A method of maintaining a database for a plurality of vehicles includes obtaining first sensor data from a vehicle sensor and comparing the first sensor data to data in the database. If the first sensor data does not match the database data, it is determined whether data from a single vehicle sensor or from a plurality of vehicle sensors is required to update the database. The database is updated if consistent data from a required number of vehicle sensors is available. A loss of database integrity is identified if data from a plurality of vehicle sensors is required to update the database but is not available. Anomalous driving is identified if data from a plurality of vehicle sensors is required to update the database and is available, and if the first sensor data is not confirmed by data from other vehicle sensors.