Vehicle digital certificate management method and device

Abstract

The invention discloses a vehicle digital certificate management method and device, and the method comprises the steps of carrying out the initialization of a general digital certificate after a vehicle-mounted network connection terminal is powered on, and generating forced certificate maintenance request information if the general digital certificate is abnormal; calculating a difference value between the real-time power-on time of the vehicle-mounted network connection terminal and the last maintenance time of the general digital certificate, comparing the difference value with a preset certificate maintenance period, and if the difference value exceeds the preset maintenance period, generating period maintenance request information; and according to the mandatory certificate maintenance request information or the periodic maintenance request information, carrying out certificate maintenance when the communication state of the vehicle-mounted network connection terminal meets a certificate maintenance condition. According to the invention, the validity of the certificate in the whole life cycle of the automobile can be ensured under the condition that the user does not perceive; and meanwhile, the security threat time span caused by the certificate abnormity can be shortened by forcing the certificate to update according to the special condition of the certificate abnormity.

Description

technical field [0001] The invention belongs to the technical field of Internet of Vehicles, and in particular relates to a method and device for managing a vehicle digital certificate. Background technique [0002] With encryption technology as the core and PKI public key infrastructure as the basis, the establishment of a network security environment has mature methodologies and use cases in many non-automotive fields, and its development has been relatively mature. With the development of intelligence and networking, the security environment of automobiles is becoming more and more complex, and there are more and more security threats. The vehicle information security environment based on PKI is also gradually improving. [0003] Combined with the unique use and maintenance environment of automobiles, the establishment of a PKI-based information security environment also needs to be adapted according to the actual usage scenarios, relying on the hardware and software solu...

AI Technical Summary

Problems solved by technology

However, this method has the following defects: certificate query, verification, and certificate production are required before each connection to TSP, which involves too many links and is too long to maintain certificates without the user's perception, and may affect the vehicle's connection to TSP. Affects normal functions; cannot force certificate maintenance and update; cannot flexibly configure the certificate update query cycle

Images