Device update transmission using a filter

Inventors

Locketz, Neil

Assignees

Integrity Security Services LLC

Interested in licensing this patent?

MTEC can help explore whether this patent might be available for licensing for your application.

Publication Number

US-12647252-B2

Patent

Publication Date

2026-06-02

Expiration Date


Abstract

Systems, devices, and methods for updating computerized devices. Functions and operations can include: obtaining a filter data structure (e.g., a bloom filter data structure) that may include hash values corresponding to each of the computerized devices to be updated; determining whether a computerized device is to obtain a device update based on a hash value associated with the computerized device matching a hash value of the filter data structure; and providing the device update to the computerized device when there is a match. The provided device update may modify the operation of the computerized device that receives it.

Core Innovation

A secure device-update system generates and distributes a filter data structure for an update campaign. The filter data structure comprises one or more hash values that correspond to computerized device identifiers, and a determining operation checks whether a requesting device is to receive a device update based on a hash value matching the hash value(s) of the filter data structure, with likely false positives but no false negatives.

When the determining operation indicates non-membership, the system provides a no-update response to a device that does not likely belong to the update campaign. For devices that likely match, the system forwards likely matches for verification. In this way, the system avoids contacting the campaign management service for non-member devices while still allowing verification for likely matches.

After confirmation, the system provides a device update comprising a digital asset that modifies operation of the first computerized device. The digital asset can include software, firmware, and/or digital certificates. The document further describes examples in V2V/V2I/V2X/IoT environments, including ECUs, OBUs, RSUs, a message server, and a database for campaign data/status.

The document also describes handling while the bloom filter data structure is still initializing, including exclusion responses for devices that are determined not to belong. In addition, an example certificate-management architecture is described with separated compute engines and use of an HSM, supporting enrollment certificate authority, pseudonym certificate authority, registration authority, and linkage authorities.

Claims Coverage

The provided partial content includes two independent claims, each covering generating a filter data structure with a hash value, determining update eligibility based on hash matching, and providing an update that includes a digital asset modifying device operation. Across these independent claims, the main inventive coverage focuses on filter-based membership determination for update targeting and the update digital asset provision.

Filter data structure with hash value for computerized device

generating a filter data structure comprising a hash value, the hash value corresponding to a computerized device

Hash-matching determination to receive device update

determining that a first computerized device is to receive a device update based on a hash value associated with the first computerized device matching the hash value of the filter data structure

Device update comprising digital asset that modifies operation

providing the device update to the first computerized device, wherein the device update comprises a digital asset that modifies operation of the first computerized device

Method provides updates via filter-based hash matching and digital-asset update

generating a filter data structure comprising a hash value, the hash value corresponding to a computerized device; determining that a first computerized device is to receive a device update based on a hash value associated with the first computerized device matching a hash value of the filter data structure; and providing the device update to the first computerized device, wherein the device update comprises a digital asset that modifies operation of the first computerized device

The independent claim set is centered on using a filter data structure containing hash values to perform membership/eligibility determination for device updates and on providing a device update that includes a digital asset modifying operation of the device.

Stated Advantages

Avoids contacting the campaign management service for non-member devices while still allowing verification for likely matches.

Likely false positives but no false negatives.

Provides exclusion responses to devices determined not to belong.

Documented Applications

V2V/V2I/V2X/IoT device update environments using ECUs, OBUs, and RSUs.

Certificate-management architecture supporting enrollment certificate authority, pseudonym certificate authority, registration authority, and linkage authorities.

JOIN OUR MAILING LIST

Stay Connected with MTEC

Keep up with active and upcoming solicitations, MTEC news and other valuable information.