A data transmission method and device for vehicle-road cooperation

Abstract

The application relates to the technical field of communication, in particular to a data transmission method and device for vehicle-road cooperation. The method is used for solving the problem of low safety in the data transmission process in the prior art. After receiving a payment request containing the identity of a roadside terminal and to-be-paid information, a vehicle-road cooperation vehicle terminal performs key negotiation with the roadside terminal, thereby determining a target transmission key. Then, the encrypted transmission of the payment information is performed with the roadside terminal based on the target transmission key, and the encrypted transmission with the roadside terminal is ended when the first preset condition is met. Thus, the key negotiation with the roadside terminal is performed for each received payment request, the target transmission key for the payment request is determined, and then the encryption is performed based on the target transmission key in the subsequent payment information transmission process for the payment request, so that the safety, confidentiality and anti-repudiation of the data transmission process are ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of communication technology, in particular to a data transmission method and device for vehicle-road cooperation. BACKGROUND

[0002] Vehicle-road cooperation is to use advanced wireless communication and new generation Internet technology to implement dynamic real-time information interaction between vehicles and between vehicles and roads in all directions, and to develop vehicle active safety control and road cooperative management on the basis of full-time and space dynamic traffic information collection and fusion. Generally, a vehicle-road cooperation system includes a vehicle-road cooperation on-board unit (OBU) and a vehicle-road cooperation road side unit (RSU).

[0003] Under the prior art, identity authentication is usually performed through a public key infrastructure (PKI) certificate mechanism to ensure the legality of the device, and the anti-repudiation of data information is ensured by signing the data information to be transmitted.

[0004] However, in the process of data information transmission using the above-mentioned PKI certificate mechanism, the data information between vehicle-road cooperation on-board units and between vehicle-road cooperation on-board units and vehicle-road cooperation road side units is transmitted in plaintext, that is, the data information is not transmitted in encrypted form, so that the confidentiality, security and reliability of the data information in the transmission process cannot be ensured. Especially in some financial payment scenarios, the transmitted data information usually carries the private information of a user, such as the user's account number and password; if the above-mentioned data information is leaked, it is easy to cause the user's property loss. Looking at the information security architecture and information security related specifications established for vehicle-road cooperation technology, there is no preferred solution to solve the above-mentioned problems.

[0005] In summary, a new method needs to be designed to solve the above-mentioned problems. SUMMARY

[0006] The embodiments of the present application provide a data transmission method and device for vehicle-road cooperation to solve the problem of low security in the data transmission process under the prior art.

[0007] The specific technical solutions provided by the embodiments of the present application are as follows:

[0008] In a first aspect, the embodiments of the present application provide a data transmission method applied to a vehicle-road cooperation on-board unit, comprising:

[0009] receiving a payment request, the payment request including an identity of a road side unit and to-be-paid information;

[0010] determining, based on the identity of the roadside terminal, a target transmission key associated with the payment request through key negotiation with the roadside terminal;

[0011] performing encrypted transmission of payment information with the roadside terminal based on the target transmission key, and ending the encrypted transmission with the roadside terminal when a first preset condition is met.

[0012] The above method needs to perform key negotiation with the roadside terminal to determine a target transmission key for each received payment request, thereby ensuring the uniqueness of the target transmission key. Then, the encrypted transmission based on the target transmission key is performed in the subsequent transmission process of payment information for the payment request, thereby ensuring the security, confidentiality and non-repudiation of the data transmission process. The encrypted transmission with the roadside terminal is ended when the first preset condition is met, thereby further implementing one-time pad and ensuring the security of the transmission process.

[0013] Optionally, determining, based on the identity of the roadside terminal, a target transmission key associated with the payment request through key negotiation with the roadside terminal includes:

[0014] sending negotiation request information to the roadside terminal based on the identity of the roadside terminal, wherein the negotiation request information includes an encrypted first random number, signature information and public key certificate information;

[0015] receiving negotiation feedback information returned by the roadside terminal, wherein the negotiation feedback information includes an encrypted third random number and a first hash result;

[0016] decrypting the encrypted third random number to obtain a second random number, sending negotiation success information to the roadside terminal, and determining the target transmission key based on the first random number and the second random number;

[0017] The encrypted third random number is obtained by encrypting the third random number based on the first random number by the roadside terminal. The third random number is obtained by combining the first random number and the second random number of the second preset byte length generated by the roadside terminal according to a preset combination rule. The first hash result is obtained by performing a hash operation on the encrypted third random number by the roadside terminal.

[0018] The above method determines the target transmission key through key negotiation with the roadside terminal and based on the first random number generated by the vehicle-road cooperative vehicle terminal and the second random number generated by the roadside terminal, thereby ensuring the uniqueness, security and difficulty of being stolen of the determined target transmission key.

[0019] Optionally, the negotiation request information is determined by the following manner:

[0020] A first random number of a first preset byte length is generated, and the first random number is encrypted based on an identity of the vehicle infrastructure integration vehicle terminal and a current system time, to obtain the encrypted first random number;

[0021] The encrypted first random number is signed based on private key certificate information of the vehicle infrastructure integration vehicle terminal, to obtain the signature information;

[0022] The encrypted first random number, the signature information, and public key certificate information of the vehicle infrastructure integration vehicle terminal are taken as the negotiation request information.

[0023] The above method encrypts and signs the generated first random number based on the PKI certificate mechanism and encryption algorithm in the prior art, to determine the negotiation request information, so that the target transmission key obtained through negotiation has uniqueness and security.

[0024] Optionally, before the encrypted third random number is decrypted, the method further includes:

[0025] The encrypted third random number is obtained from the negotiation feedback information, and a second hash result is obtained by performing a hash operation on the encrypted third random number, and the second hash result is compared with the first hash result to obtain a comparison result;

[0026] The encrypted third random number is decrypted to obtain a second random number, including:

[0027] When the comparison result represents the same, the encrypted third random number is decrypted based on the first random number to obtain the third random number;

[0028] According to the preset combination rule, a third sub-random number of the first preset byte length is obtained from the third random number, and when the third sub-random number is determined to be the same as the first random number, other third random numbers except the third sub-random number are determined to be the second random number.

[0029] The target transmission key associated with the payment request is determined based on the first random number and the second random number, including:

[0030] According to a preset acquisition rule, part of the random numbers is respectively obtained from the first random number and the second random number, and the obtained part of the random numbers is combined to obtain the target transmission key.

[0031] The method based on the PKI certificate mechanism performs identity authentication, guarantees the identity legitimacy of the vehicle-road cooperative vehicle terminal and the roadside terminal, and performs signature on the transmission data based on the PKI certificate mechanism, thereby guaranteeing the non-repudiation of the transmission data. In this way, the security and confidentiality of the key negotiation process between the vehicle-road cooperative vehicle terminal and the roadside terminal are guaranteed, so that the finally determined target transmission key has uniqueness, security and confidentiality.

[0032] Optionally, the encrypted transmission of the payment information between the vehicle-road cooperative vehicle terminal and the roadside terminal based on the target transmission key comprises:

[0033] obtaining payment information corresponding to the payment request, and sending the encrypted payment information to the roadside terminal; the encrypted payment information is obtained by encrypting the payment information based on the target transmission key, and the payment information at least includes a vehicle identification associated with the vehicle-road cooperative vehicle terminal, a payment account, a payment amount and a payment password;

[0034] receiving the encrypted payment request confirmation information sent by the roadside terminal, the encrypted payment request confirmation information being obtained by encrypting the payment request confirmation information generated based on the payment information based on the target transmission key after the roadside terminal receives the payment information;

[0035] decrypting the encrypted payment request confirmation information based on the target transmission key, displaying the payment request confirmation information, and starting a timer;

[0036] The first preset condition comprises any one of the following conditions:

[0037] When the timer reaches a set threshold, the encrypted payment cancellation information is sent to the roadside terminal;

[0038] When the timer does not reach the set threshold, the encrypted payment confirmation information is sent to the roadside terminal in response to the confirmation operation performed by the user on the to-be-paid information, and the payment receipt information returned by the roadside terminal is received;

[0039] When the timer does not reach the set threshold, the encrypted payment cancellation information is sent to the roadside terminal in response to the confirmation operation performed by the user on the to-be-paid information.

[0040] The method based on the target transmission key, the roadside terminal and the encrypted transmission of the payment information for the payment request, and the first preset condition is determined when the first preset condition is met, the encrypted transmission with the roadside terminal is ended, and one-time pad is further realized to guarantee the security and confidentiality in the transmission process.

[0041] In a second aspect, the embodiments of the present application provide a data transmission method applied to a road side terminal, comprising:

[0042] sending a payment request to a vehicle infrastructure integration vehicle terminal, the payment request comprising an identity of the road side terminal and to-be-paid information;

[0043] performing key negotiation with the vehicle infrastructure integration vehicle terminal to determine a target transmission key associated with the payment request;

[0044] performing encrypted transmission of the payment information with the vehicle infrastructure integration vehicle terminal based on the target transmission key, and ending the encrypted transmission with the vehicle infrastructure integration vehicle terminal when a second preset condition is met.

[0045] Optionally, the performing key negotiation with the vehicle infrastructure integration vehicle terminal to determine the target transmission key associated with the payment request comprises:

[0046] receiving negotiation request information sent by the vehicle infrastructure integration vehicle terminal, and performing identity verification and signature information verification on the vehicle infrastructure integration vehicle terminal based on a public key certificate of the vehicle infrastructure integration vehicle terminal;

[0047] after determining that the identity verification and the signature information verification are both passed, obtaining an identity of the vehicle infrastructure integration vehicle terminal and a current system time, decrypting the encrypted first random number to obtain the first random number, the first random number having a first preset byte length;

[0048] generating a second random number having a second preset byte length, obtaining negotiation feedback information based on the first random number and the second random number, and sending the negotiation feedback information to the vehicle infrastructure integration vehicle terminal;

[0049] receiving negotiation success information returned by the vehicle infrastructure integration vehicle terminal, and determining the target transmission key based on the first random number and the second random number.

[0050] Optionally, the obtaining negotiation feedback information based on the first random number and the second random number comprises:

[0051] combining the first random number and the second random number according to a preset combination rule to obtain a third random number, and encrypting the third random number based on the first random number to obtain an encrypted third random number;

[0052] performing hash operation on the encrypted third random number to obtain a first hash result, and taking the encrypted third random number and the first hash result as the negotiation feedback information;

[0053] determining a target transmission key associated with the payment request based on the first random number and the second random number, comprising:

[0054] acquiring partial random numbers from the first random number and the second random number respectively according to a preset acquisition rule, and combining the acquired partial random numbers to obtain the target transmission key.

[0055] Optionally, the encrypted transmission of the payment information with the vehicle-road cooperative vehicle terminal based on the target transmission key comprises:

[0056] receiving the encrypted payment information sent by the vehicle-road cooperative vehicle terminal, and decrypting the encrypted payment information based on the target transmission key to obtain the payment information;

[0057] generating payment request confirmation information based on the payment information, encrypting the payment request confirmation information based on the target transmission key, and sending the encrypted payment request confirmation information to the vehicle-road cooperative vehicle terminal;

[0058] The second preset condition comprises any one of the following conditions:

[0059] sending the encrypted payment receipt information to the vehicle-road cooperative vehicle terminal;

[0060] Based on receiving the encrypted payment cancellation information, performing a cancellation operation.

[0061] In a third aspect, an embodiment of the present application provides a data transmission device applied in a vehicle-road cooperative vehicle terminal, comprising:

[0062] a receiving module configured to receive a payment request, the payment request comprising an identity of a roadside terminal and to-be-paid information;

[0063] a negotiation module configured to perform key negotiation with the roadside terminal based on the identity of the roadside terminal to determine a target transmission key associated with the payment request;

[0064] a transmission module configured to perform encrypted transmission of payment information with the roadside terminal based on the target transmission key, and end the encrypted transmission with the roadside terminal when it is determined that a first preset condition is met;

[0065] a key module configured to perform a confirmation operation or a cancellation operation on the to-be-paid information by a user; the key module comprises a confirmation key and a cancellation key, the confirmation key is configured to perform the confirmation operation by the user, and the cancellation key is configured to perform the cancellation operation by the user.

[0066] Optionally, based on the identity of the road side terminal, a key negotiation is performed with the road side terminal to determine a target transmission key associated with the payment request, and the negotiation module is configured to:

[0067] Based on the identity of the road side terminal, a negotiation request information is sent to the road side terminal, the negotiation request information including the encrypted first random number, signature information and public key certificate information;

[0068] The negotiation feedback information returned by the road side terminal is received, the negotiation feedback information including an encrypted third random number and a first hash result;

[0069] The encrypted third random number is decrypted to obtain a second random number, and negotiation success information is sent to the road side terminal, and based on the first random number and the second random number, the target transmission key is determined;

[0070] The encrypted third random number is obtained by the road side terminal based on the first random number, the third random number is obtained by the road side terminal by combining the first random number and the generated second random number of a second preset byte length according to a preset combination rule, and the first hash result is obtained by the road side terminal by performing a hash operation on the encrypted third random number.

[0071] Optionally, the negotiation module is configured to determine the negotiation request information in the following manner:

[0072] A first random number of a first preset byte length is generated, and the first random number is encrypted based on the identity of the vehicle infrastructure cooperation vehicle terminal and the current system time to obtain the encrypted first random number;

[0073] The encrypted first random number is signed based on the private key certificate information of the vehicle infrastructure cooperation vehicle terminal to obtain the signature information;

[0074] The encrypted first random number, the signature information and the public key certificate information of the vehicle infrastructure cooperation vehicle terminal are taken as the negotiation request information.

[0075] Optionally, before decrypting the encrypted third random number, the negotiation module is further configured to:

[0076] The encrypted third random number is obtained from the negotiation feedback information, and a second hash result is obtained by performing a hash operation on the encrypted third random number, and the second hash result is compared with the first hash result to obtain a comparison result;

[0077] The encrypted third random number is decrypted based on the first random number to obtain the third random number.

[0078] The encrypted third random number is decrypted based on the first random number to obtain the third random number when the comparison result represents that the first random number and the third random number are the same.

[0079] The third sub-random number of the first preset byte length is obtained from the third random number according to the preset combination rule, and other third random numbers except the third sub-random number are determined as the second random number when the third sub-random number is determined to be the same as the first random number.

[0080] The target transmission key associated with the payment request is determined based on the first random number and the second random number.

[0081] Part of the random number is obtained from the first random number and the second random number respectively according to a preset obtaining rule, and the obtained part of the random number is combined to obtain the target transmission key.

[0082] Optionally, the payment information is encrypted and transmitted to the roadside terminal based on the target transmission key.

[0083] The payment information corresponding to the payment request is obtained, and the encrypted payment information is sent to the roadside terminal. The encrypted payment information is obtained by encrypting the payment information based on the target transmission key. The payment information at least includes a vehicle identification code associated with the vehicle-road cooperation vehicle terminal, a payment account, a payment amount and a payment password.

[0084] The encrypted payment request confirmation information sent by the roadside terminal is received. The encrypted payment request confirmation information is obtained by encrypting the payment request confirmation information based on the target transmission key after the roadside terminal receives the payment information.

[0085] The encrypted payment request confirmation information is decrypted based on the target transmission key, and the payment request confirmation information is displayed and a timer is started.

[0086] The first preset condition includes any one of the following conditions:

[0087] When the timer reaches a set threshold, the encrypted payment cancellation information is sent to the roadside terminal.

[0088] when the timer does not reach the set threshold, in response to the user performing the confirmation operation on the to-be-paid information, sending encrypted payment confirmation information to the road side terminal, and receiving payment receipt information returned by the road side terminal;

[0089] when the timer does not reach the set threshold, in response to the user performing the cancellation operation on the to-be-paid information, sending encrypted payment cancellation information to the road side terminal.

[0090] In a fourth aspect, an embodiment of the present application provides a data transmission device, applied to a road side terminal, comprising:

[0091] The sending module is configured to send a payment request to a vehicle infrastructure integration vehicle terminal, the payment request comprising an identity of the road side terminal and to-be-paid information;

[0092] The negotiation module is configured to perform key negotiation with the vehicle infrastructure integration vehicle terminal, and determine to obtain a target transmission key associated with the payment request.

[0093] The transmission module is configured to perform encrypted transmission of payment information with the vehicle infrastructure integration vehicle terminal based on the target transmission key, and end the encrypted transmission with the vehicle infrastructure integration vehicle terminal when it is determined that a second preset condition is met.

[0094] Optionally, the key negotiation with the vehicle infrastructure integration vehicle terminal to determine to obtain the target transmission key associated with the payment request, the negotiation module is configured to:

[0095] receive negotiation request information sent by the vehicle infrastructure integration vehicle terminal, and perform identity verification and signature information verification on the vehicle infrastructure integration vehicle terminal based on a public key certificate of the vehicle infrastructure integration vehicle terminal.

[0096] After it is determined that the identity verification and the signature information verification are both passed, obtain an identity of the vehicle infrastructure integration vehicle terminal and a current system time, decrypt the encrypted first random number to obtain the first random number, and the first random number has a first preset byte length.

[0097] generate a second random number with a second preset byte length, obtain negotiation feedback information based on the first random number and the second random number, and send the negotiation feedback information to the vehicle infrastructure integration vehicle terminal.

[0098] receive negotiation success information returned by the vehicle infrastructure integration vehicle terminal, and determine the target transmission key based on the first random number and the second random number.

[0099] Optionally, the negotiation feedback information is obtained based on the first random number and the second random number, and the negotiation module is configured to:

[0100] The first random number and the second random number are combined according to a preset combination rule to obtain a third random number, and the third random number is encrypted based on the first random number to obtain the encrypted third random number;

[0101] The encrypted third random number is subjected to a hash operation to obtain a first hash result, and the encrypted third random number and the first hash result are taken as the negotiation feedback information;

[0102] The target transmission key associated with the payment request is determined based on the first random number and the second random number, and the negotiation module is configured to:

[0103] According to a preset acquisition rule, part of the random numbers are acquired from the first random number and the second random number respectively, and the acquired part of the random numbers are combined to obtain the target transmission key.

[0104] Optionally, the encrypted transmission of the payment information is performed between the vehicle-road cooperative vehicle terminal and the target transmission key based on the target transmission key, and the transmission module is configured to:

[0105] The encrypted payment information sent by the vehicle-road cooperative vehicle terminal is received, and the encrypted payment information is decrypted based on the target transmission key to obtain the payment information;

[0106] The payment request confirmation information is generated based on the payment information, the payment request confirmation information is encrypted based on the target transmission key, and the encrypted payment request confirmation information is sent to the vehicle-road cooperative vehicle terminal;

[0107] The second preset condition includes any one of the following conditions:

[0108] The encrypted payment receipt information is sent to the vehicle-road cooperative vehicle terminal;

[0109] Based on the received encrypted payment cancellation information, the cancellation operation is performed.

[0110] In a fifth aspect, an embodiment of the present application provides an intelligent terminal, comprising:

[0111] A memory for storing a computer program executable by a controller;

[0112] The controller is connected with the memory and is configured to execute the method of any one of the above first aspect or second aspect.

[0113] In a sixth aspect, an embodiment of the present application provides a computer readable storage medium, when instructions in the storage medium are executed by a processor, the processor is enabled to perform the method in any one of the first aspect or the second aspect.

[0114] In addition, the technical effects brought by any one of the implementation manners of the second aspect to the sixth aspect can refer to the technical effects brought by the different implementation manners of the first aspect, which will not be repeated here. BRIEF DESCRIPTION OF DRAWINGS

[0115] Figure 1 FIG. 1 is a schematic diagram of a system architecture in an application scenario in an embodiment of the present application;

[0116] Figure 2 FIG. 2 is a schematic diagram of an interaction process of data transmission in an embodiment of the present application;

[0117] Figure 3 FIG. 3 is a schematic diagram of an application scenario in an embodiment of the present application;

[0118] Figure 4 FIG. 4 is a schematic diagram of a process of data transmission in an embodiment of the present application;

[0119] Figure 5 FIG. 5 is a schematic diagram of a process of determining a target transmission key in an embodiment of the present application;

[0120] Figure 6 FIG. 6 is a schematic diagram of a process of determining negotiation request information in an embodiment of the present application;

[0121] Figure 7 FIG. 7 is a schematic diagram of a process of data transmission in an embodiment of the present application;

[0122] Figure 8 FIG. 8 is a schematic diagram of a process of determining a target transmission key in an embodiment of the present application;

[0123] Figure 9 FIG. 9 is a schematic diagram of a process of determining negotiation feedback information in an embodiment of the present application;

[0124] Figure 10 FIG. 10 is a schematic diagram of a logical architecture of a data transmission apparatus in an embodiment of the present application;

[0125] Figure 11 FIG. 11 is a schematic diagram of a logical architecture of a data transmission apparatus in an embodiment of the present application;

[0126] Figure 12 FIG. 12 is a schematic diagram of an entity architecture of an intelligent terminal in an embodiment of the present application. DETAILED DESCRIPTION

[0127] With reference to the drawings, the technical solutions in the embodiments of the present application will be clearly and completely described below. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all the other embodiments obtained by a person of ordinary skill in the art without creative effort are within the scope of the present application.

[0128] It should be noted that the terms "first", "second", "third", and the like in the specification and claims of the present application and the above-described drawings are used to distinguish similar objects, and do not necessarily indicate a specific order or a chronological sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein.

[0129] In order to solve the problem of low data security in the data transmission process in the prior art, in the embodiments of the present application, after receiving a payment request containing the identity of the road side terminal and the to-be-paid information, the vehicle-road cooperative vehicle terminal performs key negotiation with the road side terminal, so as to determine a target transmission key; then, based on the target transmission key, the vehicle-road cooperative vehicle terminal performs encrypted transmission of the payment information with the road side terminal, and ends the encrypted transmission process when it is determined that a first preset condition is met, thereby ensuring the data security, confidentiality and anti-repudiation of the data transmission process.

[0130] The preferred embodiments of the present application will be further described in detail below with reference to the drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present application, and are not used to limit the present application, and the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.

[0131] Figure 1 A system architecture schematic diagram of a payment application scenario in the embodiments of the present application is shown. As shown in the schematic diagram of the payment application scenario, the schematic diagram includes a vehicle-road cooperative vehicle terminal 100, a road side terminal 110 and a certificate authentication system 120. Figure 1

[0132] Among them, the vehicle-road cooperative vehicle terminal 100, the road side terminal 110 and the certificate authentication system 120 communicate through a communication network; the vehicle-road cooperative vehicle terminal 100 applies for public key certificate information and private key certificate information from the certificate authentication system 120, which is used to determine negotiation request information; the road side terminal 110 obtains the public key certificate information for the vehicle-road cooperative vehicle terminal 100 from the certificate authentication system 120, which is used to perform identity authentication on the vehicle-road cooperative vehicle terminal 100; the certificate authentication system 120 is used for certificate issuing and management, etc.

[0133] ​In the embodiment of the present application, the vehicle-road cooperation vehicle terminal 100 is embedded with a hardware security module (HSM) and a key module; the HSM is used for key operation, such as symmetric encryption and decryption, signature verification, etc.; the key module includes two physical keys, which are confirmation key and cancellation key, and is used for user to verify the correctness of payment confirmation information, so as to ensure the authenticity and reliability of the transaction process, and prevent illegal man-in-the-middle attacks, etc.; correspondingly, the roadside terminal 110 is embedded with an embedded HSM, which is used for key operation, such as symmetric encryption and decryption, signature verification, etc.

[0134] It should be noted that, Figure 1 The application scenario of the data transmission method for vehicle-road cooperation is exemplarily introduced, and the application scenario of the method in the embodiment of the present application is not limited to this.

[0135] The specific implementation of the data transmission method provided by the embodiment of the present application is introduced below.

[0136] Referring to Figure 2 The interaction diagram of the data transmission method of the vehicle-road cooperation vehicle terminal of the present application is provided by the embodiment of the present application, the method can be executed by the vehicle-road cooperation vehicle terminal and the roadside terminal in cooperation, for example, the vehicle-road cooperation vehicle terminal 100 and the roadside terminal 110 in Figure 1 The method can include the following steps:

[0137] Step 201: The roadside terminal sends a payment request to the vehicle-road cooperation vehicle terminal, and the payment request includes the identity of the roadside terminal and the to-be-paid information.

[0138] In the embodiment of the present application, before step 201 is executed, the roadside terminal and the vehicle-road cooperation vehicle terminal both need to apply for their own certificates to the certificate authentication system according to the vehicle-road cooperation security specification, and store the obtained respective certificates in the local memory, at the same time, the vehicle-road cooperation vehicle terminal saves the public key certificate of the other terminal associated with the vehicle-road cooperation vehicle terminal, and the roadside terminal saves the public key certificate of the other terminal associated with the roadside terminal.

[0139] In the embodiment of the present application, when step 201 is executed, the roadside terminal determines the to-be-paid information associated with the vehicle-road cooperation vehicle terminal based on the pre-designed fee rule, and then sends a payment request to the vehicle-road cooperation vehicle terminal, the payment request contains the identity of the roadside terminal and the to-be-paid information, wherein the identity of the roadside terminal can be the unique device serial number of the roadside terminal.

[0140] Step 202: The vehicle infrastructure cooperative vehicle terminal receives the payment request, and determines negotiation request information based on the received payment request, the negotiation request information including the encrypted first random number, signature information, and public key certificate information.

[0141] In the embodiment of the application, after the vehicle infrastructure cooperative vehicle terminal receives the payment request, the identity of the roadside terminal included in the payment request is authenticated, and a communication connection is established with the roadside terminal after determining that the roadside terminal passes the identity authentication. Then, the vehicle infrastructure cooperative vehicle terminal can determine the negotiation request information by performing the following operations:

[0142] Operation 1: The vehicle infrastructure cooperative vehicle terminal generates a first random number of a first preset byte length.

[0143] In the embodiment of the application, the roadside terminal randomly generates a second random number of a second preset byte length. Optionally, the second preset byte length can also be set to different values based on different actual application scenarios, and in the embodiment of the application, only the first preset byte length of 16 bytes is taken as an example for description, and details are not described herein.

[0144] For example, it is assumed that the first preset byte length is 16 bytes.

[0145] Then, the vehicle infrastructure cooperative vehicle terminal generates a first random number of 16 bytes, denoted as SR=SR1 (first 8 bytes) +SR2 (last 8 bytes).

[0146] Operation 2: The vehicle infrastructure cooperative vehicle terminal encrypts the first random number based on the identity of the vehicle infrastructure cooperative vehicle terminal and the current system time to obtain an encrypted first random number.

[0147] In the embodiment of the application, before operation 2 is performed, the vehicle infrastructure cooperative vehicle terminal obtains the identity of the vehicle infrastructure cooperative vehicle terminal, such as a unique device serial number SN, and obtains the current system time T1, and the identity of the vehicle infrastructure cooperative vehicle terminal and the current system time are combined to form an initial transmission key, denoted as K1, such as the initial transmission key K1=SN+T1.

[0148] In the embodiment of the application, when operation 2 is performed, the vehicle infrastructure cooperative vehicle terminal encrypts the first random number based on the initial transmission key to obtain the encrypted first random number.

[0149] For example, it is assumed that the first random number generated by the vehicle infrastructure cooperative vehicle terminal is denoted as SR, and the determined initial transmission key is denoted as K1.

[0150] Then, the vehicle infrastructure cooperative vehicle terminal performs an encryption operation on SR based on K1 to obtain the encrypted first random number, such as ciphertext data M1, denoted as M1=Enc(K1, SR).

[0151] Operation three, the vehicle infrastructure cooperation vehicle terminal signs the encrypted first random number based on the private key certificate information of the vehicle infrastructure cooperation vehicle terminal, to obtain signature information.

[0152] In the embodiment of the application, before operation three is performed, the vehicle infrastructure cooperation vehicle terminal obtains the corresponding private key certificate information from the local memory, and when operation three is performed, the encrypted first random number is signed based on the private key certificate information to obtain the corresponding signature information, denoted as S1.

[0153] Operation four, the vehicle infrastructure cooperation vehicle terminal takes the encrypted first random number, the signature information and the public key certificate information of the vehicle infrastructure cooperation vehicle terminal as negotiation request information.

[0154] In the embodiment of the application, before operation three is performed, the public key certificate information of the vehicle infrastructure cooperation vehicle terminal is obtained, and then, when operation four is performed, the encrypted first random number obtained in operation two, the signature information obtained in operation three and the public key certificate information obtained from the local memory are integrated as negotiation request information.

[0155] For example, it is assumed that the encrypted first random number obtained by the vehicle infrastructure cooperation vehicle terminal is ciphertext data M1, the signature information is S1, and the obtained public key certificate information is Cer1.

[0156] Then, the vehicle infrastructure cooperation vehicle terminal combines the encrypted first random number, the signature information and the public key certificate information to obtain negotiation request information M1+S1+Cer1.

[0157] Step 203: The vehicle infrastructure cooperation vehicle terminal sends the negotiation request information to the roadside terminal based on the identity of the roadside terminal contained in the payment request.

[0158] In the embodiment of the application, after step 202 is performed, the negotiation request information is obtained, and then, when step 203 is performed, the obtained negotiation request information is sent to the roadside terminal.

[0159] Step 204: The roadside terminal receives the negotiation request information sent by the vehicle infrastructure cooperation vehicle terminal, and performs identity verification on the vehicle infrastructure cooperation vehicle terminal based on the public key certificate information of the vehicle infrastructure cooperation vehicle terminal.

[0160] In the embodiment of the application, the roadside terminal obtains the public key certificate information of the vehicle infrastructure cooperation vehicle terminal from the local memory, and performs identity verification on the public key certificate information contained in the negotiation request information, and the verification result obtained includes but is not limited to the following two cases:

[0161] Case 1, if it is determined that the above identity result represents passing, it is determined that the identity of the vehicle infrastructure cooperation vehicle terminal is legal, and step 205 is performed.

[0162] Case 2, if it is determined that the identity result represents failure, it is determined that the identity of the vehicle-road cooperative vehicle terminal is not legal, and the communication with the vehicle-road cooperative vehicle terminal for the payment request is interrupted.

[0163] Step 205: After determining that the vehicle-road cooperative vehicle terminal passes the identity verification, the road-side terminal performs signature information verification on the vehicle-road cooperative vehicle terminal based on the public key certificate information of the vehicle-road cooperative vehicle terminal.

[0164] In the embodiment of the application, after step 204 is performed, when the road-side terminal determines that the vehicle-road cooperative vehicle terminal passes the identity verification, signature information verification is performed on the vehicle-road cooperative vehicle terminal.

[0165] Specifically, based on the public key certificate information obtained from the local memory, the signature information is subjected to SM2 algorithm signature verification operation using the public key certificate, and the signature verification result obtained includes but is not limited to the following two cases:

[0166] Case 1, if it is determined that the signature verification result represents success, step 206 is performed.

[0167] Case 2, if it is determined that the signature verification result represents failure, it is determined that the signature information contained in the negotiation request information is not legal, the road-side terminal discards the negotiation request information, and ends the communication with the vehicle-road cooperative vehicle terminal for the payment request.

[0168] Step 206: After determining that the vehicle-road cooperative vehicle terminal passes the signature information verification, the road-side terminal obtains the identity of the vehicle-road cooperative vehicle terminal and the current system time, decrypts the encrypted first random number contained in the negotiation request information, obtains and stores the first random number.

[0169] In the embodiment of the application, after step 205 is performed, when the road-side terminal determines that the vehicle-road cooperative vehicle terminal passes the signature information verification, in step 206, the identity of the vehicle-road cooperative vehicle terminal and the current system time are obtained, an initial transmission key is formed, and based on the initial transmission key, the encrypted first random number in the received negotiation request information is decrypted to obtain the first random number, and the obtained first random number is stored in the local memory.

[0170] Step 207: The road-side terminal generates a second random number of a second preset byte length, and based on the first random number and the second random number, obtains negotiation feedback information, which includes an encrypted third random number and a first hash result.

[0171] In the embodiment of the present application, the roadside terminal randomly generates a second random number of a second preset byte length. Optionally, the second preset byte length can also be set to different values based on different actual application scenarios. In the embodiment of the present application, only the case where the second preset byte length is also 16 bytes is introduced, and details are not repeated here.

[0172] It should be noted that in the embodiment of the present application, the first preset byte length and the second preset byte length can be the same or different, and both need to be set according to actual application scenarios, without specific limitation.

[0173] For example, it is assumed that the second preset byte length is 16 bytes.

[0174] Then, the roadside terminal generates a second random number of 16 bytes, denoted as RR=RR1 (first 8 bytes) + RR2 (last 8 bytes).

[0175] Then, the roadside terminal can obtain the negotiation feedback information by performing the following operations:

[0176] Operation 1: The roadside terminal combines the first random number and the second random number according to a preset combination rule to obtain a third random number.

[0177] In the embodiment of the present application, the roadside terminal obtains the preset combination rule, and combines the first random number and the second random number according to the preset combination rule to obtain the third random number.

[0178] For example, the preset combination rule is to combine the first random number + the second random number, that is, the obtained third random number is SR+RR.

[0179] Operation 2: The roadside terminal encrypts the third random number based on the first random number to obtain an encrypted third random number.

[0180] In the embodiment of the present application, the roadside terminal uses a symmetric key encryption method, takes the first random number as the symmetric encryption key, and encrypts the third random number based on the first random number to obtain the encrypted third random number; for example, based on SR, the third random number SR+RR is encrypted by SM1 algorithm in electronic code book mode (ECB), and the encrypted third random number is E1=SM1-ecb-ENC(SR, RR+SR).

[0181] Operation 3: The roadside terminal performs a hash operation on the encrypted third random number to obtain a first hash result, and takes the encrypted third random number and the first hash result as the negotiation feedback information.

[0182] In the embodiment of the present application, the roadside terminal performs hash calculation on the encrypted third random number based on the SM3 algorithm to obtain a first hash result, such as performing hash calculation on E1 based on the SM3 algorithm to obtain a first hash result denoted as H1.

[0183] Then, in the embodiment of the present application, the roadside terminal obtains negotiation feedback information based on the encrypted third random number and the first hash result, such as the negotiation feedback information obtained as E1+H1.

[0184] Step 208: The roadside terminal sends the negotiation feedback information to the vehicle infrastructure cooperation vehicle terminal.

[0185] In the embodiment of the present application, the roadside terminal sends the negotiation feedback information to the vehicle infrastructure cooperation vehicle terminal, such as sending E1+H1 to the vehicle infrastructure cooperation vehicle terminal.

[0186] Step 209: The vehicle infrastructure cooperation vehicle terminal receives the negotiation feedback information, obtains the encrypted third random number from the negotiation feedback information, performs hash operation on the encrypted third random number to obtain a second hash result, and compares the second hash result with the first hash result to obtain a comparison result.

[0187] In the embodiment of the present application, the vehicle infrastructure cooperation vehicle terminal obtains the encrypted third random number from the received negotiation feedback information, performs hash operation on the encrypted third random number based on the SM3 algorithm to obtain a second hash result, and then compares the second hash result with the first hash result contained in the negotiation feedback information to obtain a corresponding comparison result.

[0188] Optionally, if the comparison result represents the same, step 210 is performed; otherwise, if the comparison result represents the different, the vehicle infrastructure cooperation vehicle terminal returns negotiation failure information to the roadside terminal.

[0189] Step 210: When the vehicle infrastructure cooperation vehicle terminal determines that the comparison result represents the same, the vehicle infrastructure cooperation vehicle terminal decrypts the encrypted third random number based on the first random number to obtain a second random number, and sends negotiation success information to the roadside terminal.

[0190] In the embodiment of the present application, when the vehicle infrastructure cooperation vehicle terminal determines that the comparison result represents the same, the vehicle infrastructure cooperation vehicle terminal obtains the first random number and decrypts the third random number contained in the negotiation feedback information based on the first random number. Specifically, the vehicle infrastructure cooperation vehicle terminal can obtain the second random number by performing the following operations:

[0191] Operation one, the vehicle infrastructure cooperation vehicle terminal decrypts the encrypted third random number based on the first random number to obtain a third random number.

[0192] Operation two, the vehicle-road cooperative vehicle terminal acquires a third sub-random number of a first preset byte length from the third random number according to a preset combination rule.

[0193] Operation three, the vehicle-road cooperative vehicle terminal determines other third random numbers except the third sub-random number as the second random number when determining that the third sub-random number is the same as the first random number.

[0194] In the embodiment of the application, when the vehicle-road cooperative vehicle terminal obtains the second random number, the vehicle-road cooperative vehicle terminal sends negotiation success information to the roadside terminal, so that the roadside terminal determines the target transmission key based on the first random number and the second random number.

[0195] Step 211: The vehicle-road cooperative vehicle terminal determines the target transmission key based on the first random number and the second random number.

[0196] In the embodiment of the application, the vehicle-road cooperative vehicle terminal acquires part of the random numbers from the first random number and the second random number respectively according to a preset acquisition rule, and combines the acquired part of the random numbers to obtain the target transmission key.

[0197] Step 212: The roadside terminal receives the negotiation success information returned by the vehicle-road cooperative vehicle terminal, and determines the target transmission key based on the first random number and the second random number.

[0198] In the embodiment of the application, after receiving the negotiation success information returned by the vehicle-road cooperative vehicle terminal, the roadside terminal acquires part of the random numbers from the first random number and the second random number respectively according to the preset acquisition rule configured by the vehicle-road cooperative vehicle terminal, and combines the acquired part of the random numbers to obtain the target transmission key.

[0199] For example, referring to FIG. 1, a key negotiation between the vehicle-road cooperative vehicle terminal A and the roadside terminal B is taken as an example. Figure 3

[0200] Suppose that the third random number is SR+RR, the encrypted third random number is E1=SM1-ecb-ENC(SR, RR+SR), and the comparison result of the obtained second hash result and the first hash result contained in the negotiation feedback information represents the same.

[0201] Then, the vehicle-road cooperative vehicle terminal acquires the first random number (for example, SR=SR1+SR2), and decrypts the encrypted third random number (E1=SM1-ecb-ENC(SR, RR+SR)) based on the first random number to obtain the third random number SR+RR, wherein RR=RR1+RR2.

[0202] Suppose that the preset combination rule is the first random number+the second random number, that is, the first random number and the second random number are spliced, such as SR+RR, and the first preset byte length is 16 bytes.​

[0203] Then, the vehicle infrastructure cooperation vehicle terminal obtains a third sub-random number of a first preset byte length from the third random number according to a preset combination rule, that is, obtains the first 16 bytes of the third sub-random number, and compares the third sub-random number with the first random number.

[0204] If it is determined that the third sub-random number is the same as the first random number, the other third random number except the third sub-random number is determined as a second random number, negotiation success information is sent to the roadside terminal, and a target transmission key is obtained according to a preset obtaining rule based on the first random number and the second random number.

[0205] Suppose that the preset obtaining rule is to obtain a random number SR1 of the first 8 bytes from the first random number and a random number RR1 of the first 8 bytes from the second random number, and the obtained part of the random numbers is simply spliced and combined.

[0206] That is, the target transmission key KT is composed of the first 8 bytes of SR and RR, that is, the obtained target transmission key is SR1+RR1.

[0207] Optionally, if it is determined that the third sub-random number is different from the first random number, the vehicle infrastructure cooperation vehicle terminal returns negotiation failure information to the roadside terminal and interrupts communication with the roadside terminal.

[0208] Step 213: The vehicle infrastructure cooperation vehicle terminal obtains payment information corresponding to the payment request, and encrypts the payment information based on the target transmission key to obtain encrypted payment information.

[0209] In the embodiment of the application, the vehicle infrastructure cooperation vehicle terminal obtains payment information, wherein the payment information includes but is not limited to a vehicle identification associated with the vehicle infrastructure cooperation vehicle terminal, a payment account, a payment amount, and a payment password.

[0210] Then, in the embodiment of the application, the vehicle infrastructure cooperation vehicle terminal encrypts the obtained payment information based on the target transmission key to obtain corresponding encrypted payment information.

[0211] Step 214: The vehicle infrastructure cooperation vehicle terminal sends the encrypted payment information to the roadside terminal.

[0212] Step 215: The roadside terminal receives the encrypted payment information sent by the vehicle infrastructure cooperation vehicle terminal, and decrypts the encrypted payment information based on the target transmission key to obtain the payment information.

[0213] In the embodiment of the application, the vehicle infrastructure cooperation vehicle terminal decrypts the received encrypted payment information based on the target transmission key obtained by performing step 212 to obtain the payment information.

[0214] Step 216: The road side terminal generates payment request confirmation information based on the payment information, and encrypts the payment request confirmation information based on the target transmission key to obtain encrypted payment request confirmation information.

[0215] In the embodiment of the present application, after step 215 is performed, the road side terminal obtains the payment information, and then, when step 216 is performed, the corresponding payment request confirmation information is generated based on the payment information, and then the payment request confirmation information is encrypted in SM4 algorithm cipher feedback mode (CFB) based on the target transmission key to obtain encrypted payment request confirmation information.

[0216] Optionally, in the embodiment of the present application, the initial vector of the above encryption process can be IV=SR2+RR2, and the encryption process is recorded as C=SM4-cfb(KT, IV, M), wherein M is the plaintext that needs to be transmitted each time, and C is the ciphertext of each encryption, and M and C have the same length.

[0217] Step 217: The road side terminal sends the encrypted payment request confirmation information to the car road cooperation vehicle terminal.

[0218] In the embodiment of the present application, since the above encryption operation does not change the length of the data to be transmitted, the transmission performance can be improved.

[0219] Step 218: The car road cooperation vehicle terminal receives the encrypted payment request confirmation information, decrypts the encrypted payment request confirmation information based on the target transmission key, displays the payment request confirmation information, and starts a timer.

[0220] In the embodiment of the present application, the car road cooperation vehicle terminal is configured with a display module and two physical buttons, after receiving the encrypted payment request confirmation information, the encrypted payment request confirmation information is decrypted based on the target transmission key to obtain the payment request confirmation information, and the obtained payment request confirmation information is displayed on the display module, and the timer is started at the same time.

[0221] Step 219: When the car road cooperation vehicle terminal determines that the above timer does not reach the set threshold, the encrypted payment confirmation information is sent to the road side terminal in response to the confirmation operation of the user for the payment information to be paid.

[0222] In the embodiment of the present application, the user views the payment request confirmation information through the display module of the vehicle-road cooperation vehicle terminal, and presses the "confirm" button when confirming that the payment request confirmation information is correct. Correspondingly, the vehicle-road cooperation vehicle terminal generates payment confirmation information and encrypts the payment confirmation information in response to the confirmation operation of the user on the to-be-paid information when determining that the timer does not reach the set threshold, and sends the encrypted payment confirmation information to the roadside terminal.

[0223] Step 220: The roadside terminal receives the encrypted payment confirmation information sent by the vehicle-road cooperation vehicle terminal, decrypts the encrypted payment confirmation information, and performs a deduction operation based on the payment confirmation information.

[0224] In the embodiment of the present application, the roadside terminal decrypts the encrypted payment confirmation information based on the target transmission key to obtain the payment confirmation information after receiving the encrypted payment confirmation information, and performs a deduction operation on the to-be-paid information based on the obtained payment confirmation information.

[0225] Step 221: The roadside terminal completes the deduction operation, sends the encrypted payment receipt information to the vehicle-road cooperation vehicle terminal, and ends the encrypted transmission with the vehicle-road cooperation vehicle terminal.

[0226] In the embodiment of the present application, the roadside terminal generates payment receipt information after completing the deduction operation, encrypts the payment receipt information based on the target transmission key to obtain corresponding encrypted payment receipt information, sends the encrypted payment receipt information to the vehicle-road cooperation vehicle terminal, and ends the encrypted transmission with the vehicle-road cooperation vehicle terminal.

[0227] Step 222: The vehicle-road cooperation vehicle terminal receives the encrypted payment receipt information, decrypts the encrypted payment receipt information based on the target transmission key to obtain the payment receipt information, and ends the encrypted transmission with the roadside terminal.

[0228] In the embodiment of the present application, when step 222 is performed, the vehicle-road cooperation vehicle terminal receives the encrypted payment receipt information, decrypts the encrypted payment receipt information based on the target transmission key to obtain corresponding payment receipt information, and ends the encrypted transmission with the vehicle-road cooperation vehicle terminal.

[0229] In the embodiment of the present application, steps 219-222 can be replaced by the following steps:

[0230] Step 219': The vehicle-road cooperation vehicle terminal determines that the timer reaches the set threshold or determines that the timer does not reach the set threshold in response to the user's cancellation operation on the to-be-paid information when the timer reaches the set threshold, and sends the encrypted payment cancellation information to the roadside terminal and ends the encrypted transmission with the roadside terminal.

[0231] Step 220': the roadside terminal receives the encrypted payment cancellation information sent by the car-road cooperation vehicle terminal, decrypts the encrypted payment cancellation information based on the target transmission key, and performs a cancellation operation based on the payment cancellation information, and ends the encrypted transmission with the car-road cooperation vehicle terminal.

[0232] In the embodiments of the present application, the above-mentioned data transmission method for car-road cooperation is used. The car-road cooperation vehicle terminal needs to perform key negotiation with the roadside terminal to obtain the corresponding target transmission key every time it obtains a payment request, and then performs encrypted transmission with the roadside terminal based on the target transmission key, thereby improving the confidentiality, security and resistance of the data transmission process.

[0233] It should be noted that, in the embodiments of the present application, in order to keep the byte length of the encrypted data consistent with the byte length of the original data, the SM4 CFB algorithm is preferably used to improve the data transmission performance; but it is not limited to the above-mentioned SM4 algorithm, SM3 algorithm, CFB mode and other encryption algorithms and encryption modes in the embodiments, and other encryption algorithms and / or encryption modes in existing technologies and encryption algorithms and / or encryption modes in future technologies can also be used, which will not be described here.

[0234] Referring to Figure 4 In the embodiments of the present application, a data transmission method is provided, which is applied to a car-road cooperation vehicle terminal, and the specific process is as follows:

[0235] Step 400: receiving a payment request, the payment request including an identity of the roadside terminal and to-be-paid information.

[0236] In the embodiments of the present application, before step 400 is performed, the roadside terminal determines the to-be-paid information associated with the car-road cooperation vehicle terminal based on a pre-designed fee rule, and then sends a payment request to the car-road cooperation vehicle terminal, the payment request including the identity of the roadside terminal and the to-be-paid information. The identity of the roadside terminal can be a unique device serial number of the roadside terminal. Therefore, when step 400 is performed, the car-road cooperation vehicle terminal receives the payment request.

[0237] Step 410: performing key negotiation with the roadside terminal based on the identity of the roadside terminal to determine a target transmission key associated with the payment request.

[0238] In the embodiments of the present application, when step 410 is performed, referring to Figure 5 The above-mentioned target transmission key can be determined by performing the following steps:

[0239] Step 500: sending the negotiation request information to the road side terminal based on the identity of the road side terminal, the negotiation request information including the encrypted first random number, the signature information and the public key certificate information.

[0240] In the embodiments of the present application, referring to FIG. 5, before step 500 is performed, the negotiation request information can be determined in the following manner: Figure 6

[0241] Step 5001: generating a first random number of a first preset byte length, and encrypting the first random number based on the identity of the vehicle infrastructure cooperation vehicle terminal and the current system time to obtain an encrypted first random number.

[0242] In the embodiments of the present application, when step 5001 is performed, a first random number of a first preset byte length is generated and stored in the local memory, then the identity of the vehicle infrastructure cooperation vehicle terminal and the current system time are obtained, and the obtained identity of the vehicle infrastructure cooperation vehicle terminal and the current system time are combined to form an initial transmission key; and the first random number is encrypted based on the initial transmission key, so as to obtain the encrypted first random number.

[0243] Step 5002: signing the encrypted first random number based on the private key certificate information of the vehicle infrastructure cooperation vehicle terminal to obtain the signature information.

[0244] In the embodiments of the present application, when step 5002 is performed, the private key certificate information of the vehicle infrastructure cooperation vehicle terminal is obtained, and the encrypted first random number is signed based on the private key certificate information to obtain the corresponding signature information.

[0245] Step 5003: taking the encrypted first random number, the signature information and the public key certificate information of the vehicle infrastructure cooperation vehicle terminal as the negotiation request information.

[0246] In the embodiments of the present application, when step 500 is performed, the obtained negotiation request information is sent to the road side terminal based on the identity of the road side terminal, so that the road side terminal performs key negotiation with the vehicle infrastructure cooperation vehicle terminal based on the negotiation request information.

[0247] Step 510: receiving the negotiation feedback information returned by the road side terminal, the negotiation feedback information including the encrypted third random number and the first hash result.

[0248] In the embodiments of the present application, after receiving the negotiation feedback information returned by the road side terminal, the encrypted third random number is obtained from the negotiation feedback information, and the encrypted third random number is subjected to a hash operation to obtain a second hash result, and the second hash result is compared with the first hash result to obtain a comparison result, wherein the comparison result includes but is not limited to the following two cases: ​

[0249] Case one, the comparison result represents that the first hash result is same as the second hash result, then step 520 is executed.

[0250] Case two, the comparison result represents that the first hash result is different from the second hash result, then the negotiation failure information is returned to the roadside terminal.

[0251] Step 520: the encrypted third random number is decrypted to obtain the second random number, and the negotiation success information is sent to the roadside terminal.

[0252] In the embodiment of the application, when it is determined that the comparison result represents the same, the encrypted third random number is decrypted based on the first random number to obtain the third random number; then, the third sub-random number of the first preset byte length is obtained from the third random number according to the preset combination rule, and when it is determined that the third sub-random number is same as the first random number, the other third random number except the third sub-random number is determined as the second random number, and the negotiation success information is sent to the roadside terminal.

[0253] Step 530: the target transmission key is determined based on the first random number and the second random number.

[0254] In the embodiment of the application, after the negotiation success information is sent to the roadside terminal, part of the random numbers are obtained from the first random number and the second random number respectively according to the preset obtaining rule, and the obtained part of the random numbers are combined to obtain the target transmission key.

[0255] Optionally, in the embodiment of the application, the above-mentioned preset obtaining rule can be set according to actual use, which is not limited to the following examples, and will not be described here.

[0256] For example, assuming that the byte length of the first random number and the second random number corresponding to each other is 16 bytes; then, the above-mentioned preset obtaining rule can be set as: the first 8 bytes of the random number in the first random number is combined with the last 8 bytes of the random number in the second random number to obtain the target transmission key.

[0257] Step 420: based on the target transmission key, the encrypted transmission of the payment information with the roadside terminal is performed, and the encrypted transmission with the roadside terminal is ended when it is determined that the first preset condition is met.

[0258] In the embodiment of the application, when step 420 is executed, the specific operations can include the following operations:

[0259] Operation one, the payment information corresponding to the payment request is obtained, and the encrypted payment information is sent to the roadside terminal; the encrypted payment information is obtained by encrypting the payment information based on the target transmission key, and the payment information at least includes the vehicle identification mark associated with the vehicle-road cooperation vehicle terminal, the payment account, the payment amount and the payment password.

[0260] Operation two, receiving the encrypted payment request confirmation information sent by the roadside terminal, the encrypted payment request confirmation information is obtained by encrypting the payment request confirmation information generated based on the payment information based on the target transmission key after the roadside terminal receives the payment information.

[0261] Operation three, decrypting the encrypted payment request confirmation information based on the target transmission key, and displaying the payment request confirmation information, and starting a timer.

[0262] Operation four, until it is determined that the first preset condition is met, the encrypted transmission with the roadside terminal is ended.

[0263] In the embodiments of the application, the first preset condition includes but is not limited to any one of the following conditions:

[0264] Condition one, when the timer reaches the set threshold, sending the encrypted payment cancellation information to the roadside terminal.

[0265] Condition two, when the timer does not reach the set threshold, in response to the confirmation operation performed by the user on the to-be-paid information, sending the encrypted payment confirmation information to the roadside terminal, and receiving the payment receipt information returned by the roadside terminal.

[0266] Condition three, when the timer does not reach the set threshold, in response to the cancellation operation performed by the user on the to-be-paid information, sending the encrypted payment cancellation information to the roadside terminal.

[0267] Referring to Figure 7 In the embodiments of the application, a data transmission method is provided, which is applied to a roadside terminal, and the specific process is as follows:

[0268] Step 700: sending a payment request to a cooperative vehicle terminal, the payment request including an identity of the roadside terminal and to-be-paid information.

[0269] In the embodiments of the application, the roadside terminal determines the to-be-paid information associated with the cooperative vehicle terminal based on a pre-designed fee rule, and then sends a payment request to the cooperative vehicle terminal, the payment request including an identity of the roadside terminal and to-be-paid information, wherein the identity of the roadside terminal can be a unique device serial number of the roadside terminal.

[0270] Step 710: performing key negotiation with the cooperative vehicle terminal to determine a target transmission key associated with the payment request.

[0271] In the embodiments of the application, when step 710 is performed, referring to Figure 8 As shown in the figure, the target transmission key can be determined by performing the following steps:

[0272] Step 800: receiving the negotiation request information sent by the vehicle infrastructure cooperation vehicle terminal, and performing identity verification and signature information verification on the vehicle infrastructure cooperation vehicle terminal based on the public key certificate information of the vehicle infrastructure cooperation vehicle terminal.

[0273] In the embodiment of the application, after receiving the negotiation request information, the public key certificate information of the vehicle infrastructure cooperation vehicle terminal is obtained. First, the identity of the vehicle infrastructure cooperation vehicle terminal contained in the negotiation request information is verified. Specifically, the identity of the vehicle infrastructure cooperation vehicle terminal is verified based on the PKI certificate mechanism. If it is determined that the above identity verification is passed, the signature information verification of the vehicle infrastructure cooperation vehicle terminal is performed. Otherwise, the communication with the vehicle infrastructure cooperation vehicle terminal is interrupted.

[0274] Optionally, when the signature information verification of the vehicle infrastructure cooperation vehicle terminal is performed, the following two cases are included but not limited to:

[0275] Case one, it is determined that the signature information verification is passed, and step 810 is performed.

[0276] Case two, it is determined that the signature information verification is not passed, and the communication with the vehicle infrastructure cooperation vehicle terminal is interrupted.

[0277] Step 810: after it is determined that the identity verification and the signature information verification are both passed, the identity of the vehicle infrastructure cooperation vehicle terminal and the current system time are obtained, the encrypted first random number is decrypted to obtain and store the first random number, and the byte length of the first random number is a first preset byte length.

[0278] In the embodiment of the application, after it is determined that the identity verification and the signature information verification are both passed, the identity of the vehicle infrastructure cooperation vehicle terminal and the current system time are obtained. The identity of the vehicle infrastructure cooperation vehicle terminal and the current system time obtained are combined to form an initial transmission key. Then, the received encrypted first random number is decrypted based on the initial transmission key, so that the first random number is obtained and stored in the local memory.

[0279] Step 820: generating a second random number with a second preset byte length, and obtaining negotiation feedback information based on the first random number and the second random number.

[0280] In the embodiment of the application, when step 820 is performed, a second random number with a second preset byte length is generated. Then, referring to FIG. 8B, the corresponding negotiation feedback information is obtained by performing the following steps: Figure 9

[0281] Step 8201: combining the first random number and the second random number according to a preset combination rule to obtain a third random number, and encrypting the third random number based on the first random number to obtain an encrypted third random number.​

[0282] Optionally, in the embodiments of the present application, the preset combination rule can be set according to actual use, which is not limited to the following examples and will not be described here.

[0283] For example, the preset combination rule can be to simply splice the first random number and the second random number as a whole, or to cross-splice the first random number and the second random number, etc.

[0284] Step 8202: performing a hash operation on the encrypted third random number to obtain a first hash result, and combining the encrypted third random number and the first hash result as negotiation feedback information.

[0285] In the embodiments of the present application, when step 8202 is performed, the obtained encrypted third random number is subjected to a hash operation to obtain a corresponding first hash result, and then the encrypted third random number and the first hash result are combined to obtain corresponding negotiation feedback information.

[0286] Step 830: sending the negotiation feedback information to the car-road cooperative vehicle terminal.

[0287] Step 840: receiving negotiation success information returned by the car-road cooperative vehicle terminal, and determining a target transmission key based on the first random number and the second random number.

[0288] In the embodiments of the present application, after receiving the negotiation success information returned by the car-road cooperative vehicle terminal, part of the random numbers are obtained from the first random number and the second random number respectively according to the preset acquisition rule, and the obtained part of the random numbers are combined to obtain the target transmission key.

[0289] Step 720: performing encrypted transmission of payment information with the car-road cooperative vehicle terminal based on the target transmission key, and ending the encrypted transmission with the car-road cooperative vehicle terminal when it is determined that the second preset condition is met.

[0290] In the embodiments of the present application, when step 720 is performed, the following operations can be performed:

[0291] Operation one, receiving encrypted payment information sent by the car-road cooperative vehicle terminal, and decrypting the encrypted payment information based on the target transmission key to obtain the payment information.

[0292] Operation two, generating payment request confirmation information based on the payment information, encrypting the payment request confirmation information based on the target transmission key, and sending the encrypted payment request confirmation information to the car-road cooperative vehicle terminal.

[0293] Operation three, ending the encrypted transmission with the car-road cooperative vehicle terminal when it is determined that the second preset condition is met.

[0294] In the embodiments of the present application, the second preset condition includes, but is not limited to, any one of the following conditions:

[0295] Condition one, sending the encrypted payment receipt information to the vehicle-road cooperative vehicle terminal.

[0296] Condition two, based on receiving the encrypted payment cancellation information, performing a cancellation operation.

[0297] Based on the same inventive concept, referring to Figure 10 The embodiments of the present application provide a data transmission device (such as a vehicle-road cooperative vehicle terminal), which includes:

[0298] The receiving module 1010 is configured to receive a payment request, wherein the payment request includes an identity of a roadside terminal and to-be-paid information;

[0299] The negotiation module 1020 is configured to perform key negotiation with the roadside terminal based on the identity of the roadside terminal, and determine a target transmission key associated with the payment request.

[0300] The transmission module 1030 is configured to perform encrypted transmission of payment information with the roadside terminal based on the target transmission key, and end the encrypted transmission with the roadside terminal when it is determined that a first preset condition is met.

[0301] The key module 1040 is configured to perform a confirmation operation or a cancellation operation by a user for the to-be-paid information; the key module includes a confirmation key and a cancellation key, the confirmation key is configured to perform the confirmation operation by the user, and the cancellation key is configured to perform the cancellation operation by the user.

[0302] Optionally, based on the identity of the roadside terminal, the negotiation module 1020 is configured to perform key negotiation with the roadside terminal, and determine a target transmission key associated with the payment request.

[0303] Based on the identity of the roadside terminal, the negotiation module 1020 is configured to send negotiation request information to the roadside terminal, wherein the negotiation request information includes an encrypted first random number, signature information, and public key certificate information.

[0304] The negotiation module 1020 is configured to receive negotiation feedback information returned by the roadside terminal, wherein the negotiation feedback information includes an encrypted third random number and a first hash result.

[0305] The negotiation module 1020 is configured to decrypt the encrypted third random number to obtain a second random number, send negotiation success information to the roadside terminal, and determine the target transmission key based on the first random number and the second random number.

[0306] The encrypted third random number is obtained by the roadside terminal based on the first random number, the third random number is obtained by the roadside terminal based on the first random number and the generated second random number of the second preset byte length according to a preset combination rule, and the first hash result is obtained by the roadside terminal by performing a hash operation on the encrypted third random number.

[0307] Optionally, the negotiation module 1020 is configured to determine the negotiation request information in the following manner:

[0308] generating a first random number of a first preset byte length, and encrypting the first random number based on an identity of the vehicle infrastructure integration vehicle terminal and a current system time to obtain an encrypted first random number;

[0309] signing the encrypted first random number based on private key certificate information of the vehicle infrastructure integration vehicle terminal to obtain the signature information;

[0310] using the encrypted first random number, the signature information, and public key certificate information of the vehicle infrastructure integration vehicle terminal as the negotiation request information.

[0311] Optionally, before decrypting the encrypted third random number, the negotiation module 1020 is further configured to:

[0312] obtain the encrypted third random number from the negotiation feedback information, perform a hash operation on the encrypted third random number to obtain a second hash result, and compare the second hash result with the first hash result to obtain a comparison result;

[0313] decrypt the encrypted third random number to obtain a second random number, and the negotiation module 1020 is configured to:

[0314] when the comparison result indicates that the comparison result is the same, decrypt the encrypted third random number based on the first random number to obtain the third random number;

[0315] obtain a third sub-random number of the first preset byte length from the third random number according to the preset combination rule, and when the third sub-random number is determined to be the same as the first random number, determine other third random numbers except the third sub-random number as the second random number.

[0316] determine a target transmission key associated with the payment request based on the first random number and the second random number, and the negotiation module 1020 is configured to:

[0317] According to a preset acquisition rule, part of random numbers are acquired from the first random number and the second random number respectively, and the acquired part of random numbers are combined to obtain a target transmission key.

[0318] Optionally, the encryption transmission of the payment information is performed between the target transmission key and the road side terminal, and the transmission module 1030 is configured to:

[0319] acquire payment information corresponding to the payment request, and send the encrypted payment information to the road side terminal; the encrypted payment information is obtained by encrypting the payment information based on the target transmission key, and the payment information at least includes a vehicle identification mark, a payment account number, a payment amount and a payment password associated with the vehicle side cooperative vehicle terminal;

[0320] receive the encrypted payment request confirmation information sent by the road side terminal; the encrypted payment request confirmation information is obtained by encrypting the payment request confirmation information generated based on the payment information based on the target transmission key after the road side terminal receives the payment information;

[0321] decrypt the encrypted payment request confirmation information based on the target transmission key, display the payment request confirmation information, and start a timer;

[0322] The first preset condition includes any one of the following conditions:

[0323] When the timer reaches a set threshold, the encrypted payment cancellation information is sent to the road side terminal;

[0324] When the timer does not reach the set threshold, the encrypted payment confirmation information is sent to the road side terminal in response to the confirmation operation performed by the user on the to-be-paid information, and the payment receipt information returned by the road side terminal is received;

[0325] When the timer does not reach the set threshold, the encrypted payment cancellation information is sent to the road side terminal in response to the confirmation operation performed by the user on the to-be-paid information.

[0326] Based on the same inventive concept, refer to Figure 11 The application embodiment provided in the application provides a data transmission device (such as a road side terminal), which comprises:

[0327] The sending module 1110 is configured to send a payment request to the vehicle side cooperative vehicle terminal, and the payment request includes an identity of the road side terminal and to-be-paid information;

[0328] The negotiation module 1120 is configured to perform key negotiation with the vehicle infrastructure cooperative terminal, and determine a target transmission key associated with the payment request.

[0329] The transmission module 1130 is configured to perform encrypted transmission of payment information with the vehicle infrastructure cooperative terminal based on the target transmission key, and end the encrypted transmission with the vehicle infrastructure cooperative terminal when it is determined that a second preset condition is met.

[0330] Optionally, the negotiation module 1120 is configured to:

[0331] receive negotiation request information sent by the vehicle infrastructure cooperative terminal, and perform identity verification and signature information verification on the vehicle infrastructure cooperative terminal based on a public key certificate of the vehicle infrastructure cooperative terminal.

[0332] After it is determined that the identity verification and the signature information verification are both passed, obtain an identity of the vehicle infrastructure cooperative terminal and a current system time, decrypt the encrypted first random number to obtain the first random number, and the first random number has a first preset byte length.

[0333] generate a second random number with a second preset byte length, obtain negotiation feedback information based on the first random number and the second random number, and send the negotiation feedback information to the vehicle infrastructure cooperative terminal.

[0334] receive negotiation success information returned by the vehicle infrastructure cooperative terminal, and determine the target transmission key based on the first random number and the second random number.

[0335] Optionally, the negotiation module 1120 is configured to:

[0336] combine the first random number and the second random number according to a preset combination rule to obtain a third random number, and encrypt the third random number based on the first random number to obtain an encrypted third random number.

[0337] perform a hash operation on the encrypted third random number to obtain a first hash result, and use the encrypted third random number and the first hash result as the negotiation feedback information.

[0338] The negotiation module 1120 is configured to:

[0339] According to a preset acquisition rule, part of random numbers are acquired from the first random number and the second random number respectively, and the acquired part of random numbers are combined to obtain a target transmission key.

[0340] Optionally, the payment information is encrypted and transmitted based on the target transmission key, and the transmission module 1130 is configured to:

[0341] receive the encrypted payment information sent by the vehicle-road cooperative vehicle terminal, and decrypt the encrypted payment information based on the target transmission key to obtain the payment information;

[0342] generate payment request confirmation information based on the payment information, encrypt the payment request confirmation information based on the target transmission key, and send the encrypted payment request confirmation information to the vehicle-road cooperative vehicle terminal;

[0343] The second preset condition includes any one of the following conditions:

[0344] send the encrypted payment receipt information to the vehicle-road cooperative vehicle terminal;

[0345] based on the received encrypted payment cancellation information, perform a cancellation operation.

[0346] Referring to Figure 12 The embodiments of the present application provide an intelligent terminal, which comprises:

[0347] a memory 1201 configured to store a computer program executable by a controller 1202;

[0348] The controller 1202 is connected with the memory 1201 and is configured to execute any one of the methods executed by the data transmission device in the above various embodiments.

[0349] Based on the same inventive concept, the embodiments of the present application provide a computer readable storage medium, when the instructions in the storage medium are executed by a processor, the processor can execute any one of the methods executed by the data transmission device in the above various embodiments.

[0350] To sum up, in the embodiment of the present application, after receiving the payment request containing the identity of the road side terminal and the to-be-paid information, the vehicle-road cooperation vehicle terminal performs key negotiation with the road side terminal, so as to determine the target transmission key; then, the encrypted transmission of the payment information is performed with the road side terminal based on the target transmission key, and the encrypted transmission with the road side terminal is ended when the first preset condition is determined to be met; in this way, the key negotiation with the road side terminal is performed for each received payment request, and the target transmission key for the payment request is determined, so as to ensure the uniqueness of the target transmission key; then, the encryption is performed based on the target transmission key in the subsequent transmission process of the payment information for the payment request, so as to ensure the security, confidentiality and anti-repudiation of the data transmission process, and the encrypted transmission with the road side terminal is ended after the first preset condition is met, so as to further implement one-time pad and ensure that the target transmission key is stolen in the transmission process.

[0351] Those skilled in the art will understand that the embodiments of the present application can be provided as a method, a system, or a computer program product. Therefore, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0352] The present application is described with reference to flowcharts and / or block diagrams according to the methods, devices (systems), and computer program products of the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and the combination of flows and / or blocks in the flowcharts and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing apparatus to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing apparatus produce the functions specified in one or more flows in the flowcharts and / or one or more blocks in the block diagrams.

[0353] These computer program instructions can also be stored in a computer-readable memory that can direct the computer or other programmable data processing apparatus to work in a specific manner, so that the instructions stored in the computer-readable memory produce a product including instruction means, which implements the functions specified in one or more flows in the flowcharts and / or one or more blocks in the block diagrams.

[0354] These computer program instructions can also be loaded into a computer or other programmable data processing devices, so that a series of operational steps are performed on the computer or other programmable devices to generate computer-implemented processes, so that the instructions executed on the computer or other programmable devices provide steps for implementing the functions specified in one or more flows in the flowchart and / or one or more blocks in the block diagram.

[0355] Obviously, various modifications and changes can be made to the present application by those skilled in the art without departing from the spirit and scope of the present application. Accordingly, it is intended that the present application embrace all such modifications and changes as fall within the scope of the claims and their equivalents.

Claims

1. A data transmission method, characterized by, Applied to a vehicle-road cooperative vehicle terminal, comprising: Receiving a payment request, the payment request including an identity of a roadside terminal and to-be-paid information; Based on the identity of the roadside terminal, key negotiation is performed with the roadside terminal to determine a target transmission key used for information interaction for this payment; Based on the target transmission key, encrypted transmission of payment information is performed with the roadside terminal until the completion of this payment or the cancellation of this payment, and the encrypted transmission with the roadside terminal ends; Wherein, the target transmission key is obtained by combining part of the first random number and part of the second random number; The first random number is generated by the vehicle-road cooperative vehicle terminal; The second random number is generated by the roadside terminal, and the vehicle-road cooperative vehicle terminal decrypts the encrypted third random number included in the negotiation feedback information based on the first random number to obtain the second random number, The encrypted third random number is obtained by encrypting the third random number based on the first random number by the roadside terminal, and the third random number is obtained by combining the first random number and the second random number by the roadside terminal; The negotiation feedback information is generated and sent to the vehicle-road cooperative vehicle terminal by the roadside terminal based on the first random number and the second random number after obtaining the first random number based on the negotiation request information sent by the vehicle-road cooperative vehicle terminal; The negotiation request information includes the encrypted first random number, and the encrypted first random number is obtained by encrypting the first random number based on the identity of the vehicle-road cooperative vehicle terminal and the current system time by the vehicle-road cooperative vehicle terminal.

2. The method of claim 1, wherein, Based on the identity of the roadside terminal, key negotiation is performed with the roadside terminal to determine a target transmission key used for information interaction for this payment, comprising: Based on the identity of the roadside terminal, the negotiation request information is sent to the roadside terminal, and the negotiation request information further includes signature information and public key certificate information; The negotiation feedback information returned by the roadside terminal is received, and the negotiation feedback information is generated and sent by the roadside terminal based on the second random number and the first random number after verifying that the identity of the vehicle-road cooperative vehicle terminal and the signature information are passed based on the public key certificate information; Decrypt the encrypted third random number to obtain the second random number, and send negotiation success information to the roadside terminal, and determine the target transmission key based on the first random number and the second random number; Wherein, the third random number is obtained by combining the first random number and the second random number according to a preset combination rule by the roadside terminal.

3. The method of claim 2, wherein, The negotiation request information is determined in the following way: Generate the first random number of the first preset byte length, and encrypt the first random number based on the identity of the vehicle-road cooperative vehicle terminal and the current system time to obtain the encrypted first random number; sign the encrypted first random number based on private key certificate information of the vehicle infrastructure vehicle terminal to obtain the signature information; use the encrypted first random number, the signature information, and public key certificate information of the vehicle infrastructure vehicle terminal as the negotiation request information.

4. The method of claim 3, wherein, The negotiation feedback information also includes a first hash result, which is obtained by the roadside terminal by performing a hash operation on the encrypted third random number. Before decrypting the encrypted third random number, the following steps are further included: From the negotiation feedback information, obtain the encrypted third random number, and perform a hash operation on the encrypted third random number to obtain a second hash result, and compare the second hash result with the first hash result to obtain a comparison result; The decryption of the encrypted third random number to obtain the second random number includes: When the comparison result indicates that they are the same, decrypt the encrypted third random number based on the first random number to obtain the third random number; According to the preset combination rule, obtain a third sub-random number of the first preset byte length from the third random number, and when it is determined that the third sub-random number is the same as the first random number, determine the other third random numbers except the third sub-random number as the second random number; The determination of the target transmission key based on the first random number and the second random number includes: According to a preset acquisition rule, respectively obtain part of the random numbers from the first random number and the second random number, and combine the obtained part of the random numbers to obtain the target transmission key.

5. The method according to any one of claims 1 to 4, characterized in that, The encrypted transmission of payment information between the roadside terminal based on the target transmission key includes: Obtain payment information corresponding to the payment request, encrypt the payment information based on the target transmission key, and send the encrypted payment information to the roadside terminal; the payment information at least includes a vehicle identification, a payment account, a payment amount, and a payment password associated with the vehicle infrastructure vehicle terminal; Receive the encrypted payment request confirmation information sent by the roadside terminal, which is obtained by the roadside terminal based on the target transmission key by encrypting the payment request confirmation information generated based on the payment information after obtaining the payment information; Decrypt the encrypted payment request confirmation information based on the target transmission key, display the payment request confirmation information, and start a timer; Complete this payment, including: Receive the encrypted payment receipt information returned by the roadside terminal, which is sent by the roadside terminal after completing the deduction operation based on the encrypted payment confirmation information sent by the vehicle infrastructure vehicle terminal, and the payment confirmation information is generated by the vehicle infrastructure vehicle terminal in response to the confirmation operation performed by the user on the to-be-paid information when the timer does not reach the set threshold; Or, cancel this payment, including: The payment cancellation information is sent to the roadside terminal, and the payment cancellation information is generated when the timer reaches a set threshold or is generated in response to a user performing a cancellation operation on the to-be-paid information when the timer does not reach the set threshold.

6. A data transmission method, characterized by, Applied to a roadside terminal, comprising: Sending a payment request to a vehicle infrastructure integration vehicle terminal, the payment request including an identity of the roadside terminal and to-be-paid information; Carrying out key negotiation with the vehicle infrastructure integration vehicle terminal to determine a target transmission key used for information interaction for this payment; Based on the target transmission key, carrying out encrypted transmission of payment information with the vehicle infrastructure integration vehicle terminal until completing this payment or canceling this payment, and ending the encrypted transmission with the vehicle infrastructure integration vehicle terminal; The target transmission key is obtained by combining part of a first random number and part of a second random number; The first random number is generated by the vehicle infrastructure integration vehicle terminal; The second random number is generated by the roadside terminal, and the vehicle infrastructure integration vehicle terminal decrypts an encrypted third random number included in negotiation feedback information based on the first random number to obtain the second random number, The encrypted third random number is obtained by the roadside terminal encrypting the third random number based on the first random number, and the third random number is obtained by the roadside terminal combining the first random number and the second random number; The negotiation feedback information is generated by the roadside terminal based on the first random number and the second random number after obtaining the first random number based on negotiation request information sent by the vehicle infrastructure integration vehicle terminal, and is sent to the vehicle infrastructure integration vehicle terminal; The negotiation request information includes an encrypted first random number, and the encrypted first random number is obtained by the vehicle infrastructure integration vehicle terminal encrypting the first random number based on an identity of the vehicle infrastructure integration vehicle terminal and a current system time.

7. The method of claim 6, wherein, The target transmission key used for information interaction for this payment is determined by carrying out key negotiation with the vehicle infrastructure integration vehicle terminal, comprising: Receiving the negotiation request information sent by the vehicle infrastructure integration vehicle terminal, the negotiation request information further including signature information and public key certificate information; Based on the public key certificate information, identity verification and signature information verification are performed on the vehicle infrastructure integration vehicle terminal; After determining that the identity verification and the signature information verification are both passed, the encrypted first random number is decrypted based on the identity of the vehicle infrastructure integration vehicle terminal and the current system time to obtain and store the first random number; The second random number is generated, and the negotiation feedback information is obtained based on the first random number and the second random number, and the negotiation feedback information is sent to the vehicle infrastructure integration vehicle terminal; Receiving negotiation success information returned by the vehicle infrastructure integration vehicle terminal, and determining the target transmission key based on the first random number and the second random number.

8. The method of claim 7, wherein, The negotiation feedback information is obtained based on the first random number and the second random number, comprising: combine the first random number and the second random number according to a preset combination rule to obtain a third random number, and encrypt the third random number based on the first random number to obtain the encrypted third random number; perform a hash operation on the encrypted third random number to obtain a first hash result, and use the encrypted third random number and the first hash result as the negotiation feedback information; determine the target transmission key based on the first random number and the second random number, including: obtain part of the random numbers from the first random number and the second random number respectively according to a preset obtaining rule, and combine the obtained part of the random numbers to obtain the target transmission key.

9. The method according to any one of claims 6 to 8, wherein, the encrypted transmission of the payment information based on the target transmission key and the vehicle-road cooperative vehicle terminal, including: receive the encrypted payment information sent by the vehicle-road cooperative vehicle terminal, and decrypt the encrypted payment information based on the target transmission key to obtain the payment information; generate payment request confirmation information based on the payment information, encrypt the payment request confirmation information based on the target transmission key, and send the encrypted payment request confirmation information to the vehicle-road cooperative vehicle terminal; complete the payment, including: send the encrypted payment receipt information to the vehicle-road cooperative vehicle terminal, the payment receipt information being sent by the road side terminal after completing the deduction operation based on the encrypted payment confirmation information sent by the vehicle-road cooperative vehicle terminal, the payment confirmation information being generated by the vehicle-road cooperative vehicle terminal in response to the confirmation operation performed by the user on the to-be-paid information; or, cancel the payment, including: receive the encrypted payment cancellation information sent by the vehicle-road cooperative vehicle terminal, the payment cancellation information being generated when a timer started after the vehicle-road cooperative vehicle terminal displays the payment request confirmation information reaches a set threshold, or being generated in response to the cancellation operation performed by the user on the to-be-paid information when the timer does not reach the set threshold.

10. A smart terminal, characterized by including: a memory for storing a computer program executable by a controller; the controller is connected with the memory and is configured to execute the method of any one of claims 1-9.

Images