Cisco Technology, Inc.

Helder F Antunes

Tao Zhang

Gonzalo A Salgueiro

Joseph Michael Clarke

Yi Zheng

Chintan Patel

Parag Pritam Thakore

Plamen Nedeltchev

Marcelo Yannuzzi

Gautam M Aggarwal

Aaron A Lung

Ajith Thrivikramannair

Pedro Leonardo

David Sisto Iacobacci

Akshay Singhal

Anuj Sawani

Douglas Chan

Jack Chi Cham

Mahbubul Alam

Danyang Raymond Zheng

Siddhartha Aggarwal

Chintankumar Patel

In one embodiment, a first device in a network receives information regarding one or more nodes in the network. The first device determines a property of the one or more nodes based on the received information. The first device determines a degree of trustworthiness of the one or more nodes based on the received information. The first device attests to the determined property and degree of trustworthiness of the one or more nodes to a verification device. The verification device is configured to verify the attested property and degree of trustworthiness.

Remote crowd attestation in a network

In one embodiment, a device in a network joins a fog-based malware defense cluster comprising one or more peer devices. The device and each peer device in the cluster are configured to execute a different set of local malware scanners. The device receives a file flagged as suspicious by a node in the network associated with the device. The device determines whether the local malware scanners of the device are able to scan the file. The device sends an assessment request to one or more of the peer devices in the malware defense cluster, in response to determining that the local malware scanners of the device are unable to scan the file.

Fog-based distributed malware defense

In one embodiment, a device sends collision avoidance safety messages to prevent potential collisions between vehicles and the portable electronic device. The device determines whether a current or predicted future location of the device intersects an action zone. An action zone corresponds to a geographic area in which a potential collision may occur between a vehicle and the device. The device adjusts a broadcast rate for the collision avoidance safety messages based on whether the device determines that the current or predicted future location of the device intersects an action zone.

Power conservation in traffic safety applications

Apparatus, methods and logic for vehicles to determine vehicle to vehicle (V2V) safety message transmission rates for transmitting V2V safety messages based on how frequently the vehicles actually need to exchange safety messages, including factors such as vehicle velocities, distances among vehicles, and on how quickly the inter-vehicle distances are closing up. The determined V2V safety message transmission rates are selectively dynamically adjusted in accordance with detected significant changes in one or more of the inter-vehicle distances or inter-vehicle speeds. To avoid needless frequent changes to the transmission rate, statistical modeling techniques including hypothesis testing and sequential change detection are selectively used to more accurately detect significant changes in inter-vehicle distances or inter-vehicle speeds that warrant a change to the message transmission rate.

Dynamic adjustment of wireless communication transmission rates

In one embodiment, a device and a services provisioning system establish an over-the-air connection with each other, and perform device posture validation to obtain a unique identification (ID) of the device at the provisioning system. The device and provisioning system then participate in device and user authentication in response to a confirmed unique ID by a backend access control system, where the device generates a secure key pair after successful user authentication. In response to the device being approved for services (e.g., checked by the provisioning system via a registration system), the provisioning system provides a root certificate to the device, and the device sends a certificate enrollment request back to the provisioning system. In response to a certificate authority signing the certificate request, the provisioning system returns a valid certificate to the device, and the valid certificate is installed on the device.

Secure over-the-air provisioning solution for handheld and desktop devices and services

A gateway apparatus supports differentiated secure communications among heterogeneous electronic devices. A communication port communicates via communication networks of different types with two or more associated devices having diverse secure communication capabilities. The gateway logic selectively authenticates the associated devices for group membership into a Secure Communication Group (SCG), and selectively communicates Secure Communication Group Keys (SCGKs) to the devices having the diverse secure communication capabilities for selectively generating session keys locally by the associated devices for mutual secure communication in accordance with the group membership of the associated devices in the SCG.

Supporting differentiated secure communications among heterogeneous electronic devices

The trustworthiness of vehicle-to-vehicle (V2V) messages received from one or more associated vehicles in the vicinity of a subject vehicle is determined autonomously by a false signal detection system of the subject vehicle. Physical evidence relating to the associated vehicles is collected, and a statistical model is used to perform an analysis of the collected data. A V2V message is received by the system from a first one of the associated vehicles and a trustworthiness level of the message is determined in accordance with a correlation between the received V2V message and the result of the analyzed physical data relating to the first associated vehicle. The correlation may be a comparison of data contained in the received V2V message relative to a result of a stochastic analysis of the physical data. The received V2V message may be any V2V safety message including Emergency Electronic Brake Light (EEBL) messages.

Detection of false vehicle-to-vehicle emergency brake light messages

In an example embodiment herein, there is provided methods and a system for cloud-assisted threat defense for connected vehicles. A vehicle suitably includes an on-board computer system for operating and/or controlling various systems on the vehicle. The on-board computer system suitably operates in connection with or includes an on-board threat defense module for detecting and protecting against malware attacks and other security threats to the vehicle. In an example embodiment, a cloud-based security component or security cloud assists with the detection and protection against security threats and malware attacks to the vehicle while minimizing the processing load and memory requirements for the on-board threat defense module.

Cloud-assisted threat defense for connected vehicles

Secure over-the-air provisioning for handheld and desktop devices and services

A system authenticates in-vehicle electronic devices having unequal capabilities such as having varying different communication and processing capabilities. A Connected Vehicle Gateway portion of a selected in-vehicle device acts as an onboard authentication proxy and onboard key server functionality for other in-vehicle devices, and serves as an interface between an in-vehicle network and one or more associated external networks, thereby eliminating the need for explicit peer discovery protocol and the requirement of devices to perform key establishment with each individual communication peer. Instead, each in-vehicle device establishes the group keys as a result of its authentication with the onboard key server and uses the group keys to locally generate and update its session keys. The onboard key server selectively obtains the keys from one or more off-board authentication servers and distributes them to selected in-vehicle devices.

Growing community of inventors

Morgan Hill, CA, United States of America

Helder F Antunes