A method for authenticating emergency vehicles that quickly pass through traffic lights

Abstract

The present invention discloses an authentication method for an emergency vehicle to quickly pass through traffic lights, and relates to the field of information security technology. The method designs a traffic light service request message propagation and handover authentication structure by taking into account that traffic lights are in different roadside unit domains, so that the emergency vehicle can quickly pass through multiple traffic lights until the emergency vehicle arrives at a predetermined location. By introducing elliptic curves to perform encryption operations on key parameters in the authentication process, the security of the entire authentication process is improved, and various known attacks are effectively resisted. The elliptic curve Diffie-Hellman secret exchange value is used to authenticate the communicating parties, thereby ensuring the legitimacy of the identity. Vehicles all use dynamic anonymity strategies to protect privacy and do not transmit identity-related information on public channels, thereby achieving privacy protection.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a method for authenticating an emergency vehicle that quickly passes through a traffic light. Background Art

[0002] The Internet of Vehicles (IoV) is a crucial component of intelligent transportation systems and has been widely adopted in smart cities in recent years. IoV connects vehicles to the internet via wireless communication technologies, enabling real-time data exchange and communication between vehicles and the external environment, other vehicles, and infrastructure. Leveraging on-board sensors, communication modules, and cloud platforms, IoV transforms vehicles into intelligent terminals, enabling interoperability between vehicles and infrastructure.

[0003] Currently, a common method for emergency vehicles to quickly pass through traffic lights is to run red lights. However, this method is very risky and can easily lead to secondary accidents. Some research is using artificial intelligence and deep learning technologies to solve the traffic light scheduling problem, but there is currently no good solution. Although there is considerable research on identity authentication in vehicle-to-vehicle communications, there is no authentication protocol specifically designed for emergency vehicles to quickly pass through traffic lights, which cannot guarantee the security of traffic information authentication. Summary of the Invention

[0004] The purpose of the present invention is to provide an authentication method for an emergency vehicle to quickly pass through a traffic light, which can improve the security of traffic information authentication and achieve privacy protection.

[0005] To achieve the above object, the present invention provides the following solutions:

[0006] A method for authenticating an emergency vehicle quickly passing a traffic light, comprising:

[0007] S1. System initialization: A finite field F is selected by the trusted center TA. p and a large prime number p and an elliptic curve E:y 2 =x 3 +ax+b(mod p), where a, b∈F p , the order of the additive group G is q, P is the generator; at the same time, choose a secure one-way hash function h: Pick a random number As the system's private key, calculate the corresponding public key PK TA =s·P, the trusted center TA publishes system parameters params={G, E, P, p, q, a, b, h, PK TA};

[0008] S2, Registration phase: The trusted center TA generates registration information for emergency vehicles, roadside units, and traffic control units. After each unit receives the feedback registration information, it uses a physical unclonable function to protect and save the secret parameters generated after registration;

[0009] S3, Authentication Stage: After an accident occurs, control the emergency vehicle to quickly pass through the traffic light, specifically:

[0010] The emergency vehicle sends a traffic light message request to the nearest roadside unit. When the roadside unit receives the message, it first authenticates the legitimacy of the emergency vehicle's identity.

[0011] After successful authentication, it is determined whether there is a traffic light in the area: if so, the roadside unit sends a message to the traffic control unit in the traffic light, and the traffic control unit returns a feedback message to the roadside unit; if not, the roadside unit generates a feedback message and sends it to the emergency vehicle;

[0012] After the emergency vehicle receives the feedback message sent by the roadside unit, based on the content of the feedback message, if there is a traffic light, the vehicle will quickly pass through the traffic light and send a service end message to the traffic control unit; if there is no traffic light, it will go directly to the next roadside unit domain.

[0013] Optionally, the specific process of the registration stage is:

[0014] S2.1. Emergency Vehicle Registration: Emergency Vehicle EV i Select an ID i and randomly select a private key Calculate the corresponding public key PK EVi =v i ·P, and send {ID i , PK EVi} to the trusted center TA; the trusted center TA selects a random number γi and calculates the emergency vehicle EV i PEV i =Enc s (γ i ||ID i ); The trusted center TA randomly selects a random number x i , calculate X i =x i P and verification identity legitimacy parameter Cert i =h(PEV i ||X i ||PK EVi ||PK TA )·s+x i ; The trusted center TA sends {Certi , PEV i , X i} to EV i ; When emergency vehicle EV i When receiving the message, the driver verifies the Cert i ·P=h(PEV i ||X i ||PK EVi ||PK TA )·PK TA +X i Is it correct? If correct, the driver enters the biometric information BIO i , calculate (α i , β i )=Gen(BIO i ); The onboard unit OBU selects a challenge value C i , calculate the response value R i =PUF(C i ), and calculate Among them, n0∈(2 4 , 2 8 ), and finally Stored in the on-board unit OBU;

[0015] S2.2, Roadside Unit Registration: First, the trusted center TA is used to register each roadside unit RSU. j (j=1, 2, 3, ...) randomly select an integer u j , identity RID j , and calculate the corresponding public key PK RSUj =u j ·P; then the trusted center TA is the roadside unit RSU j And the corresponding traffic control unit TCU t Choose a shared secret value δ t , and calculate Z j =h(δ t ||PK RSUj ||RID j ), through a secure channel {u j , δ t , RID j , Z j}Send to RSU j ; When the roadside unit RSU j After receiving the message, calculate the corresponding public key PK RSUj =u j P, verification Is it related to Z jEqual; if equal, then the roadside unit RSU j Choose a challenge value C j , calculate R j =PUF(C j ), Last stored to the storage unit;

[0016] S2.3, Traffic Control Unit Registration: First, the trusted center TA is the traffic control unit TCU t (t=1, 2, 3, ...) Select the corresponding identity TID t , send {δ t , TID t}To the traffic control unit TCU t , where δ t Is a shared secret value for the roadside unit RSU j And the corresponding traffic control unit TCU t Fast communication; when the traffic control unit TCU t After receiving the registration information from the trusted center, select a challenge value C t And calculate the corresponding response value R t =PUF(C t ),calculate Last stored

[0017] Optionally, the specific process of the authentication stage is:

[0018] S3.1 Emergency Vehicle EV i Send a quick traffic light request message to the roadside unit RSU j When the driver wants to drive an emergency vehicle EV i , users must enter their ID i and bioinformatics i to verify the legality; then, the emergency vehicle EV i Using the recovery function of the fuzzy extractor and βi, calculate the biometric key α i =Rep(BIO i , β i ), R i =PUF(C i ), and Kana Then, the emergency vehicle EV i Calculate C i ′=h(Cert i ||PEV i ||Ri ||v i ||α i ||ID i )mod n0 and store it in the onboard unit OBU Compare; if not equal, re-login; if equal, it means the driver is legal and has passed the driving certification; when the emergency vehicle EV i When you want to pass through the traffic light intersection quickly and without obstruction, you send a request message to the nearest roadside unit; first, the emergency vehicle EV i Generate random numbers r1 and r2, calculate M1 = r1·P, Among them PK EVi It is an emergency vehicle EV i Public key, PEV i It is an emergency vehicle EV i Pseudonym for emergency vehicle EV i Calculate M3 = h(T1||PEV i ||X i ||PK EVi ||m1||PK TA ||T1)·v i +Cert i , send {M2, M3, T1} to the nearest roadside unit RSU j ;When RSU j When receiving the information, first check the timestamp T1; if the time requirement is met, the nearest roadside unit RSU j Calculate R j =PUF(C j ), recover the private key To get the parameter X i , public key PK EVi , pseudonym PEV i , point M1 on the elliptic curve quickly passes the traffic light request message m1; then, the nearest roadside unit RSU j verify Are they equal? ​​If the verification is successful, the nearest roadside unit RSU j Select a random number r3 and calculate the shared key sk ER =h(r3·M1) to facilitate subsequent communication, including EV-to-TCU and EV-to-RSU; otherwise, the authentication will be terminated immediately and the emergency vehicle will resend the request;

[0019] S3.2 RSU j Send a traffic light fast pass request message to the TCU t ; If the roadside unit RSUj If there is a traffic light within the range, the roadside unit RSU j Traffic Control Unit TCU t Communications; Roadside Unit (RSU) j Generate timestamp T2 and calculate M5=h(m1||sk ER ||RID j ||PEV i ||δ t ||T2); then, the roadside unit RSU j Send {M4, M5, RID j , T2} to the traffic control unit TCU t ; When the traffic control unit TCU t Receive RSU from roadside unit j After the message, the traffic control unit TCU t First check the time stamp T2; if the time requirement is met, the traffic control unit TCU t Calculate the response value R t =PUF(C t ), recover the shared secret value Based on roadside unit RSU j Traffic Control Unit TCU t The shared secret value and symmetric decryption algorithm between Decryption is performed; then, the traffic control unit TCU t calculate verify If the verification fails, the authentication will be terminated immediately; if the verification passes, the traffic control unit TCU t Save shared secret And generate feedback information m2, store At the same time, the traffic control unit TCU t Generate timestamp T3, calculate Used to encrypt and transmit feedback information m2, calculate M7 = h(m2||TID t ||δ t ||PEV i || T3) is used to verify the integrity of each parameter; finally, {M6, M7, T3} is sent to the roadside unit RSU j ; When the roadside unit RSU j Received from TCU t Information, Roadside Unit RSU j Check timestamp T3; if the time requirement is met, the roadside unit RSU j Recovery feedback information and calculate verify If the verification fails, the authentication will be terminated immediately; if the verification passes, the roadside unit RSU will send a message to the emergency vehicle EV i ;

[0020] S3.3 Roadside Unit (RSU) j Send feedback message to emergency vehicle EV i ; From emergency vehicle EV i The process of receiving feedback information; Roadside Unit RSU j Select timestamp T4, calculate M8=r3·P based on elliptic curve algorithm, where r3 is a random number, and based on the shared key sk ER calculate Used to encrypt and transmit feedback information m2, calculate M 10 =h(M9||r2||m2||sk ER ||M8||RID j || T4) is used to verify the integrity of each parameter, {M8, M9, M 10 , RID j , T4} sent to the emergency vehicle EV i ; When the emergency vehicle EVi receives the j When the news comes, emergency vehicles EV i Check timestamp T4; if the time requirement is met, the emergency vehicle EV i Calculate the shared key sk ER =h(r1·M8), restore feedback information And by calculating Verify its validity; if the verification is passed, the emergency vehicle EV i Store the shared key sk ER and go through the traffic lights at the fastest speed;

[0021] S3.4, if the roadside unit RSU j There are no traffic lights in the area, and the roadside unit RSU j Generate Message Indicates that there is no traffic light and you can go straight, and selects timestamp T4; follow the process in S3.3 to send the message to the emergency vehicle EV i The only difference is that the traffic control unit TCU t The feedback information m2 generated is replace.

[0022] S3.5 Traffic Control Unit TCU t Adjust traffic lights and complete services; when emergency vehicles EV iWhen arriving at the traffic light, the emergency vehicle EV i Generate timestamp T5 and use symmetric encryption algorithm Encrypted transmission feedback information m2 and emergency vehicle pseudonym PEV i , send the message {m2, M 11 , T5} to the traffic control unit TCU t ; When the traffic control unit TCU t Received from emergency vehicle EV i Traffic Control Unit TCU t First check the time stamp T5; if the time requirement is met, the traffic control unit TCU t According to the feedback information m2 found Recovering the Session Key and decrypt And the calculated pseudonym PEV with stored pseudonym i Compare, if the same, it means the mission message comes from the emergency vehicle EV i , Traffic Control Unit TCU t Adjust traffic lights to allow emergency vehicles to pass quickly and end service;

[0023] S3.6 Current Roadside Units (RSUs) j Forward traffic light request information to the next roadside unit RSU j+1 ; Roadside Unit RSU j Generate timestamp T6, calculate and M 13 =h(m1||sk ER ||PEV i ||M 12 ||RID j ||RID j+1 ||T6), send {M 12 , M 13 , RID j , T6} to the next roadside unit RSU j+1 ; The next roadside unit RSU j+1 Receive RSU from current roadside unit j When the message comes, the next roadside unit RSU j+1 First check the timestamp T6; if the time requirement is met, the next roadside unit RSU j+1 Calculate the response value R j+1 =PUF(C j+1 ), recover the private key Decrypted Request message m1 and shared key sk ER and emergency vehicle pseudonym PEV i , by calculating and comparison With M 13 Is equal to verify whether the decrypted parameters are valid; if the verification is valid, RSU j+1 calculate Used to encrypt and store the shared key sk ER , and finally stored If there is a traffic light in the current roadside unit RSU, the next roadside unit RSU j+1 According to the process of S3.2, the vehicle information is transmitted to the traffic control unit TCU that controls the current traffic light and obtains the feedback message m2; then, the emergency vehicle EV i Enter the next roadside unit RSU as before i+1 After that, it communicates with the traffic control unit TCU in the domain and passes the traffic light quickly; if this roadside unit RSU j+1 There are no traffic lights, roadside units RSU j+1 Feedback information to emergency vehicle EV i , and put emergency vehicles EV i The information is passed to the next roadside unit RSU j+2 .

[0024] Optionally, the timestamp verification method is specifically:

[0025] |T′ n -T n |≤ΔT

[0026] Among them, T n is the timestamp contained in the information sent in the previous stage, T′ n It is the current timestamp obtained by the device when receiving the information. ΔT is the threshold time allowed during the preset communication process. When the time difference is greater than the threshold time, the authentication is terminated; when the time difference is less than the threshold time, the next step is carried out.

[0027] Optionally, the message {M2, M3, T1}, {M4, M5, RID j , T2}, {M6, M7, T3}, {M8, M9, M 10 , RID j , T4}, {m2, M 11 , T5} and {M 12 , M 13 , RID j , T6} are all transmitted in the public channel.

[0028] According to the specific embodiments provided by the present invention, the present invention discloses the following technical effects:

[0029] The present invention discloses an authentication method for emergency vehicles to quickly pass through traffic lights. The method takes into account that traffic lights are located in different roadside unit domains and designs a traffic light service request message propagation and handover authentication structure, allowing the emergency vehicle to quickly pass through multiple traffic lights until the emergency vehicle arrives at a predetermined location. By introducing elliptic curves to perform encryption operations on key parameters in the authentication process, the security of the entire authentication process is improved and various known attacks are effectively resisted. The elliptic curve Diffie-Hellman secret exchange value is used to authenticate the communicating parties, ensuring the legitimacy of the identities. Vehicles all use dynamic anonymity strategies to protect privacy and do not transmit identity-related information on public channels, thereby achieving privacy protection. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0031] Figure 1 This is a diagram of the system unit architecture for the application of the present invention for the rapid traffic light authentication of emergency vehicles;

[0032] Figure 2 This is the overall flow chart of the fast traffic light request message authentication and message propagation in this embodiment;

[0033] Figure 3 This is a flow chart of shared key generation in this embodiment;

[0034] Figure 4 A flow chart for generating feedback messages in this embodiment;

[0035] Figure 5 A flow chart for preserving a shared key for an emergency vehicle in this embodiment;

[0036] Figure 6 This is a flowchart of ending a single traffic light service in this embodiment. DETAILED DESCRIPTION

[0037] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0038] The purpose of the present invention is to provide an authentication method for an emergency vehicle to quickly pass through a traffic light, which can improve the security of traffic information authentication and achieve privacy protection.

[0039] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0040] like Figure 1 As shown, the present invention solves the V2I authentication protocol for emergency vehicles to quickly pass through traffic lights. Considering that there may be multiple traffic light intersections on the rescue route, a traffic light service request message propagation and handover authentication architecture is designed.

[0041] After an accident occurs, the emergency vehicle sends a traffic light message request to the nearest roadside unit in advance. After receiving the message, the roadside unit first authenticates the legitimacy of the vehicle's identity. If the authentication is successful, it determines whether there is a traffic light in its area. If so, the roadside unit sends a message to the traffic control unit in the traffic light, and the traffic control unit returns a feedback message to the roadside unit; if not, the roadside unit generates a feedback message and sends it to the emergency vehicle. After the roadside unit sends the response message to the vehicle, the vehicle takes corresponding measures based on the feedback message. If there is a traffic light, the vehicle contacts the traffic control unit and quickly passes through the traffic light. After quickly passing the traffic light, the vehicle sends a service end message to the traffic control unit; if not, it goes directly to the next roadside unit domain. The nearest roadside unit passes the message to the next roadside unit in advance to prepare. Subsequent authentication methods are similar until the emergency vehicle arrives at the scene of the accident.

[0042] This protocol, based on elliptic curve cryptography, implements conditional privacy protection and mutual authentication. The proposed protocol allows emergency vehicles to quickly authenticate with subsequent roadside units after completing the initial mutual authentication with the nearest roadside unit, avoiding tedious computational processes. Furthermore, each roadside unit sends a request message to the traffic control unit within its jurisdiction in advance, pre-arranging the traffic light system. Furthermore, when the emergency vehicle is activated, the protocol incorporates driver identity verification, enabling the trusted center to hold any malicious behavior accountable. The design also employs physically unclonable functions and biometric keys to protect the privacy of roadside units and emergency vehicles, preventing key leaks.

[0043] The specific steps include:

[0044] S1. System initialization: A finite field F is selected by the trusted center TA. p and a large prime number p and an elliptic curve E:y 2 =x 3 +ax+b(mod p), where a, b∈F p , the order of the additive group G is q, P is the generator; at the same time, choose a secure one-way hash function h: Pick a random number As the system's private key, calculate the corresponding public key PK TA =s·P, the trusted center TA publishes system parameters params={G, E, P, p, q, a, b, h, PK TA}.

[0045] S2, Registration Phase: The trusted center TA generates registration information for emergency vehicles, roadside units, and traffic control units. After each unit receives the feedback registration information, it uses a physical unclonable function to protect and save the secret parameters generated after registration. Specifically, it includes:

[0046] S2.1. Emergency Vehicle Registration: Emergency Vehicle EV i Select an ID i and randomly select a private key Calculate the corresponding public key PK EVi =v i ·P, and send {ID i , PK EVi} Give the trusted center TA; the trusted center TA selects a random number γ i , calculate emergency vehicle EV i PEV i =Enc s (γ i ||ID i );TA randomly selects a random number x i , calculate X i =x i P and verification identity legitimacy parameter Cert i =h(PEV i ||X i ||PK EVi ||PK TA )·s+x i TA sends {Cert i , PEV i , X i} to EV i ; When emergency vehicle EVi When receiving the message, the driver verifies the Cert i ·P=h(PEV i ||X i ||PK EVi ||PK TA )·PK TA +X i Is it correct? If correct, the driver enters the biometric information BIO i , calculate (α i , β i )=Gen(BIO i ); The onboard unit OBU selects a challenge value C i , calculate the response value R i =PUF(C i ), and calculate Among them, n0∈(2 4 , 2 8 ), and finally Stored in the on-board unit OBU;

[0047] S2.2, Roadside Unit Registration: First, the trusted center TA is used to register each roadside unit RSU. j (j=1, 2, 3, ...) randomly select an integer u j , identity RID j , and calculate the corresponding public key PK RSUj =u j ·P; then the trusted center TA is the roadside unit RSU j And the corresponding traffic control unit TCU t Choose a shared secret value δ t , and calculate Z j =h(δ t ||PK RSUj ||RID j ), will {u j , δ t , RID j , Z j}Send to RSU j ; When the roadside unit RSU j After receiving the message, calculate the corresponding public key PK RSUj =u j P, verification Is it related to Z j Equal; if equal, then the roadside unit RSU j Choose a challenge value C j , calculate R j =PUF(C j ), Last stored to the storage unit;

[0048] S2.3, Traffic Control Unit Registration: First, the trusted center TA is the traffic control unit TCU t (t=1, 2, 3, ...) Select the corresponding identity TID t , send {δ t , TID t}To the traffic control unit TCU t , where δ t Is a shared secret value for the roadside unit RSU j And the corresponding traffic control unit TCU t Fast communication; when the traffic control unit TCU t After receiving the registration information from the trusted center, select a challenge value C t And calculate the corresponding response value R t =PUF(C t ),calculate Last stored

[0049] S3, Authentication Stage: After an accident occurs, control the emergency vehicle to quickly pass through the traffic light, specifically:

[0050] The emergency vehicle sends a traffic light message request to the nearest roadside unit. When the roadside unit receives the message, it first authenticates the legitimacy of the emergency vehicle's identity.

[0051] After successful authentication, it is determined whether there is a traffic light in the area: if so, the roadside unit sends a message to the traffic control unit in the traffic light, and the traffic control unit returns a feedback message to the roadside unit; if not, the roadside unit generates a feedback message and sends it to the emergency vehicle;

[0052] After the emergency vehicle receives the feedback message sent by the roadside unit, based on the content of the feedback message, if there is a traffic light, the vehicle will quickly pass through the traffic light and send a service end message to the traffic control unit; if there is no traffic light, it will go directly to the next roadside unit domain.

[0053] The specific process of this certification stage is as follows:

[0054] S3.1 Emergency Vehicle EV i Send a quick traffic light request message to the roadside unit RSU j When the driver wants to drive an emergency vehicle EV i , users must enter their ID i and bioinformatics i to verify the legality; then, the emergency vehicle EVi Using the recovery function of the fuzzy extractor and β i , calculate the bio-key α i =Rep(BIO i , β i ), R i =PUF(C i ), and Kana Then, the emergency vehicle EV i Calculate C i ′=h(Cert i ||PEV i ||R i ||v i ||α i ||ID i )mod n0 and store it in the onboard unit OBU Compare; if not equal, re-login; if equal, it means the driver is legal and has passed the driving certification; when the emergency vehicle EV i When you want to pass through the traffic light intersection quickly and without obstruction, you send a request message to the nearest roadside unit; first, the emergency vehicle EV i Generate random numbers r1 and r2, calculate M1 = r1·P, Among them PK EVi It is an emergency vehicle EV i Public key, PEV i It is an emergency vehicle EV i Pseudonym for emergency vehicle EV i Calculate M3 = h(T1||PEV i ||X i ||PK EVi ||m1||PK TA ||T1)·v i +Cert i , send {M2, M3, T1} to the nearest roadside unit RSU j ;When RSU j When receiving the information, first check the timestamp T1; if the time requirement is met, the nearest roadside unit RSU j Calculate R j =PUF(C j ), recover the private key To get the parameter X i , public key PK EVi , pseudonym PEV i , point M1 on the elliptic curve quickly passes the traffic light request message m1; then, the nearest roadside unit RSUj verify Are they equal? ​​If the verification is successful, the nearest roadside unit RSU j Select a random number r3 and calculate the shared key sk ER =h(r3·M1) to facilitate subsequent communication, including EV-to-TCU and EV-to-RSU; otherwise, the authentication will be terminated immediately and the emergency vehicle will resend the request;

[0055] S3.2 RSU j Send a traffic light fast pass request message to the TCU t ; If the roadside unit RSU j If there is a traffic light within the range, the roadside unit RSU j Traffic Control Unit TCU t Communications; Roadside Unit (RSU) j Generate timestamp T2 and calculate M5=h(m1||sk ER ||RID j ||PEV i ||δ t ||T2); then, the roadside unit RSU j Send {M4, M5, RID j , T2} to the traffic control unit TCU t ; When the traffic control unit TCU t Receive RSU from roadside unit j After the message, the traffic control unit TCU t First check the time stamp T2; if the time requirement is met, the traffic control unit TCU t Calculate the response value R t =PUF(C t ), recover the shared secret value Based on roadside unit RSU j Traffic Control Unit TCU t The shared secret value and symmetric decryption algorithm between Decryption is performed; then, the traffic control unit TCU t calculate verify If the verification fails, the authentication will be terminated immediately; if the verification passes, the traffic control unit TCU t Save shared secret And generate feedback information m2, store At the same time, the traffic control unit TCU t Generate timestamp T3, calculate Used to encrypt and transmit feedback information m2, calculate M7 = h(m2||TID t ||δ t ||PEV i || T3) is used to verify the integrity of each parameter; finally, {M6, M7, T3} is sent to the roadside unit RSU j ; When the roadside unit RSU j Received from TCU t Information, Roadside Unit RSU j Check timestamp T3; if the time requirement is met, the roadside unit RSU j Recovery feedback information and calculate verify If the verification fails, the authentication will be terminated immediately; if the verification passes, the roadside unit RSU will send a message to the emergency vehicle EV i ;

[0056] S3.3 Roadside Unit (RSU) j Send feedback message to emergency vehicle EV i ; From emergency vehicle EV i The process of receiving feedback information; Roadside Unit RSU j Select timestamp T4, calculate M8=r3·P based on elliptic curve algorithm, where r3 is a random number, and based on the shared key sk ER calculate Used to encrypt and transmit feedback information m2, calculate M 10 =h(M9||r2||m2||sk ER ||M8||RID j || T4) is used to verify the integrity of each parameter, {M8, M9, M 10 , RID j , T4} sent to the emergency vehicle EV i ; When emergency vehicle EV i Receive RSU from roadside unit j When the news comes, emergency vehicles EV i Check timestamp T4; if the time requirement is met, the emergency vehicle EV i Calculate the shared key sk ER =h(r1·M8), restore feedback information And by calculating Verify its validity; if the verification is passed, the emergency vehicle EV i Store the shared key sk ER and go through the traffic lights at the fastest speed;

[0057] S3.4, if the roadside unit RSU j There are no traffic lights in the area, and the roadside unit RSU j Generate Message Indicates that there is no traffic light and you can go straight, and selects timestamp T4; follow the process in S3.3 to send the message to the emergency vehicle EV i The only difference is that the traffic control unit TCU t The feedback information m2 generated is replace.

[0058] S3.5 Traffic Control Unit TCU t Adjust traffic lights and complete services; when emergency vehicles EV i When arriving at the traffic light, the emergency vehicle EV i Generate timestamp T5 and use symmetric encryption algorithm Encrypted transmission feedback information m2 and emergency vehicle pseudonym PEV i , send the message {m2, M 11 , T5} to the traffic control unit TCU t ; When the traffic control unit TCU t Received from emergency vehicle EV i Traffic Control Unit TCU t First check the timestamp T5; if it is fresh, the traffic control unit TCU t According to the feedback information m2 found Recovering the Session Key and decrypt And the calculated pseudonym PEV with stored pseudonym i Compare, if the same, it means the message comes from the emergency vehicle EV i , Traffic Control Unit TCU t Adjust traffic lights to allow emergency vehicles to pass quickly and end service;

[0059] S3.6 Current Roadside Units (RSUs) j Forward traffic light request information to the next roadside unit RSU j+1 ; Roadside Unit RSU j Generate timestamp T6, calculate and M 13 =h(m1||sk ER ||PEV i ||M 12 ||RID j ||RID j+1||T6), send {M 12 , M 13 , RID j , T6} to the next roadside unit RSU j+1 ; The next roadside unit RSU j+1 Receive RSU from current roadside unit j When the message comes, the next roadside unit RSU j+1 First check the timestamp T6; if the time requirement is met, the next roadside unit RSU j+1 Calculate the response value R j+1 =PUF(C j+1 ), recover the private key Decrypted Request message m1 and shared key sk ER and emergency vehicle pseudonym PEV i , by calculating and comparison With M 13 Is equal to verify whether the decrypted parameters are valid; if the verification is valid, RSU j+1 calculate Used to encrypt and store the shared key sk ER , and finally stored If there is a traffic light in the current roadside unit RSU, the next roadside unit RSU j+1 According to the process of S3.2, the vehicle information is transmitted to the traffic control unit TCU that controls the current traffic light and obtains the feedback message m2; then, the emergency vehicle EV i Enter the next roadside unit RSU as before j+1 After that, it communicates with the traffic control unit TCU in the domain and passes the traffic light quickly; if this roadside unit RSU j+1 There are no traffic lights, roadside units RSU j+1 Feedback information to emergency vehicle EV i , and put emergency vehicles EV i The information is passed to the next roadside unit RSU j+2 .

[0060] The timestamp verification method is specifically as follows:

[0061] |T′nT n |≤ΔT

[0062] Among them, T n is the timestamp contained in the information sent in the previous stage, T′ nIt is the current timestamp obtained by the device when receiving the information. ΔT is the threshold time allowed during the preset communication process. When the time difference is greater than the threshold time, the authentication is terminated; when the time difference is less than the threshold time, the next step is carried out.

[0063] The message {M2, M3, T1}, {M4, M5, RID j , T2}, {M6, M7, T3}, {M8, M9, M 10 , RID j , T4}, {m2, M 11 , T5} and {M 12 , M 13 , RID j , T6} are all transmitted in the public channel.

[0064] Therefore, this application has the following beneficial effects:

[0065] In this invention, whether it is the communication between the emergency vehicle and the roadside unit, or the communication between the roadside unit and the traffic control unit and between the roadside units, all go through a mutual authentication process, thereby ensuring the legitimacy and traceability of the identities of both parties.

[0066] By pre-transmitting traffic light request messages and coordinating the traffic light system, this method allows emergency vehicles to promptly obtain right-of-way when approaching traffic lights, reducing waiting times and ensuring safe passage. This not only reduces rescue delays but also avoids the safety risks associated with traditional methods of directly running red lights. Therefore, this method offers significant advantages in improving safety efficiency and reducing rescue delays.

[0067] Considering that there may be multiple traffic light intersections on the rescue route, a traffic light service request message propagation system is designed to allow the roadside unit to transmit messages and hand over authentication to the next roadside unit in advance, greatly reducing the computational cost of subsequent authentication and improving authentication efficiency. At the same time, the next roadside unit will also communicate with the traffic light control unit in the area in advance to arrange services, ensuring smooth passage for emergency vehicles.

[0068] To prioritize vehicle privacy, the vehicle's true identity is accessible only to the vehicle itself and the trusted center; other entities cannot directly access the vehicle's true identity information. When interacting with other entities, the vehicle uses a pseudonym to protect privacy. When transmitted over public channels, the pseudonym is encrypted, preventing direct exposure of the pseudonym. This ensures effective communication and interaction while protecting vehicle privacy.

[0069] In the face of common attack methods such as message forgery, tampering and malicious tracking, as well as physical attacks, this invention adopts a method based on physical unclonable functions and biometric keys to design and protect the private keys of roadside units (RSUs) and emergency vehicles (EVs). It is designed based on timestamps and pseudonyms and various encryption methods, such as elliptic curve encryption algorithm, elliptic curve Diffie-Hellman key exchange, etc., to resist common attacks and physical attacks.

[0070] Using elliptic curves, the elliptic curve cryptography system has the advantages of short keys, high strength, few parameters, fast digital signatures, and small amount of calculation data. It is particularly suitable for devices with limited computing and storage resources.

[0071] Figure 1 This is a system architecture diagram, which includes four entities: trusted center TA, roadside unit RSU, emergency vehicle EV, and traffic control unit TCU. The assumptions and entity working conditions of the system model are as follows:

[0072] (1) The vehicle communicates with the RSU through an open channel using the Dedicated Short Range Communication (DSRC) protocol.

[0073] (2) In this protocol, it is assumed that RSU communicates with other RSUs through an incompletely secure channel, which is a public channel by default.

[0074] (3) RSU communicates with TCU through open channels.

[0075] (4) The TA is responsible for registering other entities (i.e., EV, RSU, and TCU) in the network and distributing keys to them. At the same time, when a vehicle is involved in an accident, the organization can hold the vehicle responsible. The TA cannot be hacked.

[0076] (5) The RSU is responsible for authenticating the emergency vehicle and sending a request message to the TCU, returning a feedback message to the EV, and sending the emergency vehicle message and identity information to the next RSU in advance. In addition, a unique PUF is installed on each RSU.

[0077] (6) Emergency vehicles refer to vehicles that are allowed to quickly pass through traffic lights to complete some special tasks under specific circumstances.

[0078] (7)TCU is the traffic control unit in the traffic light. It can control the traffic light and provide some special services for emergency vehicles.

[0079] Figure 2-Figure 6 They respectively represent the process of the first request for fast traffic light message authentication and the process of fast traffic light message propagation.

[0080] The process for quickly passing the traffic light message authentication for the first time is as follows:

[0081] After an accident, the emergency vehicle driver enters their biometric information for login verification. If verification fails, they must re-enter their biometric information until a threshold number of logins is reached. If successful, the driver's identity is authenticated and the nearest roadside unit (ROU) sends an initial request for a quick traffic light pass. The RSU recovers its private key to authenticate the message. If authentication fails, the message is discarded, and the vehicle resends the request. If authentication succeeds, a shared key is generated to determine whether a traffic light exists in the area. If so, the request, along with the vehicle's information and shared key, is sent to the traffic control unit. The TCU authenticates the message. If authentication succeeds, the vehicle information and shared key are stored and feedback is returned. If authentication fails, the message is discarded, and the RSU resends the message. If no traffic light exists in the area, the RSU generates its own feedback. The RSU sends this feedback and shared key to the vehicle, facilitating quick handoff authentication. The vehicle authenticates the message, stores the shared key, and takes corresponding measures based on the feedback message. If there is a traffic light, it communicates with the traffic control unit through the shared key, quickly passes through the traffic light intersection, and the traffic control unit ends the service; if there is no traffic light, the emergency vehicle directly and quickly passes through the nearest roadside unit area and drives to the next roadside unit area.

[0082] The traffic light message dissemination process is as follows:

[0083] The emergency vehicle sends a request to quickly pass a traffic light to the nearest roadside unit. The nearest roadside unit determines whether a traffic light exists in the area. If so, it propagates the message to the traffic control unit, which receives a feedback message. If not, the nearest roadside unit generates its own feedback message. The nearest roadside unit sends the feedback message to the emergency vehicle and propagates the traffic light request message to the next roadside unit. The next roadside unit pre-determines whether a traffic light exists in the area and, if so, propagates the message to the traffic control unit, which receives a feedback message. If not, it generates its own feedback message. Simultaneously, the message is propagated to a third roadside unit, which prepares to receive the emergency vehicle's authentication request and sends the feedback message to the vehicle. The message propagation process then repeats with the second roadside unit until the message reaches the roadside unit at the accident site.

[0084] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0085] This document uses specific examples to illustrate the principles and implementation methods of the present invention. The above examples are only intended to help understand the core concept of the present invention. At the same time, those skilled in the art will find that the specific implementation methods and application scopes may vary based on the concept of the present invention. In summary, the contents of this specification should not be construed as limiting the present invention.

Claims

1. A method for authenticating an emergency vehicle passing a traffic light quickly, characterized in that: include: S1. System initialization: A finite field F is selected by the trusted center TA. p and a large prime number p and an elliptic curve E:y 2 =x 3 +ax+b(mod p), where a, b∈F p , the order of the additive group G is q, P is the generator; at the same time, choose a secure one-way hash function Pick a random number As the system's private key, calculate the corresponding public key PK TA =s·P, the trusted center TA publishes system parameters params={G, E, P, p, q, α, b, h, PK TA }; S2, Registration phase: The trusted center TA generates registration information for emergency vehicles, roadside units, and traffic control units. After each unit receives the feedback registration information, it uses a physical unclonable function to protect and save the secret parameters generated after registration; S3, Authentication Stage: After an accident occurs, control the emergency vehicle to quickly pass through the traffic light, specifically: The emergency vehicle sends a traffic light message request to the nearest roadside unit. When the roadside unit receives the message, it first authenticates the legitimacy of the emergency vehicle's identity. After successful authentication, it is determined whether there is a traffic light in the area: if so, the roadside unit sends a message to the traffic control unit in the traffic light, and the traffic control unit returns a feedback message to the roadside unit; if not, the roadside unit generates a feedback message and sends it to the emergency vehicle; After the emergency vehicle receives the feedback message sent by the roadside unit, based on the content of the feedback message, if there is a traffic light, the vehicle will quickly pass the traffic light and send a service end message to the traffic control unit; if there is no traffic light, it will directly go to the next roadside unit domain; The specific process of the registration stage is as follows: S2.

1. Emergency Vehicle Registration: Emergency Vehicle EV i Select an ID i and randomly select a private key Calculate the corresponding public key PK EVi =v i ·P, and send {ID i , PK EVi } to the trusted center TA; The trusted center TA selects a random number γi and calculates the emergency vehicle EV i PEV i =Enc s (γ i ||ID i ); The trusted center TA randomly selects a random number x i , calculate X i =x i P and verification identity legitimacy parameter Cert i =h(PEV i ||X i ||PK EVi ||PK TA )·s+x i ; Trusted Center TA sends {Cert i , PEV i , X i } to EV i ; When emergency vehicle EV i When receiving the message, the driver verifies the Cert i ·P=h(PEV i ||X i ||PK EVi ||PK TA )·PK TA +X i Is it correct? If correct, the driver enters the biometric information BIO i , calculate (α i , β i )=Gen(BIO i );In-vehicle Unit OBU selects a challenge value C i , calculate the response value R i =PUF(C i ), and calculate Among them, n0∈(2 4 , 2 8 ), and finally Stored in the on-board unit OBU; S2.2, Roadside Unit Registration: First, the trusted center TA is used to register each roadside unit RSU. j , where j = 1, 2, 3, ..., randomly select an integer u j , identity RID j , and calculate the corresponding public key PK RSUj =u j ·P; then the trusted center TA is the roadside unit RSU j And the corresponding traffic control unit TCU t Choose a shared secret value δ t , and calculate Z j =h(δ t ||PK RSUj ||RID j ), will {u j , δ t , RID j , Z j }Send to RSU j ; When the roadside unit RSU j After receiving the message, calculate the corresponding public key PK RSUj =u j P, verification Is it related to Z j Equal; if equal, then the roadside unit RSU j Choose a challenge value C j , calculate R j =PUF(C j ), Last stored to the storage unit; S2.3, Traffic Control Unit Registration: First, the trusted center TA is the traffic control unit TCU t , where t = 1, 2, 3, ..., select the corresponding identity TID t , send {δ t , TID t }To the traffic control unit TCU t , where δ t Is a shared secret value for the roadside unit RSU j And the corresponding traffic control unit TCU t Fast communication; when the traffic control unit TCU t After receiving the registration information from the trusted center, select a challenge value C t And calculate the corresponding response value R t =PUF(C t ),calculate Last stored The specific process of the authentication stage is as follows: S3.1 Emergency Vehicle EV i Send a quick traffic light request message to the roadside unit RSU j When the driver wants to drive an emergency vehicle EV i , users must enter their ID i and bioinformatics i to verify the legality; then, the emergency vehicle EV i Using the recovery function of the fuzzy extractor and β i , calculate the bio-key α i =Rep(BIO i , β i ), R i =PUF(C i ), and Kana Then, the emergency vehicle EV i Calculate C i ′=h(Cert i ||PEV i ||R i ||v i ||α i ||ID i )mod n0 and store it in the onboard unit OBU Compare; if not equal, re-login; if equal, it means the driver is legal and has passed the driving certification; when the emergency vehicle EV i When you want to pass through the traffic light intersection quickly and without obstruction, you send a request message to the nearest roadside unit; first, the emergency vehicle EV i Generate random numbers r1 and r2, calculate M1 = r1·P, Among them PK EVi It is an emergency vehicle EV i Public key, PEV i It is an emergency vehicle EV i Pseudonym for emergency vehicle EV i Calculate M3 = h(T1||PEV i ||X i ||PK EVi ||m1||PK TA ||T1)·v i +Cert i , send {M2, M3, T1} to the nearest roadside unit RSU j ;When RSU j When receiving the information, first check the timestamp T1; if the time requirement is met, the nearest roadside unit RSU j Calculate R j =PUF(C j ), recover the private key calculate To get the parameter X i , public key PK EVi , pseudonym PEV i , point M1 on the elliptic curve quickly passes the traffic light request message m1; then, the nearest roadside unit RSU j verify Are they equal? ​​If the verification is successful, the nearest roadside unit RSU j Select a random number r3 and calculate the shared key sk ER =h(r3·M1) to facilitate subsequent communication, including communication between the vehicle and the traffic control unit and between the vehicle and the roadside unit; otherwise, the authentication will be terminated immediately and the emergency vehicle will resend the request; S3.2 RSU j Send a fast traffic light request message to TCUt; if the roadside unit RSU j If there is a traffic light within the range, the roadside unit RSU j Communicates with traffic control unit TCUt; roadside unit RSU j Generate timestamp T2 and calculate M5=h(m1||sk ER ||RID j ||PEV i ||δ t ||T2); then, the roadside unit RSU j Send {M4, M5, RID j , T2} to the traffic control unit TCU t ; When the traffic control unit TCU t Receive RSU from roadside unit j After the message, the traffic control unit TCU t First check the time stamp T2; if the time requirement is met, the traffic control unit TCU t Calculate the response value R t =PUF(C t ), recover the shared secret value Based on roadside unit RSU j Traffic Control Unit TCU t The shared secret value and symmetric decryption algorithm between Decryption is performed; then, the traffic control unit TCU t calculate verify If the verification fails, the authentication will be terminated immediately; if the verification passes, the traffic control unit TCU t calculate Used to save the shared key sk ER , and generate feedback information m2, store At the same time, the traffic control unit TCU t Generate timestamp T3, calculate Used to encrypt and transmit feedback information m2, calculate M7 = h(m2||TID t ||δ t ||PEV i || T3) is used to verify the integrity of each parameter; finally, {M6, M7, T3} is sent to the roadside unit RSU j ; When the roadside unit RSU j Received from TCU t Information, Roadside Unit RSU j Check timestamp T3; if the time requirement is met, the roadside unit RSU j Recovery feedback information and calculate verify If the verification fails, the authentication will be terminated immediately; if the verification passes, the roadside unit RSU will send a message to the emergency vehicle EV i ; S3.3 Roadside Unit (RSU) j Send feedback message to emergency vehicle EV i ; From emergency vehicle EV i The process of receiving feedback information; Roadside Unit RSU j Select timestamp T4, calculate M8=r3·P based on elliptic curve algorithm, where r3 is a random number, and based on the shared key sk ER calculate Used to encrypt and transmit feedback information m2, calculate M 10 =h(M9||r2||m2||sk ER ||M8||RID j || T4) is used to verify the integrity of each parameter, {M8, M9, M 10 , RID j , T4} sent to the emergency vehicle EV i ; When emergency vehicle EV i Receive RSU from roadside unit j When the news comes, emergency vehicles EV i Check timestamp T4; if the time requirement is met, the emergency vehicle EV i Calculate the shared key sk ER =h(r1·M8), restore feedback information And by calculating Verify its validity; if the verification is passed, the emergency vehicle EV i Store the shared key sk ER and go through the traffic lights at the fastest speed; S3.4, if the roadside unit RSU j There are no traffic lights in the area, and the roadside unit RSU j Generate Message Indicates that there is no traffic light and you can go straight, and selects timestamp T4; follow the process in S3.3 to send the message to the emergency vehicle EV i The only difference is that the traffic control unit TCU t The feedback information m2 generated is replace; S3.5 Traffic Control Unit TCU t Adjust traffic lights and complete services; when emergency vehicles EV i When arriving at the traffic light, the emergency vehicle EV i Generate timestamp T5 and use symmetric encryption algorithm Encrypted transmission feedback information m2 and emergency vehicle pseudonym PEV i , send the message {m2, M 11 , T5} to the traffic control unit TCU t ; When the traffic control unit TCU t Received from emergency vehicle EV i Traffic Control Unit TCU t First check the time stamp T5; if the time requirement is met, the traffic control unit TCU t According to the feedback information m2 found Recovering the shared secret and decrypt And the calculated pseudonym PEV with stored pseudonym i Compare, if the same, it means the mission message comes from the emergency vehicle EV i , Traffic Control Unit TCU t Adjust traffic lights to allow emergency vehicles to pass quickly and end service; S3.6 Current Roadside Units (RSUs) j Forward traffic light request information to the next roadside unit RSU j+1 ; Roadside Unit RSU j Generate timestamp T6, calculate and M 13 =h(m1||sk ER ||PEV i ||M 12 ||RID j ||RID j+1 ||T6), send {M 12 , M 13 , RID j , T6} to the next roadside unit RSU j+1 ; The next roadside unit RSU j+1 Receive RSU from current roadside unit j When the message comes, the next roadside unit RSU j+1 First check the timestamp T6; if the time requirement is met, the next roadside unit RSU j+1 Calculate the response value R j+1 =PUF(C j+1 ), recover the private key By calculation Decrypt the request message m1 and shared key sk ER and emergency response vehicles (PEVs) i , by calculating and comparison With M 13 Is equal to verify whether the decrypted parameters are valid; if the verification is valid, RSU j+1 calculate Used to encrypt and store the shared key sk ER , and finally stored If there is a traffic light in the current roadside unit RSU, the next roadside unit RSU i+1 According to the process of S3.2, the vehicle information is transmitted to the traffic control unit TCU that controls the current traffic light and obtains the feedback message m2; then, the emergency vehicle EV i Go to the next roadside unit RSU as before j+1 After that, it communicates with the traffic control unit TCU in the domain and passes the traffic light quickly; if this roadside unit RSU j+1 There are no traffic lights, roadside units RSU j+1 Feedback information to emergency vehicle EV i , and put emergency vehicles EV i The information is passed to the next roadside unit RSU i+2 .

2. The method for authenticating an emergency vehicle passing a traffic light quickly according to claim 1, characterized in that: The timestamp verification method is specifically as follows: |T′ n -T n |≤ΔT Among them, T n is the timestamp contained in the information sent in the previous stage, T′ n It is the current timestamp obtained by the device when receiving the information. ΔT is the threshold time allowed during the preset communication process. When the time difference is greater than the threshold time, the authentication is terminated; when the time difference is less than the threshold time, the next step is carried out.

3. The method for authenticating an emergency vehicle passing a traffic light quickly according to claim 1, characterized in that: The message {M2, M3, T1}, {M4, M5, RID j , T2}, {M6, M7, T3}, {M8, M9, M 10 , RID j , T4}, {m2, M 11 , T5} and {M 12 , M 13 , RID j , T6} are all transmitted in the public channel.

Images