Blockchain-based vehicle identity authentication method and related device

Abstract

The application provides a vehicle identity authentication method based on a blockchain and related equipment, comprising: a trusted third-party institution determines a system key, initializes a consortium chain according to the system key, and in response to determining that the initialization is completed, determines vehicle information and vehicle user information of any vehicle in a target area, registers to generate a vehicle pseudonym according to the vehicle information and the vehicle user information, and sends the vehicle pseudonym to a vehicle-mounted unit, a neighboring vehicle and a roadside unit; wherein a pseudonym key of any vehicle pseudonym is determined, and a vehicle pseudonym key table is determined according to the pseudonym key; the vehicle-mounted unit determines identity information of a vehicle user, access information and an access password, determines a message signature according to the identity information and the access password, signs the access information, determines access information according to the message signature, and broadcasts the access information; the neighboring vehicle / roadside unit receives the access information and the pseudonym key table, and performs vehicle identity authentication according to the access information and the pseudonym key table.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet of Vehicles, and particularly to a vehicle identity authentication method based on a blockchain and related equipment. BACKGROUND

[0002] Internet of Vehicles plays a key role in ensuring road safety, improving travel efficiency, improving traffic management, and improving driving comfort, and has been highly valued by governments around the world. The Ministry of Industry and Information Technology of China has successively issued a series of documents and action plans to support the vigorous development of Internet of Vehicles. However, VANETs, as a modern intelligent transportation system technology with broad prospects, also faces severe data security and privacy challenges. On the one hand, in the VANETs environment, vehicles broadcast messages containing vehicle identity information to communicate with other vehicles or infrastructure, and attackers may obtain user identity-related information by eavesdropping on messages, thereby threatening the life and property safety of vehicle users. On the other hand, a large number of VANETs nodes access the huge network, bringing great challenges to the big data storage, intelligent management and information security of the entire system. The traditional centralized data processing method and centralized network architecture cannot meet the high security, high credibility and real-time response requirements of the Internet of Vehicles data sharing platform. How to design a new VANETs security authentication architecture and provide conditional privacy protection for vehicle users under the premise of providing basic authentication functions is another challenge for protocol design. SUMMARY

[0003] Therefore, the present application aims to provide a vehicle identity authentication method based on a blockchain.

[0004] To achieve the above purpose, the present application provides a vehicle identity authentication method based on a blockchain, comprising: a trusted third-party institution, a vehicle-mounted unit, a neighboring vehicle and a roadside unit;

[0005] The trusted third-party institution determines a system key, initializes the alliance chain according to the system key, and in response to determining that the initialization is complete, determines vehicle information and vehicle user information of any vehicle in a target area, registers according to the vehicle information and the vehicle user information, generates a vehicle pseudonym, and sends the vehicle pseudonym to the vehicle-mounted unit, the neighboring vehicle and the roadside unit; wherein a pseudonym key of any vehicle pseudonym is determined, and a vehicle pseudonym key table is determined according to the pseudonym key.

[0006] The vehicle-mounted unit determines identity information of a vehicle user, an access message and an access password, signs the access message according to the vehicle pseudonym and the identity information and the access password, determines a message signature, determines access information according to the message signature, and broadcasts the access information.

[0007] The adjacent vehicle / roadside unit receives the access information and the pseudonym key table, and performs vehicle identity authentication according to the access information and the pseudonym key table.

[0008] Optionally, the signing of the access message according to the vehicle pseudonym, the identity information and the access password comprises:

[0009] According to the identity information, determine the current verification information;

[0010] Compare the current verification information with the preset identity verification information;

[0011] In response to determining that the current verification information is the same as the preset identity verification information, signing the access message according to a hash function.

[0012] Optionally, the vehicle identity authentication according to the access information and the pseudonym key table comprises:

[0013] Determine the time stamp of the access information and the time difference between the time stamp of the access information and the current time;

[0014] According to the pseudonym key table, determine the public key of the vehicle;

[0015] In response to determining that the time difference is not greater than the preset time difference, verifying the message signature according to a hash function and the public key;

[0016] In response to determining that the message signature is legal, the vehicle authentication is successful;

[0017] In response to determining that the message signature is not legal, the vehicle authentication fails.

[0018] Optionally, the trusted third-party institution further comprises:

[0019] Obtain the latest update time of the vehicle pseudonym, and determine the difference between the latest update time and the preset update time interval;

[0020] In response to determining that the difference is less than a threshold, updating the vehicle pseudonym.

[0021] Optionally, the trusted third-party institution further comprises:

[0022] Determine the real-time position of any associated vehicle;

[0023] In response to determining that the current position of any of the associated vehicles exceeds a preset range, deleting the vehicle information of the associated vehicles exceeding the preset range in the vehicle pseudonym key table, and broadcasting the deletion operation; wherein the vehicle information of the associated vehicles exceeding the preset range is deleted according to a preset revocation algorithm.

[0024] Optionally, the vehicle-mounted unit further comprises:

[0025] In response to determining the updated access password of the target vehicle, verifying the updated access password;

[0026] In response to determining that the updated access password is a legal password, updating the verification information according to the updated access password.

[0027] Based on the same inventive concept, the embodiments of the present application also provide a vehicle identity authentication device based on a block chain, comprising:

[0028] The trusted third-party institution is configured to determine a system key, initialize the alliance chain according to the system key, in response to determining that the initialization is completed, determine vehicle information and vehicle user information of any vehicle in a target area, register according to the vehicle information and the vehicle user information, generate a vehicle pseudonym, and send the vehicle pseudonym to the vehicle-mounted unit, the adjacent vehicle, and the road side unit; wherein a pseudonym key of any vehicle pseudonym is determined, and a vehicle pseudonym key table is determined according to the pseudonym key.

[0029] The vehicle-mounted unit is configured to determine identity information of a vehicle user, an access message, and an access password, sign the access message according to the identity information and the access password, determine a message signature, determine access information according to the message signature, and broadcast the access information.

[0030] The adjacent vehicle / road side unit is configured to receive the access information and the pseudonym key table, and perform vehicle identity authentication according to the access information and the pseudonym key table.

[0031] Based on the same inventive concept, the embodiments of the present application also provide an electronic device, comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the vehicle identity authentication method based on a block chain as described in any of the above embodiments when executing the program.

[0032] Based on the same inventive concept, the embodiments of the present application also provide a non-transitory computer readable storage medium, the non-transitory computer readable storage medium stores computer instructions, characterized in that the computer instructions are used to make a computer execute the vehicle identity authentication method based on a block chain as described in any of the above embodiments.

[0033] Based on the same inventive concept, the embodiment of the present application also provides a computer program product, comprising computer program instructions, when the computer program instructions run on a computer, make the computer execute the vehicle identity authentication method based on the blockchain.

[0034] As can be seen from the above, the vehicle identity authentication method, device, electronic equipment, storage medium and program product based on the blockchain provided by the present application include: a trusted third-party institution, a vehicle-mounted unit, a neighboring vehicle and a roadside unit; the trusted third-party institution determines a system key, initializes the consortium chain according to the system key, and in response to determining that the initialization is completed, determines vehicle information and vehicle user information of any vehicle in a target area, registers according to the vehicle information and the vehicle user information, generates a vehicle pseudonym, and sends the vehicle pseudonym to the vehicle-mounted unit, the neighboring vehicle and the roadside unit; wherein, a pseudonym key of any vehicle pseudonym is determined, and a vehicle pseudonym key table is determined according to the pseudonym key; the vehicle-mounted unit determines identity information of a vehicle user, an access message and an access password, signs the access message according to the identity information and the access password according to the vehicle pseudonym, determines a message signature, determines access information according to the message signature, and broadcasts the access information; the neighboring vehicle / roadside unit receives the access information and the pseudonym key table, and performs vehicle identity authentication according to the access information and the pseudonym key table. As can be seen from the above, the roadside unit or the vehicle uses the smart contract deployed in the consortium blockchain to obtain relevant information (i.e. the public key of the vehicle), thereby verifying the signature of the received message and checking the validity of the message. In the entire authentication process, the vehicle or the RSU receiving the message can complete mutual authentication without the TA. Compared with the protocol requiring the participation of the authentication center, the present protocol greatly alleviates the overhead of the registration center in the authentication process, enhances the decentralized characteristics of the vehicle self-organizing network, and solves the problems of centralized authentication and single point failure. BRIEF DESCRIPTION OF DRAWINGS

[0035] In order to more clearly illustrate the technical solutions in the present application or the related art, the drawings needed to be used in the embodiments or the related art description will be briefly introduced. Obviously, the drawings in the following description are only embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0036] Figure 1 The flowchart of the vehicle identity authentication method based on the blockchain of the embodiment of the present application;

[0037] Figure 2 The embodiment schematic diagram of the vehicle identity authentication method based on the blockchain of the embodiment of the present application;

[0038] Figure 3 An electronic device structure diagram of an embodiment of the present application. DETAILED DESCRIPTION

[0039] In order to make the objects, technical solutions and advantages of the present application clearer, the present application will be further described in detail below with reference to specific embodiments and drawings.

[0040] It should be noted that, unless otherwise defined, technical terms or scientific terms used in the embodiments of the present application should be understood as their common meanings to those skilled in the art to which the present application belongs. The terms "first", "second" and similar terms used in the embodiments of the present application do not represent any order, number or importance, but are only used to distinguish different components. The terms "include" or "contain" and similar terms mean that the elements or objects before the terms encompass the elements or objects listed after the terms and their equivalents, and do not exclude other elements or objects. The terms "connect" or "connected" and similar terms do not mean physical or mechanical connection, but can include electrical connection, whether direct or indirect. The terms "upper", "lower", "left", "right" and the like only represent relative positional relationships, and when the absolute positions of the described objects change, the relative positional relationships can also change accordingly.

[0041] In order to facilitate understanding of the technical solutions of the present disclosure, some technical terms related to the present disclosure are introduced below.

[0042] Vehicular Networks (VN), Trusted Third Party Authority (TA);

[0043] Vehicular Ad Hoc Networks (VANETs), one of the important technologies in vehicle networking, which can realize wireless communication and information exchange between vehicles, and provides strong support for the development of vehicle networking;

[0044] On-board Units (OBU);

[0045] road side unite (RSU);

[0046] vehicle-to-vehicle (V2V);

[0047] vehicle-to-infrastructure (V2I) mode;

[0048] Dedicated Short-Range Communication (DSRC) protocol;

[0049] Practical Byzantine Fault Tolerance (PBFT), a state machine replication-based consensus algorithm.

[0050] In the VANETs environment, vehicles equipped with On-board Units (OBU) can communicate with each other in vehicle-to-vehicle (V2V) mode, and also communicate with Road Side Units (RSU) in vehicle-to-infrastructure (V2I) mode, both of which follow the Dedicated Short-Range Communication (DSRC) protocol, which supports short-distance data exchange even when vehicles are traveling at high speed. In this way, vehicles can act as information collectors. They forward the perceived information to help vehicles dynamically update their travel routes, thereby saving fuel, avoiding congestion or traffic accidents. In addition, RSUs also forward this information to the traffic control center to provide further traffic management and advisory services. However, due to the openness of wireless communication, malicious entities can intercept, forward or even tamper with the transmitted messages. If an attacker reports false information about traffic conditions or vehicle locations, it can have serious consequences.

[0051] In order to make the technical solutions of the present disclosure clearer and easier to understand, the blockchain-based vehicle identity authentication method provided by the embodiments of the present disclosure is described in detail below in conjunction with the drawings.

[0052] As described in the background section, the Internet of Vehicles plays a key role in ensuring road safety, improving travel efficiency, improving traffic management, and enhancing driving comfort, and has been highly valued by governments around the world. The Ministry of Industry and Information Technology of China has successively issued a series of documents and action plans to support the vigorous development of the Internet of Vehicles. However, VANETs, as a modern intelligent transportation system technology with broad prospects, also faces serious data security and privacy challenges. On the one hand, in the VANETs environment, vehicles broadcast messages containing vehicle identity information to communicate with other vehicles or infrastructure, and attackers may obtain user identity-related information by eavesdropping on messages, thereby threatening the life and property safety of vehicle users. On the other hand, a large number of VANETs nodes access the huge network, bringing great challenges to the big data storage, intelligent management and information security of the entire system. The traditional centralized data processing method and centralized network architecture have been unable to meet the high security, high credibility and real-time response requirements of the Internet of Vehicles data sharing platform. How to design a new VANETs security authentication architecture and provide conditional privacy protection for vehicle users on the premise of providing basic authentication functions is another challenge for protocol design.

[0053] In view of this, the embodiments of the present application provide a vehicle identity authentication method and device based on a block chain, an electronic device, a storage medium and a program product.

[0054] The method comprises: a trusted third-party institution, a vehicle-mounted unit, a neighboring vehicle, and a roadside unit; the trusted third-party institution determines a system key, initializes the consortium chain according to the system key, in response to determining that the initialization is completed, determines vehicle information and vehicle user information of any vehicle in a target area, registers according to the vehicle information and the vehicle user information, generates a vehicle pseudonym, and sends the vehicle pseudonym to the vehicle-mounted unit, the neighboring vehicle, and the roadside unit; wherein a pseudonym key of any vehicle pseudonym is determined, and a vehicle pseudonym key table is determined according to the pseudonym key; the vehicle-mounted unit determines identity information of a vehicle user, an access message, and an access password, signs the access message according to the identity information and the access password, determines a message signature, determines access information according to the message signature, and broadcasts the access information; the neighboring vehicle / roadside unit receives the access information and the pseudonym key table, and performs vehicle identity authentication according to the access information and the pseudonym key table. As can be seen from the above, the roadside unit or the vehicle uses the smart contract deployed in the consortium blockchain to obtain relevant information (i.e., the public key of the vehicle), thereby verifying the signature of the received message and checking the validity of the message. In the entire authentication process, the vehicle or the RSU receiving the message can complete mutual authentication without the TA. Compared with the protocol requiring the participation of the authentication center, the protocol greatly relieves the overhead of the registration center in the authentication process, enhances the decentralized characteristics of the vehicle self-organizing network, and solves the centralized authentication and single-point failure problem.

[0055] As shown in Figure 1 The blockchain-based vehicle identity authentication method comprises a trusted third-party institution 100, a vehicle-mounted unit 200, a neighboring vehicle 300, and a roadside unit 400.

[0056] The trusted third-party institution 100 determines a system key, initializes the consortium chain according to the system key, in response to determining that the initialization is completed, determines vehicle information and vehicle user information of any vehicle in a target area, registers according to the vehicle information and the vehicle user information, generates a vehicle pseudonym, and sends the vehicle pseudonym to the vehicle-mounted unit, the neighboring vehicle, and the roadside unit; wherein a pseudonym key of any vehicle pseudonym is determined, and a vehicle pseudonym key table is determined according to the pseudonym key, and the vehicle pseudonym key table is stored through a smart contract;

[0057] The vehicle-mounted unit 200 determines identity information of a vehicle user, an access message, and an access password, signs the access message according to the identity information and the access password, determines a message signature, determines access information according to the message signature, and broadcasts the access information;

[0058] The adjacent vehicle 300 / roadside unit 400 receives the access information and the pseudonym key table, and performs vehicle identity authentication according to the access information and the pseudonym key table.

[0059] In some optional embodiments, a trusted third-party authority determines a system key, and initializes the consortium chain according to the system key, specifically including: in this stage, the TA generates system parameters and initializes the consortium chain. The TA defines a cyclic group G of a prime order q and a generator P, then the TA selects a random number As the system key, calculate P pub As the system public key. The TA selects three hash functions ·H2: {0, 1} * → {0, 1} l , ·H3: {0, 1} * → {0, 1} λ Finally, the TA saves the random number s, and publishes the system parameters ECCparams = {q, G, P, P pub , H1, H2, H3} to the VANETs.

[0060] Further, the TA initiates the consortium chain among the preset network nodes according to the PBFT consensus mechanism to maintain the blockchain. It should be noted that the TA has previously authenticated all blockchain managers (preselected trusted RSUs) and granted them the right to participate in the consensus process. In addition, the consortium chain can maintain a vehicle pseudonym key table, aggregate V2I and V2V communication messages, and store all transaction information on the chain.

[0061] It should be noted that the consortium chain is an application form of the blockchain technology. The consortium chain combines the partial decentralization characteristics of the public chain and the permission control advantages of the private chain. The consortium chain is not completely open. Each participant can share and verify related data, but at the same time, the data access is controlled to a certain extent, ensuring that the information cannot be easily obtained or tampered with by irrelevant third parties.

[0062] In some optional embodiments, the TA compiles the input of the smart contract and deploys it to the consortium chain. After the blockchain manager verifies the smart contract, it obtains a unique address, which can be called using a transaction with appropriate permissions.

[0063] In some embodiments, in order to obtain the authentication factor required for communication, all vehicles and their owners need to be registered with the TA in the vehicle registration stage. This stage serves as the basis for implementing conditional privacy protection in the protocol. The entire process is carried out in a secure channel, and the TA is offline during the entire process.

[0064] Further, the registration according to the vehicle information and the vehicle user information generates a vehicle pseudonym, including: the vehicle user selects real identity information ID i and password pw. The vehicle V i selects a random number B i =H1(pe||b i ), and then submits ID i and B i to TA.

[0065] Further, after TA receives the information, the pseudonym identity is calculated, where the private key sk i of V i =H3(ID i ||s||t i ), t i is the validity period of the pseudonym, and the public key V i of V pki =sk i ·P. Then TA selects a random number and sets A i =H1(s||e i ), D i =H1(ID i ||B i ||A i )mod n0, wherein, is XOR operation, mod n o is multiple encryption / packaging to prevent data leakage, and mod n 4 is offline dictionary guessing attack resistance, when 2 8 ≤n0≤2 o , mod n 4 is offline dictionary guessing attack resistance in the range of 2 8 , and || is bit connection operation.

[0066] TA loads into the vehicle OBU, and uploads {ID i , PID i , V pki , sk i} to the smart contract and alliance chain through the consensus mechanism.

[0067] In some embodiments, as Figure 2 shown, the signing of the access message according to the identity information and the access password according to the vehicle pseudonym determines the message signature, including:

[0068] Step S202, determining current authentication information according to the identity information;

[0069] Step S204, comparing the current authentication information with preset identity authentication information;

[0070] Step S206, in response to determining that the current authentication information is the same as the preset identity authentication information, signing the access message according to a hash function.

[0071] In some optional embodiments, the vehicle identity authentication according to the access information and the pseudonym key table comprises: determining a timestamp of the access information and a time difference between the timestamp of the access information and a current time; determining a public key of the vehicle according to the pseudonym key table; in response to determining that the time difference is not greater than a preset time difference, verifying the message signature according to a hash function and the public key; in response to determining that the message signature is legal, the vehicle authentication succeeds; and in response to determining that the message signature is not legal, the vehicle authentication fails.

[0072] In some optional embodiments, the message signature is determined according to the identity information and the access message signed according to the vehicle pseudonym, the access information is determined according to the message signature, and the access information is broadcasted, specifically comprising: first, performing an identity authentication process of a vehicle user. The vehicle user inputs ID i and pw to the OBU, the OBU calculates and verifies whether it is true. If the verification fails, the OBU rejects the request. If , the OBU generates a random number , and calculates R i = r i · P, α i = H3(PID i || R i || M i || T i ), θ i = r i + α i · sk i mod q, wherein M i represents a real-time message sent by the vehicle V i at a timestamp T i . Finally, the OBU sets σ i = (R i , θ i ) as a signature of a single message, and broadcasts the information {PID i , M i , σ i , Ti The broadcast was sent to surrounding vehicles and RSUs.

[0073] Furthermore, when the message {PID} is received... i M i , σ i T i When the receiver (i.e., the adjacent vehicle or RSU) first verifies the timestamp T, the receiver will first verify the timestamp T. i The freshness of the information. If valid, the recipient further queries the vehicle pseudonym key table maintained by the consortium blockchain, which contains the PID. i The record, obtain the associated V i public key V pki Then, the receiver calculates α′. i =H3(PID) i ||R i ||M i ||T i ), by judging equation θ i ·P=R i +α′ i ·V pki To verify the signature σ i The validity of the authentication. If the authentication fails, the recipient rejects the request.

[0074] In some alternative implementations, when multiple messages M of a vehicle i (i = 1, 2, ..., n), when traffic messages, access network messages, fault messages, etc., are simultaneously transmitted to nearby vehicles or RSUs, the calculation is performed using the following steps: For vehicles sending multiple messages, first calculate... And generate an aggregate signature σ = (R, θ) based on the above information. Then vehicle V i The information {PID i M i (i = 1, 2, ..., n), T i , σ} is sent to nearby vehicles and RSUs. Similarly, the receiver receives V i The message sent {PID i M i (i = 1, 2, ..., n), T i When σ}, first check the timestamp T. i The freshness of the information. If valid, the recipient further queries the vehicle pseudonym key table maintained by the consortium blockchain for the PID. i The record, obtain the associated V i public key V pki Then, calculate By judging the equation To verify the signature σ i The legitimacy of the request. If it is not valid, the recipient rejects the request.

[0075] In some optional embodiments, the pseudonym of the vehicle is only valid for a period of time, and timely updating the vehicle pseudonym before the expiration of the vehicle pseudonym is the key to preventing the leakage of vehicle privacy. In the present protocol, the identity updating operation of the pseudonym is performed offline to ensure the security of the pseudonym. Therefore, the trusted third-party institution further comprises: obtaining the latest update time of the vehicle pseudonym, determining the difference between the latest update time and the preset update time interval; in response to determining that the difference is less than a threshold, updating the vehicle pseudonym.

[0076] Further, the above can be further divided into the following steps: (1) when the pseudonym identity of the vehicle is close to expiration, a preselected trusted RSU (i.e., a consortium blockchain management node) periodically obtains a new pseudonym PID' of the vehicle from the consortium chain i and the corresponding public and private keys sk' i , V' pki and sets {PID' i , sk' i , V' pki , t i} as the message M i . In addition, the RSU also encrypts and signs the message M i to ensure the integrity of the message. The RSU selects a random number and calculates X i = x i ·P, β i = H3(PID' i || X i || M i || T i ), λ i = x i + β i · sk' i mod q, where M i represents an instant message transmitted at the time stamp T i , and finally, the message {PID' i , M i , X i , T i , λ i} is sent to the relevant vehicle through a secure channel;

[0077] (2) After the vehicle receives the {PID' i , M i , X i , T i , λ i} message, it first uses T i to judge the freshness of the message. If it is invalid, the message is rejected by the receiving vehicle. Otherwise, the vehicle calculates β'i = H3(PID i || X i || M i || T i , unless λ i · P = X i + β i · V pki , the vehicle does not accept the request or update its pseudonym and related public and private keys.

[0078] (3) RSU removes the expired information from the consortium chain vehicle pseudonym key table and updates it, realizing the traceability of the violating vehicle.

[0079] In some optional embodiments, when the vehicle leaves a certain area or waits to exit, a vehicle revocation operation needs to be performed to ensure the security and quality of vehicle communication. Therefore, the trusted third-party agency also includes: determining the real-time location of any associated vehicle; in response to determining that the current location of any of the associated vehicles exceeds the preset range, deleting the vehicle information of the associated vehicle that exceeds the preset range in the vehicle pseudonym key table, and broadcasting the deletion operation; wherein the vehicle information of the associated vehicle that exceeds the preset range is deleted according to a preset revocation algorithm.

[0080] That is, the TA must update the vehicle status recorded in the current smart contract. In the proposed scheme, the TA can call the vehicle revocation algorithm revokeVPKIT(PID i ) of the smart contract through the consensus mechanism of the blockchain node, thereby revoking the related vehicle and deleting the corresponding data in the vehicle pseudonym key table. At the same time, the related information of the revoked vehicle is also broadcasted in the entire system to meet the distributed characteristics of VANETs. In addition, in order to prevent attackers from maliciously deleting or modifying the information of legal vehicles, we follow the concept of mandatory access control to ensure that only the TA can modify the information in the vehicle pseudonym key table. In this application, due to the wireless open characteristics of the communication channel in VANETs, the messages broadcasted by vehicles can be eavesdropped and further intercepted by attackers in the communication network, and the messages broadcasted by vehicles in the protocol {PID i , M i , σ i , T i} and {PID i , M i (i = 1, 2, …, n), T i , σ} do not contain information about the user password pw, so the attacker cannot verify the accuracy of its guessed user password pw.

[0081] In some optional implementations, to ensure communication security and prevent attacks that could compromise the safety of drivers and passengers if a password is kept for an extended period, the password in the vehicle unit is updated after a preset time has elapsed. Specifically, updating the password in the vehicle unit includes: verifying the updated access password in response to determining that the target vehicle has an updated access password; and updating the verification information based on the updated access password in response to determining that the updated access password is valid.

[0082] Furthermore, password updates are based on: the user entering initial identity information and password ID into the OBU. i , pw and the updated password pw′; OBU calculation And check Does it hold true? If the equation is true... If the condition is not met, the OBU rejects the password update request. Otherwise, the OBU accepts the vehicle user's updated password, pw′. Furthermore, the OBU generates a random number. And calculate B′ i =H1(pw′||b′) i ), D′ i =H1(ID) i ||B′ i ||A i )mod n0. Finally, OBU determines {C′ based on the given value. i , D′ i Replace {C} i D i}

[0083] It can be seen from the above that the vehicle identity authentication method based on a blockchain includes a trusted third-party institution, a vehicle-mounted unit, a neighboring vehicle, and a roadside unit. The trusted third-party institution determines a system key, initializes the consortium chain according to the system key, determines vehicle information and vehicle user information of any vehicle in a target area in response to completion of the initialization, registers according to the vehicle information and the vehicle user information, generates a vehicle pseudonym, and sends the vehicle pseudonym to the vehicle-mounted unit, the neighboring vehicle, and the roadside unit. A pseudonym key of any vehicle pseudonym is determined, and a vehicle pseudonym key table is determined according to the pseudonym key. The vehicle-mounted unit determines identity information of a vehicle user, an access message, and an access password, signs the access message according to the identity information and the access password, determines a message signature, determines access information according to the message signature, and broadcasts the access information. The neighboring vehicle / roadside unit receives the access information and the pseudonym key table, and performs vehicle identity authentication according to the access information and the pseudonym key table. As can be seen from the above, the roadside unit or the vehicle uses the smart contract deployed in the consortium blockchain to obtain relevant information (i.e., the public key of the vehicle), thereby verifying the signature of the received message and checking the validity of the message. In the entire authentication process, the vehicle or the RSU receiving the message can complete mutual authentication without the TA. Compared with a protocol that requires the participation of an authentication center, the present protocol greatly reduces the overhead of the registration center in the authentication process, enhances the decentralized nature of the vehicle self-organizing network, and solves the problem of centralized authentication and single-point failure.

[0084] It should be noted that the method of the embodiments of the present application can be executed by a single device, such as a computer or a server. The method of the embodiments can also be applied in a distributed scenario, and completed by multiple devices cooperating with each other. In this distributed scenario, one of the multiple devices can only execute one or more steps in the method of the embodiments of the present application, and the multiple devices can interact with each other to complete the method.

[0085] It should be noted that some embodiments of the present application have been described above. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in a different order than the order described above and still achieve desirable results. In addition, the processes depicted in the figures do not necessarily require the particular order shown or sequential order to achieve the desired results. In certain implementations, multitasking and parallel processing can be advantageous.

[0086] Based on the same inventive concept, the present application also provides a vehicle identity authentication device based on a blockchain, corresponding to any of the above-mentioned embodiment methods.

[0087] The blockchain-based vehicle identity authentication apparatus comprises:

[0088] The trusted third-party institution is configured to determine a system key, initialize the consortium chain according to the system key, determine vehicle information and vehicle user information of any vehicle in a target area in response to completion of the initialization, register according to the vehicle information and the vehicle user information, generate a vehicle pseudonym, and send the vehicle pseudonym to the on-board unit, the adjacent vehicle, and the road-side unit; wherein a pseudonym key of any vehicle pseudonym is determined, and a vehicle pseudonym key table is determined according to the pseudonym key.

[0089] The on-board unit is configured to determine identity information of a vehicle user, an access message, and an access password, sign the access message according to the identity information and the access password, determine a message signature, determine access information according to the message signature, and broadcast the access information.

[0090] The adjacent vehicle / road-side unit is configured to receive the access information and the pseudonym key table, and perform vehicle identity authentication according to the access information and the pseudonym key table.

[0091] For the convenience of description, the above apparatus is described in various modules according to functions. Of course, the functions of the modules can be implemented in one or more software and / or hardware in the implementation of the present application.

[0092] The apparatus of the above embodiments is used to implement the corresponding blockchain-based vehicle identity authentication method in any of the above embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be described here.

[0093] Based on the same inventive concept, corresponding to any of the above method embodiments, the present application also provides an electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the blockchain-based vehicle identity authentication method of any of the above embodiments when executing the program.

[0094] Figure 3 A more specific hardware structure of an electronic device provided by the present embodiment is shown, which can include a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. The processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040 are connected to each other through the bus 1050 for communication within the device.

[0095] The processor 1010 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an ASIC (Application Specific Integrated Circuit), or one or more integrated circuits, etc., for executing relevant programs to implement the technical solutions provided by the embodiments of the present specification.

[0096] The memory 1020 can be implemented by a ROM (Read Only Memory), a RAM (Random Access Memory), a static storage device, a dynamic storage device, etc. The memory 1020 can store an operating system and other application programs, and when the technical solutions provided by the embodiments of the present specification are implemented by software or firmware, the relevant program codes are stored in the memory 1020 and called and executed by the processor 1010.

[0097] The input / output interface 1030 is configured to connect input / output modules to implement information input and output. The input / output modules can be configured as components in the device (not shown in the figure) or externally connected to the device to provide corresponding functions. The input devices can include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output devices can include a display, a speaker, a vibrator, an indicator light, etc.

[0098] The communication interface 1040 is configured to connect a communication module (not shown in the figure) to implement the communication interaction between the device and other devices. The communication module can realize communication through a wired manner (such as USB, network cable, etc.) or through a wireless manner (such as mobile network, WIFI, Bluetooth, etc.).

[0099] The bus 1050 includes a channel for transmitting information between various components (such as the processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040) of the device.

[0100] It should be noted that although the above device only shows the processor 1010, the memory 1020, the input / output interface 1030, the communication interface 1040, and the bus 1050, in the specific implementation process, the device can also include other components necessary for normal operation. In addition, those skilled in the art can understand that the above device can also only include the components necessary to implement the solutions of the embodiments of the present specification, and does not have to include all the components shown in the figure.

[0101] The electronic device of the above-mentioned embodiments is used to implement the corresponding blockchain-based vehicle identity authentication method in any of the preceding embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0102] Based on the same inventive concept, corresponding to the method of any of the above-mentioned embodiments, the present application also provides a non-transitory computer-readable storage medium storing computer instructions for causing the computer to perform the blockchain-based vehicle identity authentication method according to any of the above-mentioned embodiments.

[0103] The computer-readable medium of the present embodiment includes permanent and non-permanent, removable and non-removable media, which can be implemented by any method or technology to store information. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information accessible by a computing device.

[0104] The computer instructions stored in the storage medium of the above-mentioned embodiments are used to cause the computer to perform the blockchain-based vehicle identity authentication method according to any of the above-mentioned embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0105] Based on the same inventive concept, corresponding to the blockchain-based vehicle identity authentication method described in any of the above-mentioned embodiments, the present disclosure also provides a computer program product including computer program instructions. In some embodiments, the computer program instructions can be executed by one or more processors of a computer to cause the computer and / or the processor to perform the blockchain-based vehicle identity authentication method. Corresponding to the execution subject of each step in each embodiment of the blockchain-based vehicle identity authentication method, the processor performing the corresponding step can belong to the corresponding execution subject.

[0106] The computer program product of the above-mentioned embodiments is used to cause the computer and / or the processor to perform the blockchain-based vehicle identity authentication method according to any of the above-mentioned embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0107] Those of ordinary skill in the art will realize that the foregoing discussion of any of the embodiments has been presented for the purpose of illustration and description and is not intended to be exhaustive or to limit the application to the precise forms described, and that various adaptations and modifications are possible within the scope and spirit of the application. For example, while the embodiments discussed above have been described in the context of a memory device, the embodiments discussed above can be used in other memory architectures (e.g., dynamic RAM (DRAM)).

[0108] In addition, to simplify the description and discussion, and so as not to make the embodiments of the application difficult to understand, the well-known power / ground connections to integrated circuit (IC) chips and other components can or can not be shown in the provided drawings. Further, devices can be shown in block diagram form so as not to make the embodiments of the application difficult to understand, and this also takes into account the fact that details regarding implementation of these block diagram devices are highly dependent on the platform in which the embodiments of the application are to be implemented (i.e., these details should be well within the understanding of one of ordinary skill in the art). Where specific details (e.g., circuitry) are set forth in order to describe an illustrative embodiment of the application, it should be apparent to one of ordinary skill in the art that the embodiments of the application can be practiced without or with variations of these specific details. Thus, the description should not be considered to be limiting in nature.

[0109] While the application has been described in connection with specific embodiments thereof, it will be understood that many modifications, variations and alternatives will be apparent to those skilled in the art as a result of the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) can use the embodiments discussed.

[0110] It is therefore intended that the embodiments of the application embrace all such alternatives, modifications and variations as falling within the broad scope of the appended claims. Accordingly, any and all departures from the above described embodiments are intended to be included within the scope of the application as defined by the following claims.

Claims

1. A blockchain-based vehicle identity authentication method, characterized in that, The trusted third-party institution is configured to determine a system key, and initialize a consortium chain according to the system key. The adjacent vehicle / roadside unit is configured to obtain the access information and the pseudonym key table from the consortium chain, and perform vehicle identity authentication according to the access information and the pseudonym key table. In response to determining that the initialization is completed, vehicle information and vehicle user information of any vehicle in a target area are determined, registration is performed according to the vehicle information and the vehicle user information, a vehicle pseudonym is generated, and the vehicle pseudonym is sent to a vehicle-mounted unit, a neighboring vehicle, and a roadside unit; wherein a pseudonym key of any vehicle pseudonym is determined, a vehicle pseudonym key table is determined according to the pseudonym key, and the vehicle pseudonym key table is automatically stored through a smart contract, the vehicle pseudonym is wherein V i is a private key of the vehicle , PID i is a pseudonym identity, ID i is real identity information of a vehicle user, H2 is a hash function, , sk i is a private key of the vehicle user, P pub is a system public key, H3 is a hash function, , s is a system private key, t i is a validity period of the pseudonym, V i is a public key of the vehicle pki = sk i · P, V i is a vehicle, and || is a bit connection operation. The vehicle-mounted unit is configured to determine identity information of a vehicle user, access information and an access password, sign the access information according to the vehicle pseudonym and the access password, determine a message signature, determine access information according to the message signature, and broadcast the access information. The vehicle-mounted unit verifies the vehicle user according to the identity information and the access password. If the verification fails, the access request of the vehicle user is rejected. If the verification succeeds, a random number is generated , and the following calculation is performed , the information is broadcast to surrounding vehicles and roadside units, H3 is a hash function, , PID i is a pseudonym identity, M i is a vehicle V i , a real-time message is sent at a timestamp T i , T i is a current timestamp, sk i is a private key of the vehicle user, is a signature of a single message, . The signing of the access message according to the vehicle pseudonym and the identity information and the access password includes:

2. The method of claim 1, wherein, determining current verification information according to the identity information; comparing the current verification information with preset identity verification information; in response to determining that the current verification information is the same as the preset identity verification information, signing the access message according to a hash function. The vehicle identity authentication according to the access information and the pseudonym key table includes:

3. The method of claim 2, wherein, determining a time stamp of the access information and a time difference between the time stamp of the access information and a current time; determining a public key of the vehicle according to the pseudonym key table; in response to determining that the time difference is not greater than a preset time difference, verifying the message signature according to a hash function and the public key; in response to determining that the message signature is legal, the vehicle authentication is successful; in response to determining that the message signature is not legal, the vehicle authentication fails. The trusted third-party institution further includes:

4. The method of claim 1, wherein, obtaining a latest update time of a vehicle pseudonym, and determining a difference between the latest update time and a preset update time interval; in response to determining that the difference is less than a threshold, updating the vehicle pseudonym. The trusted third-party institution further includes:

5. The method of claim 1, wherein, determining a real-time position of any associated vehicle; in response to determining that a current position of any of the associated vehicles is beyond a preset range, deleting vehicle information of the associated vehicle beyond the preset range in a vehicle pseudonym key table, and broadcasting the deletion operation; wherein the vehicle information of the associated vehicle beyond the preset range is deleted according to a preset revocation algorithm. The vehicle-mounted unit further includes:

6. The method of claim 1, wherein, in response to determining an updated access password of a target vehicle, verifying the updated access password; in response to determining that the updated access password is a legal password, updating verification information according to the updated access password. The trusted third-party institution, the vehicle-mounted unit, the adjacent vehicle, and the roadside unit are included. 7.A blockchain-based vehicle identity authentication apparatus characterized by comprising: The trusted third-party institution is configured to determine a system key, and initialize a consortium chain according to the system key. The adjacent vehicle / roadside unit is configured to obtain the access information and the pseudonym key table from the consortium chain, and perform vehicle identity authentication according to the access information and the pseudonym key table.

8. An electronic device comprising a memory, a processor, and a computer program stored on the memory and executable by the processor, the processor implementing the method of any one of claims 1 to 6 when executing the computer program. In response to determining that the initialization is completed, determining vehicle information and vehicle user information of any vehicle in a target area, registering according to the vehicle information and the vehicle user information, generating a vehicle pseudonym, and sending the vehicle pseudonym to the vehicle-mounted unit, the adjacent vehicle, and the road side unit; wherein a pseudonym key of any vehicle pseudonym is determined, a vehicle pseudonym key table is determined according to the pseudonym key, and the vehicle pseudonym key table is automatically stored through a smart contract, and the vehicle pseudonym is wherein V i is a private key of V , PID i is a pseudonym identity, ID i is real identity information of a vehicle user, H2 is a hash function, , sk i is a private key of a vehicle user, H3 is a hash function, , t i is a validity period of the pseudonym, V i is a public key of V pki = sk i · P, V i is a vehicle, and || is a bit connection operation. The vehicle-mounted unit is configured to determine identity information of a vehicle user, an access message and an access password, sign the access message according to the identity information and the access password, determine a message signature, determine access information according to the message signature, and broadcast the access information; wherein the vehicle-mounted unit verifies the vehicle user according to the identity information and the access password, rejects an access request of the vehicle user if the verification fails, and generates a random number if the verification succeeds , and calculates , and broadcasts information to surrounding vehicles and roadside units, H3 is a hash function, , PID i is a pseudonym identity, M i is a vehicle V i , a real-time message sent at a timestamp T i , T i is a current timestamp, sk i is a private key of the vehicle user, is a signature of a single message, ; 9. A non-transitory computer-readable storage medium storing computer instructions for causing a computer to execute the method of any one of claims 1 to 6. ​ ​ 10. A computer program product comprising computer program instructions which, when said computer program instructions are executed on a computer, cause the computer to carry out the method according to any one of claims 1-6.

Images