakeholders in a modern automobile in today's world. Including the vehicle manufacturer, the entire OEM supply and parts chain (who are interested to know real-time part failure rates to improve future design) and including other less obvious ones like vehicle regulators, insurance providers and in many cases, original vehicle financing or leasing stakeholders as well.
[019] Commercial application of this invention would become an essential component of the vehicle's maintenance and service records and would lead to transparent aftermarket sale transactions, in which the buyer would be completely assured of the status, operability, quality and reliability of all the components which are part of the vehicle.
[020] Even if vehicle manufacturers were to implement blockchain ledger information management systems in their supply-chain protocols, there is still the problem related to the availability of a certifiable and true record of car components which were incorporated into the manufacturing of any car. Today as things stand, there are very limited communications between the manufacturer's OEM original part database and the car computer system once it leaves the plant.
CO
[23] For car manufacturers, it would be a valuable contribution to design an automated electronics component capable of communications with vehicle manufacturers and OEM part enterprises, so as to enhance the safety, reliability and performance records for cars. In such a scenario, cars would be CO equipped or retro-fitted with the invention disclosed by this application, in order to enable secure communications with the car, maintain and update all car part records, as well as provide updated information about car performance, service and repairs.
[24] All vehicle records maintained under blockchain encryption protocols and designed to provide a higher level of value to the car owner, as the complete life of the vehicle would be recorded and available as a digital certificate at the time of sale or purchase in the secondary car market. In the case of high value automobiles, this would be an important "value-enhancer" for collectors and investors. The case of older models brings into focus the problem related to all cars manufactured before the advent of modern-day Electronic Control Unit systems onboard vehicles. Most cars manufactured before 1986 do not have electronic control systems and therefore, present an important challenge for integrating into the proposed modern-day networked card blockchain systems.
[25] However, it is the spirit of this innovation, to provide a hardware/software component that may also be installed and retrofitted to older models and classic cars, so as to provide a suite of value enhancers to the value of such cars. In this application, the possibility of integrating this automated electronic blockchain system into older model cars is also disclosed in the preferred embodiments.
[021] Throughout its life, the car may undergo different modifications due to part failure, tear and wear and other road conditions and accidents which offer no feedback of actual performance information to the manufacturer, who could use such information for improving design life and materials of parts that show high levels of failure in the real world. It also makes it difficult for vehicle owners to respond in a timely and reliable manner to part recalls or safety advisories, as everyone's car is today an "information island" which very rarely is in communication with the OEM "ecosystem" that needs to know such data.
[26] It is the spirit of this invention to create an electronic component that is able to connect the car to a blockchain car information management system, which will open the doors to a number of valuable applications for the owner of the car. For example, in the field of car maintenance, the system would be able to predict certain part failures before they actually happen, by monitoring certain car performance records which would be provided to the system by collecting information from the ECU (electronic control unit) of modern vehicles. An embodiment of this application for models manufactured after 2002 incorporates necessary ECU car electronics. Thus for new vehicles, the interface between the ECU and the disclosed invention would be seamless.
Introduction to the Drawings
A secure "universal car computer" could be easily retrofit into any type of car and transform it into a secure Connected Car. AEVIS introduces a new UK patent pending series of innovations in the field of "connected car communications" as well as proposes development and incorporation into roadside infrastructure, of our Quantum Optic-Secure® Security Layer.
Our universal car computer POC prototype, models an application-specific integrated circuit encryption and processing system architecture for blockchain "Internet of Cars" operations by retrofit of a Universal Car Computer in every CO type of vehicle. Each Unit is configured for encrypted communications within a blockchain network, and providing a new second factor Optical Security layer and SHA encryption firewalls for normal digital and wireless communications.
The first layer LM1 comprises the software application and the AEVIS operating CO system, as well as the communications platform on-board the AEVIS device.
The goal is to achieve encrypted data-in-flight as well as at-rest so that the entire environment is always encrypted. The "Blockchain and Data Storage" layer is defined by on-board software operations of vehicular blockchain node, together with the required libraries; user and vehicle transaction information.
For secure storage this invention provides for a SSD high-capacity memory drive on-board. The most relevant and consequential operational layer for our proposed system is of course the Optical Security and Encryption Key operational layer. It is this component of our system that provides a high level of cyber security and which may become a central value proposition to our technology business model.
[27] Figure 1 is an illustration of one of the preferred embodiments of this invention, whereby all of the physical documents related to the historical records of a vehicle are scanned by an optical character recognition standard method, so as to enable the system and method disclosed herein to encrypt such records using SHA algorithms and then structuring the encrypted data in Merkle trees in the form used by blockchain distributed ledgers. The encrypted data is then stored in one of two alternative embodiments of the disclosure, one of which is for cars manufactured without an electronic control unit (ECU) and the other is designed specifically for universal interface with all types of ECU systems in more modern cars. By means of this system and method, the spirit of this innovation is implemented, which is to create an authentic historical record of all of the transactions, which have occurred for the vehicle in case. This form of vehicle blockchain is to incorporate everything from the manufacturing records, to the ownership sale original manufacturer transaction; to the financial or leasing transactions, the insurance coverage and policy in addition to regulatory vehicle compliance tax disc, roadworthiness test (MOT) and other relevant aftermarket data.
[028] Figure 2 illustrates a block-level diagram in which the architecture of this system is represented by boxes, which are related to the communications bus that this innovation discloses as part of the wider "In-Vehicle Network" (IVN) for all types of cars. In this embodiment, a client application server implements blockchain database information management software, which is customized for this application, but which can be programmed using practially any one of the existing blockchain protocols that are geared towards "smart-contracts" and most precisely, which are geared towards distributed ledger transactions in supply chain management.
It is adapted in order to incorporate serial communications protocols under the Controller Automobile Network (CAN) standard with data rates between 1Mbps at 40m in a differential circuit type under asynchronous communications.
CO [029] Figure 2 should be understood to mean IVN interface alternatively using FlexRay high-speed serial communications for in-vehicle networks in a time-triggered, event dual channel topology. This invention is specifically designed to perform as an open communications platform for In-vehicle communications, so that any number of different IVN operating systems may be uploaded to its CO SSD RAID solid-state storage module, and as a result this AEVIS application-specific integrated circuit and peripheral custom modules, may communicate and adapt to any existing or future IVN operating protocol.
[030] One of the preloaded operating systems onboard the disclosed preferred embodiment of the custom microcontroller device of this invention, is programmed to operate using the "On-Board Diagnostics" operating system in all of its 5 (five) current versions, from the original OBD to the now OBDI I that interface with the J1962 connector and such port adapters are provided by the embodiment disclosed further below. The supported signal protocols and connectors (using a bespoke universal adaptor) include: SAE J1850 PWM (Ford Motor Company) SAE J1850 (General Motors) ISO 9141-2 (Chrysler and Asian vehicles) ISO 14230 KWP2000 (keyword protocol); and specially designed with an upgradable 8 channel data port for ISO 15765 CAN IVN communications. In the case of this diagram, we disclose the addition of a new microcontroller bespoke module called the "AEVIS Data Blockchain" input/out serial communications port and it offers both Serial and Peripheral sub-channels with high-resolution provided by the ABS Controller new module, which is indeed disclosed in the Diagrams of the present automotive electronic blockchain information system. The proposed system architecture for the endto-end AEVIS vehicular network may be conceptualized by integration of three functional hardware/software layers: There is an immense reservoir of internal combustion engine energy that can be transformed into computational processing power, using a secure distributed mesh network of vehicles, fleets, lorries, transportation vehicles and buses. Each network of vehicles can be retrofit securely with AEVIS computers, which aggregate very quickly in terms of revenue if we were to sell to institutional big-data users the same 38.6 GB of data daily for one year, for a total aggregate processing of 13,896 GB at a cloud computing sale price of $2.52 per GB/Annual rate would cost $35,017.00 in Google Cloud.
Our AEVIS users could sell through our end-to-end platform this computational energy power. Big-data institutional users could sell through our secure blockchain system, processing time for say $1.50 per GB for a potential monetization of wasted internal combustion power of $5,790 for 100 vehicles or $57,900 on an annual basis for a fleet of 1,000 lorries.
1. Business Applications and Communications 2. Blockchain Data Management & Storage 3. Optical Security and Encryption Keys AEVIS car computers could participate in collective mesh networking computing for big-data institutional clients and users, in order to gather a very large volume of sensor data from the vehicular sensor network, or for CO processing units of computing data that could include hashing and certain types of crypto currency mining. We propose an "Energy Model of Computation" in which one views the capability and cost of cloud computer time as an essential need by large number of clients across every industry in the world today. The opportunity to deliver such computational platforms is a question of available CO low-cost power. When you analyze the energy content of internal combustion engines in all kinds of vehicles around the world, starting in our case with the UK, one learns there is a ratio of production of Gigabytes of computation in terms of kWh of power. For example, a lorry can produce upwards of 371 kWh per every 44.5 liters of petrol and considering internal combustion and vehicle system power for hauling a load 100 kilometers. There is a unique business opportunity to capitalize on the immense amount of surplus energy, that is wasted every day by over 600 million vehicles around the world. If we could capitalize the surplus energy of vehicular engines in order to power a powerful retrofit "Universal Car Computer" in every type of vehicle, we could create a new powerful distributed mesh processing network.
We propose in principle, the following three central system-feasibility questions (in economic and technical terms) so as to evaluate the financial and technological feasibility of the AEVIS system. One should realize that the essence of our innovation involves capturing an immense reservoir of surplus energy (currently wasted and paid-for-energy) in vehicle fuel cost. Our AEVIS system proposes a distributed network of vehicular computers in order to leverage and ruse the surplus electrical energy generated by internal combustion engines, and now to be used in a secure and tamper-proof way, in order to provide a new computation processing platform by vehicle owners and fleet operators, in order to retrofit an AEVIS secure universal vehicular computer.
[31] Figure 3 is one of the preferred embodiments of this invention in the application for vehicle real-time maintenance, service, fault prevention, fault management, roadside assistance and other upgrades and modifications made to the vehicle during its operating lifetime. It is the spirit and vision of this disclosure to provide to the automobile manufacturing industry a new encrypted and tamper-proof device, capable of safely interfacing with the ECU by means of the standard communication protocols for CAN and IVN, so as to enable the diagnostic port to provide to the AEVIS microcontroller device, real-time fault code OBD information and performance metrics for any or all selected information channels from the ECU, as enabled by owner rights and made safe through the operating system of this device, which implements a blockchain encrypted key rights management system for protection of the ECU and of the overall vehicle's VIN.
[32] This application is available for cars manufactured with ECU electronics, but may also be retrofitted to older models by means of custom installation of a network of sensors in the vehicle, which may operate wirelessly by detecting hall effect orthogonal magnetic fields around the vehicles electrical cabling system; and may detect temperature and pressure using the same means, in addition to using photo-resistors and sensor photo-transistors to monitor increasingly exact engine telemetry, as no doubt the high performance formula CO one racing technology has created a great number of telemetry applications which other developers may incorporate into the microcontroller encrypted platform provided herein.
[33] It is the spirit of this invention to provide new electronic hardware to be CO retrofitted in the vehicle aftermarket, without interfering with any of the existing car systems; but which may replicate to a high degree of similarity. The same functions for monitoring certain car performance metrics like mileage, fuel management, electrical system integrity and other customized functions which will create the opportunity for future entrepreneurs to develop new applications to leverage the powerful signal processing capabilities of the application-specific integrated circuit disclosed herein; which uniquely incorporates electronically, a blockchain data structure that is then encrypted by a mathematical co-processor unit that is also provided herein.
[34] Figure 4 we believe that this diagram is one of the first graphical representations of a distributed ledger, encrypted blockchain application which does not involve cryptocurrency nor payments in any form, other than in the sense of creating a new market between vehicle owners and authorized service garages, manufacturer OEM parts providers and other specialized technical car mechanics and engineers, to participate in a truly distributed blockchain node network community, in which cars are authorized by their owners to operate the AEVIS device disclosed herein, on a real-time monitoring basis of their ECU (or custom installed pre-ECU versions of AEVIS) so that OBD and OBDII diagnostic codes are monitored for certain critical fault statistics in order to prevent actual part failures and also to provide assistance to the vehicle owner in service, maintenance and repair of their vehicles.
[035] Figure 4 is probably one of the first automotive industry post-crypto currency implementations of the blockchain protocols initially proposed by Satoshi Nakamoto (probably meaning "foundation" in Japanese) and which of course are all open source. In this sense, this patent application incorporates a new hardware element for the automotive electronics industry and does provide a clear improvement over this open source art, in the sense that a new generation of "smart autonomous" automobiles is currently under research and development, and this is one of the key components for integration of the valuable "distributed ledger" decentralized management of large-scale volume (Big Data) of Al new vehicles. This figure conveys the fact that vehicle data is held securely in encrypted digital records that are stored on-board a tamperproof solid-state vehicle network node and as such, prevents the monopoly over critical system vehicle data.
CO
[36] Figure 5 is a software architecture flowchart diagram for illustrating the workflow for the operating system of the client application and the hardware device operating system within the spirit and scope of the embodiments disclosed by this application. In this diagram we start with the physical and CO digital records and manufacturing information specific to the vehicle at hand. It also incorporates all aftermarket buy and sale transactions as part of the vehicle's history and sets forth the high-level view of validation of such original set of documents by the procedure outlined in the decision box in the third step of the flowchart, by which one of the first applications of the blockchain protocol known as "Ethereum" (any other blockchain application software may also be operated by our device) may be prototyped in delivery of a consensual verification of the said vehicle information.
[37] To the best of our knowledge, Figure 6 is one of the first applications of the crypto currency Merkle-tree distributed blockchain ledger open source technology in the automotive supply chain industry, in which a custom microcontroller ASIC is provided to include an encryption maths co-processor and an orthogonal frequency division multiplexer module (OFDM) in order to resolve the critical mission of tamper-proof analog-to-digital (ADC) system integration need for of each vehicle to be authentically recorded onto the universal OEM blockchain for that vehicle's supply chain. We believe that this diagram in itself provides an important disclosure to expert automobile manufacturing industry engineers, who may be working on developing new applications around what the industry refers as the "digital car product offering." This in itself is an important innovation as it solves the vehicle "big data" problem posited by the concentration risk of too much information in a single location. Instead, each vehicle or "smart thing" becomes its own safe keeper of its historical records, which are of course replicated in encrypted form and distributed to other members of this private and secure network, or members of the public component of say vehicle regulatory and compliance networks, which are also allowed to transact copies of the same vehicle encrypted ledger, for the purposes of validating its data.
The vehicle original manufacturer, the OEM supply chain members of this network and other stakeholders like insurance, finance and regulatory bodies would also have to hash the custom blocks provided by the "smart-contract" open source applications of the blockchain that are available today, as this hardware platform is designed to easily upload any distributed ledger postcrypto-currency vehicle information network.
[38] This diagram 6 incorporates distributed ledger flowcharts in three parallel analog and digital space and time dimensions, of which the first one is the physical records and physical parts and vehicle operating components which are indeed analog and represent in our view what we call the "Internet of Cars" (loC) and that in of itself is a challenge to integrate with the second dimension, which is the digital data dimension of the encrypted world of data blocks which follow one another like the so many times referred expression "blockchain" (hereafter interchangeably referred to as distributed ledger, or digital ledger) and meaning the sequential, time stamped, user party and counter-party validated "transaction" that uses double-entry "digital accounting" records in order to make sure that everyone who has a copy of that encrypted ledger, agrees that this vehicle and the records in that "transaction chain" are authentic and therefore, since the principal stakeholders in that specific vehicle all would then agree on the authenticity and non-tampering with that ledger, that this would create a high level of trust, investment value and operational CO performance for that vehicle and for that owner.
[39] Figure 7 is a flowchart illustrating the workflow of the preferred software architecture for the client server application and for the In-Vehicle Network microcontroller application-specific integrated circuit and peripheral encryption CO and storage solid state hardware, which together enable for the first time, encrypted communications with the vehicle, effectively transforming it from the analog domain into a digital real-time domain by incorporation of telemetric and documental transactions.
[40] Figure 7 illustrates that an AEVIS client sub-process is available for incorporating an alternative version of an embodiment disclosed of a hardware component, so as to enable retrofit into pre-ECU vehicles and yet also provide an equally functional "blockchain network node" which is the electronic ledger chain of transactions that are all related to then entire OEM part and component history of the car; as well as the records on maintenance, service, repairs and all other transactions in the aftermarket, including recording each sale and purchase change of ownership and ensuing regulatory, tax and roadworthiness compliance transactions. At the end of each completed cycle of this workflow process, the blockchain network would have authenticated all vehicle transactions and a certificate of authenticity would be issued for the car in an encrypted secure transaction that would also be registered in the ledger.
[41] Figure 8 is a diagram illustrating one of the preferred embodiments for the herein disclosed AEVIS automotive electronic blockchain information system, in which there are two critical and essential components of this distributed network vehicle application. One is the client server application workflow logic and the other is the In-Vehicle blockchain network node.
This is in of itself an important innovation, as the prior art CAN (Controller Automobile Network) in-vehicle electronic communications systems, did not attempt to provide a customized application-specific integrated circuit, so as to transform the analog or physical dimension of the car itself and its operating real-time performance, into a robustly encrypted network node for distributed ledger applications.
[42] Figure 9 is a general illustration of the preferred embodiment for installation of the AEVIS digital ledger car controller in many types of automobiles and any other kind of vessel or even aircraft, ships of all sorts and equipment; including of course, military equipment and communications equipment. As it is disclaimed in the preamble to the detailed description of the drawings below, it is the spirit and scope of this innovation to provide a universal In-Vehicle blockchain node controller for encrypted communications.
[43] Figure 10 is a block diagram of an application-specific integrated circuit which is designed to provide a new math co-processor unit that is integrated with an orthogonal frequency division multiplexer and a custom CPU integration module, which together provide a new level of system-on-a-chip for In-Vehicle Network IVN "firewall" security and for customized processing of vehicle records under blockchain network node mode.
CO [044] An "automotive electronic control unit" is constructed using custom CV hardware and control software circuit boards, together encased within a heavy-duty "black box" designed for autonomous user interfacing of all types of C\I vehicles with smart phones and with different kinds of servers, operating with CD an open architecture software platform for development of further applications.
CO An automotive CAN industry standard electronics communications interface is provided for ECU and vehicle information management.
T
[45] We disclose an electronic automobile device unit for communicating information to a specialized blockchain vehicle management server, which may also be connected to other database networks related to the same vehicle, for example insurance records, vehicle regulatory compliance records and financing records in that case. Such interconnected server network would be managed under the blockchain protocol in order to guarantee privacy and information security for the vehicle's data and would enable delivery of a new level of service and bespoke attention to that vehicle, as a new value offering.
[46] The device constructed by the disclosures in this application, may be integrated into a "Trust Certification" communications protocol with any number of blockchain operating environments depending on the type of application that may be custom to each case for embodiments of the present invention.
Our POC system proposes to build a new vehicular universal computer system architecture, designed in order to capture an enormous amount of wasted combusting engine power that we could harness and transform into a secure distributed mesh computing network, where there is actually a negative cost for energy vehicle operators have already paid for the petrol/diesel in their vehicles.
This technology coupled with the AEVIS universal vehicle computer, means that we could broadcast a very large volume of data to a vehicular fleet by one of the least expensive and fastest means possible today. Say that we were to equip the warehouse facilities where a fleet of lorries loads their cargo, with optical wireless broadcasting units. The lorries could be uploading data blocks for commercial processing at a rate of over 1,000 Mbps or better if we use Laser link fast optical wireless. At the other end, upon arrival at their destination warehouse, these lorries likewise could download their processed blocks by using our UK patent pending vehicular optical download high speed link, or by direct wired secure connection with the service server.
Our POC prototypes, our FPGA design and our ASIC roadmap provide for an application-specific integrated circuit enables a disruptive new strategy for fast decryption of secure optical signals and fast localized processing for blockchain "Internet of Cars" operations, integrated into a tamper-proof carbon-fiber hardened case. AEVIS is a high-performance computer powered from the vehicles electrical system and transforming wasted "paid-for" energy into new computational power.
[47] It is the purpose and spirit of the preferred embodiment of this invention to disclose a system by which each car's complete family of documentary paper and electronic records are scanned, digitized, sorted and recorded under a CO specialized SQL database software application which resides on-board memory RAM circuitry of the present invention and is encrypted and stored in a solid-state on-board memory module.
[48] The incorporation of vehicle information in a distributed blockchain CO database may include any number of original records for: (i) vehicle manufacturing and supply chain OEM database, parts, vehicle performance and other relevant car history records; (ii) vehicle ownership, including chain of title (also by virtue of the blockchain protocol) transaction records as of the original dealer sale and all subsequent sale/purchase transactions, along with the main vehicle operating parameters for each transaction such as mileage, tear and wear and overall operational worthiness; (iii) insurance and financing records related to the car (which would enable real-time risk monitoring and accident report forensic analysis for insurance companies, in a way that could change the credit risk profile for a large number of vehicles); and (iv) regulatory and national authority licensing and road legal compliance and taxation.
[49] Although automobiles in the prior art may provide one or two services to the driver, e.g. driver assistance via automatic telephone communications, the equipment for providing these services are dedicated to their respective services and cannot provide distinctly different services. The present system, on the other hand, allows new components or new software to be added to the automobile sub-network and thereby enables services be provided to the driver.
[50] The architecture of the present invention is designed to enable different blockchain software platforms and communication protocols to operate efficiently with this device.
The hardware circuit design provides for standard communications with the vehicle electronics based on industry protocols, as well as will provide programmable access to application developers in order to create new software product offerings for the device. In the form of the preferred embodiment, we disclose an invention which is designed for implementation of a vehicle blockchain distributed-ledger information management system. We disclose a hardware circuit driven by on-board control software which may be retrofitted in all kinds of vehicles or vessels of different types.
[51] The design principles incorporate the following technology value model: (i) Universally Compatible Hardware: integrated circuit logic design for a fully compatible heavy-duty automotive electronic component which may be installed in older car models or installed in newer vehicles equipped with ECU computerized car systems; (H) Open Architecture Development Environment: complete development toolkit for collaborative open development of new applications which leverage the AEVIS car component platform; (iii) Encrypted Cyber Security Protocols: system architecture provides for encrypted block chain data storage and secure end-to-end network communications; (iv) Blockchain Ledger Architecture: implement circuit logic and hardware integration design so as to incorporate operating platform functionalities for integration of distributed ledger OEM vehicle applications, allowing open development tools for future development of applications. (v) UK Foundation CO Grade Security Certification.
[52] Whereas the on-board diagnostic computer monitors provide a set of OBD coded operational characteristics of a vehicle, which are hard to retrieve and usually obscure for most users other than specialized technicians and CO mechanics. Instead, the information derived from this system will be processed on-board the preferred embodiment of this device and will connect via wireless protocols (including Wi-Fi and Bluetooth) with a smart mobile phone.
[53] The device will also be able to connect with a blockchain server, which is within a secure private network, in order to provide and manage vehicle information that may also be displayed on a user's smart mobile phone or computer screen, while simultaneously transmitting this information over the internet to be stored in a blockchain database, accessed by means of a secure channel within a private network that is managed by the application software provider and which can become a new platform for a number of different blockchain applications.
[54] A new automotive electronic control system component is disclosed in which the vehicle together with its manufacturing documentation, parts, maintenance and service records are integrated into a digital ledger which is encrypted, stored, managed and selectively via an in-vehicle CAN compatible virtual client secure blockchain node.
[55] The vehicle CAN network is in addition provided with encrypted communication channels via a secure end-to-end encrypted vehicle information management distributed ledger network that is controlled by the preferred embodiment of a custom ASIC or application-specific integrated circuit, which is disclosed herein. The micro-controller logic design is customized to incorporate a new encryption math co-processor that is based on SHA blockchain encryption algorithms and other circuit logic security.
[56] The AEVIS system is designed to provide a secure blockchain car network environment upon which to deliver a number of new applications, which are more fully described in the preferred embodiments of this invention and, which are related to vehicle maintenance, performance, service, repair, as well as related to ownership, financing and insurance.
[57] Figure 11 is a memory map of the random-access memory that is user configurable and in this preferred embodiment of the invention, is designed to incorporate a FLASH EEPROM ROM range of hexadecimal page addresses that may be adjusted to accommodate the required specifications of any particular alternative embodiment. It also maps a new memory range for what is disclosed to become the blockchain NODE mappable pages of the application. In this case, the blockchain node for the vehicle is incorporated in the device, so as to enable true distributed processing of vehicle data, thereby CO eliminating the critical problem of aggregating very massive vehicle fleet data in a single or few locations, and thereby implementing in a hardware solid state solution a new functionality that will more fully integrate vehicles with all O versions of the blockchain distributed ledger for the automotive industry.
CC) Detailed Description of Drawings
[59] While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the drawings and detailed description thereto are not intended to limit the invention to the particular form disclosed, but on the contrary, the intention is to cover all modifications, equivalents and alternatives falling within the spirit and scope of the present invention as defined by the appended claims.
[60] It will be readily understood that the components of the embodiments as generally described herein and illustrated in the appended figures could be arranged and designed in a wide variety of different configurations. Thus, the following more detailed description of various embodiments, as represented in the figures, is not intended to limit the scope of the present disclosure, but is merely representative of various embodiments.
[61] The present invention may be embodied in other specific forms without departing from its spirit or essential characteristics. The described embodiments are to be considered in all respects only as illustrative and not restrictive. The scope of the invention is, therefore, indicated by the appended claims rather than by this detailed description.
All changes which come within the meaning and range of equivalency of the claims are to be embraced within their scope [62] Reference throughout this specification to features, advantages, or similar language does not imply that all of the features and advantages that may be realized with the present invention should be or are in any single embodiment of the invention. Rather, language referring to the features and advantages is understood to mean that a specific feature, advantage, or characteristic described in connection with an embodiment is included in at least one embodiment of the present invention.
[63] Furthermore, the described features, advantages, and characteristics of the invention may be combined in any suitable manner in one or more embodiments. One skilled in the relevant art will recognize, in light of the description herein, that the invention can be practiced without one or more of the specific features or advantages of a particular embodiment. In other instances, additional features and advantages may be recognized in certain embodiments that may not be present in all embodiments of the invention.
[64] Reference throughout this specification to "one embodiment", "an embodiment", or similar language means that a particular feature, structure, or characteristic described in connection with the indicated embodiment is CO included in at least one embodiment of the present invention. Thus, the phrases "in one embodiment", "in an embodiment", and similar language throughout this specification may, but do not necessarily, all refer to the same embodiment.
[65] Techniques described herein can be applied to any type of in-vehicle CO networks (IVNs), including a Controller Area Network (CAN), a Local Interconnect Network (LIN), a Media Oriented Systems Transport (MOST) network, a compatible network, and other types of IVNs. Although in some embodiments a specific type of IVN is described, it should be noted that the invention is not restricted to a specific type of IVN.
[66] Numeral 1 of Figure 1 represents the physical documents that are part of the history of any vehicle. It includes all of the standard vehicle title of ownership, regulatory paperwork, insurance paperwork, leasing and finance documents and it also includes OEM documentation which may be in digital form, including in this case all data related to the vehicle supply chain and other components later added in the aftermarket.
[67] Numeral 2 represents the client application that runs in standard server environments operating any one of a number of alternative blockchain "smart contract" or distributed ledger protocols, and which is able to communicate with the AEVIS hardware disclosed herein, via encrypted TCP/IP internet communications, and is also able alternatively to only communicate via local area Wi-Fi or blue-tooth protocols.
[68] Numeral 3 represents the system integration of the AEVIS device in any type of vehicle, in which there is an ECU or electronic control unit that is able to interface with the hardware disclosed in this application; but which is also able to be installed in vehicles without an ECU and it is also installed in a similar fashion for operations.
[69] Numeral 4 represents the AEVIS Client Application Server, which may be operated from any standard blockchain secure communications server, and for which this hardware device is adaptable to any operating environment, as it is possible to configure the on-board operating system via the SSD solid-state storage module. The most important concept from this numeral 4 is the system principle that the hardware may be adapted and configured to use any blockchain and communications protocols.
[70] Numeral 5 represents the input/output data server interface with the onboard communications device, which may be accomplished either via a smartphone local area network interface, or may be accomplished using other prior art vehicle to TCP/IP networks for which there are multiple open source alternative methods and systems.
[71] Numeral 6 represents the Internet communications protocols used for CO standard communications with the hardware device using encrypted protocols.
[071] Numeral 7 illustrates one of the key components of this blockchain diagram, by providing a universal data bus that also acts like an encrypted highspeed serial communications module, which may be configured for synchronous or asynchronous protocols, depending on the needs of each CO custom application and vehicle.
[72] Numeral 8 this conceptual block diagram illustrates the possibility to communicate with any standard smart device, so as to provide a local area network access to users.
[73] Numeral 9 is a conceptual block diagram illustrating the incorporation of CAN in-vehicle protocols to the data port provided by the disclosed hardware innovation, as a 8 or more data channel signals configuration and for provision of high speed bus interface.
[74] Numeral 10 this represents any number of alternative OBD and OBDII electronic control units that may be used in different models for all types of cars and vehicles.
[75] Numeral 11 is a conceptual block for one of the mission critical components of this hardware disclosure, as it represents a new generation of application-specific integrated circuit micro-controllers, designed to provide a higher level of encryption by incorporating a bespoke mathematical SHA coprocessor module in addition to providing robust analog to digital conversion and orthogonal frequency multiplexing.
[76] Numeral 12 is also a mission critical new integrated circuit moduie, which is part of the same ASIC architecture and which is designed to provide a secure encrypted channel for IVN communications at the same time that this module provides a firewall encrypted local area network for CAN communications and which is clear improvement over prior electronic control network communications, as it solves a potential risk from hacking threats and adds a signfiicant layer of additional protection, by distributing the encrypted data among a network of authorized blockchain network nodes, which are then authenticated by those other "stake holders" in the integrity of the vehicle's data.
[77] Numeral 13 illustrates any number of vehicles which are equipped either with an ECU (electronic control unit) capable of OBD or OBDII diagnostic functions, or alternatively equipped by another embodiment of this same hardware system, by which analog vehicles may also be integrated into the blockchain network as nodes, by alternative means in which their records and other vehicle data may be uploaded.
[78] Numeral 14 illustrates an example of a preferred embodiment in which the AEVIS equipped vehicle produces a mainteance and service report for the user, which is then also distributed to other nodes in the authorized blockchain network for analysis and also for the possible bidding on the required service order, which is then communicated to the user for selection, approval and CO authorization of one of the submitted service orders which would then be provided under the protocols of this new network system.
[79] Numeral 15 represents the client server application supporting this embodiment.
[80] Numeral 16 is an important flowchart diagram of the in-vehicle hardware and software operations of the preferred embodiment, as one of the new applications for the blockchain distributed ledger technology in the vehicle maintenance, service and repair industry. In this case, an ECU service alert has been originated in the vehicle and such message has been distributed to the network nodes, alerting the user and prompting a number or responses from the authorized service and repair network.
[81] Numeral 17 is the corresponding AEVIS client flowchart, illustrating the corresponding events to the parallel flowchart of Numeral 16, and where we can see that a new market dynamic is possible by implementing the in-vehicle blockchain node, together with the alternative ECU or analog ADC signals that may be alternatively incorporated into this device, so as to provide a new level of service, quality and trust for the vehicle owner as well as resulting in important real-time data on parts failure and vehicle design performance for EOM stakeholders and for the vehicle manufacturer.
[82] Numeral 18 represents the flowchart system architecture for the client application and for the hardware system integration with the in-vehicle AEVIS network node. This diagram is self-explanatory and it is preferable to enable the legends on the flowchart elements to explain the inventive steps required to produce the desired system outcome.
[83] Numeral 19 this is an important flowchart diagram which illustrates one of the very first applications from an "accounting view" of three parallel space and time dimensions in the data history of a vehicle. The first column illustrates the workflow for the physical records related to all transactions that have integrated the vehicle in both physical, legal, financial, insurance and regulatory transactions, and shows how to process them. The second column illustrates the blockchain network domain, in which more than one and probably a large number of other authorized network nodes share the same vehicle's datra ledger in encrypted and secure communications, so as to implement one or more alternative methods for authentication of the data veracity and integrity at all times. The third column illustrates the in-vehicle AEVIS hardware dimension, as this interacts both with the physical analog dimension as well as operates within the client server network.
[84] Numeral 20 this illustrates a more detailed workflow and data flowchart for the preferred embodiment of this application, and as in the case of Numeral 18, it is better to let the legends communicate to the reader the inventive steps involved in the process.
[85] Numeral 21 is a logic decision flowchart for integration of the AEVIS client server application and the in-vehicle blockchain network node, allowing for the alternative workflow for cases where there is no ECU on-board the vehicle, and CO in both cases providing operable functionality so as to authenticate encrypted ledger transactions.
[86] Numeral 22 illustrates an alternative embodiment for installation of the hardware components disclosed by this invention and referred to as the AEVIS CO in-vehicle system.
[87] Numeral 23 is a similar cross section of an alternative embodiment.

Claims (1)

  1. Automated Electronic Vehicular Information System Claims What is claimed is: 1.- A retrofit hardened and tamper-proof, vehicle computer device, designed to be installed in different possible internal-locations of any type of vehicle, in order to provide cyber security protection to all wireless communications to and from the vehicle by means of specialized electronic circuits disclosed herein and described in the preferred embodiment of the diagrams; 2.- The retrofit device of claim (1) designed with security policies, to only operate entirely outside of the Controller Area Network (CAN) of any type of vehicle and designed by computer micro-control and internal circuits, to not able to interfere directly with the functioning of the CAN or ECU in any type of vehicle, so as to make it impossible to interfere with normal vehicle operation; 3.- The vehicular retrofit device of claims (1) and (2) whereby a custom "system-on-a-chip" and/or ASIC "application specific integrated circuit" controls all encryption and decryption of wireless communications to and from the vehicle to any and all centralized types of vehicular wireless networks; 4.- The system and method for reporting and broadcasting securely in an encrypted wireless reporting system, any vehicle fault diagnostic data provided on a real-time basis by the electronic control unit (ECU) via one or more in-vehicle network (IVN) industry standard protocols, to the device of claims (1) and (2) without interfering or compromising internal CAN vehicular networks; 5.- The hardware electronic circuits and software control methods for connecting with existing vehicular wireless networks, the device of claims (1) (2) and (3) by means of the application-specific integrated circuit of claim, so as to provide secure and authenticated software and firmware compliance to the vehicle in pursuit of compliance with UK law and automotive laws; 6.- The hardware encrypted communications electronics architecture of claims (1), (2), (3) and (5) comprising: an application-specific integrated circuit, designed as a vehicle encrypted blockchain network node: (i) an encryption mathematical co-processor designed to process SHA algorithms; (ii) a custom system integration module with sixteen (or more) data channels for in-vehicle network encrypted serial communications with one or more blockchain network servers and (iii) the method for integrating all vehicle manufacturing and ECU digital records in encrypted data, structured as a distributed blockchain ledger for all types of vehicles, on-board a solid state 32GB, or more read and write random access memory module.7.-System and method by which the device of claim (1) is used as an In-Vehicle Network "firewall" by providing secure wireless encrypted channel communications by means of the electronics of claims (2), (3), (4) and (5).
GB2302172.8A 2023-02-15 2023-02-15 AEVIS automated cyber security computer Withdrawn GB2627228A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
GB2302172.8A GB2627228A (en) 2023-02-15 2023-02-15 AEVIS automated cyber security computer

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
GB2302172.8A GB2627228A (en) 2023-02-15 2023-02-15 AEVIS automated cyber security computer

Publications (2)

Publication Number Publication Date
GB202302172D0 GB202302172D0 (en) 2023-03-29
GB2627228A true GB2627228A (en) 2024-08-21

Family

ID=85704292

Family Applications (1)

Application Number Title Priority Date Filing Date
GB2302172.8A Withdrawn GB2627228A (en) 2023-02-15 2023-02-15 AEVIS automated cyber security computer

Country Status (1)

Country Link
GB (1) GB2627228A (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2562054A (en) * 2017-05-02 2018-11-07 Bitbond Ltd Automotive electronic blockchain information system - AEBIS
US20200057872A1 (en) * 2017-05-08 2020-02-20 Bae Systems Information And Electronic Systems Integration Inc. System and method for cryptographic verification of vehicle authenticity
US20200244671A1 (en) * 2019-01-30 2020-07-30 Toyota Motor Engineering & Manufacturing North America, Inc. Blockchain enabled encryption
US20210288801A1 (en) * 2020-03-13 2021-09-16 Dearborn Group, Inc. Intrusion defense system for a vehicle

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2562054A (en) * 2017-05-02 2018-11-07 Bitbond Ltd Automotive electronic blockchain information system - AEBIS
US20200057872A1 (en) * 2017-05-08 2020-02-20 Bae Systems Information And Electronic Systems Integration Inc. System and method for cryptographic verification of vehicle authenticity
US20200244671A1 (en) * 2019-01-30 2020-07-30 Toyota Motor Engineering & Manufacturing North America, Inc. Blockchain enabled encryption
US20210288801A1 (en) * 2020-03-13 2021-09-16 Dearborn Group, Inc. Intrusion defense system for a vehicle

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
Quantum Light Ltd, 'Connected & Self-Driving Car Security', dated 16 June 2022, URL https://qlight.uk/2022/06/16/cybersecurity-for-connected-self-driving-cars/ *
Varun Deshpande et al. 'SaFe: A Blockchain and Secure Element Based Framework for Safeguarding Smart Vehicles', published in 2019 12th IFIP Wireless and Mobile Networking Conference (WMNC), 11-13 September 2019 *

Also Published As

Publication number Publication date
GB202302172D0 (en) 2023-03-29

Similar Documents

Publication Publication Date Title
GB2562054A (en) Automotive electronic blockchain information system - AEBIS
McCarthy et al. Characterization of potential security threats in modern automobiles: A composite modeling approach
Sagstetter et al. Security challenges in automotive hardware/software architecture design
Buquerin et al. A generalized approach to automotive forensics
Mansor et al. Log your car: The non-invasive vehicle forensics
US11240211B2 (en) System and method to leverage EDR, ECU, CAN and OBD data from vehicles by means of blockchain technology
JP2023539051A (en) Automotive data sharing and consent management platform
US9165131B1 (en) Vehicle connector lockout for in-vehicle diagnostic link connector (DLC) interface port
Dobaj et al. Cybersecurity Threat Analysis, Risk Assessment and Design Patterns for Automotive Networked Embedded Systems: A Case Study.
Wolf et al. Hacking trucks-cybersecurity risks and effective cybersecurity protection for heavy duty vehicles
US12327444B2 (en) Methods and systems for securely accessing operational data
Falco et al. Assuring automotive data and software integrity employing distributed hash tables and blockchain
Davi et al. Combining safety and security in autonomous cars using blockchain technologies
Falco et al. A distributedblack box'audit trail design specification for connected and automated vehicle data and software assurance
Macher et al. An integrated view on automotive SPICE, functional safety and cyber-security
McCarthy et al. Access to in-vehicle data and resources
Stachowski et al. Cybersecurity research considerations for heavy vehicles
US11271971B1 (en) Device for facilitating managing cyber security health of a connected and autonomous vehicle (CAV)
US12386807B2 (en) System and method implementing a distributed audit trail
GB2627228A (en) AEVIS automated cyber security computer
Memon et al. A Comparative Survey of Blockchain-Based Security Mechanisms for OTA updates in CAVs
Humayed An overview of vehicle OBD-II port countermeasures
Singh et al. V-CARE: A blockchain based framework for secure vehicle health record system
US20240427927A1 (en) Vehicle-related sensitive data determination and removal
Kim et al. Measures for automaker's legal risks from security threats in connected car development lifecycle

Legal Events

Date Code Title Description
WAP Application withdrawn, taken to be withdrawn or refused ** after publication under section 16(1)