A method, device and storage medium for authenticating connected vehicle equipment

Abstract

The present application provides a method, device and storage medium for authenticating an Internet of Vehicles device, including: receiving an authentication request message sent by an Internet of Vehicles device, the authentication request message including a first random number, a first message authentication code and target information, the target information being the VID of the Internet of Vehicles device or information for determining the VID of the Internet of Vehicles device, the first message authentication code being generated based on a first key, the first key being generated by the Internet of Vehicles device based on the first random number and the VIM key, the VID of the Internet of Vehicles device corresponding to the VIM key and being sent in advance to the Internet of Vehicles device by the VID authentication entity; obtaining a target VIM key corresponding to the VID of the Internet of Vehicles device based on a preset correspondence table between the VID and the VIM key; generating a second key by using the first random number and the target VIM key; and authenticating the Internet of Vehicles device based on the second key and the first message authentication code. The present application implements authentication of Internet of Vehicles devices.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a method, device and storage medium for authenticating Internet of Vehicles equipment. Background Art

[0002] The Internet of Vehicles is composed of various devices connected to it. The IoV device ID is the information stored in the IoV device that uniquely identifies the IoV device. IoV device authentication is the process of confirming that an IoV device ID does belong to a certain IoV device. IoV device authentication is a basic process for an IoV device to connect to an IoV system or participate in an IoV application.

[0003] Currently, IoV equipment manufacturers define the encoding and management methods of IoV equipment identification by themselves. Because there is no unified IoV equipment management mechanism and IoV equipment identification encoding standard, it directly affects the large-scale application and interoperability of IoV. Summary of the invention

[0004] The embodiments of the present application provide a method, device and storage medium for authenticating an Internet of Vehicles device, so as to realize the authentication of the Internet of Vehicles device, thereby realizing the unified management of the Internet of Vehicles device.

[0005] In a first aspect, an embodiment of the present application provides a method for authenticating an Internet of Vehicles device, which is applied to an Internet of Vehicles device identification VID authentication entity, including:

[0006] Receive an authentication request message sent by a connected vehicle device through a connected vehicle service entity, wherein the authentication request message includes: a first random number, a first message authentication code, and target information, wherein the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device, the first message authentication code is generated based on a first key, the first key is generated by the connected vehicle device based on the first random number and a connected vehicle device identification card VIM key, the VID of the connected vehicle device and the VIM key correspond to each other and are sent to the connected vehicle device in advance by the VID authentication entity, and the first random number is randomly generated by the connected vehicle device;

[0007] Based on the stored preset correspondence table between the VID and the VIM key, obtaining a target VIM key corresponding to the VID of the Internet of Vehicles device;

[0008] Generate a second key using the first random number and the target VIM key;

[0009] The VID of the Internet of Vehicles device is authenticated based on the second key and the first message authentication code.

[0010] Optionally, authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code includes:

[0011] verifying the first message authentication code based on the second key;

[0012] If the verification is successful, it is determined that the VID authentication of the Internet of Vehicles device is successful.

[0013] Optionally, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0014] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0015] The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

[0016] Optionally, it also includes:

[0017] decrypting the device authentication ciphertext based on the second key;

[0018] If the decryption is successful, the second random number is sent to the Internet of Vehicles service entity, and the second random number is used by the Internet of Vehicles service entity to determine that the VID of the Internet of Vehicles device has been successfully authenticated.

[0019] Optionally, after authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code, the method further includes:

[0020] If the VID authentication of the Internet of Vehicles device is successful, a third random number is generated and a third key is generated based on the target VIM key, the first random number and the third random number;

[0021] The first random number, the third random number and the third key are sent to the Internet of Vehicles service entity.

[0022] In a second aspect, this embodiment provides a method for authenticating an Internet of Vehicles device, which is applied to an Internet of Vehicles service entity, including:

[0023] Forward the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity;

[0024] Among them, the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the Internet of Vehicles device or information used to determine the VID of the Internet of Vehicles device, the first message authentication code is generated based on a first key, the first key is generated by the Internet of Vehicles device based on the first random number and the Internet of Vehicles device identification card VIM key, the VID of the Internet of Vehicles device and the VIM key correspond to each other and are sent to the Internet of Vehicles device in advance by the VID authentication entity, and the first random number is randomly generated by the Internet of Vehicles device; the authentication request message is used by the VID authentication entity to authenticate the VID of the Internet of Vehicles device.

[0025] Optionally, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0026] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0027] The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

[0028] Optionally, it also includes:

[0029] receiving the second random number sent by the VID authentication entity when the device authentication ciphertext is successfully decrypted;

[0030] Based on the second random number, it is determined that the VID of the Internet of Vehicles device has been successfully authenticated.

[0031] Optionally, after forwarding the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity, the method further includes:

[0032] Receiving a first random number, a third random number, and a third key sent by the VID authentication entity after the VID authentication of the connected vehicle device is successful, wherein the third key is generated by the VID authentication entity based on the target VIM key, the first random number, and the third random number, and the third random number is randomly generated by the VID authentication entity when the VID authentication of the connected vehicle device is successful;

[0033] An authentication response message is sent to the Internet of Vehicles device, wherein the authentication response message includes: a third random number, a fourth random number and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity.

[0034] In a third aspect, an embodiment of the present application provides a method for authenticating an Internet of Vehicles device, which is applied to an Internet of Vehicles device, including:

[0035] An authentication request message is sent to a vehicle networking device identification VID authentication entity through a vehicle networking service entity, wherein the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the vehicle networking device or information used to determine the VID of the vehicle networking device, the first message authentication code is generated based on a first key, the first key is generated by the vehicle networking device based on the first random number and the vehicle networking device identification card VIM key, the VID of the vehicle networking device and the VIM key correspond to each other and are sent to the vehicle networking device in advance by the VID authentication entity, and the first random number is randomly generated by the vehicle networking device; the authentication request message is used by the VID authentication entity to authenticate the VID of the vehicle networking device.

[0036] Optionally, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0037] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0038] The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

[0039] Optionally, after the Internet of Vehicles service entity sends an authentication request message to the Internet of Vehicles device identifier VID authentication entity, the method further includes:

[0040] Receiving an authentication response message sent by the Internet of Vehicles service entity, and determining a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity based on the authentication response message;

[0041] The authentication response message includes: a third random number, a fourth random number, and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number, and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity;

[0042] The first random number, the third random number and the third key are sent by the VID authentication entity to the Internet of Vehicles device service entity, and the third key is generated by the VID authentication entity based on the target VIM key, the first random number and the third random number, and the third random number is randomly generated when the VID authentication entity successfully authenticates the VID of the Internet of Vehicles device.

[0043] Optionally, determining a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity based on the authentication response message includes:

[0044] Generate a fifth key based on the first random number, a VIM key stored in the VIM in the connected vehicle device, and a third random number in the authentication response message;

[0045] generating a sixth key based on the fifth key, the first random number and the fourth random number in the authentication response message;

[0046] The second message authentication code is verified based on the sixth key, and if the verification passes, the fourth key is determined as the target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity.

[0047] In a fourth aspect, an embodiment of the present application provides a VID authentication entity, including a memory, a transceiver, and a processor:

[0048] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0049] Receive an authentication request message sent by a connected vehicle device through a connected vehicle service entity, wherein the authentication request message includes: a first random number, a first message authentication code, and target information, wherein the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device, the first message authentication code is generated based on a first key, the first key is generated by the connected vehicle device based on the first random number and a connected vehicle device identification card VIM key, the VID of the connected vehicle device and the VIM key correspond to each other and are sent to the connected vehicle device in advance by the VID authentication entity, and the first random number is randomly generated by the connected vehicle device;

[0050] Based on the stored preset correspondence table between the VID and the VIM key, obtaining a target VIM key corresponding to the VID of the Internet of Vehicles device;

[0051] Generate a second key using the first random number and the target VIM key;

[0052] The VID of the Internet of Vehicles device is authenticated based on the second key and the first message authentication code.

[0053] In a fifth aspect, an embodiment of the present application provides a vehicle networking service entity, including a memory, a transceiver, and a processor:

[0054] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0055] Forward the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity;

[0056] Among them, the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the Internet of Vehicles device or information used to determine the VID of the Internet of Vehicles device, the first message authentication code is generated based on a first key, the first key is generated by the Internet of Vehicles device based on the first random number and the Internet of Vehicles device identification card VIM key, the VID of the Internet of Vehicles device and the VIM key correspond to each other and are sent to the Internet of Vehicles device in advance by the VID authentication entity, and the first random number is randomly generated by the Internet of Vehicles device; the authentication request message is used by the VID authentication entity to authenticate the VID of the Internet of Vehicles device.

[0057] In a sixth aspect, an embodiment of the present application provides a vehicle networking device, including a memory, a transceiver, and a processor:

[0058] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0059] An authentication request message is sent to a vehicle networking device identification VID authentication entity through a vehicle networking service entity, wherein the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the vehicle networking device or information used to determine the VID of the vehicle networking device, the first message authentication code is generated based on a first key, the first key is generated by the vehicle networking device based on the first random number and the vehicle networking device identification card VIM key, the VID of the vehicle networking device and the VIM key correspond to each other and are sent to the vehicle networking device in advance by the VID authentication entity, and the first random number is randomly generated by the vehicle networking device; the authentication request message is used by the VID authentication entity to authenticate the VID of the vehicle networking device.

[0060] In a seventh aspect, an embodiment of the present application provides a vehicle networking device authentication device, which is applied to a vehicle networking device identification VID authentication entity, including:

[0061] A receiving module, configured to receive an authentication request message sent by a connected vehicle device through a connected vehicle service entity, wherein the authentication request message includes: a first random number, a first message authentication code, and target information, wherein the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device, the first message authentication code is generated based on a first key, the first key is generated by the connected vehicle device based on the first random number and a VIM key of an identification card of the connected vehicle device, the VID of the connected vehicle device and the VIM key correspond to each other and are sent to the connected vehicle device in advance by the VID authentication entity, and the first random number is randomly generated by the connected vehicle device;

[0062] An acquisition module, configured to obtain a target VIM key corresponding to the VID of the Internet of Vehicles device based on a stored preset correspondence table between the VID and the VIM key;

[0063] A generating module, used for generating a second key by using the first random number and the target VIM key;

[0064] An authentication module is used to authenticate the VID of the Internet of Vehicles device based on the second key and the first message authentication code.

[0065] In an eighth aspect, an embodiment of the present application provides a vehicle networking device authentication device, which is applied to a vehicle networking service entity, including:

[0066] A sending module, used for forwarding the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity;

[0067] Among them, the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the Internet of Vehicles device or information used to determine the VID of the Internet of Vehicles device, the first message authentication code is generated based on a first key, the first key is generated by the Internet of Vehicles device based on the first random number and the Internet of Vehicles device identification card VIM key, the VID of the Internet of Vehicles device and the VIM key correspond to each other and are sent to the Internet of Vehicles device in advance by the VID authentication entity, and the first random number is randomly generated by the Internet of Vehicles device; the authentication request message is used by the VID authentication entity to authenticate the VID of the Internet of Vehicles device.

[0068] In a ninth aspect, an embodiment of the present application provides a vehicle networking device authentication device, which is applied to a vehicle networking device, including:

[0069] A sending module is used to send an authentication request message to a vehicle networking device identification VID authentication entity through a vehicle networking service entity, wherein the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the vehicle networking device or information used to determine the VID of the vehicle networking device, the first message authentication code is generated based on a first key, the first key is generated by the vehicle networking device based on the first random number and the vehicle networking device identification card VIM key, the VID of the vehicle networking device and the VIM key correspond to each other and are sent to the vehicle networking device in advance by the VID authentication entity, and the first random number is randomly generated by the vehicle networking device; the authentication request message is used by the VID authentication entity to authenticate the VID of the vehicle networking device.

[0070] In the tenth aspect, an embodiment of the present application provides a processor-readable storage medium, wherein the processor-readable storage medium stores a computer program, and the computer program is used to enable the processor to execute the method described in the first aspect, the second aspect, or the third aspect.

[0071] The embodiment of the present application provides an Internet of Vehicles device authentication method, device and storage medium. The VID authentication entity receives an authentication request message sent by the Internet of Vehicles device, wherein the authentication request message includes a first random number, target information and a first message authentication code generated based on a first key. Then, based on the target information in the authentication request message, a target VIM key corresponding to the VID is obtained, and a second key is generated through the first random number and the target key. Finally, the VID of the Internet of Vehicles device is authenticated based on the second key and the first message authentication code. Since the generation method of the second key is the same as the generation method of the first key, the VID of the Internet of Vehicles device can be authenticated through the second key and the first message authentication code, thereby realizing the authentication process of the Internet of Vehicles device and enabling unified management of the Internet of Vehicles devices based on the VID. BRIEF DESCRIPTION OF THE DRAWINGS

[0072] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0073] Figure 1 This is a flowchart of the steps of the vehicle networking device authentication method applied to the VID authentication entity in an embodiment of the present application;

[0074] Figure 2 This is a flowchart of the steps of the Internet of Vehicles device authentication method applied to the Internet of Vehicles service entity in an embodiment of the present application;

[0075] Figure 3 This is a flowchart of the steps of the Internet of Vehicles device authentication method applied to the Internet of Vehicles device in an embodiment of the present application;

[0076] Figure 4 A block diagram of the Internet of Vehicles device authentication architecture in an embodiment of the present application;

[0077] Figure 5 This is a flowchart of the overall steps of the vehicle networking device authentication method in the embodiment of the present application;

[0078] Figure 6 This is a physical block diagram of a VID authentication entity in an embodiment of the present application;

[0079] Figure 7 This is a physical block diagram of the Internet of Vehicles service entity in an embodiment of the present application;

[0080] Figure 8 This is a physical block diagram of a vehicle networking device in an embodiment of the present application;

[0081] Fig. 9 This is one of the module block diagrams of the vehicle networking equipment authentication device in the embodiment of the present application;

[0082] Fig.10 This is the second module block diagram of the vehicle networking equipment authentication device in the embodiment of the present application;

[0083] Fig.11 This is the third module block diagram of the vehicle networking equipment authentication device in the embodiment of the present application. DETAILED DESCRIPTION

[0084] In the embodiments of the present application, the term "and / or" describes the association relationship of the associated objects, indicating that three relationships may exist. For example, A and / or B may represent: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the associated objects before and after are in an "or" relationship.

[0085] In the embodiments of the present application, the term "plurality" refers to two or more than two, and other quantifiers are similar.

[0086] In addition, it should be understood that the references to "one embodiment" or "an embodiment" throughout the specification mean that specific features, structures, or characteristics associated with the embodiment are included in at least one embodiment of the present application. Therefore, the references to "in one embodiment" or "in an embodiment" appearing throughout the specification do not necessarily refer to the same embodiment. In addition, these specific features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0087] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0088] The Internet of Vehicles system is composed of an on-board unit (OBU) installed on the vehicle, a roadside unit (RSU) installed on the roadside, and a network infrastructure that supports Internet of Vehicles communications and services. OBU and RSU are collectively referred to as Internet of Vehicles devices, or vehicle to everything (V2X) devices for short.

[0089] When a V2X device wants to obtain services from a connected vehicle application service provider, it must first complete mutual authentication with the service provider. The specific connected vehicle device authentication method can be customized according to the requirements of the application service provider, such as using a method based on a public key certificate. However, there is no standardized solution in the connected vehicle field.

[0090] At present, the Internet of Vehicles industry is studying technologies related to the V2X Equipment Identity Module (VIM). The unique identifier of the V2X equipment (VID) is stored in the VIM. The VIM can provide a secure and reliable security mechanism based on cryptographic technology for the VID of the Internet of Vehicles equipment. However, there are no standards related to the management and security of the identity of the Internet of Vehicles equipment in the field of Internet of Vehicles.

[0091] Therefore, the embodiments of the present application provide a method, device and storage medium for authenticating Internet of Vehicles equipment to solve the problem that there is no standard related to the identification management and security of Internet of Vehicles equipment in the prior art, to realize the authentication of Internet of Vehicles equipment, and thus to realize the unified management of Internet of Vehicles equipment.

[0092] Among them, the method and the device are based on the same application concept. Since the method and the device solve the problem in a similar principle, the implementation of the device and the method can refer to each other, and the repeated parts will not be repeated.

[0093] The technical solution provided in the embodiment of the present application can be applicable to a variety of systems, especially 5G systems. For example, the applicable system can be a global system of mobile communication (GSM) system, a code division multiple access (CDMA) system, a wideband code division multiple access (WCDMA) general packet radio service (GPRS) system, a long term evolution (LTE) system, a LTE frequency division duplex (FDD) system, a LTE time division duplex (TDD) system, an advanced long term evolution (LTE-A) system, a universal mobile telecommunication system (UMTS), a world-wide interoperability for microwave access (WiMAX) system, a 5G new air interface (NR) system, etc. These various systems include terminal equipment and network equipment. The system may also include a core network part, such as an evolved packet system (EPS), a 5G system (5GS), etc.

[0094] The present application is described in detail below.

[0095] Specifically, the system architecture involved in this application includes the following entities:

[0096] Internet of Vehicles equipment: referred to as V2X equipment, which is the OBU or RSU in the Internet of Vehicles system.

[0097] V2X Equipment Identity (VID): information that uniquely identifies a V2X device in the V2X system.

[0098] V2X Equipment Identity Module (VIM): A security module located in a V2X device that can securely store the VID and perform the security calculations required for VID authentication.

[0099] Internet of Vehicles Service Entity (or V2X Service Entity): A service entity in a V2X device or Internet of Vehicles; a V2X application in this entity needs to authenticate a V2X device before it can provide services to the V2X device. For example, the Internet of Vehicles certificate issuing authority needs to first verify the true identity of the V2X device before issuing a certificate to the device.

[0100] VID Authentication Authority (VAA): Responsible for generating VID authentication keys and writing them into the VIM of the V2X device in a secure manner; the key written into the VIM is also called the VIM key (VIM_Key). The V2X device and the VID Authentication Authority use the VIM_Key for mutual authentication.

[0101] like Figure 1 As shown, it is a flowchart of the steps of the vehicle networking device authentication method applied to the VID authentication entity in an embodiment of the present application, and the method includes the following steps:

[0102] Step 101: Receive an authentication request message sent by an Internet of Vehicles device through an Internet of Vehicles service entity.

[0103] Specifically, the VID authentication entity receives an authentication request message forwarded by the Internet of Vehicles device through the Internet of Vehicles service entity.

[0104] The authentication request message includes: a first random number, a first message authentication code and target information.

[0105] The target information is the VID of the Internet of Vehicles device or information used to determine the VID of the Internet of Vehicles device.

[0106] Specifically, the VID authentication entity writes the VID of the connected vehicle device and the VIM key corresponding to the VID into the VIM of the connected vehicle device in advance. Therefore, the connected vehicle device can include the VID or information used to determine the VID of the connected vehicle device in the authentication request message.

[0107] The information used to determine the VID of the connected vehicle device may include an application identifier and an identifier of the connected vehicle device in the application; wherein the VID authentication entity can use the application identifier and the identifier of the connected vehicle device in the application to search the database to obtain the corresponding VID.

[0108] The first message authentication code is generated based on the first key encryption, and the first key is generated by the Internet of Vehicles device based on the first random number and the VIM key corresponding to the VID of the Internet of Vehicles device. The VID of the Internet of Vehicles device and the VIM key correspond to each other and are sent to the Internet of Vehicles device in advance by the VID authentication entity. The first random number is randomly generated by the Internet of Vehicles device.

[0109] Specifically, the Internet of Vehicles device can randomly generate a first random number, and then transmit the first random number to the internal VIM, and the VIM generates a first key using the first random number and the VIM key, and generates a first message authentication code using the first key or a key derived from the first key. Since the first random number is randomly generated, the first key generated each time is a dynamic key, thereby improving the reliability of the authentication process.

[0110] Step 102: Based on the stored preset correspondence table between the VID and the VIM key, a target VIM key corresponding to the VID of the Internet of Vehicles device is obtained.

[0111] Specifically, a preset correspondence table between VID and VIM key is stored in the VID authentication entity. After receiving the authentication request message, the VID authentication entity can directly obtain the target VIM key having a preset correspondence relationship with the VID based on the VID of the connected vehicle device through the preset correspondence table, or first obtain the VID through the VID information used to determine the connected vehicle device, and then obtain the target VIM key having a preset correspondence relationship with the VID through the preset correspondence table.

[0112] Step 103: Generate a second key using the first random number and the target VIM key.

[0113] The VID authentication entity may generate a second key using the first random number in the authentication request message and the acquired target VIM.

[0114] Step 104: Authenticate the VID of the Internet of Vehicles device based on the second key and the first message authentication code.

[0115] Specifically, after the VID authentication entity generates the second key, the VID of the connected vehicle device can be authenticated based on the second key and the first message authentication code. Since the second key is generated by the target VIM key and the first random number, and the first key is generated by the VIM key corresponding to the VID of the connected vehicle device and the first random number, that is, the second key and the first key are generated in the same way, the VID of the connected vehicle device can be authenticated by the second key and the first message authentication code.

[0116] In this embodiment, the VID authentication entity receives an authentication request message sent by the Internet of Vehicles device, the authentication request message including a first random number, target information and a first message authentication code generated based on a first key, then obtains a target VIM key corresponding to the VID based on the target information in the authentication request message, generates a second key through the first random number and the target key, and finally authenticates the VID of the Internet of Vehicles device based on the second key and the first message authentication code. Since the generation method of the second key is the same as that of the first key, the VID of the Internet of Vehicles device can be authenticated through the second key and the first message authentication code, thereby realizing the authentication process of the Internet of Vehicles device and enabling unified management of the Internet of Vehicles devices.

[0117] Optionally, in this embodiment, when authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code, the first message authentication code can be verified based on the second key. If the verification passes, it is determined that the VID authentication of the Internet of Vehicles device is successful.

[0118] When the first message authentication code is verified based on the second key, the first message authentication code can be verified by the second key or a derived key of the second key. If the verification succeeds, it means that the second key is the same as the first key, which proves that the VID authentication of the Internet of Vehicles device is successful.

[0119] It should be noted that the method of verifying the first message authentication code based on the second key corresponds to the method of generating the first message authentication code based on the first key, so as to ensure that whether the verification of the first message authentication code is successful is only related to the factor of whether the second key is the same as the first key.

[0120] In this way, since the second key is generated in the same way as the first key, if the first message authentication code is verified based on the second key, it means that the second key is the same as the first key, and further indicates that the target VIM key obtained by the VID authentication entity is the same as the VIM key of the Internet of Vehicles device, which is the correct VIM key, thereby indicating that the VID of the Internet of Vehicles device is the correct VID, that is, the VID authentication of the Internet of Vehicles device is successful.

[0121] Optionally, in this embodiment, the authentication request message may further include a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0122] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0123] The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

[0124] Specifically, after the Internet of Vehicles device sends a service request to the Internet of Vehicles service entity, the Internet of Vehicles service entity randomly generates a second random number and sends the second random number to the Internet of Vehicles device; then the Internet of Vehicles device generates a device authentication ciphertext. The device authentication ciphertext may be generated directly through the first key or through a derived key of the first key based on the first key.

[0125] It should be noted that when the privacy protection of the VID is required, the target information is information used to determine the VID of the Internet of Vehicles device. In this case, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0126] If the privacy protection of the VID is not required, the device authentication ciphertext only needs to include the second random number.

[0127] Of course, if the device authentication ciphertext only includes the second random number, the target information may be the VID of the Internet of Vehicles device, or information used to determine the VID of the Internet of Vehicles device, which is not specifically limited here.

[0128] In addition, the VID authentication entity can decrypt the device authentication ciphertext based on the second key. If the decryption is successful, the second random number is sent to the Internet of Vehicles service entity. The second random number is used by the Internet of Vehicles service entity to determine that the VID of the Internet of Vehicles device has been successfully authenticated.

[0129] Specifically, if the VID authentication entity can successfully decrypt the device authentication ciphertext through the second key or the derived key of the second key, the VID authentication entity will send the second random number to the Internet of Vehicles service entity. At this time, the Internet of Vehicles service entity can determine through the second random number that the Internet of Vehicles device has been correctly authenticated based on this authentication request.

[0130] It should be noted that if the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number, if the VID authentication entity successfully decrypts the device authentication ciphertext, the VID can be obtained. At this time, if the VID determined by the information used to determine the VID of the Internet of Vehicles device is the same as the obtained VID, further authentication of the VID of the Internet of Vehicles device is achieved.

[0131] In addition, optionally, in this embodiment, after the VID authentication entity authenticates the VID of the Internet of Vehicles device with the second key and the first message authentication code, if the VID authentication of the Internet of Vehicles device is successful, a third random number is generated and a third key is generated based on the target VIM key, the first random number and the third random number, and then the first random number, the third random number and the third key are sent to the Internet of Vehicles service entity, so that the Internet of Vehicles service entity can generate an authentication response message based on this to make an authentication response.

[0132] The embodiment of the present application implements the VID authentication process of the Internet of Vehicles device through the above process, thereby implementing the authentication process of the Internet of Vehicles device and facilitating the unified management of the Internet of Vehicles device.

[0133] like Figure 2 As shown, it is a flowchart of the steps of the Internet of Vehicles device authentication method applied to the Internet of Vehicles service entity in an embodiment of the present application, and the method includes the following steps:

[0134] Step 201: forwarding the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity.

[0135] Specifically, after receiving the authentication request message sent by the Internet of Vehicles device, the Internet of Vehicles service entity forwards the authentication request message to the VID authentication entity.

[0136] The authentication request message includes: a first random number, a first message authentication code and target information.

[0137] The target information is the VID of the Internet of Vehicles device or information used to determine the VID of the Internet of Vehicles device.

[0138] The first message authentication code is generated based on the first key, and the first key is generated by the Internet of Vehicles device based on the first random number and the VIM key. The VID of the Internet of Vehicles device corresponds to the VIM key and is sent to the Internet of Vehicles device in advance by the VID authentication entity, and the first random number is randomly generated by the Internet of Vehicles device; the authentication request message is used by the VID authentication entity to authenticate the VID of the Internet of Vehicles device.

[0139] It should be noted that the specific process of generating the authentication request message can refer to the relevant content of the VID authentication entity side mentioned above, and will not be described in detail here.

[0140] In addition, optionally, in this embodiment, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key.

[0141] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0142] The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

[0143] It should be noted here that for the specific content of the device authentication ciphertext, reference may be made to the relevant content in the VID authentication entity side method embodiment, which will not be described in detail here.

[0144] In addition, optionally, in this embodiment, the Internet of Vehicles service entity may also receive a second random number sent by the VID authentication entity when the device authentication ciphertext is successfully decrypted, and based on the second random number, determine that the VID of the Internet of Vehicles device has been successfully authenticated, thereby realizing a secure two-way authentication process between the Internet of Vehicles service entity and the VID authentication entity.

[0145] In addition, optionally, in this embodiment, after forwarding the authentication request message sent by the Internet of Vehicles device to the VID authentication entity, the Internet of Vehicles service entity may also receive the first random number, the third random number and the third key sent by the VID authentication entity after the VID authentication of the Internet of Vehicles device is successfully authenticated, wherein the third key is generated by the VID authentication entity based on the target VIM key, the first random number and the third random number, and the third random number is randomly generated by the VID authentication entity when the VID authentication of the Internet of Vehicles device is successfully authenticated; and then send an authentication response message to the Internet of Vehicles device, wherein the authentication response message includes: a third random number, a fourth random number and a second message authentication code, wherein the second message authentication code is generated based on encryption of the fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity.

[0146] Specifically, after the VID authentication entity successfully authenticates the VID of the connected vehicle device, it randomly generates a third random number, and generates a third key based on the target VIM key, the first random number in the authentication request message, and the randomly generated third random number, and finally sends the first random number, the third random number, and the third key to the connected vehicle service entity. At this time, the connected vehicle service entity receives the first random number, the third random number, and the third key, and generates an authentication response message, which includes: the third random number, the fourth random number, and the second message authentication code.

[0147] Specifically, the Internet of Vehicles service entity randomly generates a fourth random number, generates a fourth key through the third key, the first random number and the fourth random number, and generates a second message authentication code based on the fourth key.

[0148] When the second message authentication code is generated based on the fourth key, the second message authentication code may be generated by using the fourth key or a key derived from the fourth key.

[0149] The Internet of Vehicles service entity sends an authentication response message to the Internet of Vehicles device, so that the Internet of Vehicles device can perform two-way security authentication with the Internet of Vehicles service entity through the authentication response message.

[0150] In this way, the Internet of Vehicles service entity in the embodiment of the present application forwards the authentication request message sent by the Internet of Vehicles device to the VID authentication entity, and the authentication request message includes a first random number, target information and a first message authentication code generated based on a first key. The authentication request message is used by the VID authentication entity to authenticate the VID of the Internet of Vehicles device, thereby realizing the VID authentication process, thereby enabling unified management of Internet of Vehicles devices based on VID.

[0151] like Figure 3 FIG. 1 is a flowchart of a method for authenticating an Internet of Vehicles device applied to an Internet of Vehicles device in an embodiment of the present application. The method includes the following steps:

[0152] Step 301: Send an authentication request message to a VID authentication entity through a vehicle networking service entity.

[0153] Specifically, the Internet of Vehicles device sends an authentication request message to the VID authentication entity through the Internet of Vehicles service entity.

[0154] The authentication request message includes: a first random number, a first message authentication code and target information.

[0155] The target information is the VID of the Internet of Vehicles device or information used to determine the VID of the Internet of Vehicles device.

[0156] The first message authentication code is generated based on a first key, and the first key is generated by the Internet of Vehicles device based on the first random number and the VIM key. The VID of the Internet of Vehicles device corresponds to the VIM key and is sent to the Internet of Vehicles device in advance by the VID authentication entity. The first random number is randomly generated by the Internet of Vehicles device.

[0157] The authentication request message is used by the VID authentication entity to authenticate the VID of the connected vehicle device.

[0158] It should be noted that the generation process of the authentication request message and the information contained therein can refer to the relevant content of the VID authentication entity side method embodiment, and will not be described in detail here.

[0159] Optionally, in this embodiment, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0160] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0161] The second random number is generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and sent to the Internet of Vehicles device.

[0162] It should be noted here that for the relevant content about the device authentication ciphertext, please refer to the relevant content on the VID authentication entity side, which will not be introduced in detail here.

[0163] In addition, optionally, in this embodiment, after the Internet of Vehicles device sends an authentication request message to the VID authentication entity through the Internet of Vehicles service entity, it can also receive an authentication response message sent by the Internet of Vehicles service entity, and determine the target key used for communication between the Internet of Vehicles device and the Internet of Vehicles service entity based on the authentication response message.

[0164] The authentication response message includes: a third random number, a fourth random number, and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number, and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity;

[0165] The first random number, the third random number and the third key are sent by the VID authentication entity to the Internet of Vehicles device service entity, and the third key is generated by the VID authentication entity based on the target VIM key, the first random number and the third random number, and the third random number is randomly generated when the VID authentication entity successfully authenticates the Internet of Vehicles device.

[0166] It should be noted here that for the specific content of the authentication response message, please refer to the relevant content of the implementation example of the method on the vehicle networking service entity side, and no further details will be given here.

[0167] In addition, when the Internet of Vehicles device determines the target key used for communication between the Internet of Vehicles device and the Internet of Vehicles service entity based on the authentication response message, it can generate a fifth key based on the first random number, the VIM key stored in the VIM in the Internet of Vehicles device, and the third random number in the authentication response message, and then generate a sixth key based on the fifth key, the first random number and the fourth random number in the authentication response message. Finally, the second message authentication code is verified based on the sixth key. If the verification passes, the fourth key is determined as the target key used for communication between the Internet of Vehicles device and the Internet of Vehicles service entity.

[0168] Specifically, the Internet of Vehicles device can transmit the first random number generated at the beginning and the third random number in the authentication response message to the internal VIM, and then the VIM uses the first random number, the VIM key and the third random number to generate the fifth key and return the fifth key to the Internet of Vehicles device; then, the Internet of Vehicles device uses the fifth key, the first random number and the fourth random number to generate the sixth key; finally, the Internet of Vehicles device uses the sixth key or a derived key of the sixth key to verify the second message authentication code. If the verification is successful, it means that the sixth key is the same as the fourth key, and the fourth key can be determined as the target key used for communication between the Internet of Vehicles device and the Internet of Vehicles service entity, so that the Internet of Vehicles device and the Internet of Vehicles service entity can use the fourth key to complete subsequent security operations, thereby ensuring the service security between the Internet of Vehicles device and the Internet of Vehicles service entity.

[0169] The overall process of this application is described below.

[0170] See also Figure 4 and Figure 5 The overall process of this application is described. Figure 4 As shown, combined Figure 4 The authentication system in the Internet of Vehicles device authentication process is as follows Figure 5 As shown, the specific steps include:

[0171] Step 0: The VID authentication entity writes the VID of the Internet of Vehicles device and the VIM key (VIM_Key) corresponding to the VID into the VIM of the Internet of Vehicles device.

[0172] Step 1: The IoV device sends a service request to the IoV service entity, and both parties negotiate to determine the execution of a two-way authentication process based on VID authentication.

[0173] Step 2: The Internet of Vehicles service entity generates a second random number and provides the second random number to the Internet of Vehicles device.

[0174] Step 3: The Internet of Vehicles device generates a first random number and provides the first random number to the VIM in the Internet of Vehicles device. The VIM of the Internet of Vehicles device uses the VIM key associated with the VID of the Internet of Vehicles device and the first random number to generate a first key, and returns the first key to the Internet of Vehicles device.

[0175] Step 4: The Internet of Vehicles device generates an authentication request message. The generation process is as follows:

[0176] a. Use the first key or a key derived from the first key to encrypt the following information to generate a device authentication ciphertext:

[0177] VID of the connected car device;

[0178] Second random number.

[0179] b. Generate a device authentication request message, which contains:

[0180] First random number;

[0181] Target information, where the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device;

[0182] Device authentication ciphertext;

[0183] The message authentication code is generated using the first key or a key derived from the first key.

[0184] It should be noted that the above is a situation where the privacy of the VID needs to be protected. At this time, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number. At this time, the device authentication message includes the first random number, the device authentication ciphertext, the first message authentication code and information used to determine the VID of the Internet of Vehicles device.

[0185] Of course, if a privacy protection mechanism for VID is not required, and the Internet of Vehicles service entity does not require additional random number verification, the Internet of Vehicles service entity does not need to provide a random number (that is, it does not need to provide a second random number). In this case, there is no need to generate a device authentication ciphertext. At this time, the security authentication is only related to the first message authentication code. At this time, the authentication request message includes: the first random number, the first message authentication code and the target information.

[0186] In addition, if a privacy protection mechanism for the VID is not required, the VID can exist in plain text. In this case, the device authentication ciphertext can only include the second random number. In this case, the device authentication message includes the first random number, the device authentication ciphertext, the first message authentication code and the target information.

[0187] Step 5: The Internet of Vehicles device sends an authentication request message to the Internet of Vehicles service entity.

[0188] In step 6, the Internet of Vehicles service entity establishes a security association based on two-way authentication with the VID authentication entity, such as establishing a Transport Layer Security (TLS) connection based on two-way authentication, and then the Internet of Vehicles service entity forwards the authentication request message to the VID authentication entity.

[0189] Step 7: The VID authentication entity authenticates the VID of the connected vehicle device through the following operations:

[0190] a. If the authentication request message contains information for determining the VID of the connected vehicle device, such as an application identifier and an identifier of the device in the application, the application identifier and the identifier of the device in the application are used to search the database to obtain the corresponding VID';

[0191] b. Use VID' to obtain the corresponding target VIM key;

[0192] c. Generate a second key using the target VIM key and the first random number;

[0193] d. Use the second key or a derived key of the second key to verify the first message authentication code. If the verification is successful, it means that the second key is the same as the first key, that is, the target VIM key is the same as the VIM key of the Internet of Vehicles device. At this time, it can be determined that the VID authentication of the Internet of Vehicles device is successful.

[0194] e. Decrypt the device authentication key using the second key or a key derived from the second key. If the decryption is successful, the VID and the second random number in the device authentication ciphertext are obtained. At this time, if the decryption is successful and VID' is the same as VID, it can be further determined that the Internet of Vehicles device is authenticated successfully.

[0195] It should be noted here that if the authentication request message contains the VID of the Internet of Vehicles device, the VID can be directly used to obtain the corresponding target VIM key, and the VID of the Internet of Vehicles device can be authenticated through the above process.

[0196] Step 8: After the VID authentication entity successfully authenticates the Internet of Vehicles device, the VID authentication entity generates a third key. The specific operations are as follows:

[0197] a, generate a third random number;

[0198] b. Generate a third key using the VIM key of the Internet of Vehicles device, the first random number and the third random number.

[0199] Step 9: Perform an authentication response, that is, the VID authentication entity sends the first random number, the third random number and the third key to the Internet of Vehicles service entity.

[0200] Of course, if the VID authentication entity can obtain the second random number from the authentication request message, the second random number will be sent to the Internet of Vehicles service entity at the same time.

[0201] Step 10: The Internet of Vehicles service entity determines, through the second random number, that the Internet of Vehicles device has been correctly authenticated based on the current authentication request, and generates an authentication response message. The authentication response message generation process includes the following operations:

[0202] a, generate a fourth random number;

[0203] b, generating a fourth key using the third key, the first random number and the fourth random number;

[0204] c. Generate a device authentication response message, which includes:

[0205] The third random number;

[0206] The fourth random number;

[0207] The second message authentication code is generated by using the fourth key or a key derived from the fourth key.

[0208] Step 11: The Internet of Vehicles service entity sends a device authentication response message to the Internet of Vehicles device.

[0209] Step 12: The Internet of Vehicles device verifies the authentication response message, including the following operations:

[0210] a. The Internet of Vehicles device provides the first random number and the third random number to the VIM inside the Internet of Vehicles device;

[0211] b, the VIM generates a fifth key using the VIM key, the first random number and the third random number stored therein;

[0212] c. VIM returns the fifth key to the Internet of Vehicles device;

[0213] d. The Internet of Vehicles device generates a sixth key using the fifth key, the first random number and the fourth random number, and verifies the second message authentication code using the sixth key. If the verification is successful, it means that the sixth key generated by the Internet of Vehicles device is the same as the fourth key generated by the Internet of Vehicles service entity, which means that the Internet of Vehicles device and the Internet of Vehicles service entity share the same key (the fourth key or the sixth key). At this time, the fourth key is determined as the target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity.

[0214] In step 13, the Internet of Vehicles device and the Internet of Vehicles service entity may establish a security association through the fourth key to complete subsequent security operations, such as using the fourth key to implement a TLS security association, or directly using the fourth key or a key derived from the fourth key to implement data integrity and / or confidentiality protection.

[0215] At this point, the Internet of Vehicles device authentication and the service security authentication between the Internet of Vehicles device and the Internet of Vehicles service entity have been achieved through the Internet of Vehicles device identification.

[0216] Figure 6 A schematic diagram of the structure of the VID authentication entity provided in the embodiment of the present application, such as Figure 6 As shown, the VID authentication entity 600 includes a memory 602, a transceiver 603, and a processor 601. The processor 601 and the memory 602 may also be physically arranged separately.

[0217] The memory 602 is used to store computer programs; the transceiver 603 is used to send and receive data under the control of the processor 601.

[0218] Specifically, in Figure 6 In the embodiment, the bus system 604 may include any number of interconnected buses and bridges, specifically linking various circuits of one or more processors represented by the processor 601 and the memory represented by the memory 602. The bus system 604 may also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 603 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, which transmission medium includes a wireless channel, a wired channel, an optical cable, and other transmission media. The processor 601 is responsible for managing the bus architecture and general processing, and the memory 602 may store data used by the processor 601 when performing operations.

[0219] The processor 601 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0220] The processor 601 calls the computer program stored in the memory 602 to execute any of the methods provided in the embodiments of the present application according to the obtained executable instructions, for example:

[0221] Receive an authentication request message sent by a connected vehicle device through a connected vehicle service entity, wherein the authentication request message includes: a first random number, a first message authentication code, and target information, wherein the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device, the first message authentication code is generated based on a first key, the first key is generated by the connected vehicle device based on the first random number and a connected vehicle device identification card VIM key, the VID of the connected vehicle device and the VIM key correspond to each other and are sent to the connected vehicle device in advance by the VID authentication entity, and the first random number is randomly generated by the connected vehicle device;

[0222] Based on the stored preset correspondence table between the VID and the VIM key, obtaining a target VIM key corresponding to the VID of the Internet of Vehicles device;

[0223] Generate a second key using the first random number and the target VIM key;

[0224] The VID of the Internet of Vehicles device is authenticated based on the second key and the first message authentication code.

[0225] Optionally, authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code includes:

[0226] verifying the first message authentication code based on the second key;

[0227] If the verification is successful, it is determined that the VID authentication of the Internet of Vehicles device is successful.

[0228] Optionally, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0229] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0230] The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

[0231] Optionally, it also includes:

[0232] decrypting the device authentication ciphertext based on the second key;

[0233] If the decryption is successful, the second random number is sent to the Internet of Vehicles service entity, and the second random number is used by the Internet of Vehicles service entity to determine that the VID of the Internet of Vehicles device has been successfully authenticated.

[0234] Optionally, after authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code, the method further includes:

[0235] If the VID authentication of the Internet of Vehicles device is successful, a third random number is generated and a third key is generated based on the target VIM key, the first random number and the third random number;

[0236] The first random number, the third random number and the third key are sent to the Internet of Vehicles service entity.

[0237] It should be noted here that the above-mentioned VID authentication entity provided in the embodiment of the present application can implement all the method steps implemented by the above-mentioned VID authentication entity side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0238] Figure 7 A schematic diagram of the structure of the Internet of Vehicles service entity provided in the embodiment of the present application, such as Figure 7 As shown, the Internet of Vehicles service entity 700 includes a memory 702, a transceiver 703, and a processor 701: wherein the processor 701 and the memory 702 may also be arranged physically separately.

[0239] The memory 702 is used to store computer programs; the transceiver 703 is used to send and receive data under the control of the processor 701.

[0240] Specifically, in Figure 7 In the embodiment, the bus system 704 may include any number of interconnected buses and bridges, specifically linking together various circuits of one or more processors represented by the processor 701 and the memory represented by the memory 702. The bus system 704 may also link together various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 703 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, which transmission medium includes a wireless channel, a wired channel, an optical cable, and other transmission media. The processor 701 is responsible for managing the bus architecture and general processing, and the memory 702 may store data used by the processor 701 when performing operations.

[0241] The processor 701 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0242] The processor 701 calls the computer program stored in the memory 702 to execute any of the methods provided in the embodiments of the present application according to the obtained executable instructions, for example:

[0243] Forward the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity;

[0244] Among them, the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the Internet of Vehicles device or information used to determine the VID of the Internet of Vehicles device, the first message authentication code is generated based on a first key, the first key is generated by the Internet of Vehicles device based on the first random number and the Internet of Vehicles device identification card VIM key, the VID of the Internet of Vehicles device and the VIM key correspond to each other and are sent to the Internet of Vehicles device in advance by the VID authentication entity, and the first random number is randomly generated by the Internet of Vehicles device; the authentication request message is used by the VID authentication entity to authenticate the VID of the Internet of Vehicles device.

[0245] Optionally, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0246] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0247] The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

[0248] Optionally, it also includes:

[0249] receiving the second random number sent by the VID authentication entity when the device authentication ciphertext is successfully decrypted;

[0250] Based on the second random number, it is determined that the VID of the Internet of Vehicles device has been successfully authenticated.

[0251] Optionally, after forwarding the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity, the method further includes:

[0252] Receiving a first random number, a third random number, and a third key sent by the VID authentication entity after the VID authentication of the connected vehicle device is successful, wherein the third key is generated by the VID authentication entity based on the target VIM key, the first random number, and the third random number, and the third random number is randomly generated by the VID authentication entity when the VID authentication of the connected vehicle device is successful;

[0253] An authentication response message is sent to the Internet of Vehicles device, wherein the authentication response message includes: a third random number, a fourth random number and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity.

[0254] It should be noted here that the above-mentioned Internet of Vehicles service entity provided in the embodiment of the present application can implement all the method steps implemented by the above-mentioned Internet of Vehicles service entity side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0255] Figure 8 A schematic diagram of the structure of the Internet of Vehicles device provided in the embodiment of the present application is shown in FIG. Figure 8 As shown, the Internet of Vehicles device 800 includes a memory 802, a transceiver 803, and a processor 801: wherein the processor 801 and the memory 802 may also be arranged physically separately.

[0256] The memory 802 is used to store computer programs; the transceiver 803 is used to send and receive data under the control of the processor 801.

[0257] Specifically, in Figure 8In the embodiment, the bus system 804 may include any number of interconnected buses and bridges, specifically linking together various circuits of one or more processors represented by the processor 801 and the memory represented by the memory 802. The bus system 804 may also link together various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 803 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, which transmission medium includes a wireless channel, a wired channel, an optical cable, and other transmission media. The processor 801 is responsible for managing the bus architecture and general processing, and the memory 802 may store data used by the processor 801 when performing operations.

[0258] The processor 801 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0259] The processor 801 calls the computer program stored in the memory 802 to execute any of the methods provided in the embodiments of the present application according to the obtained executable instructions, for example:

[0260] An authentication request message is sent to a vehicle networking device identification VID authentication entity through a vehicle networking service entity, wherein the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the vehicle networking device or information used to determine the VID of the vehicle networking device, the first message authentication code is generated based on a first key, the first key is generated by the vehicle networking device based on the first random number and the vehicle networking device identification card VIM key, the VID of the vehicle networking device and the VIM key correspond to each other and are sent to the vehicle networking device in advance by the VID authentication entity, and the first random number is randomly generated by the vehicle networking device; the authentication request message is used by the VID authentication entity to authenticate the VID of the vehicle networking device.

[0261] Optionally, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0262] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0263] The second random number is generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and sent to the Internet of Vehicles device.

[0264] Optionally, after the Internet of Vehicles service entity sends an authentication request message to the Internet of Vehicles device identifier VID authentication entity, the method further includes:

[0265] Receiving an authentication response message sent by the Internet of Vehicles service entity, and determining a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity based on the authentication response message;

[0266] The authentication response message includes: a third random number, a fourth random number, and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number, and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity;

[0267] The first random number, the third random number and the third key are sent by the VID authentication entity to the Internet of Vehicles device service entity, and the third key is generated by the VID authentication entity based on the target VIM key, the first random number and the third random number, and the third random number is randomly generated when the VID authentication entity successfully authenticates the VID of the Internet of Vehicles device.

[0268] Optionally, determining a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity based on the authentication response message includes:

[0269] Generate a fifth key based on the first random number, a VIM key stored in the VIM in the connected vehicle device, and a third random number in the authentication response message;

[0270] generating a sixth key based on the fifth key, the first random number and the fourth random number in the authentication response message;

[0271] The second message authentication code is verified based on the sixth key, and if the verification passes, the fourth key is determined as the target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity.

[0272] It should be noted here that the above-mentioned Internet of Vehicles device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned Internet of Vehicles device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0273] Fig. 9 This is one of the module block diagrams of a vehicle networking device authentication device provided in an embodiment of the present application. The device is applied to a VID authentication entity. The device includes:

[0274] A receiving module 901 is used to receive an authentication request message sent by an Internet of Vehicles device through an Internet of Vehicles service entity, wherein the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the Internet of Vehicles device or information used to determine the VID of the Internet of Vehicles device, the first message authentication code is generated based on a first key, the first key is generated by the Internet of Vehicles device based on the first random number and a VIM key of an identification card of the Internet of Vehicles device, the VID of the Internet of Vehicles device and the VIM key correspond to each other and are sent to the Internet of Vehicles device in advance by the VID authentication entity, and the first random number is randomly generated by the Internet of Vehicles device;

[0275] An acquisition module 902 is used to obtain a target VIM key corresponding to the VID of the Internet of Vehicles device based on a preset correspondence table between the stored VID and the VIM key;

[0276] A generating module 903, configured to generate a second key using the first random number and the target VIM key;

[0277] The authentication module 904 is used to authenticate the VID of the Internet of Vehicles device based on the second key and the first message authentication code.

[0278] Optionally, authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code includes:

[0279] verifying the first message authentication code based on the second key;

[0280] If the verification is successful, it is determined that the VID authentication of the Internet of Vehicles device is successful.

[0281] Optionally, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0282] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0283] The second random number is generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and sent to the Internet of Vehicles device.

[0284] Optionally, it also includes:

[0285] decrypting the device authentication ciphertext based on the second key;

[0286] If the decryption is successful, the second random number is sent to the Internet of Vehicles service entity, and the second random number is used by the Internet of Vehicles service entity to determine that the VID of the Internet of Vehicles device has been successfully authenticated.

[0287] Optionally, after authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code, the method further includes:

[0288] If the VID authentication of the Internet of Vehicles device is successful, a third random number is generated and a third key is generated based on the target VIM key, the first random number and the third random number;

[0289] The first random number, the third random number and the third key are sent to the Internet of Vehicles service entity.

[0290] Fig.10 This is a second module block diagram of a vehicle networking device authentication device provided in an embodiment of the present application. The device is applied to a vehicle networking service entity. The device includes:

[0291] The sending module 1001 is used to forward the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identifier VID authentication entity;

[0292] Among them, the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the Internet of Vehicles device or information used to determine the VID of the Internet of Vehicles device, the first message authentication code is generated based on a first key, the first key is generated by the Internet of Vehicles device based on the first random number and the Internet of Vehicles device identification card VIM key, the VID of the Internet of Vehicles device and the VIM key correspond to each other and are sent to the Internet of Vehicles device in advance by the VID authentication entity, and the first random number is randomly generated by the Internet of Vehicles device; the authentication request message is used by the VID authentication entity to authenticate the VID of the Internet of Vehicles device.

[0293] Optionally, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0294] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0295] The second random number is generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and sent to the Internet of Vehicles device.

[0296] Optionally, it also includes:

[0297] receiving the second random number sent by the VID authentication entity when the device authentication ciphertext is successfully decrypted;

[0298] Based on the second random number, it is determined that the VID of the Internet of Vehicles device has been successfully authenticated.

[0299] Optionally, after forwarding the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identifier VID authentication entity, the method further includes:

[0300] Receiving a first random number, a third random number, and a third key sent by the VID authentication entity after the VID authentication of the connected vehicle device is successful, wherein the third key is generated by the VID authentication entity based on the target VIM key, the first random number, and the third random number, and the third random number is randomly generated by the VID authentication entity when the VID authentication of the connected vehicle device is successful;

[0301] An authentication response message is sent to the Internet of Vehicles device, wherein the authentication response message includes: a third random number, a fourth random number and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity.

[0302] Fig.11 This is a module block diagram of a vehicle networking device authentication device provided in an embodiment of the present application. The device is applied to a vehicle networking device. The device includes:

[0303] The sending module 1101 is used to send an authentication request message to the Internet of Vehicles device identification VID authentication entity through the Internet of Vehicles service entity, wherein the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the Internet of Vehicles device or information used to determine the VID of the Internet of Vehicles device, the first message authentication code is generated based on a first key, the first key is generated by the Internet of Vehicles device based on the first random number and the Internet of Vehicles device identification card VIM key, the VID of the Internet of Vehicles device and the VIM key correspond to each other and are sent to the Internet of Vehicles device in advance by the VID authentication entity, and the first random number is randomly generated by the Internet of Vehicles device; the authentication request message is used by the VID authentication entity to authenticate the VID of the Internet of Vehicles device.

[0304] Optionally, the authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key;

[0305] The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number;

[0306] The second random number is generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and sent to the Internet of Vehicles device.

[0307] Optionally, after the Internet of Vehicles service entity sends an authentication request message to the Internet of Vehicles device identifier VID authentication entity, the method further includes:

[0308] Receiving an authentication response message sent by the Internet of Vehicles service entity, and determining a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity based on the authentication response message;

[0309] The authentication response message includes: a third random number, a fourth random number, and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number, and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity;

[0310] The first random number, the third random number and the third key are sent by the VID authentication entity to the Internet of Vehicles device service entity, and the third key is generated by the VID authentication entity based on the target VIM key, the first random number and the third random number, and the third random number is randomly generated when the VID authentication entity successfully authenticates the VID of the Internet of Vehicles device.

[0311] Optionally, determining a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity based on the authentication response message includes:

[0312] Generate a fifth key based on the first random number, a VIM key stored in the VIM in the connected vehicle device, and a third random number in the authentication response message;

[0313] generating a sixth key based on the fifth key, the first random number and the fourth random number in the authentication response message;

[0314] The second message authentication code is verified based on the sixth key, and if the verification passes, the fourth key is determined as the target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity.

[0315] It should be noted that the division of units in the embodiments of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation. In addition, each functional unit in each embodiment of the present application may be integrated into a processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0316] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a processor-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) or a processor (processor) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), disk or optical disk and other media that can store program codes.

[0317] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned method embodiment, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as those in the method embodiment will not be described in detail here.

[0318] On the other hand, an embodiment of the present application further provides a processor-readable storage medium, wherein the processor-readable storage medium stores a computer program, and the computer program is used to enable the processor to execute the method described in the above embodiment.

[0319] The processor-readable storage medium can be any available medium or data storage device that can be accessed by the processor, including but not limited to magnetic storage (such as floppy disks, hard disks, magnetic tapes, magneto-optical disks (MO), etc.), optical storage (such as CD, DVD, BD, HVD, etc.), and semiconductor storage (such as ROM, EPROM, EEPROM, non-volatile memory (NANDFLASH), solid-state drive (SSD)), etc.

[0320] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) that contain computer-usable program code.

[0321] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer executable instructions. These computer executable instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0322] These processor executable instructions may also be stored in a processor readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the processor readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0323] These processor-executable instructions may also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0324] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A method for authenticating an Internet of Vehicles device, applied to an Internet of Vehicles device identification (VID) authentication entity, characterized in that: include: Receive an authentication request message sent by a connected vehicle device through a connected vehicle service entity, wherein the authentication request message includes: a first random number, a first message authentication code, and target information, wherein the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device, the first message authentication code is generated based on a first key, the first key is generated by the connected vehicle device based on the first random number and a connected vehicle device identification card VIM key, the VID of the connected vehicle device and the VIM key correspond to each other and are sent to the connected vehicle device in advance by the VID authentication entity, and the first random number is randomly generated by the connected vehicle device; Based on the stored preset correspondence table between the VID and the VIM key, obtaining a target VIM key corresponding to the VID of the Internet of Vehicles device; Generate a second key using the first random number and the target VIM key; authenticating the VID of the connected vehicle device based on the second key and the first message authentication code; After authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code, the method further includes: If the VID authentication of the Internet of Vehicles device is successful, a third random number is generated and a third key is generated based on the target VIM key, the first random number and the third random number; The first random number, the third random number and the third key are sent to the Internet of Vehicles service entity.

2. The vehicle networking device authentication method according to claim 1, characterized in that: The authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code includes: verifying the first message authentication code based on the second key; If the verification is successful, it is determined that the VID authentication of the Internet of Vehicles device is successful.

3. The vehicle networking device authentication method according to claim 1, characterized in that: The authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key; The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number; The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

4. The vehicle networking device authentication method according to claim 3, characterized in that: Also includes: decrypting the device authentication ciphertext based on the second key; If the decryption is successful, the second random number is sent to the Internet of Vehicles service entity, and the second random number is used by the Internet of Vehicles service entity to determine that the VID of the Internet of Vehicles device has been successfully authenticated.

5. A method for authenticating an Internet of Vehicles device, applied to an Internet of Vehicles service entity, characterized in that: include: Forward the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity; The authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device, the first message authentication code is generated based on a first key, the first key is generated by the connected vehicle device based on the first random number and a VIM key of a connected vehicle device identification card, the VID of the connected vehicle device and the VIM key correspond to each other and are sent to the connected vehicle device in advance by the VID authentication entity, and the first random number is randomly generated by the connected vehicle device; the authentication request message is used by the VID authentication entity to authenticate the VID of the connected vehicle device; After forwarding the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity, the method further includes: Receiving a first random number, a third random number, and a third key sent by the VID authentication entity after the VID authentication of the connected vehicle device is successful, wherein the third key is generated by the VID authentication entity based on the target VIM key, the first random number, and the third random number, and the third random number is randomly generated by the VID authentication entity when the VID authentication of the connected vehicle device is successful; An authentication response message is sent to the Internet of Vehicles device; the authentication response message includes the third random number.

6. The vehicle networking device authentication method according to claim 5, characterized in that: The authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key; The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number; The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

7. The vehicle networking device authentication method according to claim 6, characterized in that: Also includes: receiving the second random number sent by the VID authentication entity when the device authentication ciphertext is successfully decrypted; Based on the second random number, it is determined that the VID of the Internet of Vehicles device has been successfully authenticated.

8. The vehicle networking device authentication method according to claim 5, characterized in that: The authentication response message also includes: a fourth random number and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity.

9. A method for authenticating an Internet of Vehicles device, applied to an Internet of Vehicles device, characterized in that: include: Send an authentication request message to a vehicle networking device identification VID authentication entity through a vehicle networking service entity, wherein the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the vehicle networking device or information used to determine the VID of the vehicle networking device, the first message authentication code is generated based on a first key, the first key is generated by the vehicle networking device based on the first random number and the vehicle networking device identification card VIM key, the VID of the vehicle networking device and the VIM key correspond to each other and are sent to the vehicle networking device in advance by the VID authentication entity, and the first random number is randomly generated by the vehicle networking device; the authentication request message is used by the VID authentication entity to authenticate the VID of the vehicle networking device; After the Internet of Vehicles service entity sends an authentication request message to the Internet of Vehicles device identifier VID authentication entity, the method further includes: Receiving an authentication response message sent by the Internet of Vehicles service entity, and determining a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity based on the authentication response message; Among them, the authentication response message includes a third random number; the third random number is randomly generated by the VID authentication entity when the VID authentication of the Internet of Vehicles device is successful, and the third random number is used to generate a third key with the target VIM key and the first random number; the first random number, the third random number and the third key are sent by the VID authentication entity to the Internet of Vehicles device service entity.

10. The vehicle networking device authentication method according to claim 9, characterized in that: The authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key; The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number; The second random number is generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and sent to the Internet of Vehicles device.

11. The vehicle networking device authentication method according to claim 9, characterized in that: The authentication response message also includes: a fourth random number and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity.

12. The vehicle networking device authentication method according to claim 11, characterized in that: The determining, based on the authentication response message, a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity includes: Generate a fifth key based on the first random number, a VIM key stored in a VIM in the connected vehicle device, and a third random number in the authentication response message; generating a sixth key based on the fifth key, the first random number and the fourth random number in the authentication response message; The second message authentication code is verified based on the sixth key, and if the verification passes, the fourth key is determined as the target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity.

13. A VID authentication entity, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Receive an authentication request message sent by a connected vehicle device through a connected vehicle service entity, wherein the authentication request message includes: a first random number, a first message authentication code, and target information, wherein the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device, the first message authentication code is generated based on a first key, the first key is generated by the connected vehicle device based on the first random number and a connected vehicle device identification card VIM key, the VID of the connected vehicle device and the VIM key correspond to each other and are sent to the connected vehicle device in advance by the VID authentication entity, and the first random number is randomly generated by the connected vehicle device; Based on the stored preset correspondence table between the VID and the VIM key, obtaining a target VIM key corresponding to the VID of the Internet of Vehicles device; Generate a second key using the first random number and the target VIM key; authenticating the VID of the connected vehicle device based on the second key and the first message authentication code; After authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code, the method further includes: If the VID authentication of the Internet of Vehicles device is successful, a third random number is generated and a third key is generated based on the target VIM key, the first random number and the third random number; The first random number, the third random number and the third key are sent to the Internet of Vehicles service entity.

14. The VID authentication entity according to claim 13, characterized in that: The authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code includes: verifying the first message authentication code based on the second key; If the verification is successful, it is determined that the VID authentication of the Internet of Vehicles device is successful.

15. The VID authentication entity according to claim 13, characterized in that: The authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key; The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number; The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

16. The VID authentication entity according to claim 15, characterized in that: Also includes: decrypting the device authentication ciphertext based on the second key; If the decryption is successful, the second random number is sent to the Internet of Vehicles service entity, and the second random number is used by the Internet of Vehicles service entity to determine that the VID of the Internet of Vehicles device has been successfully authenticated.

17. A vehicle networking service entity, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Forward the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity; The authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device, the first message authentication code is generated based on a first key, the first key is generated by the connected vehicle device based on the first random number and a VIM key of a connected vehicle device identification card, the VID of the connected vehicle device and the VIM key correspond to each other and are sent to the connected vehicle device in advance by the VID authentication entity, and the first random number is randomly generated by the connected vehicle device; the authentication request message is used by the VID authentication entity to authenticate the VID of the connected vehicle device; After forwarding the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity, the method further includes: Receiving a first random number, a third random number, and a third key sent by the VID authentication entity after the VID authentication of the connected vehicle device is successful, wherein the third key is generated by the VID authentication entity based on the target VIM key, the first random number, and the third random number, and the third random number is randomly generated by the VID authentication entity when the VID authentication of the connected vehicle device is successful; An authentication response message is sent to the Internet of Vehicles device; the authentication response message includes the third random number.

18. The Internet of Vehicles service entity according to claim 17, characterized in that: The authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key; The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number; The second random number is randomly generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and is sent to the Internet of Vehicles device.

19. The Internet of Vehicles service entity according to claim 18, characterized in that: Also includes: receiving the second random number sent by the VID authentication entity when the device authentication ciphertext is successfully decrypted; Based on the second random number, it is determined that the VID of the Internet of Vehicles device has been successfully authenticated.

20. The Internet of Vehicles service entity according to claim 17, characterized in that: The authentication response message also includes: a fourth random number and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity.

21. A vehicle networking device, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Send an authentication request message to a vehicle networking device identification VID authentication entity through a vehicle networking service entity, wherein the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the vehicle networking device or information used to determine the VID of the vehicle networking device, the first message authentication code is generated based on a first key, the first key is generated by the vehicle networking device based on the first random number and the vehicle networking device identification card VIM key, the VID of the vehicle networking device and the VIM key correspond to each other and are sent to the vehicle networking device in advance by the VID authentication entity, and the first random number is randomly generated by the vehicle networking device; the authentication request message is used by the VID authentication entity to authenticate the VID of the vehicle networking device; After the Internet of Vehicles service entity sends an authentication request message to the Internet of Vehicles device identifier VID authentication entity, the method further includes: Receiving an authentication response message sent by the Internet of Vehicles service entity, and determining a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity based on the authentication response message; Among them, the authentication response message includes a third random number; the third random number is randomly generated by the VID authentication entity when the VID authentication of the Internet of Vehicles device is successful, and the third random number is used to generate a third key with the target VIM key and the first random number; the first random number, the third random number and the third key are sent by the VID authentication entity to the Internet of Vehicles device service entity.

22. The vehicle networking device according to claim 21, characterized in that: The authentication request message also includes a device authentication ciphertext, and the device authentication ciphertext is generated by the Internet of Vehicles device based on the first key; The device authentication ciphertext includes a second random number; or, if the target information is information for determining the VID of the Internet of Vehicles device, the device authentication ciphertext includes the VID of the Internet of Vehicles device and the second random number; The second random number is generated by the Internet of Vehicles service entity after receiving the service request sent by the Internet of Vehicles device and sent to the Internet of Vehicles device.

23. The vehicle networking device according to claim 21, characterized in that: The authentication response message also includes: a fourth random number and a second message authentication code, wherein the second message authentication code is generated based on a fourth key, the fourth key is generated by the Internet of Vehicles service entity through the third key, the first random number and the fourth random number, and the fourth random number is randomly generated by the Internet of Vehicles service entity.

24. The vehicle networking device according to claim 23, characterized in that: The determining, based on the authentication response message, a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity includes: Generate a fifth key based on the first random number, a VIM key stored in the VIM in the connected vehicle device, and a third random number in the authentication response message; generating a sixth key based on the fifth key, the first random number and the fourth random number in the authentication response message; The second message authentication code is verified based on the sixth key, and if the verification passes, the fourth key is determined as the target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity.

25. A vehicle networking equipment authentication device, applied to a vehicle networking equipment identification VID authentication entity, characterized in that: include: A receiving module, configured to receive an authentication request message sent by a connected vehicle device through a connected vehicle service entity, wherein the authentication request message includes: a first random number, a first message authentication code, and target information, wherein the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device, the first message authentication code is generated based on a first key, the first key is generated by the connected vehicle device based on the first random number and a VIM key of an identification card of the connected vehicle device, the VID of the connected vehicle device and the VIM key correspond to each other and are sent to the connected vehicle device in advance by the VID authentication entity, and the first random number is randomly generated by the connected vehicle device; An acquisition module, configured to obtain a target VIM key corresponding to the VID of the Internet of Vehicles device based on a stored preset correspondence table between the VID and the VIM key; A generating module, used for generating a second key by using the first random number and the target VIM key; an authentication module, configured to authenticate the VID of the Internet of Vehicles device based on the second key and the first message authentication code; After authenticating the VID of the Internet of Vehicles device based on the second key and the first message authentication code, the method further includes: If the VID authentication of the Internet of Vehicles device is successful, a third random number is generated and a third key is generated based on the target VIM key, the first random number and the third random number; The first random number, the third random number and the third key are sent to the Internet of Vehicles service entity.

26. A vehicle networking equipment authentication device, applied to a vehicle networking service entity, characterized in that: include: A sending module, used for forwarding the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity; The authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the connected vehicle device or information used to determine the VID of the connected vehicle device, the first message authentication code is generated based on a first key, the first key is generated by the connected vehicle device based on the first random number and a VIM key of a connected vehicle device identification card, the VID of the connected vehicle device and the VIM key correspond to each other and are sent to the connected vehicle device in advance by the VID authentication entity, and the first random number is randomly generated by the connected vehicle device; the authentication request message is used by the VID authentication entity to authenticate the VID of the connected vehicle device; After forwarding the authentication request message sent by the Internet of Vehicles device to the Internet of Vehicles device identification VID authentication entity, the method further includes: Receiving a first random number, a third random number, and a third key sent by the VID authentication entity after the VID authentication of the connected vehicle device is successful, wherein the third key is generated by the VID authentication entity based on the target VIM key, the first random number, and the third random number, and the third random number is randomly generated by the VID authentication entity when the VID authentication of the connected vehicle device is successful; An authentication response message is sent to the Internet of Vehicles device; the authentication response message includes the third random number.

27. A vehicle networking equipment authentication device, applied to a vehicle networking equipment, characterized in that: include: A sending module, configured to send an authentication request message to a vehicle networking device identification VID authentication entity through a vehicle networking service entity, wherein the authentication request message includes: a first random number, a first message authentication code and target information, wherein the target information is the VID of the vehicle networking device or information used to determine the VID of the vehicle networking device, the first message authentication code is generated based on a first key, the first key is generated by the vehicle networking device based on the first random number and a vehicle networking device identification card VIM key, the VID of the vehicle networking device and the VIM key correspond to each other and are sent to the vehicle networking device in advance by the VID authentication entity, and the first random number is randomly generated by the vehicle networking device; the authentication request message is used by the VID authentication entity to authenticate the VID of the vehicle networking device; After the Internet of Vehicles service entity sends an authentication request message to the Internet of Vehicles device identifier VID authentication entity, the method further includes: Receiving an authentication response message sent by the Internet of Vehicles service entity, and determining a target key used by the Internet of Vehicles device to communicate with the Internet of Vehicles service entity based on the authentication response message; Among them, the authentication response message includes a third random number; the third random number is randomly generated by the VID authentication entity when the VID authentication of the Internet of Vehicles device is successful, and the third random number is used to generate a third key with the target VIM key and the first random number; the first random number, the third random number and the third key are sent by the VID authentication entity to the Internet of Vehicles device service entity.

28. A processor-readable storage medium, characterized in that: The processor-readable storage medium stores a computer program, and the computer program is used to enable the processor to execute the method described in any one of claims 1 to 4, or the method described in any one of claims 5 to 8, or the method described in any one of claims 9 to 12.

Images