ONE-WAY SEGREGATION OF AV SUBSYSTEMS AND USER DEVICES

20240171568

18/057458

November 21, 2022

Malicious users (or hackers) can take advantage of user devices on or communicably connected to an autonomous vehicle (AV) to gain unauthorized access to AV subsystems (e.g., AV compute system, AV sensors, AV controls system, and AV cabin system). To address this concern, a one-way Ethernet communication link can be placed between the AV subsystems and the user devices. The one-way communication link can physically ensure that the user devices may only receive content from the AV systems, and that the user devices may not send data to the AV systems on the one-way communication link. A feature-limited backchannel that may be normally used for transporting audio data on a daisy-chained bus can be used by the user devices to transmit (8-bit) code words that correspond to specific messages to convey messages back to the AV systems.

GM Cruise Holdings LLC (San Francisco, CA, US)

1. A computer-implemented method, the method comprising: transmitting, from one or more subsystems of an autonomous vehicle to a user device, content via a one-way communication link, wherein the one-way communication link physically does not pass data traffic from the user device to the one or more subsystems of the autonomous vehicle; receiving a code word, by a message receiver of the autonomous vehicle from the user device via a backchannel, wherein the code word corresponds to a specific message; looking up, by the message receiver, a message corresponding to the code word; and performing, by at least one of the one or more subsystems, an action according to the message.

2. The method of claim 1, wherein the one-way communication link comprises an Ethernet switch, where a receive pin to receive a signal from the user device is physically removed.

3. The method of claim 1, wherein the one-way communication link comprises an Ethernet switch, where a transmit pin to transmit a signal to the one or more subsystems is physically removed.

4. The method of claim 1, wherein the one-way communication link comprises a data diode that ensures the data traffic only flows from a first network having the one or more subsystems of the autonomous vehicle to a second network having the user device.

5. The method of claim 1, wherein the code word is encoded in a byte of data.

6. The method of claim 1, wherein the message receiver has a lookup table that maps different values of the code word to corresponding messages.

7. The method of claim 1, wherein the backchannel is a daisy-chained communication bus.

8. The method of claim 1, further comprising: providing a lookup table that maps different values of the code word to corresponding messages to the user device via the one-way communication link.

9. The method of claim 1, further comprising: monitoring, by the message receiver, for one or more unexpected code words being received on the backchannel.

10. The method of claim 9, further comprising: in response to receiving the one or more unexpected code words, ceasing to process further code words received on the backchannel.

11. The method of claim 9, further comprising: in response to receiving the one or more unexpected code words, alerting the one or more subsystems of an anomaly.

12. A computer-implemented method, the method comprising: receiving, from one or more subsystems of an autonomous vehicle at a user device, content via a one-way communication link, wherein the one-way communication link physically does not pass data traffic from the user device to the one or more subsystems of the autonomous vehicle; determining a message to be conveyed to a message receiver of the autonomous vehicle; looking up a code word that corresponds to the message; and transmitting, from the user device to the message receiver, the code word via a backchannel to cause the one of the one or more subsystems to perform an action according to the message.

13. The method of claim 12, wherein: the one or more subsystems of the autonomous vehicle includes one or more of: an autonomous vehicle compute system, autonomous vehicle sensors, an autonomous vehicle controls system, and an autonomous vehicle cabin system; and the content includes one or more of: data streams from one or more autonomous vehicle sensors; trip information from an autonomous vehicle compute system; driving maneuver information from the autonomous vehicle compute system; state information of an autonomous vehicle cabin system; and string messages to a passenger of the autonomous vehicle.

14. The method of claim 12, wherein the corresponding message comprises a YES response.

15. The method of claim 12, wherein the corresponding message comprises a NO response.

16. The method of claim 12, wherein the corresponding message comprises a command to end a trip of a passenger in the autonomous vehicle.

17. The method of claim 12, wherein the corresponding message comprises a command to change a setting of an autonomous vehicle cabin system.

18. An autonomous vehicle, comprising: a first network having autonomous vehicle subsystems; a second network having a user device; a one-way communication link between the first network and the second network, wherein the one-way communication link physically does not pass data traffic from the second network to the first network; and a backchannel to transmit a code word from the user device to the autonomous vehicle subsystems, wherein the code word corresponds to a specific message.

19. The autonomous vehicle of claim 18, wherein the backchannel is a daisy-chained communication bus used for transmitting audio data to devices communicably coupled to the daisy-chained communication bus.

20. The autonomous vehicle of claim 18, wherein the one-way communication link is a one-way data diode.

04; 06

edspap.20240171568