Secure communication method, device and system

Abstract

The embodiments of the present application provide a secure communication method, device and system, which can deal with the security threats of counterfeit identity and tampered data during message transmission. The method includes: a first communication device receives a first message from a second communication device, the first message includes a first public key of the second communication device and a digital signature of the first message, the first communication device belongs to a first type of device, and the second communication device belongs to a second type of device; when the first public key of the second communication device is included in the list of legal keys of the second type of device, the first communication device verifies the digital signature of the first message according to the first public key of the second communication device; when the digital signature of the first message passes the verification, the first communication device extracts the message body of the first message.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to secure communication methods, devices and systems. Background Art

[0002] Commercial vehicles are one of the scenarios where vehicle to everything (V2X) communication solutions can be first implemented. Vehicles are required to broadcast their speed, position, direction and other status information at a frequency of 10Hz. During the transmission of such broadcast messages, there are security threats such as identity impersonation, data tampering, and attack tracing.

[0003] Currently, the industry uses certificate technology based on V2X-public key infrastructure (Public Key Infrastructure, PKI, V2X-PKI) to deal with the above security threats, that is, the sender's business certificate is carried in the broadcast message, and the private key corresponding to the public key in the business certificate is used to sign. However, V2X-PKI currently lacks mature standards and it is difficult to achieve large-scale penetration in a short period of time. It cannot meet the current V2X communication solution requirements for commercial vehicles. Therefore, a mature standardized solution is needed to solve the problem of safe communication of commercial vehicles.

[0004] However, the certificates of the existing X.509-PKI solution, which is a standardized solution widely used in the Internet technology (IT) industry, are too large and require large storage and bandwidth overhead. Since there are a large number of senders in V2X communication and bandwidth resources are limited, it is not suitable to directly use the X.509-PKI solution to deal with the above security threats when implementing V2X communication solutions in commercial vehicles. Summary of the invention

[0005] The embodiments of the present application provide a secure communication method, device and system, which can deal with the security threats of identity impersonation and data tampering during message transmission.

[0006] To achieve the above objectives, the embodiments of the present application adopt the following technical solutions:

[0007] In the first aspect, a secure communication method and a corresponding device are provided. In the method, a first communication device receives a first message from a second communication device, the first message includes a first public key of the second communication device and a digital signature of the first message, the first communication device belongs to a first type of device, and the second communication device belongs to a second type of device; when the first public key of the second communication device is included in the legal key list of the second type of device, the first communication device verifies the digital signature of the first message according to the first public key of the second communication device, and when the digital signature of the first message passes the verification, the first communication device extracts the message body of the first message.

[0008] Based on the solution of the embodiment of the present application, when the public key of the second communication device is included in the legal key list of the second type of device, the identity of the second communication device can be considered legal, and then the digital signature of the first message is verified based on the public key of the second communication device. When the digital signature of the first message is verified, it can be considered that the first message has not been tampered with, and the message body of the first message can be extracted. In other words, on the one hand, since the first communication device can verify whether the identity of the second communication device is legal based on the legal key list of the second type of device, and verify the integrity of the first message based on the digital signature of the first message, it can deal with the security threats of counterfeit identity and tampered data during message transmission. On the other hand, there is no need to introduce a certificate authentication authority and a certificate mechanism, which can simplify the implementation process of dealing with the above-mentioned security threats, and is more conducive to deployment and implementation.

[0009] In a possible design, the secure communication method further includes: the first communication device sends a first configuration request message to the application server, the first configuration request message is used to request a legal key list of the second type of device; the first communication device receives the legal key list of the second type of device from the application server. Based on this scheme, the first communication device can obtain the legal key list of the second type of device, thereby verifying the legitimacy of the identity of the message sender according to the legal key list of the second type of device.

[0010] In a possible design, the first configuration request message is also used by the application server to determine a legal key list of the first type of device. Based on this solution, the application server can obtain the legal key list of the first type of device and send it to the second communication device, so that the second communication device can verify the legitimacy of the identity of the message sender based on the legal key list of the first type of device.

[0011] In one possible design, the first configuration request includes one or more of the following: a first public key of the first communication device, an identifier of the first communication device, a device type of the first communication device, a digital signature of the first configuration request message, or a first symmetric key of the first communication device asymmetrically encrypted using a public key of an application server.

[0012] In one possible design, the legal key list of the second type of devices includes public keys of one or more second type of devices; or, the legal key list of the second type of devices includes public keys of one or more second type of devices and symmetric keys of the one or more second type of devices.

[0013] In one possible design, the first message also includes indication information of a destination communication device corresponding to the first message, and the indication information of the destination communication device is a public key of the destination communication device or an identifier of the destination communication device.

[0014] In one possible design, when the first public key of the second communication device is included in the legal key list of the second type of device, the first communication device verifies the digital signature of the first message according to the first public key of the second communication device, including: when the indication information of the destination communication device indicates that the destination communication device is the first communication device, and the first public key of the second communication device is included in the legal key list of the second type of device, the first communication device verifies the digital signature of the first message according to the first public key of the second communication device. Based on this scheme, the identity authentication of the sender of the unicast message can be realized.

[0015] In one possible design, the message body of the first message is encrypted using a first key, and the first communication device extracts the message body of the first message, including: the first communication device decrypts the message body of the first message encrypted using the first key according to the first key. Based on this scheme, the message body of the unicast message can be encrypted using the first key, and the message content can be further protected when dealing with security threats such as identity impersonation and data tampering during unicast message transmission.

[0016] In one possible design, the first key is a first public key of the first communication device; or, the first key is a first symmetric key of the first communication device; or, the first key is a first symmetric key of the second communication device. Based on this scheme, multiple types of keys can be used to encrypt the message body of the unicast message, thereby protecting the message content.

[0017] In one possible design, when the first key is the first symmetric key of the first communication device, the first message also includes the first symmetric key of the first communication device asymmetrically encrypted using the first public key of the first communication device; the secure communication method also includes: the first communication device decrypts the first symmetric key of the first communication device asymmetrically encrypted using the first public key of the first communication device according to the first private key corresponding to the first public key of the first communication device to obtain the first key.

[0018] In a possible design, when the first key is a first symmetric key of the second communication device, the secure communication method further includes: the first communication device obtains the first symmetric key of the second communication device from a legal key list of the second type of device.

[0019] In one possible design, when the first key is the first symmetric key of the second communication device, the first message also includes the first symmetric key of the second communication device asymmetrically encrypted using the first public key of the first communication device; the secure communication method also includes: the first communication device decrypts the first symmetric key of the second communication device asymmetrically encrypted using the first public key of the first communication device according to the first private key corresponding to the first public key of the first communication device to obtain the first key.

[0020] In the second aspect, a secure communication method and a corresponding device are provided. In the method, a first communication device receives a first message from a second communication device, the first message includes an identifier of the first communication device, an identifier of the second communication device, and third authentication encryption information, the third authentication encryption information is calculated based on a second symmetric key using an authentication encryption algorithm with associated data to obtain the message body of the first message, the first communication device belongs to a first type of device, and the second communication device belongs to a second type of device; when the identifier of the second communication device is included in the legal key list of the second type of device, the first communication device decrypts and verifies the third authentication encryption information based on the second symmetric key, and when the third authentication encryption information is successfully decrypted and verified, the first communication device extracts the message body of the first message.

[0021] Based on this solution, when the legal key list of the second type of device includes the identification of the second communication device, the identity of the second communication device can be considered legal, and then the third authentication encrypted information is decrypted and verified according to the second symmetric key. When the third authentication encrypted information is decrypted and verified successfully, it can be considered that the first message has not been tampered with, and the message body of the first message can be extracted. In other words, it can deal with the security threats of counterfeit identity and tampered data during message transmission. In addition, there is no need to introduce a certificate authentication authority and a certificate mechanism, which can simplify the implementation process of dealing with the above security threats and is more conducive to deployment and implementation.

[0022] In one possible design, the second symmetric key is the first symmetric key of the first communication device, or the second symmetric key is the first symmetric key of the second communication device.

[0023] In one possible design, when the second symmetric key is the first symmetric key of the second communication device, the legal key list of the second type of device includes one or more symmetric keys of the second type of device; the method also includes: the first communication device obtains the first symmetric key of the second communication device from the legal key list of the second type of device.

[0024] In one possible design, the secure communication method also includes: the first communication device sends a first configuration request message to an application server, the first configuration request message being used to request a legitimate key list for the second type of device; and the first communication device receives the legitimate key list for the second type of device from the application server.

[0025] In one possible design, the first configuration request message is also used by the application server to determine a legal key list of the first type of device.

[0026] In one possible design, the first configuration request message includes one or more of the following: an identifier of the first communication device, a device type of the first communication device, a first symmetric key of the first communication device asymmetrically encrypted using a public key of the application server, and second authentication encryption information, wherein the second authentication encryption information is obtained by calculating a message body of the first configuration request message based on the first symmetric key of the first communication device using an authentication encryption algorithm with associated data.

[0027] In a third aspect, a secure communication method and a corresponding device are provided. In the method, an application server receives a first configuration request message from a first communication device, the first communication device belongs to a first type of device, the first configuration request message is used to request a legal key list of a second type of device, the second type of device is a type of device different from the first type of device; in response to the first configuration request message, the application server sends a legal key list of the second type of device to the first communication device.

[0028] Based on this solution, on the one hand, since the application server can provide the first communication device with a list of legal keys of the second type of device, the first communication device can verify the legitimacy of the identity of the message sender according to the list of legal keys of the second type of device when it receives the message later, thereby coping with the security threat of identity impersonation during message transmission. On the other hand, there is no need to introduce a certificate authentication authority and a certificate mechanism, which can simplify the implementation process of coping with the above security threats and is more conducive to deployment and implementation.

[0029] In a possible design, the secure communication method further includes: the application server receives a second configuration request message from a second communication device, the second communication device belongs to the second type of device; the application server determines the legal key list of the second type of device according to the second configuration request message. Based on this scheme, the application server can obtain the legal key list of the second type of device and send it to the first communication device, so that the first communication device can verify the legitimacy of the identity of the message sender according to the legal key list of the second type of device.

[0030] In one possible design, the second configuration request message includes a second key, and the second key includes the first public key of the second communication device and / or the first symmetric key of the second communication device; the application server determines the legal key list of the second type of device based on the second configuration request message, including: the application server determines that the legal key list of the second type of device includes the second key.

[0031] In one possible design, when the second key includes the first public key of the second communication device, or the second key includes the first public key of the second communication device and the first symmetric key of the second communication device, the second configuration request message also includes the device type of the second communication device and the digital signature of the second configuration request message; the application server determines that the legal key list of the second type of device includes the second key, including: the application server verifies the digital signature of the second configuration request message according to the first public key of the second communication device; when the digital signature of the second configuration request message passes the verification, the application server determines, according to the device type of the second communication device, that the legal key list of the second type of device includes the second key.

[0032] In one possible design, when the second key includes the first symmetric key of the second communication device, the second configuration request message also includes the device type and first authentication encryption information of the second communication device, and the first authentication encryption information is obtained by calculating the message body of the second configuration request message according to the first symmetric key of the second communication device using an authentication encryption algorithm with associated data; the application server determines that the legal key list of the second type of device includes the second key, including: the application server decrypts and verifies the first authentication encryption information according to the first symmetric key of the second communication device; when the first authentication encryption information is decrypted and verified successfully, the application server determines, according to the device type of the second communication device, that the legal key list of the second type of device includes the second key.

[0033] In one possible design, the second configuration request message is also used to request a legal key list of the first type of device; the secure communication method further includes: in response to the second configuration request message, the application server sends the legal key list of the first type of device to the second communication device. Based on this scheme, the application service can send the legal key list of the first type of device to the second communication device, so that the second communication device can verify the legitimacy of the identity of the message sender according to the legal key list of the first type of device.

[0034] In a possible design, the secure communication method further includes: the application server determines the legal key list of the first type of device according to the first configuration request message. Based on this solution, the application server can obtain the legal key list of the first type of device.

[0035] In one possible design, the first configuration request message includes a third key, and the third key includes the first public key of the first communication device and / or the first symmetric key of the first communication device; the application server determines the legal key list of the first type of device based on the first configuration request message, including: the application server determines that the legal key list of the first type of device includes the third key.

[0036] In one possible design, when the third key includes the first public key of the first communication device, or the third key includes the first public key of the first communication device and the first symmetric key of the first communication device, the first configuration request message also includes the device type of the first communication device and the digital signature of the first configuration request message; the application server determines that the legal key list of the first type of device includes the third key, including: the application server verifies the digital signature of the first configuration request message according to the first public key of the first communication device; when the digital signature of the first configuration request message passes the verification, the application server determines, according to the device type of the first communication device, that the legal key list of the first type of device includes the third key.

[0037] In one possible design, when the third key includes the first symmetric key of the first communication device, the first configuration request message also includes the device type of the first communication device and second authentication encryption information, and the second authentication encryption information is obtained by calculating the message body of the first configuration request message according to the first symmetric key of the first communication device using an authentication encryption algorithm with associated data; the application server determines that the legal key list of the first type of device includes the third key, including: the application server decrypts and verifies the second authentication encryption information according to the first symmetric key of the first communication device; when the second authentication encryption information is decrypted and verified successfully, the application server determines that the legal key list of the second type of device includes the third key according to the device type of the first communication device.

[0038] In a fourth aspect, a communication device is provided for implementing the various methods described above. The communication device may be the first communication device in the first or second aspect described above, or a device including the first communication device, or a device included in the first communication device, such as a chip or a system chip; or, the communication device may be the second communication device in the third aspect described above, or a device including the second communication device, or a device included in the second communication device, such as a chip or a system chip. The communication device includes a module, unit, or means corresponding to the implementation of the above method, and the module, unit, or means may be implemented by hardware, software, or by executing the corresponding software implementation by hardware. The hardware or software includes one or more modules or units corresponding to the above functions.

[0039] In a fifth aspect, a communication device is provided, comprising: a processor, and may further comprise a memory; the memory is used to store computer instructions, and when the processor executes the instructions, the communication device executes the method described in any of the above aspects. The communication device may be the first communication device in the above first aspect or the second aspect, or a device including the above first communication device, or a device included in the above first communication device, such as a chip or a system chip; or the communication device may be the second communication device in the above third aspect, or a device including the above second communication device, or a device included in the above second communication device, such as a chip or a system chip.

[0040] In a sixth aspect, a communication device is provided, comprising: a processor; the processor is used to couple with a memory, and after reading instructions in the memory, execute the method as described in any of the above aspects according to the instructions. The communication device can be the first communication device in the above first aspect or the second aspect, or a device including the above first communication device, or a device included in the above first communication device, such as a chip or a system chip; or the communication device can be the second communication device in the above third aspect, or a device including the above second communication device, or a device included in the above second communication device, such as a chip or a system chip.

[0041] In a seventh aspect, a computer-readable storage medium is provided, in which instructions are stored, and when the instructions are executed on a communication device, the communication device can execute the method described in any of the above aspects. The communication device can be the first communication device in the above first aspect or the second aspect, or a device including the above first communication device, or a device included in the above first communication device, such as a chip or a system chip; or the communication device can be the second communication device in the above third aspect, or a device including the above second communication device, or a device included in the above second communication device, such as a chip or a system chip.

[0042] In an eighth aspect, a computer program product comprising instructions is provided, and when the instructions are executed on a communication device, the communication device can execute the method described in any one of the above aspects. The communication device can be the first communication device in the above first aspect or the second aspect, or a device comprising the above first communication device, or a device included in the above first communication device, such as a chip or a system chip; or the communication device can be the second communication device in the above third aspect, or a device comprising the above second communication device, or a device included in the above second communication device, such as a chip or a system chip.

[0043] In a ninth aspect, a communication device is provided (for example, the communication device may be a chip or a chip system), the communication device including a processor for implementing the functions involved in any of the above aspects. In one possible design, the communication device also includes a memory for storing necessary program instructions and data. When the communication device is a chip system, it may be composed of a chip, or may include a chip and other discrete devices.

[0044] In the tenth aspect, a communication device is provided, comprising: a processor and an interface circuit, the interface circuit may be a code / data read / write interface circuit, the interface circuit is used to receive computer execution instructions (computer execution instructions are stored in a memory, may be read directly from the memory, or may pass through other devices) and transmit them to the processor; the processor is used to run the computer execution instructions to execute the method described in any of the above aspects. The communication device may be the first communication device in the first or second aspect, or a device including the first communication device, or a device included in the first communication device, such as a chip or a system chip; or the communication device may be the second communication device in the third aspect, or a device including the second communication device, or a device included in the second communication device, such as a chip or a system chip.

[0045] Among them, the technical effects brought about by any design method in the fourth to tenth aspects can refer to the technical effects brought about by different design methods in the above-mentioned first, second or third aspects, and will not be repeated here.

[0046] In an eleventh aspect, a communication system is provided, which includes the first communication device described in the first aspect or the second aspect and the application server described in the third aspect.

[0047] These and other aspects of the present application will become more clearly understood in the description of the following embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1 It is a schematic diagram of the existing V2X-PKI architecture;

[0049] Figure 2 A schematic diagram of the structure of a communication system provided in an embodiment of the present application;

[0050] Figure 3 A schematic diagram of the structure of a communication device provided in an embodiment of the present application;

[0051] Figure 4 A schematic diagram of a secure communication method provided in an embodiment of the present application Figure 1 ;

[0052] Figure 5 A schematic diagram of a secure communication method provided in an embodiment of the present application Figure 2 ;

[0053] Figure 6 A schematic diagram of a secure communication method provided in an embodiment of the present application Figure 3 ;

[0054] Figure 7 A schematic diagram of a secure communication method provided in an embodiment of the present application Figure 4 ;

[0055] Figure 8 A schematic diagram of the structure of a first communication device provided in an embodiment of the present application;

[0056] Fig. 9 A schematic diagram of the structure of an application server provided in an embodiment of the present application. DETAILED DESCRIPTION

[0057] In order to facilitate understanding of the technical solutions of the embodiments of the present application, a brief introduction to the relevant technologies or terms of the present application is first given as follows.

[0058] First, Internet of Vehicles:

[0059] With the deep integration of the information and communication technology (ICT) industry with the automobile industry and the transportation industry, the Internet of Vehicles has gradually been recognized as one of the Internet of Things fields with the most clear market demand and the greatest industrial potential in recent years.

[0060] Due to different industry backgrounds and perspectives, the understanding of the Internet of Vehicles is not exactly the same. At present, the Internet of Vehicles can be generally understood as: with the help of new-generation information and communication technologies, all-round network connections are achieved within the car, between cars, between cars and roads, between cars and people, and between cars and service platforms, improving the level of automobile intelligence and autonomous driving capabilities, and building a new form of automobile and transportation services, thereby improving traffic efficiency, improving the driving experience of cars, and providing users with intelligent, comfortable, safe, energy-saving, and efficient comprehensive services.

[0061] The development of the Internet of Vehicles can be roughly divided into three stages. In the early stage of in-vehicle information, vehicles have basic networking capabilities; in the current stage of intelligent networking, vehicles and roadside facilities begin to collaborate through V2X technology; in the future stage of smart travel, vehicle-road collaboration will be widely used in intelligent transportation and advanced autonomous driving. It is understandable that the various stages are not serial evolutions, but may be parallel evolutions.

[0062] After building a vehicle-road collaborative system through V2X, information such as notifications and warnings will be pushed to the vehicle in real time, making driving safer; the traffic brain can collect and utilize richer and more comprehensive vehicle and road data, and conduct real-time, dynamic and accurate analysis to make traffic more efficient; the multi-sensor fusion combining on-board perception and roadside perception can cope with severe weather, occlusion, beyond-visual-range and other situations, making autonomous driving safer and more practical.

[0063] Second, V2X-PKI:

[0064] like Figure 1 As shown, it is a schematic diagram of the architecture of the existing V2X-PKI system. The V2X-PKI system includes a root certificate center (certificate authority, CA). The root CA can manage the registration CA, authorization CA and certificate revocation CA. Among them, the registration CA is also called the registration center or registration center (enrollment authority, EA), and the authorization CA is also called the authorization center (authorization authority, AA).

[0065] In the certificate technology based on the V2X-PKI system, the EA first issues a registration certificate to the OBU, which is the only identity certificate of the OBU in a V2X-PKI system; then, the OBU applies to the AA for a business certificate (authorization ticket, AT). After receiving the business certificate application from the OBU, the AA can review it and issue the business certificate to the OBU after the review is passed; when the OBU sends a broadcast message on the PC5 interface, it can carry the business certificate in the broadcast message and use the private key corresponding to the public key in the business certificate to sign the broadcast message, so that it can be considered that the business certificate provides authentication and integrity protection for the broadcast message of the PC5 interface. Among them, according to the existing European and American standards, the OBU needs to switch to 10 to 100 business certificates every week to achieve privacy protection to prevent third-party tracking; the business certificate is also called a pseudonym certificate or a short-term certificate.

[0066] In addition, the certificate revocation CA can be responsible for revoking the registration certificate or business certificate of the OBU, and updating the certificate revocation list (CRL) when the registration certificate or business certificate of the OBU is revoked, or when the certificate within the V2X-PKI system is changed.

[0067] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application. Among them, in the description of the present application, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the present application is only a kind of association relationship describing the associated objects, indicating that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. And, in the description of the present application, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or its similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to clearly describe the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" are used to distinguish the same items or similar items with substantially the same functions and effects. Those skilled in the art can understand that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference.

[0068] The technical solution provided in the embodiment of the present application can be applied to the link between devices. The link between devices can be a device-to-device (D2D) link defined in version (Rel)-12 / 13 of the 3rd generation partner project (3GPP), or a vehicle-to-vehicle, vehicle-to-mobile phone, or vehicle-to-any-entity V2X link defined by 3GPP for the Internet of Vehicles, including Rel-14 / 15. It also includes the V2X link based on the new radio (NR) system of Rel-16 and subsequent versions currently being studied by 3GPP. Among them, the D2D link or V2X link can also be called a side link, an auxiliary link, or a side link.

[0069] like Figure 2As shown, a communication system 10 provided in an embodiment of the present application is provided. The communication system 10 includes a first communication device 20 and a second communication device 30. The first communication device 20 and the second communication device 30 can communicate directly with each other through a PC5 interface.

[0070] Among them, the first communication device 20 belongs to the first type of device, and the second communication device 30 belongs to the second type of device. In the embodiment of the present application, the first type of device and the second type of device can be different types of devices, for example, the first type of device can be a road side unit (RSU) or a device including an RSU, and the second type of device can be an on-board unit (OBU) or a device including an OBU; or the first type of device can be an OBU or a device including an OBU, and the second type of device can be an RSU or a device including an RSU. The first type of device and the second type of device can also be the same type of device, for example, the first type of device and the second type of device are both OBUs or devices including OBUs, or both are RSUs or devices including RSUs, and the embodiment of the present application does not specifically limit this.

[0071] by Figure 2 Taking the interaction between the first communication device 20 and the second communication device 30 shown as an example, in an embodiment of the present application, the first communication device 20 receives a first message from the second communication device 30, and the first message includes the first public key of the second communication device 30 and the digital signature of the first message. When the first public key of the second communication device is included in the list of legitimate keys of the second type of device, the first communication device 20 verifies the digital signature of the first message according to the first public key of the second communication device 30. When the digital signature of the first message is verified, the first communication device 20 extracts the message body of the first message.

[0072] Based on the solution of the embodiment of the present application, when the first public key of the second communication device is included in the legal key list of the second type of device, the identity of the second communication device can be considered legal, and then the digital signature of the first message is verified according to the first public key of the second communication device. When the digital signature of the first message is verified, it can be considered that the first message has not been tampered with, and the message body of the first message is extracted. In other words, on the one hand, since the first communication device can verify the legitimacy of the identity of the second communication device according to the legal key list of the second type of device, and verify the integrity of the first message according to the digital signature of the first message, it can deal with the security threats of counterfeit identity and tampered data during message transmission. On the other hand, there is no need to introduce a certificate authentication authority and a certificate mechanism, which can simplify the implementation process of responding to the above security threats, and is more conducive to deployment and implementation.

[0073] Optional, such as Figure 2As shown, the communication system 10 may further include an application server 40, which may provide a legal key list of the second type of device to the first communication device 20, or provide a legal key list of the first type of device to the second communication device 30. The application server 40 may communicate with the first communication device 20 or the second communication device 30 via a Uu interface. The communication link between the application server 40 and the first communication device 20 or the second communication device 30 includes an uplink (UL) and a downlink (DL).

[0074] by Figure 2 Taking the interaction between the first communication device 20 and the application server 40 as an example, in the embodiment of the present application, the first communication device 20 sends a first configuration request message to the application server 40, and the first configuration request message is used to request a list of legal keys for the second type of device. Correspondingly, the application server 40 receives the first configuration request message from the first communication device 20, and in response to the first configuration request message, sends a list of legal keys for the second type of device to the first communication device 20.

[0075] Based on the solution of the embodiment of the present application, on the one hand, since the application server can provide the first communication device with a list of legal keys of the second type of device, the first communication device can verify the legitimacy of the identity of the message sender according to the list of legal keys of the second type of device when receiving the message later, thereby coping with the security threat of identity impersonation during message transmission. On the other hand, there is no need to introduce a certificate authentication authority and a certificate mechanism, which can simplify the implementation process of coping with the above security threats and is more conducive to deployment and implementation.

[0076] Optionally, the first communication device or the second communication device in the embodiment of the present application may be a vehicle; it may also be a vehicle-mounted terminal installed on the vehicle to assist the vehicle in driving, or it may be a vehicle-mounted module, vehicle-mounted module, vehicle-mounted component, vehicle-mounted chip or vehicle-mounted unit built into the vehicle as one or more components or units. The vehicle can implement the method of the present application through the built-in vehicle-mounted module, vehicle-mounted module, vehicle-mounted component, vehicle-mounted chip or vehicle-mounted unit.

[0077] Among them, the vehicle-mounted terminal can be a user equipment (UE), access terminal, terminal unit, terminal station, mobile station, mobile station, remote station, remote terminal, mobile device, wireless communication equipment, terminal agent or terminal device in the NR system or the future evolved public land mobile network (PLMN). The access terminal may be a cellular phone, a cordless phone, a session initiation protocol (SIP) phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), a handheld device with wireless communication function, a computing device or other processing device connected to a wireless modem, a vehicle-mounted device or a wearable device, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, etc. The vehicle-mounted terminal may be mobile or fixed.

[0078] Alternatively, optionally, the first communication device or the second communication device in the embodiment of the present application may be a roadside device, or may be a module, component, chip or unit built into the roadside device as one or more parts or units.

[0079] Optionally, the first communication device 20, the second communication device 30 or the application server 40 in the embodiment of the present application may also be referred to as a communication device, which may be a general device or a dedicated device, and the embodiment of the present application does not specifically limit this.

[0080] Optionally, in the embodiment of the present application, Figure 2 The first communication device 20, the second communication device 30 or the application server 40 can be Figure 3 It is implemented by the communication device (or communication apparatus) 50 in the embodiment. Figure 3 FIG. 5 is a schematic diagram of the structure of a communication device 50 provided in an embodiment of the present application. The communication device 50 includes one or more processors 501 and at least one communication interface ( Figure 3The communication interface 504 and a processor 501 are used as examples for illustration only), and optionally a memory 503 may be included; optionally, a communication bus 502 may also be included.

[0081] Optionally, the processor 501, the communication interface 504, or the memory 503 may be coupled together ( Figure 3 ), or, Figure 3 As shown, they may also be connected together via a communication bus 502 .

[0082] The processor 501 may be a general-purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the execution of the program of the present application.

[0083] The communication bus 502 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3 The communication bus 502 is represented by only one thick dashed line, but it does not mean that there is only one bus or one type of bus. The communication bus 502 can be used to connect different components in the communication device 50 so that the different components can communicate.

[0084] The communication interface 504 may be a transceiver module for communicating with other devices or communication networks, such as Ethernet, radio access network (RAN), wireless local area network (WLAN), etc. For example, the transceiver module may be a device such as a transceiver or a transceiver. Optionally, the communication interface 504 may also be a transceiver circuit located in the processor 501 to implement signal input and signal output of the processor.

[0085] The memory 503 may be a device with a storage function. For example, it may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory may exist independently and be connected to the processor via a communication line 502. The memory may also be integrated with the processor.

[0086] The memory 503 is used to store computer-executable instructions for executing the solution of the present application, and the execution is controlled by the processor 501. The processor 501 is used to execute the computer-executable instructions stored in the memory 503, thereby realizing the secure communication method provided in the embodiment of the present application.

[0087] Alternatively, optionally, in an embodiment of the present application, the processor 501 may also perform processing-related functions in the secure communication method provided in the following embodiments of the present application, and the communication interface 504 is responsible for communicating with other devices or communication networks, which is not specifically limited in the embodiments of the present application.

[0088] Optionally, the computer-executable instructions in the embodiments of the present application may also be referred to as application code, which is not specifically limited in the embodiments of the present application.

[0089] In a specific implementation, as an embodiment, the processor 501 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 in.

[0090] In a specific implementation, as an embodiment, the communication device 50 may include multiple processors, such as Figure 3 501 and processor 508 in the embodiment of the present invention. Each of these processors may be a single-CPU processor or a multi-CPU processor. The processor herein may refer to one or more devices, circuits, and / or processing cores for processing data (e.g., computer program instructions).

[0091] In a specific implementation, as an embodiment, the communication device 50 may also include an output device 505 and an input device 506. The output device 505 communicates with the processor 501 and can display information in a variety of ways. For example, the output device 505 may be a liquid crystal display (LCD), a light emitting diode (LED) display device, a cathode ray tube (CRT) display device, or a projector. The input device 506 communicates with the processor 501 and can receive user input in a variety of ways. For example, the input device 506 may be a mouse, a keyboard, a touch screen device, or a sensor device.

[0092] The following will be combined Figures 1 to 3 , the secure communication method provided in the embodiment of the present application is described in detail.

[0093] It should be noted that the message names between network elements or the names of parameters in the messages in the following embodiments of the present application are merely examples, and other names may be used in specific implementations, and the embodiments of the present application do not impose any specific limitations on this.

[0094] It should be noted that the following embodiments of the present application are described by taking the commercial vehicle implementing the vehicle to infrastructure (vehicle to infrastructure) or vehicle to road communication in V2X as an example, that is, the first type of equipment and the second type of equipment are different types of equipment. Among them, one type of equipment in the first type of equipment and the second type of equipment can be a vehicle or an on-board terminal installed on a vehicle or an on-board chip or on-board unit built into the vehicle, and the other type of equipment can be a roadside infrastructure, or a chip or roadside unit placed in the roadside infrastructure.

[0095] It should be noted that, in the embodiments of the present application, Figure 2The interaction between the first communication device 20 belonging to the first type of device, the second communication device 30 belonging to the second type of device, and the application server 40 is used as an example for explanation. It is assumed that the first communication device and the second communication device are pre-configured with an initial X.509 certificate when leaving the factory, so as to subsequently establish a transport layer security (TLS) channel with the application server; the application server is pre-configured with an original equipment manufacturer (OEM) root certificate, which is used to verify the initial X.509 certificate of the first communication device or the second communication device, and establish a TLS channel with the first communication device or the second communication device. That is to say, the embodiment of the present application assumes that a TLS channel is established between the application server and the first communication device or the second communication device.

[0096] First, take the first type of equipment as vehicles (such as city buses), the second type of equipment as roadside infrastructure, and the number of vehicles and roadside infrastructure is fixed or varies within a controllable range, as an example. Figure 4 As shown, a secure communication method provided in an embodiment of the present application includes the following steps:

[0097] S401: A first communication device sends a first configuration request message to an application server. Correspondingly, the application server receives the first configuration request message from the first communication device.

[0098] The first communication device belongs to a first type of device, the first configuration request message is used to request a legal key list of a second type of device, and the second type of device is a type of device different from the first type of device.

[0099] Optionally, the first configuration request message may include one or more of the following: an identifier of the first communication device, a device type of the first communication device, a digital signature of the first configuration request message, or a third key, wherein the third key includes the first public key of the first communication device, or the third key includes the first public key of the first communication device and the first symmetric key of the first communication device asymmetrically encrypted using the public key of the application server.

[0100] Among them, the first public key of the first communication device can be a public key in a first public-private key pair generated by the first communication device according to an asymmetric encryption algorithm (for example, the SM2 algorithm), or it can be a public key in an initial X.509 certificate preset when the first communication device leaves the factory. The embodiment of the present application does not specifically limit this; the first symmetric key of the first communication device can be a symmetric key generated by the first communication device according to a symmetric encryption algorithm (for example, the SM4 algorithm); the identifier of the first communication device is used to uniquely identify the first communication device; the device type of the first communication device is a first type; the digital signature of the first configuration request message is obtained by signing the message body of the first configuration request message using the first private key corresponding to the first public key of the first communication device.

[0101] Optionally, before the application server sends the legal key list of the second type of device to the first communication device, the secure communication method provided in the embodiment of the present application further includes: the application server obtains the legal key list of the second type of device. In a possible implementation, Figure 4 As shown, the application server may obtain the legal key list of the second type of device by the following steps:

[0102] S402: The second communication device sends a second configuration request message to the application server. Correspondingly, the application server receives the second configuration request message from the second communication device.

[0103] The second configuration request message includes a second key, the second key includes a first public key of the second communication device, or the second key includes the first public key of the second communication device and a first symmetric key of the second communication device asymmetrically encrypted using a public key of the application server.

[0104] Optionally, the second configuration request message may further include one or more of the following: an identifier of the second communication device, a device type of the second communication device, or a digital signature of the second configuration request message.

[0105] Among them, the first public key of the second communication device can be the public key in the first public-private key pair generated by the second communication device according to an asymmetric encryption algorithm (for example, the SM2 algorithm), or it can be the public key in the initial X.509 certificate preset by the second communication device when it leaves the factory. The embodiment of the present application does not make specific limitations on this; the first symmetric key of the second communication device can be a symmetric key generated by the second communication device according to a symmetric encryption algorithm (for example, the SM4 algorithm); the identifier of the second communication device is used to uniquely identify the second communication device; the device type of the second communication device is the second type; the digital signature of the second configuration request message is obtained by signing the message body of the second configuration request message using the first private key corresponding to the first public key of the second communication device.

[0106] S403: The application server determines a legal key list of the second type of device according to the second configuration request message.

[0107] Wherein, when the second configuration request message includes the second key, the application server determines the legal key list of the second type of device according to the second configuration request message, which may include: the application server determines that the legal key list of the second type of device includes the second key, that is, the application server extracts the second key from the second configuration request message, and saves the second key to the legal key list of the second type of device. Optionally, the legal key list of the second type of device may also include a device identifier of the second type of device.

[0108] Optionally, when the second configuration request message also includes the device type of the second communication device and the digital signature of the second configuration request message, the application server determines that the legal key list of the second type of device includes the second key, which may include: the application server obtains the first public key of the second communication device from the second configuration request message, verifies the digital signature of the second configuration request message according to the first public key of the second communication device, and when the digital signature of the second configuration request message passes the verification, the application server determines, based on the device type of the second communication device, that the legal key list of the second type of device includes the second key.

[0109] It can be understood that when the second key includes the first public key of the second communication device, the legal key list of the second type of device includes the first public key of the second communication device. Exemplarily, the legal key list of the second type of device can be as shown in Table 1, wherein the identifier N ID1 represents the identifier of the second communication device, and N1 represents the first public key of the second communication device.

[0110] When the second key includes the first public key of the second communication device and the first symmetric key of the second communication device asymmetrically encrypted using the public key of the application server, the legal key list of the second type of device includes the first public key of the second communication device and the first symmetric key of the second communication device. Accordingly, the application server extracting the second key from the second configuration request message may include: the application server decrypting the first symmetric key of the second communication device asymmetrically encrypted using the public key of the application server according to the private key corresponding to the public key of the application server.

[0111] Exemplarily, the legal key list of the second type of device may be as shown in Table 2, wherein the identifier N ID1 represents the identifier of the second communication device, N1 represents the first public key of the second communication device, and Sn1 represents the first symmetric key of the second communication device.

[0112] Table 1

[0113] Equipment identification Public Key ID1 N1

[0114] Table 2

[0115] Equipment identification Public Key Symmetric Key ID1 N1 Sn1

[0116] Optionally, when the legal key list of the second type of device includes the device identification of the second type of device, in a possible implementation, in the initial information of the legal key list of the second type of device, the device identification may be known, that is, the application server may determine the device identifications of X second type of devices, where X is the total number of the second type of devices. Exemplarily, in this case, the initial information in the legal key list of the second type of device may be as shown in Table 3 or Table 4.

[0117] It should be noted that in the embodiment of the present application, the total number of second-type devices may be the total number of second-type devices in part or all of the service area of ​​the application server. For example, when the service area of ​​the application server is a city, the total number of second-type devices may be the total number of second-type devices in the city, or the total number of second-type devices in a certain administrative district of the city. This is explained uniformly here and will not be repeated in the following embodiments.

[0118] Table 3

[0119]

[0120] Table 4

[0121]

[0122] Accordingly, in this implementation, the application server determines that the legal key list of the second type of device includes the second key according to the device type of the second communication device, which may include: the application server determines that the legal key list of the second type of device includes the second key according to the device type of the second communication device and the identifier of the second communication device. That is, the application server saves the second key to the position corresponding to the identifier of the second communication device in the legal key list of the second type of device. Exemplarily, taking the identifier of the second communication device as N ID1 as an example, after the application server determines that the legal key list of the second type of device includes the second key, the legal key list of the second type of device may be as shown in Table 5 or Table 6.

[0123] Table 5

[0124]

[0125] Table 6

[0126]

[0127]

[0128] In another possible implementation, the initial information of the legal key list of the second type of device is empty. Exemplarily, in this case, the initial information in the legal key list of the second type of device may be as shown in Table 7 or Table 8. In the subsequent interaction process between the application server and the second type of device, the application server saves the device identification and key of the second type of device to the legal key list of the second type of device.

[0129] Table 7

[0130] Equipment identification Public Key

[0131] Table 8

[0132] Equipment identification Public Key Symmetric Key

[0133] Accordingly, in this implementation, the application server determines that the legal key list of the second type of device includes the second key according to the device type of the second communication device, which may include: the application server determines that the legal key list of the second type of device includes the second key and the identifier of the second communication device according to the device type of the second communication device. That is, the application server saves the correspondence between the second key and the identifier of the second communication device to the legal key list of the second type of device. Exemplarily, taking the identifier of the second communication device as N ID1, the first public key of the second communication device as N1, and the first symmetric key of the second communication device as Sn1 as an example, after the application server determines that the legal key list of the second type of device includes the second key, the legal key list of the second type of device may be as shown in Table 1 or Table 2 above.

[0134] Optionally, the application server may obtain the public key of each second type device among the X second type devices, or the public key and the symmetric key of each second type device, through the method of steps S402-S403 above. That is to say, the legal key list of the second type devices may ultimately include the public key of each second type device among the X second type devices, or the public key and the symmetric key of each second type device. Exemplarily, at this time, the legal key list of the second type devices may be as shown in Table 9 or Table 10.

[0135] Table 9

[0136]

[0137] Table 10

[0138]

[0139] S404: In response to the first configuration request message, the application server sends a list of legal keys of the second type of devices to the first communication device. Correspondingly, the first communication device receives the list of legal keys of the second type of devices from the application server.

[0140] The legal key list of the second type of devices includes the public keys of K second type of devices, or the legal key list of the second type of devices includes the public keys and symmetric keys of K second type of devices, where K is a positive integer less than or equal to X.

[0141] That is to say, the embodiment of the present application is not limited to sending the legal key list of the second type of device to the first communication device only when the legal key list of the second type of device includes the key of each second type of device in the X second type of devices. Optionally, the application server may send the legal key list of the second type of device to the first communication device in a variety of different situations:

[0142] In one possible implementation, the application server may send a legitimate key list of the second type of device to the first communication device after confirming that the legitimate key list of the second type of device includes the public key of each of the X second type of devices, or includes the public key and the symmetric key of each second type of device. In this case, K is equal to X.

[0143] In another possible implementation, the application server may send a legitimate key list of the second type of device to the first communication device when it is confirmed that the public key of the second type of device is included in the legitimate key list of the second type of device, or the number of public keys and symmetric keys of the second type of device included is greater than the first threshold. At this time, K is greater than the first threshold and less than or equal to X.

[0144] Exemplarily, if X is 10 and the first threshold is 6, the application server sends a legitimate key list of the second type of device to the first communication device when confirming that the legitimate key list of the second type of device includes more than 6 public keys of the second type of device, or more than 6 public keys and symmetric keys of the second type of device.

[0145] In another possible implementation, the application server may send a legitimate key list of the second type of device to the first communication device upon confirming that the legitimate key list of the second type of device includes the public keys of some specific second type of devices, or includes the public keys and symmetric keys of some specific second type of devices.

[0146] Optionally, the specific part of the second type devices may be, for example, relatively important second type devices in V2I communication. For example, among X second type devices, second type device 1 and second type device 2 are the specific second type devices. When the application server determines that the legitimate key list of the second type devices includes the public key of second type device 1 or the public key and symmetric key of second type device 1, and the public key of second type device 2 or the public key and symmetric key of second type device 2, the legitimate key list of the second type devices may be sent to the first communication device.

[0147] Optionally, the application server may carry the legal key list of the second type of device in the second message and send it to the first communication device, that is, the second message includes the legal key list of the second type of device.

[0148] Optionally, the second message may also include a digital signature of the application server on the legal key list of the second type of device, and the digital signature of the application server on the legal key list of the second type of device may be obtained by the application server asymmetrically encrypting the legal key list of the second type of device using the public key of the application server. Based on this, since the application server signs the legal key list of the second type of device when sending the legal key list of the second type of device to the first communication device, it can prevent the legal key list of the second type of device from being maliciously tampered with during the transmission process.

[0149] Based on this solution, on the one hand, since the application server can provide the first communication device with a list of legal keys of the second type of device, the first communication device can verify the legitimacy of the identity of the message sender according to the list of legal keys of the second type of device when it receives the message later, thereby coping with the security threat of identity impersonation during message transmission. On the other hand, there is no need to introduce a certificate authentication authority and a certificate mechanism, which can simplify the implementation process of coping with the above security threats and is more conducive to deployment and implementation.

[0150] In an implementation scenario of an embodiment of the present application, the second configuration request message in the above step S402 is also used to request a legal key list of the first type of device. In this scenario, the secure communication method provided by the embodiment of the present application further includes the following steps S405-S406:

[0151] S405: The application server determines a legal key list of the first type of device.

[0152] Optionally, the application server may determine the legal key list of the first type of device according to the first configuration request message in step S401, that is, the first configuration request message is also used by the application server to determine the legal key list of the first type of device.

[0153] Among them, when the first configuration request message includes the third key, the application server determines the legal key list of the first type of device according to the first configuration request message, which may include: the application server determines that the legal key list of the first type of device includes the third key. That is, the application server extracts the third key from the first configuration request message and saves the third key to the legal key list of the first type of device. Optionally, the legal key list of the first type of device may also include the device identifier of the first type of device.

[0154] Optionally, when the first configuration request message also includes the device type of the first communication device and the digital signature of the first configuration request message, the application server determines that the legitimate key list of the first type of device includes the third key, which may include: the application server obtains the first public key of the first communication device from the first configuration request message, verifies the digital signature of the first configuration request message according to the first public key of the first communication device, and when the digital signature of the first configuration request message passes the verification, the application server determines, based on the device type of the first communication device, that the legitimate key list of the first type of device includes the third key.

[0155] It can be understood that when the third key includes the first public key of the first communication device, the first public key of the first type of device is included in the legal key list; when the third key includes the first public key of the first communication device and the first symmetric key of the first communication device asymmetrically encrypted using the public key of the application server, the legal key list of the first type of device includes the first public key of the first communication device and the first symmetric key of the first communication device. At this time, accordingly, the application server extracts the third key from the first configuration request message, which may include: the application server decrypts the first symmetric key of the first communication device asymmetrically encrypted using the public key of the application server according to the private key corresponding to the public key of the application server.

[0156] Optionally, when the legal key list of the first type of device includes the device identification of the first type of device, the initial information of the legal key list of the first type of device is similar to the initial information of the legal key list of the second type of device. Please refer to the relevant description in the above step S403 and will not be repeated here.

[0157] Optionally, the application server may obtain the public key of each first type device among the Y first type devices, or the public key and the symmetric key of each first type device, through the method of step S405 above. That is to say, the legal key list of the first type devices may ultimately include the public key of each first type device among the Y first type devices, or the public key and the symmetric key of each first type device. Exemplarily, at this time, the legal key list of the first type devices may be as shown in Table 11 or Table 12.

[0158] Wherein, Y is the total number of first type devices. It should be noted that, in the embodiment of the present application, the total number of first type devices may be the total number of first type devices in part or all of the service areas of the application server. For example, when the service area of ​​the application server is a certain city, the total number of first type devices may be the total number of first type devices in the city, or the total number of first type devices in a certain administrative district of the city. This is a unified explanation and will not be repeated in the following embodiments.

[0159] The total number of first-type devices in a certain area, for example, when the first-type device is a roadside infrastructure, the total number of the first-type devices may be the total number of roadside infrastructure deployed in a certain administrative district of a certain city; or, the total number of first-type devices may be the total number of first-type devices that meet certain conditions, for example, when the first-type device is a bus, the total number of first-type devices may be the total number of buses on a certain route in a certain city. This is explained uniformly here and will not be repeated in the following embodiments.

[0160] Table 11

[0161]

[0162] Table 12

[0163]

[0164] Optionally, the legal key list of the first type of device and the legal key of the second type of device may be included in a global legal key list, and the table items of the global legal key list may also include the device type. When the legal key list of the first type of device and the legal key list of the second type of device do not include the device identifier, the global legal key list may also include the device identifier. In other words, the application server may maintain a global legal key list, and send the legal key list of the second type of device included in the global legal key list to the first communication device, or send the legal key list of the first type of device included in the global legal key list to the second communication device. Exemplarily, the global legal key list may be as shown in Table 13 or Table 14.

[0165] Table 13

[0166]

[0167] Table 14

[0168]

[0169] S406: In response to the second configuration request message, the application server sends a legal key list of the first type of device to the second communication device.

[0170] The legal key list of the first type of devices includes the public keys of P first type of devices, or the legal key list of the first type of devices includes the public keys and symmetric keys of P first type of devices, where P is a positive integer less than or equal to Y.

[0171] That is to say, the embodiment of the present application is not limited to sending the legal key list of the first type of device to the second communication device only when the legal key list of the first type of device includes keys of Y first type of devices. Optionally, the application server can send the legal key list of the first type of device to the second communication device in a variety of different situations, similar to the case where the application server sends the legal key list of the second type of device to the first communication device. Please refer to the relevant description in the above step S404, which will not be repeated here.

[0172] Optionally, the application server may carry the legal key list of the first type of device in the third message and send it to the second communication device, that is, the third message includes the legal key list of the first type of device.

[0173] Optionally, the third message may also include a digital signature of the application server on the legal key list of the first type of device, and the digital signature of the application server on the legal key list of the first type of device may be obtained by the application server asymmetrically encrypting the legal key list of the first type of device using the public key of the application server. Based on this, since the application server signs the legal key list of the first type of device when sending the legal key list of the first type of device to the second communication device, it can prevent the legal key list of the first type of device from being maliciously tampered with during the transmission process.

[0174] Based on this solution, on the one hand, since the application server can provide the second communication device with a list of legal keys of the first type of device, when the second communication device subsequently receives a message, it can verify the legitimacy of the identity of the message sender according to the list of legal keys of the first type of device, thereby coping with the security threat of identity impersonation during message transmission. On the other hand, there is no need to introduce a certificate authentication authority and a certificate mechanism, which can simplify the implementation process of coping with the above security threats and is more conducive to deployment and implementation.

[0175] It can be understood that the above steps can be understood as a configuration stage before the first communication device and the second communication device interact. After the first communication device obtains the legal key list of the second type of device, or the second communication device obtains the legal key list of the first type of device, the first communication device and the second communication device can communicate based on the legal key list of the first type of device or the legal key list of the second type of device.

[0176] like Figure 5 As shown, a secure communication method provided in an embodiment of the present application, the secure communication method can also be understood as an interaction scheme between a first communication device and a second communication device, and the secure communication method includes the following steps:

[0177] S501: The second communication device sends a first message. Correspondingly, the first communication device receives the first message from the second communication device.

[0178] Among them, the first message can be a broadcast message, which includes the first public key of the second communication device and the digital signature of the first message. The digital signature of the first message is obtained by signing the message body of the first message using the first private key corresponding to the first public key of the second communication device.

[0179] Exemplarily, the message format of the first message may be [N1||message body||n1 signature], wherein N1 is the first public key of the second communication device, and n1 signature is the digital signature of the first message.

[0180] S502: The first communication device uses the first public key of the second communication device to match a legal key list of the second type of device.

[0181] Optionally, when the legal key list of the second type of device includes the first public key of the second communication device, the following step S503 is performed; or, when the legal key list of the second type of device does not include the first public key of the second communication device, the first message is discarded.

[0182] S503: The first communication device verifies the digital signature of the first message according to the first public key of the second communication device.

[0183] Optionally, when the digital signature verification of the first message passes, the following step S504 is executed; or, when the digital signature verification of the first message fails, the first message is discarded.

[0184] S504: The first communication device extracts a message body of the first message.

[0185] Optionally, after the first communication device extracts the message body of the first message, it may perform subsequent processing, which is not specifically limited in the embodiment of the present application.

[0186] Based on this scheme, when the first public key of the second communication device is included in the legal key list of the second type of device, the identity of the second communication device can be considered legal, and then the digital signature of the first message is verified according to the first public key of the second communication device. When the digital signature of the first message is verified, it can be considered that the first message has not been tampered with, and the message body of the first message can be extracted. In other words, on the one hand, since the first communication device can verify the legitimacy of the identity of the second communication device according to the legal key list of the second type of device, and verify the integrity of the first message according to the digital signature of the first message, it can deal with the security threats of counterfeit identity and tampered data during message transmission. On the other hand, there is no need to introduce a certificate authentication authority and a certificate mechanism, which can simplify the implementation process of dealing with the above security threats and is more conducive to deployment and implementation.

[0187] Above Figure 5 The embodiment shown provides a solution when the first communication device sends a broadcast message at the PC5 port. Furthermore, the embodiment of the present application also provides a solution when the second communication device sends a unicast message at the PC5 port. The solution is based on the fact that the legal key list of the first type of device sent by the application server to the second communication device includes the device identifier of the first type of device, so that the second communication device can determine the recipient of the unicast message. Figure 6 As shown, the scheme includes the following steps:

[0188] S601: A second communication device sends a first message to a first communication device. Correspondingly, the first communication device receives the first message from the second communication device.

[0189] The first message includes not only the first public key of the second communication device and the digital signature of the first message, but also indication information of the destination communication device corresponding to the first message. That is, in this solution, the first message is a unicast message.

[0190] Optionally, the indication information of the destination communication device may be a public key of the destination communication device or an identifier of the destination communication device.

[0191] Exemplarily, taking the indication information of the destination communication device as the first public key of the first communication device as an example, the message format of the first message can be [M1||N1||message body||n1 signature], where M1 represents the first public key of the first communication device; or, taking the indication information of the destination communication device as the identifier of the first communication device as an example, the message format of the first message can be [identifier M ID1||N1||message body||n1 signature], where identifier M ID1 is the identifier of the first communication device.

[0192] Optionally, the unicast message may be sent using a multiplexed broadcast channel or a dedicated unicast channel, which is not specifically limited in the embodiments of the present application.

[0193] S602: The first communication device uses the indication information of the destination communication device to match the identifier of the first communication device or the first public key of the first communication device.

[0194] Optionally, the first communication device may extract the indication information of the destination communication device in the first message, and use the indication information of the destination communication device to match the identification of the first communication device or the first public key of the first communication device. When the indication information of the destination communication device is the same as the identification of the first communication device or the first public key of the first communication device, the first communication device confirms that the indication information indicates that the destination communication device is the first communication device, that is, confirms that the recipient of the first message is the first communication device, and continues to execute step S603; or, when the indication information of the destination communication device indicates that the destination communication device is not the first communication device, the first communication device discards the first message.

[0195] S603: The first communication device uses the first public key of the second communication device to match a legal key list of the second type of device.

[0196] That is to say, in this scheme, when the indication information of the destination communication device indicates that the destination communication device is the first communication device, and the legal key list of the second type of device includes the first public key of the second communication device, the subsequent step S604 is executed; or, when the legal key list of the second type of device does not include the first public key of the second communication device, the first message is discarded.

[0197] S604: The first communication device verifies the digital signature of the first message according to the first public key of the second communication device.

[0198] Optionally, when the digital signature verification of the first message passes, the following step S605 is executed; or, when the digital signature verification of the first message fails, the first message is discarded.

[0199] S605. The first communication device extracts a message body of the first message.

[0200] Optionally, after the first communication device extracts the message body of the first message, it may perform subsequent processing, which is not specifically limited in the embodiment of the present application.

[0201] Based on this solution, when a unicast message is sent at PC5 port, the identity of the sender of the unicast message can be authenticated, thereby coping with security threats such as identity impersonation and data tampering during unicast message transmission.

[0202] Furthermore, the embodiment of the present application also provides a solution for encrypting the PC5 port unicast message, in which:

[0203] In step S601, the message body of the first message is encrypted using the first key. Exemplarily, the message format of the first message may be [M1||N1||Enc(first key, message body)||n1 signature], where Enc represents an encryption algorithm, which may be a symmetric encryption algorithm or an asymmetric encryption algorithm. This application does not specifically limit the encryption algorithm used, and Enc(first key, message body) represents the message body of the first message encrypted using the first key.

[0204] Correspondingly, in step S605, the first communication device extracting the message body of the first message may include: the first communication device decrypting the message body of the first message encrypted by using the first key according to the first key.

[0205] Optionally, in an embodiment of the present application, the first key may be a first public key of the first communication device; or the first key may be a first symmetric key of the first communication device; or, it may be a first symmetric key of the second communication device.

[0206] In different implementations, the form of the first key may also be different, for example:

[0207] In a possible implementation, when the first public key of the second communication device is included in the legal key list of the second type of device, the first key may be the first public key of the first communication device. At this time, exemplarily, if the indication information of the destination communication device is the first public key of the first communication device, the message format of the first message may be [M1||N1||Enc(M1, message body)||n1 signature]; or, if the indication information of the destination communication device is the identifier of the first communication device, the message format of the first message may be [identifier M ID1||N1||Enc(M1, message body)||n1 signature].

[0208] Correspondingly, the message body of the first message is encrypted using the first key, which may include: the message body of the first message is asymmetrically encrypted using the first public key of the first communication device; the first communication device decrypts the message body of the first message encrypted using the first key based on the first key, which may include: the first communication device obtains the first private key corresponding to the first public key of the first communication device based on the first public key of the first communication device, and decrypts the message body of the first message asymmetrically encrypted using the first public key of the first communication device based on the first private key corresponding to the first public key of the first communication device.

[0209] In another possible implementation, when the first symmetric key of the first communication device is included in the legal key list of the second type of device, the first key may be the first symmetric key of the first communication device. At this time, exemplarily, if the indication information of the destination communication device is the first public key of the first communication device, the message format of the first message may be [M1||N1||Enc(Sm1, message body)||n1 signature]; or, if the indication information of the destination communication device is the identifier of the first communication device, the message format of the first message may be [identifier M ID1||N1||Enc(Sm1, message body)||n1 signature].

[0210] Correspondingly, the message body of the first message is encrypted using the first key, which may include: the message body of the first message is symmetrically encrypted using the first symmetric key of the first communication device; the first communication device decrypts the message body of the first message encrypted using the first key based on the first key: which may include: the first communication device obtains the first symmetric key of the first communication device, and decrypts the message body of the first message symmetrically encrypted using the first symmetric key of the first communication device based on the first symmetric key of the first communication device.

[0211] Optionally, the first communication device obtains the first symmetric key of the first communication device by: the first communication device obtains the first symmetric key of the first communication device from multiple symmetric keys of the first communication device; or, the first message may also include the first symmetric key of the first communication device asymmetrically encrypted using the first public key of the first communication device. Exemplarily, the message format of the first message may be [M1||N1||Enc(M1,Sm1)||Enc(Sm1, message body)||n1 signature]. At this time, the first communication device obtains the first symmetric key of the first communication device by: the first communication device obtains the first private key corresponding to the first public key of the first communication device according to the first public key of the first communication, and decrypts the first symmetric key of the first communication device asymmetrically encrypted using the first public key of the first communication device according to the first private key corresponding to the first public key of the first communication device to obtain the first key.

[0212] In another possible implementation, when the first type of device includes the first symmetric key of the second communication device in the legal key list, the first key may be the first symmetric key of the second communication device. At this time, exemplarily, if the indication information of the destination communication device is the first public key of the first communication device, the message format of the first message may be [M1||N1||Enc(Sn1, message body)||n1 signature]; or, if the indication information of the destination communication device is the identifier of the first communication device, the message format of the first message may be [identifier M ID1||N1||Enc(Sn1, message body)||n1 signature].

[0213] Correspondingly, the message body of the first message is encrypted using the first key, which may include: the message body of the first message is symmetrically encrypted using the first symmetric key of the second communication device; the first communication device decrypts the message body of the first message encrypted using the first key based on the first key: which may include: the first communication device obtains the first symmetric key of the second communication device from the legal key list of the second type of device, and decrypts the message body of the first message symmetrically encrypted using the first symmetric key of the second communication device based on the first symmetric key of the second communication device.

[0214] In another possible implementation, when the first symmetric key of the second communication device is not included in the legitimate key list of the first type of device, the first key may also be the first symmetric key of the second communication device. In this case, the first message may also include the first symmetric key of the second communication device asymmetrically encrypted using the first public key of the first communication device. Exemplarily, the message format of the first message may be [M1||N1||Enc(M1,Sn1)||Enc(Sn1, message body)||n1 signature].

[0215] It should be noted that, in this implementation, the legal key list of the first type of device is not limited to include the first symmetric key of the second communication device. Correspondingly, it is not limited to include the first symmetric key of the second communication device asymmetrically encrypted using the public key of the application server in the second configuration request message.

[0216] Correspondingly, the message body of the first message is encrypted using the first key, which may include: the message body of the first message is symmetrically encrypted using the first symmetric key of the second communication device; the first communication device decrypts the message body of the first message encrypted using the first key based on the first key: which may include: the first communication device obtains the first private key corresponding to the first public key of the first communication device based on the first public key of the first communication, and decrypts the first symmetric key of the second communication device asymmetrically encrypted using the first public key of the first communication device based on the first private key corresponding to the first public key of the first communication device to obtain the first key, and decrypts the message body of the first message symmetrically encrypted using the first symmetric key of the second communication device based on the first symmetric key of the second communication device.

[0217] Based on this scheme, the message body of a unicast message can be encrypted in a variety of ways, and the message content can be further protected when dealing with security threats such as identity impersonation and data tampering during message transmission.

[0218] It is understandable that when the first communication device sends a broadcast message, or sends a unicast message to the second communication device, the format of the message and the process of the second communication device receiving the broadcast message or unicast message are the same as those described above. Figure 6The method shown is similar, and you can refer to the relevant description in the above method, which will not be repeated here.

[0219] Optionally, in the configuration stage before the first communication device and the second communication device interact, the embodiment of the present application further provides a secure communication method, which may include: Figure 4 Steps S401-S406 in the embodiment shown are Figure 4 The embodiment shown differs in that:

[0220] For step S401, in this scheme, the first configuration request message includes one or more of the following: an identifier of the first communication device, a device type of the first communication device, a third key, and second authentication encryption information, wherein the third key is the first symmetric key of the first communication device asymmetrically encrypted using the public key of the application server, and the second authentication encryption information is obtained by calculating the message body of the first configuration request message based on the first symmetric key of the first communication device using an authenticated encryption with associated data (AEAD) algorithm.

[0221] Regarding step S402, in this solution, the second configuration request message includes a second key, and the second key includes a first symmetric key of the second communication device asymmetrically encrypted using a public key of the application server.

[0222] Optionally, the second configuration request message may also include one or more of the following: an identifier of the second communication device, a device type of the second communication device, or first authentication encryption information, where the first authentication encryption information is obtained by calculating the message body of the second configuration request message using an AEAD algorithm based on the first symmetric key of the second communication device.

[0223] For step S403, in this scheme, when the second configuration request message also includes the device type of the second communication device and the first authentication encryption information, the application server determines that the legal key list of the second type of device includes the second key, which may include: the application server uses the private key corresponding to the public key of the application server to decrypt the first symmetric key of the second communication device asymmetrically encrypted using the public key of the application server, and decrypts and verifies the first authentication encryption information based on the first symmetric key of the second communication device. When the first authentication encryption information is decrypted and verified successfully, the application server determines that the legal key list of the second type of device includes the second key, that is, includes the first symmetric key of the second communication device, based on the device type of the second communication device.

[0224] It should be noted that, in this solution, the legal key list of the second type of device also includes the device identification of the second type of device.

[0225] It can be understood that the legal key list of the second type of device may eventually include the symmetric key of each second type of device in the second type of device. Exemplarily, at this time, the legal key list of the second type of device may be as shown in Table 15.

[0226] Table 15

[0227]

[0228] For step S405, when the third key includes the first symmetric key of the first communication device, and the first configuration request message also includes the device type of the first communication device and the second authentication encryption information, the application server determines that the legal key list of the first type of device includes the third key, which may include: the application server uses the private key corresponding to the public key of the application server to decrypt the first symmetric key of the first communication device asymmetrically encrypted using the public key of the application server, and decrypts and verifies the second authentication encryption information based on the first symmetric key of the first communication device. When the second authentication encryption information is decrypted and verified successfully, the application server determines, based on the device type of the first communication device, that the legal key list of the first type of device includes the third key, that is, includes the first symmetric key of the first communication device.

[0229] It can be understood that the legal key list of the first type of device may eventually include the symmetric key of each first type of device in the first type of device. Exemplarily, at this time, the legal key list of the first type of device may be as shown in Table 16.

[0230] Table 16

[0231]

[0232] Optionally, the legal key list of the first type of device and the legal key of the second type of device may be included in a global legal key list, and the table items of the global legal key list may also include the device type. That is, the application server may maintain a global legal key list, and send a legal key list of the second type of device included in the global legal key list to the first communication device, or send a legal key list of the first type of device included in the global legal key list to the second communication device. Exemplarily, the global legal key list may be as shown in Table 17.

[0233] Table 17

[0234]

[0235]

[0236] Based on this configuration, the embodiment of the present application also provides a secure communication method, which can be understood as an interactive scheme between the first communication device and the second communication device when the second communication device sends a unicast message at the PC5 port, such as Figure 7 As shown, the secure communication method includes the following steps:

[0237] S701: A second communication device sends a first message to a first communication device. Correspondingly, the first communication device receives the first message from the second communication device.

[0238] The first message includes an identifier of a destination communication device corresponding to the first message, an identifier of a second communication device, and third authentication encryption information. The identifier of the destination communication device is used to indicate that the recipient of the first message is the destination communication device, the identifier of the second communication device is used to indicate that the sender of the first message is the second communication device, and the third authentication encryption information is obtained by calculating the message body of the first message using the AEAD algorithm based on the second symmetric key.

[0239] Exemplarily, the message format of the first message can be [identifier M ID1||identifier N ID1||AEAD(second symmetric key, message body)], wherein identifier M ID1 can be the identifier of the destination communication device, identifier N ID1 represents the identifier of the second communication device, and AEAD(second symmetric key, message body) represents the third authentication encryption information.

[0240] Optionally, the second symmetric key may be the first symmetric key of the first communication device, or may be the first symmetric key of the second communication device, which is not specifically limited in the embodiment of the present application.

[0241] S702: The first communication device uses the identifier of the destination communication device to match the identifier of the first communication device.

[0242] Optionally, when the identifier of the destination communication device is the same as the identifier of the first communication device, the first message includes the identifier of the first communication device, the recipient of the first message is the first communication device, and the following step S703 is executed; or, when the identifier of the destination communication device is different from the identifier of the first communication device, the first communication device discards the first message.

[0243] S703: The first communication device uses the identifier of the second communication device to match a legal key list of the second type of device.

[0244] Optionally, when the legal key list of the second type of device includes the identifier of the second communication device, the following step S704 is performed; or, when the legal key list of the second type of device does not include the identifier of the second communication device, the first communication device discards the first message.

[0245] S704: The first communication device decrypts and verifies the third authentication encryption information according to the second symmetric key.

[0246] Optionally, when the third authentication encryption information is decrypted and verified successfully, the following step S705 is executed; or, when the third authentication encryption information is decrypted or verified unsuccessfully, the first communication device discards the first message.

[0247] Optionally, the first communication device may first obtain the second symmetric key, and then decrypt and verify the third authentication encrypted information according to the second symmetric key.

[0248] When the second symmetric key is the first symmetric key of the first communication device, the first communication device obtains the second symmetric key, which may be: the first communication device obtains the first symmetric key of the first communication device from multiple symmetric keys of the first communication device; when the second symmetric key is the first symmetric key of the second communication device, the first communication device obtains the second symmetric key, which may be: the first communication device obtains the first symmetric key of the second communication device from a legal key list of a second type of device. Exemplarily, the first communication device may use the second communication device identifier to query the first symmetric key of the second communication device in the legal key list of the second type of device.

[0249] S705. The first communication device extracts a message body of the first message.

[0250] Optionally, after the first communication device extracts the message body of the first message, it may perform subsequent processing, which is not specifically limited in the embodiment of the present application.

[0251] Based on this solution, when a unicast message is sent through the PC5 port, the identity authentication and integrity protection of the sender of the unicast message can be achieved, and the message content can be protected at the same time.

[0252] It should be noted that although the above embodiments of the present application are described by taking the first type of device and the second type of device as different types of devices as an example, the embodiments of the present application do not limit the first type of device and the second type of device to be different.

[0253] It can be understood that the first type of device and the second type of device can also be devices of the same type. For example, both the first type of device and the second type of device can be OBUs or devices containing OBUs, such as buses. The first type of device can be bus No. 1 in a city, and the second type of device can be bus No. 2 in the city. In this scenario, any bus No. 1 can request a list of legal keys of some or all of bus No. 2 from the application server, and vice versa. The embodiments of the present application do not specifically limit this.

[0254] It is understandable that in the embodiment of the present application, the communication device (including the first communication device and the second communication device) and / or the application server can perform some or all of the steps in the embodiment of the present application, and these steps or operations are only examples. The embodiment of the present application can also perform other operations or variations of various operations. In addition, the various steps can be performed in different orders presented in the embodiment of the present application, and it is possible that not all operations in the embodiment of the present application need to be performed.

[0255] In the various embodiments of the present application, unless otherwise specified or provided for in any logical conflict, the terms and / or descriptions between the different embodiments are consistent and may be referenced to each other, and the technical features in the different embodiments may be combined to form new embodiments according to their inherent logical relationships.

[0256] It can be understood that in the above embodiments, the methods and / or steps implemented by the communication device (including the first communication device and the second communication device) can also be implemented by components (such as chips or circuits) that can be used for the communication device; the methods and / or steps implemented by the application server can also be implemented by components (such as chips or circuits) that can be used for the application server.

[0257] The above mainly introduces the scheme provided by the embodiment of the present application from the perspective of interaction between various network elements. Accordingly, the embodiment of the present application also provides a communication device, which is used to implement the above various methods. The communication device can be the first communication device in the above method embodiment, or a device including the above first communication device, or a device included in the above first communication device, such as a chip or a system chip; or, the communication device can be an application server in the above method embodiment, or a device including the above application server, or a device included in the above application server, such as a chip or a system chip. It can be understood that in order to implement the above functions, the communication device includes a hardware structure and / or software module corresponding to each function. Those skilled in the art should easily realize that, in combination with the units and algorithm steps of each example described in the embodiments disclosed in this article, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present application.

[0258] The embodiment of the present application can divide the functional modules of the communication device according to the above method embodiment. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules. It should be noted that the division of modules in the embodiment of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation.

[0259] For example, take the communication device as the first communication device in the above method embodiment. Figure 8 The schematic diagram of the structure of a first communication device 80 is shown. The first communication device 80 includes a processing module 801 and a transceiver module 802. The transceiver module 802, which may also be called a transceiver unit, is used to implement the sending and / or receiving functions, and may be, for example, a transceiver circuit, a transceiver, a transceiver or a communication interface.

[0260] Among them, the transceiver module 802 may include a receiving module and a sending module, which are respectively used to execute the receiving and sending steps performed by the first communication device in the above method embodiment, and the processing module 801 may be used to execute other steps except the receiving and sending steps performed by the first communication device in the above method embodiment.

[0261] In one possible implementation:

[0262] The transceiver module 802 is used to receive a first message from a second communication device, where the first message includes a first public key of the second communication device and a digital signature of the first message, the first communication device belongs to a first type of device, and the second communication device belongs to a second type of device; when the first public key of the second communication device is included in a legal key list of the second type of device, the processing module 801 is used to verify the digital signature of the first message according to the first public key of the second communication device; when the digital signature of the first message is verified, the processing module 801 is also used to extract the message body of the first message.

[0263] Optionally, the transceiver module 802 is further used to send a first configuration request message to the application server, where the first configuration request message is used to request a legal key list for the second type of device; the transceiver module 802 is further used to receive a legal key list for the second type of device from the application server.

[0264] Optionally, when the first public key of the second communication device is included in the legal key list of the second type of device, the processing module 801 is used to verify the digital signature of the first message according to the first public key of the second communication device, including: when the indication information of the destination communication device indicates that the destination communication device is the first communication device, and the first public key of the second communication device is included in the legal key list of the second type of device, the processing module 801 is used to verify the digital signature of the first message according to the first public key of the second communication device.

[0265] Optionally, the message body of the first message is encrypted using a first key; the processing module 801 is also used to extract the message body of the first message, including: the processing module 801 is also used to decrypt the message body of the first message encrypted using the first key according to the first key.

[0266] Optionally, when the first key is the first symmetric key of the first communication device, the first message also includes the first symmetric key of the first communication device asymmetrically encrypted using the first public key of the first communication device; the processing module 801 is also used to decrypt the first symmetric key of the first communication device asymmetrically encrypted using the first public key of the first communication device according to the first private key corresponding to the first public key of the first communication device to obtain the first key.

[0267] Optionally, when the first key is the first symmetric key of the second communication device, the processing module 801 is further configured to obtain the first symmetric key of the second communication device from a legal key list of the second type of device.

[0268] Optionally, when the first key is the first symmetric key of the second communication device, the first message also includes the first symmetric key of the second communication device asymmetrically encrypted using the first public key of the first communication device; the processing module 801 is also used to decrypt the first symmetric key of the second communication device asymmetrically encrypted using the first public key of the first communication device according to the first private key corresponding to the first public key of the first communication device to obtain the first key.

[0269] Another possible implementation is:

[0270] The transceiver module 802 is used to receive a first message from a second communication device, where the first message includes an identifier of the first communication device, an identifier of the second communication device, and third authentication encryption information, where the third authentication encryption information is obtained by calculating the message body of the first message using an authentication encryption algorithm with associated data based on a second symmetric key, and the first communication device belongs to a first type of device, and the second communication device belongs to a second type of device; when the identifier of the second communication device is included in a list of legal keys of the second type of device, the processing module 801 is used to decrypt and verify the third authentication encryption information based on the second symmetric key; when the third authentication encryption information is decrypted and verified successfully, the processing module 801 is also used to extract the message body of the first message.

[0271] Optionally, when the second symmetric key is the first symmetric key of the second communication device, the legal key list of the second type of device includes one or more symmetric keys of the second type of device; the processing module 801 is also used to obtain the first symmetric key of the second communication device from the legal key list of the second type of device.

[0272] Optionally, the transceiver module 802 is further used to send a first configuration request message to the application server, where the first configuration request message is used to request a legal key list for the second type of device; the transceiver module 802 is further used to receive a legal key list for the second type of device from the application server.

[0273] Among them, all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module, and will not be repeated here.

[0274] In this embodiment, the first communication device 80 is presented in the form of dividing various functional modules in an integrated manner. The "module" here may refer to a specific ASIC, a circuit, a processor and a memory that executes one or more software or firmware programs, an integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, those skilled in the art can imagine that the first communication device 80 can be used Figure 3 The form of the communication device 50 is shown.

[0275] for example, Figure 3 The processor 501 in the communication device 50 shown can call the computer-executable instructions stored in the memory 503 to enable the communication device 50 to execute the secure communication method in the above method embodiment.

[0276] For example, Figure 8 The functions / implementation processes of the processing module 801 and the transceiver module 802 can be Figure 3The processor 501 in the communication device 50 shown calls the computer execution instructions stored in the memory 503 to implement. Or, Figure 8 The function / implementation process of the processing module 801 in Figure 3 The processor 501 in the communication device 50 shown calls the computer execution instructions stored in the memory 503 to implement, Figure 8 The function / implementation process of the transceiver module 802 can be achieved by Figure 3 The communication interface 504 in the communication device 50 shown is implemented.

[0277] Since the first communication device 80 provided in this embodiment can execute the above-mentioned secure communication method, the technical effects that can be obtained can refer to the above-mentioned method embodiment and will not be repeated here.

[0278] Alternatively, take the communication device as an application server in the above method embodiment as an example. Fig. 9 The schematic diagram of the structure of an application server 90 is shown. The application server 90 includes a processing module 901 and a transceiver module 902. The transceiver module 902, which may also be called a transceiver unit, is used to implement the sending and / or receiving functions, and may be, for example, a transceiver circuit, a transceiver, a transceiver or a communication interface.

[0279] Among them, the transceiver module 902 may include a receiving module and a sending module, which are respectively used to execute the receiving and sending steps performed by the application server in the above method embodiment, and the processing module 901 may be used to execute other steps except the receiving and sending steps performed by the application server in the above method embodiment.

[0280] Among them, the transceiver module 902 is used to receive a first configuration request message from a first communication device, which belongs to a first type of device, and the first configuration request message is used to request a legal key list of a second type of device, and the second type of device is a type of device different from the first type of device; the processing module 901 is used to determine the legal key list of the second type of device; in response to the first configuration request message, the transceiver module 902 is also used to send the legal key list of the second type of device to the first communication device.

[0281] Optionally, the transceiver module 902 is further used to receive a second configuration request message from a second communication device, which belongs to the second type of device; the processing module 901 is used to determine the legal key list of the second type of device according to the second configuration request message.

[0282] Optionally, the second configuration request message includes a second key, and the second key includes the first public key of the second communication device and / or the first symmetric key of the second communication device; the processing module 901 is used to determine the legal key list of the second type of device according to the second configuration request message, including: the processing module 901 is used to determine that the legal key list of the second type of device includes the second key.

[0283] Optionally, when the second key includes the first public key of the second communication device, or the second key includes the first public key of the second communication device and the first symmetric key of the second communication device, the second configuration request message also includes the device type of the second communication device and the digital signature of the second configuration request message; the processing module 901 is used to determine that the legal key list of the second type of device includes the second key, including: the processing module 901 is used to verify the digital signature of the second configuration request message according to the first public key of the second communication device; when the digital signature of the second configuration request message is verified, the processing module 901 is also used to determine, according to the device type of the second communication device, that the legal key list of the second type of device includes the second key.

[0284] Optionally, when the second key includes the first symmetric key of the second communication device, the second configuration request message also includes the device type of the second communication device and first authentication encryption information, and the first authentication encryption information is obtained by calculating the message body of the second configuration request message based on the first symmetric key of the second communication device using an authentication encryption algorithm with associated data; a processing module 901 is used to determine that the legal key list of the second type of device includes the second key, comprising: a processing module 901 is used to decrypt and verify the first authentication encryption information based on the first symmetric key of the second communication device; when the first authentication encryption information is decrypted and verified successfully, a processing module 901 is used to determine that the legal key list of the second type of device includes the second key based on the device type of the second communication device.

[0285] Optionally, the second configuration request message is further used to request a legal key list of the first type of device; in response to the second configuration request message, the transceiver module 902 is further used to send the legal key list of the first type of device to the second communication device.

[0286] Optionally, the processing module 901 is further configured to determine a legal key list of the first type of device according to the first configuration request message.

[0287] Optionally, the first configuration request message includes a third key, and the third key includes the first public key of the first communication device and / or the first symmetric key of the first communication device; the processing module 901 is also used to determine the legal key list of the first type of device based on the first configuration request message, including: the processing module 901 is also used to determine that the legal key list of the first type of device includes the third key.

[0288] Optionally, when the third key includes the first public key of the first communication device, or the third key includes the first public key of the first communication device and the first symmetric key of the first communication device, the first configuration request message also includes the device type of the first communication device and the digital signature of the first configuration request message; the processing module 901 is also used to determine that the legal key list of the first type of device includes the third key, including: the processing module 901 is also used to verify the digital signature of the first configuration request message according to the first public key of the first communication device; when the digital signature of the first configuration request message is verified, the processing module 901 is also used to determine, according to the device type of the first communication device, that the legal key list of the first type of device includes the third key.

[0289] Optionally, when the third key includes the first symmetric key of the first communication device, the first configuration request message also includes the device type of the first communication device and second authentication encryption information, and the second authentication encryption information is obtained by calculating the message body of the first configuration request message based on the first symmetric key of the first communication device using an authentication encryption algorithm with associated data; the processing module 901 is also used to determine that the legal key list of the first type of device includes the third key, including: the processing module 901 is also used to decrypt and verify the second authentication encryption information based on the first symmetric key of the first communication device; when the second authentication encryption information is decrypted and verified successfully, the processing module 901 is also used to determine that the legal key list of the second type of device includes the third key based on the device type of the first communication device.

[0290] Among them, all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module, and will not be repeated here.

[0291] In this embodiment, the application server 90 is presented in the form of dividing various functional modules in an integrated manner. Here, the "module" may refer to a specific ASIC, circuit, processor and memory that executes one or more software or firmware programs, integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, those skilled in the art can imagine that the application server 90 can be used Figure 3 The form of the communication device 50 is shown.

[0292] for example, Figure 3 The processor 501 in the communication device 50 shown can call the computer-executable instructions stored in the memory 503 to enable the communication device 50 to execute the secure communication method in the above method embodiment.

[0293] For example, Fig. 9 The functions / implementation processes of the processing module 901 and the transceiver module 902 can be Figure 3 The processor 501 in the communication device 50 shown calls the computer execution instructions stored in the memory 503 to implement. Or, Fig. 9 The function / implementation process of the processing module 901 in Figure 3 The processor 501 in the communication device 50 shown calls the computer execution instructions stored in the memory 503 to implement, Fig. 9 The function / implementation process of the transceiver module 902 can be Figure 3 The communication interface 504 in the communication device 50 shown is implemented.

[0294] Since the application server 90 provided in this embodiment can execute the above-mentioned secure communication method, the technical effects that can be obtained can refer to the above-mentioned method embodiment and will not be repeated here.

[0295] Optionally, an embodiment of the present application further provides a communication device (for example, the communication device may be a chip or a chip system), the communication device including a processor for implementing the method in any of the above method embodiments. In one possible design, the communication device also includes a memory. The memory is used to store necessary program instructions and data, and the processor can call the program code stored in the memory to instruct the communication device to execute the method in any of the above method embodiments. Of course, the memory may not be in the communication device. In another possible design, the communication device also includes an interface circuit, which is a code / data read / write interface circuit, which is used to receive computer execution instructions (computer execution instructions are stored in the memory, may be read directly from the memory, or may pass through other devices) and transmit them to the processor, and the processor may execute the computer execution instructions transmitted to the processor to instruct the communication device to execute the method in any of the above method embodiments. When the communication device is a chip system, it can be composed of a chip, or it can include a chip and other discrete devices, and the embodiment of the present application does not specifically limit this.

[0296] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using a software program, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that a computer can access or may contain one or more servers, data centers and other data storage devices that can be integrated with the medium. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a DVD), or a semiconductor medium (eg, a solid state disk (SSD)), etc. In the embodiment of the present application, the computer may include the aforementioned device.

[0297] Although the present application is described herein in conjunction with various embodiments, in the process of implementing the claimed application, those skilled in the art may understand and implement other variations of the disclosed embodiments by viewing the drawings, the disclosure, and the appended claims. In the claims, the word "comprising" does not exclude other components or steps, and "one" or "an" does not exclude multiple situations. A single processor or other unit may implement several functions listed in a claim. Certain measures are recorded in different dependent claims, but this does not mean that these measures cannot be combined to produce good results.

[0298] Although the present application has been described in conjunction with specific features and embodiments thereof, it is obvious that various modifications and combinations may be made thereto without departing from the spirit and scope of the present application. Accordingly, this specification and the drawings are merely exemplary illustrations of the present application as defined by the appended claims, and are deemed to have covered any and all modifications, variations, combinations or equivalents within the scope of the present application. Obviously, those skilled in the art may make various modifications and variations to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A secure communication method, characterized in that: The method comprises: A first communication device receives a first message from a second communication device, the first message includes a first public key of the second communication device and a digital signature of the first message, the first communication device belongs to a first type of device, the second communication device belongs to a second type of device, one of the first type of device and the second type of device is a roadside unit RSU, and the other type of device is an on-board unit OBU, or both the first type of device and the second type of device are RSUs, or both the first type of device and the second type of device are OBUs; The first communication device sends a first configuration request message to an application server, where the first configuration request message is used to request a legal key list of the second type of device; The first communication device receives a legal key list of the second type of device from the application server; When the legal key list of the second type of device includes the first public key of the second communication device, the first communication device verifies the digital signature of the first message according to the first public key of the second communication device; When the digital signature of the first message passes the verification, the first communication device extracts the message body of the first message.

2. The method according to claim 1, characterized in that The first configuration request message is also used by the application server to determine a legal key list of the first type of device.

3. The method according to claim 1 or 2, characterized in that: The first configuration request message includes one or more of the following: a first public key of the first communication device, an identifier of the first communication device, a device type of the first communication device, a digital signature of the first configuration request message, or a first symmetric key of the first communication device asymmetrically encrypted using the public key of the application server.

4. The method according to claim 1 or 2, characterized in that: The legal key list of the second type of devices includes public keys of one or more second type of devices; or, the legal key list of the second type of devices includes public keys of the one or more second type of devices and symmetric keys of the one or more second type of devices.

5. The method according to claim 1 or 2, characterized in that: The first message also includes indication information of a destination communication device corresponding to the first message, where the indication information of the destination communication device is a public key of the destination communication device or an identifier of the destination communication device.

6. The method according to claim 5, characterized in that When the legal key list of the second type of device includes the first public key of the second communication device, the first communication device verifies the digital signature of the first message according to the first public key of the second communication device, including: When the indication information of the destination communication device indicates that the destination communication device is the first communication device, and the legal key list of the second type of devices includes the first public key of the second communication device, the first communication device verifies the digital signature of the first message according to the first public key of the second communication device.

7. The method according to claim 5, characterized in that The message body of the first message is encrypted using a first key, and the first communication device extracts the message body of the first message, including: The first communication device decrypts the message body of the first message encrypted using the first key according to the first key.

8. The method according to claim 7, characterized in that The first key is a first public key of the first communication device; or, The first key is a first symmetric key of the first communication device; or, The first key is a first symmetric key of the second communication device.

9. The method according to claim 8, characterized in that When the first key is a first symmetric key of the first communication device, the first message further includes the first symmetric key of the first communication device asymmetrically encrypted using a first public key of the first communication device; the method further includes: The first communication device decrypts the first symmetric key of the first communication device asymmetrically encrypted using the first public key of the first communication device according to the first private key corresponding to the first public key of the first communication device to obtain the first key.

10. The method according to claim 8, characterized in that When the first key is a first symmetric key of the second communication device, the method further includes: The first communication device obtains the first symmetric key of the second communication device from the legal key list of the second type of devices.

11. The method according to claim 8, characterized in that When the first key is the first symmetric key of the second communication device, the first message further includes the first symmetric key of the second communication device asymmetrically encrypted using the first public key of the first communication device; the method further includes: The first communication device decrypts the first symmetric key of the second communication device asymmetrically encrypted using the first public key of the first communication device according to the first private key corresponding to the first public key of the first communication device to obtain the first key.

12. A secure communication method, characterized in that: The method comprises: The application server receives a first configuration request message from a first communication device, the first communication device belongs to a first type of device, the first configuration request message is used to request a legal key list of a second type of device, the second type of device is a type of device different from the first type of device, one of the first type of device and the second type of device is a roadside unit RSU, and the other type of device is an on-board unit OBU; The application server receives a second configuration request message from a second communication device, where the second communication device belongs to the second type of device; The application server determines, according to the second configuration request message, a legal key list of the second type of device; In response to the first configuration request message, the application server sends a legal key list of the second type of device to the first communication device.

13. The method according to claim 12, characterized in that The second configuration request message includes a second key, where the second key includes a first public key of the second communication device and / or a first symmetric key of the second communication device; The application server determines, according to the second configuration request message, a legal key list of the second type of device, including: The application server determines that a legal key list of the second type of device includes the second key.

14. The method according to claim 13, characterized in that When the second key includes the first public key of the second communication device, or the second key includes the first public key of the second communication device and the first symmetric key of the second communication device, the second configuration request message further includes the device type of the second communication device and the digital signature of the second configuration request message; The application server determines that a legal key list of the second type of device includes the second key, including: The application server verifies the digital signature of the second configuration request message according to the first public key of the second communication device; When the digital signature verification of the second configuration request message passes, the application server determines, according to the device type of the second communication device, that a legal key list of the second type of device includes the second key.

15. The method according to claim 13, characterized in that When the second key includes the first symmetric key of the second communication device, the second configuration request message further includes a device type of the second communication device and first authentication encryption information, where the first authentication encryption information is obtained by calculating a message body of the second configuration request message according to the first symmetric key of the second communication device using an authentication encryption algorithm with associated data; The application server determines that a legal key list of the second type of device includes the second key, including: The application server decrypts and verifies the first authentication encryption information according to the first symmetric key of the second communication device; When the first authentication encryption information is decrypted and verified successfully, the application server determines, based on the device type of the second communication device, that a legal key list of the second type of device includes the second key.

16. The method according to any one of claims 12 to 15, characterized in that: The second configuration request message is also used to request a legal key list of the first type of device; the method further includes: In response to the second configuration request message, the application server sends a legal key list of the first type of device to the second communication device.

17. The method according to claim 16, characterized in that The method further comprises: The application server determines a legal key list of the first type of device according to the first configuration request message.

18. The method according to claim 17, characterized in that The first configuration request message includes a third key, where the third key includes a first public key of the first communication device and / or a first symmetric key of the first communication device; The application server determines, according to the first configuration request message, a legal key list of the first type of device, including: The application server determines that a legal key list of the first type of device includes the third key.

19. The method according to claim 18, characterized in that When the third key includes the first public key of the first communication device, or the third key includes the first public key of the first communication device and the first symmetric key of the first communication device, the first configuration request message further includes the device type of the first communication device and the digital signature of the first configuration request message; The application server determines that the legal key list of the first type of device includes the third key, including: The application server verifies the digital signature of the first configuration request message according to the first public key of the first communication device; When the digital signature verification of the first configuration request message passes, the application server determines, according to the device type of the first communication device, that the legal key list of the first type of device includes the third key.

20. The method according to claim 18, characterized in that When the third key includes the first symmetric key of the first communication device, the first configuration request message also includes the device type of the first communication device and second authentication encryption information, where the second authentication encryption information is obtained by calculating the message body of the first configuration request message according to the first symmetric key of the first communication device using an authentication encryption algorithm with associated data; The application server determines that the legal key list of the first type of device includes the third key, including: The application server decrypts and verifies the second authentication encryption information according to the first symmetric key of the first communication device; When the second authentication encryption information is successfully decrypted and verified, the application server determines, based on the device type of the first communication device, that the legal key list of the second type of device includes the third key.

21. A secure communication method, characterized in that: The method comprises: A first communication device receives a first message from a second communication device, the first message including an identifier of the first communication device, an identifier of the second communication device, and third authentication encryption information, the third authentication encryption information is obtained by calculating a message body of the first message using an authentication encryption algorithm with associated data according to a second symmetric key, the first communication device belongs to a first type of device, the second communication device belongs to a second type of device, one of the first type of device and the second type of device is a roadside unit RSU, and the other type of device is an on-board unit OBU, or both the first type of device and the second type of device are RSUs, or both the first type of device and the second type of device are OBUs; The first communication device sends a first configuration request message to an application server, where the first configuration request message is used to request a legal key list of the second type of device; The first communication device receives a legal key list of the second type of device from the application server; When the legal key list of the second type of device includes the identification of the second communication device, the first communication device decrypts and verifies the third authentication encryption information according to the second symmetric key; When the third authentication encrypted information is decrypted and verified successfully, the first communication device extracts the message body of the first message.

22. The method according to claim 21, characterized in that The second symmetric key is the first symmetric key of the first communication device, or the second symmetric key is the first symmetric key of the second communication device.

23. The method according to claim 22, characterized in that When the second symmetric key is the first symmetric key of the second communication device, the legal key list of the second type of device includes one or more symmetric keys of the second type of device; and the method further includes: The first communication device obtains the first symmetric key of the second communication device from the legal key list of the second type of devices.

24. The method according to any one of claims 21 to 23, characterized in that: The first configuration request message is also used by the application server to determine a legal key list of the first type of device.

25. The method according to any one of claims 21 to 23, characterized in that: The first configuration request message includes one or more of the following: an identifier of the first communication device, a device type of the first communication device, a first symmetric key of the first communication device asymmetrically encrypted using a public key of the application server, and second authentication encryption information, wherein the second authentication encryption information is obtained by calculating a message body of the first configuration request message based on the first symmetric key of the first communication device using an authentication encryption algorithm with associated data.

26. A communication device, characterized in that: The communication device comprises: a processor; The processor is used to read the computer-executable instructions in the memory and execute the computer-executable instructions so that the communication device performs the method as described in any one of claims 1-11, or the communication device performs the method as described in any one of claims 12-20, or the communication device performs the method as described in any one of claims 21-25.

27. A communication device, characterized in that: The communication device comprises: a processor and a memory; The memory is used to store computer-executable instructions. When the processor executes the computer-executable instructions, the communication device executes the method as described in any one of claims 1-11, or the communication device executes the method as described in any one of claims 12-20, or the communication device executes the method as described in any one of claims 21-25.

28. A communication device, characterized in that: The communication device comprises: a processor and an interface circuit; The interface circuit is used to receive computer execution instructions and transmit them to the processor; The processor is used to execute the computer-executable instructions to enable the communication device to perform the method according to any one of claims 1-11, or to enable the communication device to perform the method according to any one of claims 12-20, or to enable the communication device to perform the method according to any one of claims 21-25.

29. A computer-readable storage medium, characterized in that: The method comprises instructions which, when executed on a communication device, cause the communication device to execute the method according to any one of claims 1 to 11, or cause the communication device to execute the method according to any one of claims 12 to 20, or cause the communication device to execute the method according to any one of claims 21 to 25.

Images