A quantum key-based V2G fog server encryption communication method

Abstract

The present invention relates to the field of vehicle networking communication technology, and discloses a V2G fog server encryption communication method based on quantum key. The communication method includes: when a vehicle needs to drive from the area where the current fog server i is located to the area where the target fog server j is located, the fog server i, fog server j and central server perform identity authentication based on the digital signature of the pre-charged quantum key and negotiate a first session key; the vehicle and fog server j complete identity authentication based on the first session key and negotiate a second session key, and then the fog server j distributes the second session key to the charging station and energy server in its area; the vehicle can realize encrypted communication with the charging station and energy server through the second session key. The present invention ensures the information security of the vehicle in a cross-domain V2G environment.

Description

Technical Field

[0001] The present invention relates to the field of vehicle networking communication technology, and in particular to a V2G fog server encryption communication method based on quantum keys. Background Art

[0002] V2G (Vehicle to Grid) technology enables two-way transmission of electrical energy, where electric vehicles will use the grid to charge their batteries during off-peak hours and release their energy to the grid during peak hours. Efficient charging and discharging technology will reduce peak power generation and carbon emissions.

[0003] The V2G environment involves a large amount of communication data, including information such as vehicle charging status, power grid status, and energy transactions. Once this data is tampered with or stolen, it may have a serious impact on the power grid and the vehicle. When the vehicle is in a local area (such as a city), the vehicle can securely connect to the charging station and energy server through registration authentication and key negotiation mechanisms, but when the vehicle leaves the area, the vehicle cannot perform encrypted communication with the charging station and energy server in other areas, which will cause the vehicle to use real identity information to communicate in the power grid environment. The information security of the vehicle is under great threat, so it needs to be solved urgently. Summary of the invention

[0004] In order to solve the technical problem that there are security risks in the existing vehicle communications in a cross-domain V2G environment, the present invention provides a V2G fog server encryption communication method based on quantum key.

[0005] To achieve the above object, the present invention provides the following technical solutions:

[0006] The present invention discloses a quantum key-based V2G fog server encryption communication method, comprising:

[0007] When a vehicle needs to drive from the area where the current fog server i is located to the area where the target fog server j is located, the fog server i, fog server j and the central server perform identity authentication based on the digital signature of the pre-charged quantum key and negotiate the first session key.

[0008] The vehicle and fog server j complete identity authentication based on the first session key and negotiate a second session key, and then fog server j distributes the second session key to the charging stations and energy servers in its area; the vehicle can achieve encrypted communication with the charging stations and energy servers through the second session key.

[0009] As a further improvement of the above solution, before negotiating the first session key, the method further includes: an initialization phase and a registration phase;

[0010] The initialization phase includes:

[0011] The central server generates three one-way hash functions , and , distributed to all fog servers.

[0012] The registration phase includes:

[0013] Each fog server generates quantum random numbers , and their true identity and quantum random numbers Sent as a registration message to the central server.

[0014] After receiving the registration message from the fog server, the central server verifies Is it already registered? If yes, discard the identity information of the fog server. If no, calculate the pseudonym of the fog server. , and record and ; Then the central server sends a package message to the smart SC card of the fog server , the smart SC card then packages the message Sent to the fog server, which stores the packaged message Complete the registration process; where , is the XOR symbol; It is the identity information of the central server.

[0015] As a further improvement of the above solution, the fog server i, fog server j and central server perform identity authentication based on the digital signature of the pre-filled quantum key and negotiate the first session key, including:

[0016] The fog server i will use its real identity , quantum random numbers and the vehicle's user's biometric information The smart SC card sends the data to itself, and the smart SC card calculates , and compare Is it equal to the pseudonym of fog server i? If it is equal to, it means that the smart SC card accepts the information of fog server i, and the smart SC card generates a new quantum random number and timestamp , and update the count value of the counter , and then calculate , , and , send a package message to the central server , For the connection symbol.

[0017] The central server receives the package message After verifying the freshness and integrity of the message, calculate And recalculate the pseudonym of fog server i ,Compare and Whether they are equal to verify whether the owner's identity is qualified, compare the pseudonym of fog server i and Whether they are equal is used to verify whether the identity of fog server i is qualified; if the identities of the car owner and fog server i are both qualified, then calculate , generate random numbers ,calculate , using the first pre-filled quantum key Generate digital signature , and calculate and

[0018] , send a packet message to fog server j ;in, is the preset time difference threshold; represents an encryption function using · as the key; is the real identity of fog server j.

[0019] Fog server j receives the package message After verifying the freshness and integrity of the message, the first pre-filled quantum key is used Verify digital signature Decryption to obtain the decrypted true identity and the identity information of the central server , then determine the equation Is it true? If so, the fog server j completes the identity authentication of the central server; then the fog server j calculates , and its own and quantum random numbers The smart SC card sends the data to itself, and the smart SC card calculates , and verify Is it equal to the pseudonym stored during the registration phase? If it is equal to, it means that the smart SC card accepts the information of fog server j, and then the smart SC card generates a quantum random number ,calculate , using the second pre-filled quantum key Generate digital signature , and calculate and

[0020] , send a package message to the central server .

[0021] The central server receives the package message After verifying the freshness and integrity of the message, calculate , using the second pre-filled quantum key Verify digital signature Decrypt it to get the decrypted identity information and the real identity of fog server j , then determine the equation Is it true? If so, the central server completes the identity authentication of fog server j; then the central server updates the count value , using the third pre-filled quantum key Generate digital signature , and calculate and

[0022] , send a packet message to fog server i .

[0023] Fog server i receives the package message After verifying the freshness and integrity of the message, calculate , fog server i uses the third pre-filled quantum key Verify digital signature Decryption to obtain the decrypted true identity and the identity information of the central server , and then determine the equation Is it true? If so, the fog server i completes the identity authentication of the central fog server, and the fog server i updates the count value .

[0024] Fog server i, fog server j and central server generate the first session key simultaneously .

[0025] As a further improvement of the above solution, after the fog server i, the fog server j and the central server negotiate the first session key, the method further includes:

[0026] Fog server i uses the first session key to encrypt the vehicle's identity information and generate a vehicle encrypted message And sent to fog server j; where, is the vehicle's T-BOX serial number, It is the vehicle's T-BOX integrated circuit card identification.

[0027] When the fog server j receives the vehicle encrypted message, it uses the first session key to decrypt it.

[0028] The vehicle communicates with fog server i, and fog server i sends the real identity of fog server j to Send to vehicle.

[0029] As a further improvement of the above solution, the vehicle and the fog server j complete identity authentication based on the first session key and negotiate a second session key, including:

[0030] Vehicle generates quantum random numbers As the second session key, use the fourth pre-filled quantum key The second session key is encrypted to generate And generate a timestamp , then calculate , send a message to fog server j .

[0031] Fog server j receives the message After verifying the freshness of the message, use the fourth pre-filled quantum key Decrypt to get the second session key ,calculate , and verify Is it equal to If they are equal, the fog server j completes the vehicle's identity authentication, and then the fog server j sends a message to the vehicle .

[0032] The vehicle receives the message After verifying the freshness of the message, calculate , and judge Is it equal to the message In , if they are equal, the vehicle’s identity authentication to fog server j is completed.

[0033] As a further improvement of the above solution, the central server, fog server and vehicle parties all generate a timestamp when receiving a message, and verify whether the difference between the timestamp and the timestamp attached to the message exceeds the preset time difference. If so, it means that the freshness of the message is qualified.

[0034] As a further improvement of the above scheme, the central server and each fog server calculate the message authentication code according to the content of the message when receiving the message, and determine whether the message authentication code is equal to the message authentication code attached to the message. If so, it means that the integrity of the message is qualified.

[0035] Compared with the prior art, the present invention has the following beneficial effects:

[0036] 1. The present invention uses fog servers and central servers, based on pre-filled quantum key technology, to design a key negotiation and identity authentication mechanism between fog servers in different regions. When the vehicle leaves the region, the fog server can notify the central server to disconnect from the fog server and connect to other fog servers, so that the vehicle can freely and smoothly enter another region from one region, and the fog server is guaranteed to be continuously connected and the encrypted communication is not interrupted. The final negotiated session key is used for communication between the vehicle and the charging station and energy server in the next region, ensuring the information security of the vehicle in the cross-domain V2G environment.

[0037] 2. The present invention does not transmit the real identities of the fog server and the central server in the first key negotiation phase, but transmits a random number, and uses the real identities of the fog server and the central server and the random number to generate the first session key. This can achieve the effect that even if an attacker intercepts part of the session key, the entire session key cannot be reconstructed.

[0038] 3. The present invention can realize vehicle network communication in V2G scenarios by using digital signatures and quantum random numbers pre-filled with quantum keys, thereby achieving the effect of resisting quantum computer attacks. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Figure 1 Schematic diagram of the framework of the quantum key-based V2G fog server encryption communication system in an embodiment of the present invention.

[0040] Figure 2 The present invention is a flowchart of a quantum key-based V2G fog server encryption communication method in an embodiment of the present invention. DETAILED DESCRIPTION

[0041] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0042] See also Figure 1 ,This embodiment provides a quantum key-based V2G fog server encryption communication system, including a central server, a fog server, a vehicle, a charging station and an energy server.

[0043] The vehicle is equipped with an OBU (On board Unit) and a T-BOX (Telematics BOX), in which an OBU integrates a computing unit and a quantum random number generator. The vehicle can communicate with the charging station through the roadside unit.

[0044] Traditional servers can only serve one vehicle at a time. The present invention requires a central server and several fog servers, each of which can match a city. When a vehicle leaves a city, the corresponding fog server can report to the central server, and the central server and the fog server are disconnected. This mechanism can make the continuity and connection switching process smooth when the vehicle moves between different areas without interrupting the service.

[0045] The energy server, whose distribution unit is responsible for power generation and distribution at the charging station. During the registration phase, both the electric vehicle and the charging station must submit the necessary information to register with the energy server. The energy server needs to store the information of the registered entities in its local database.

[0046] Charging stations are key entities in the intelligent network environment, providing charging and discharging facilities for electric vehicles. Charging stations are located on the roadside in public or private areas. Each charging station can communicate with the energy server and manage a large number of electric vehicles. The power of the charging station is provided by the distribution unit of the energy server.

[0047] See also Figure 2 The above system applies a V2G fog server encryption communication method based on quantum key, which includes steps S1~S5.

[0048] S1. Initialization phase, including:

[0049] The central server generates three one-way hash functions , and , distributed to all fog servers.

[0050] Among them, the hash function can input binary data of any length. This means that the hash function can handle inputs of any size, which is very important for data diversity in practical applications. The output length means that the output is a fixed length of n-bit binary data. This fixed-length output is a key feature of the hash function, ensuring that no matter how long the input data is, the length of the output hash value is always consistent.

[0051] S2. Registration phase, including:

[0052] Each fog server generates quantum random numbers , and their true identity and quantum random numbers Sent as a registration message to a central server;

[0053] After receiving the registration message from the fog server, the central server verifies Is it already registered? If yes, discard the identity information of the fog server. If no, calculate the pseudonym of the fog server. , and record and ; Then the central server sends a package message to the smart SC card of the fog server , the smart SC card then packages the message Sent to the fog server, which stores the packaged message Complete the registration process; where , is the XOR symbol; It is the identity information of the central server.

[0054] S3. The first session key negotiation phase includes:

[0055] When a vehicle needs to drive from the area where the current fog server i is located to the area where the target fog server j is located, the fog server i, fog server j and the central server perform identity authentication based on the digital signature of the pre-charged quantum key and negotiate the first session key.

[0056] Among them, quantum key distribution is a technology that uses the principles of quantum mechanics to achieve secure communication. Its main purpose is to establish a shared random key between the communicating parties. This key can be used to encrypt and decrypt messages, thereby ensuring the confidentiality and security of communication. The security of quantum key distribution relies on several basic principles of quantum mechanics: the quantum state non-cloning theorem. Since the quantum state cannot be accurately copied, any attempt to eavesdrop will disrupt the quantum state and thus be discovered by the two parties in legal communication. The perturbation of quantum measurement. Any measurement of the quantum state will inevitably change its state, which means that the presence of the eavesdropper will be detected.

[0057] "Pre-filled quantum key" refers to a secure key management method used in quantum key distribution technology. In this method, some parts of the key (i.e., the "pre-filled" part) are distributed or stored in the devices of both communicating parties in advance to enhance the security and reliability of quantum communication. In this embodiment, the central server and all fog servers pre-hold the pre-filled quantum key and its label information, and they can know which pre-filled quantum key is being used by transmitting label information when communicating with each other.

[0058] In quantum key distribution, two communicating parties usually transmit quantum bits through quantum channels (such as optical fibers or free space) to generate a shared encryption key. The security of this key is based on the principles of quantum mechanics, especially the property that measurement inevitably disturbs the quantum state, ensuring that if a third party attempts to eavesdrop, the communicating parties can detect it.

[0059] The core idea of ​​pre-filled quantum keys is that, in some cases, the communicating parties can pre-share some secure key materials before the communication begins. These pre-shared key materials can be used to enhance the security of new keys generated by subsequent quantum key distribution. For example, these pre-filled keys can be used to initially verify the identities of the communicating parties, verify the integrity of the communication, or provide seeds for further key generation.

[0060] The present invention can provide a highly secure communication channel by introducing quantum key distribution technology, ensuring the safe transmission of power grid control instructions and preventing potential network attacks. In the V2G scenario, the charging behavior, location and other information of electric vehicle users are sensitive data. Quantum key distribution technology can ensure the confidentiality of these sensitive data during transmission and protect user privacy.

[0061] Step S3 may specifically include steps S31 to S36.

[0062] S31. Fog server i sends its real identity , quantum random numbers and the vehicle's user's biometric information The smart SC card sends the data to itself, and the smart SC card calculates , and compare Is it equal to the pseudonym of fog server i? If it is equal to, it means that the smart SC card accepts the information of fog server i, and the smart SC card generates a new quantum random number and timestamp , and update the count value of the counter , and then calculate , , and

[0063] , send a package message to the central server , For the connection symbol.

[0064] S32. The central server receives the package message Generate timestamp ,Compare Is it established to verify the package message Whether it has timed out; if the package message If it does not time out, calculate , compare the message authentication code and Equality to verify the package message integrity; if the package message Complete calculation And recalculate the pseudonym of fog server i ,Compare and Whether they are equal to verify whether the owner's identity is qualified, compare the pseudonym of fog server i and Whether they are equal is used to verify whether the identity of fog server i is qualified; if the identities of the car owner and fog server i are both qualified, then calculate , generate random numbers ,calculate , using the first pre-filled quantum key Generate digital signature , and calculate and

[0065] , send a packet message to fog server j ;in, is the preset time difference threshold; represents an encryption function using · as the key; is the real identity of fog server j.

[0066] S33. Fog server j receives the package message Generate timestamp ,Compare Is it established to verify the package message Whether it has timed out; if the package message If it does not time out, calculate , compare the message authentication code and Equality to verify the package message integrity; if the package message Complete, then use the first pre-filled quantum key Verify digital signature Decryption to obtain the decrypted true identity and the identity information of the central server , then determine the equation Is it true? If so, the fog server j completes the identity authentication of the central server; then the fog server j calculates , and its own and quantum random numbers The smart SC card sends the data to itself, and the smart SC card calculates , and verify Is it equal to the pseudonym stored during the registration phase? If it is equal, it means that the smart SC card accepts the information of fog server j, and then the smart SC card generates a quantum random number ,calculate , using the second pre-filled quantum key Generate digital signature

[0067] , and calculate and

[0068] , send a package message to the central server .

[0069] S34. The central server receives the package message Generate timestamp ,Compare Is it established to verify the package message Whether it has timed out; if the package message If it does not time out, calculate , compare the message authentication code and Equality to verify the package message integrity; if the package message Complete, then calculate , using the second pre-filled quantum key Verify digital signature Decrypt it to get the decrypted identity information and the real identity of fog server j , then determine the equation Is it true? If so, the central server completes the identity authentication of fog server j; then the central server updates the count value , using the third pre-filled quantum key Generate digital signature , and calculate and

[0070] , send a packet message to fog server i .

[0071] S35. Fog server i receives the package message Generate a timestamp ,Compare Is it established to verify the package message Whether it has timed out; if the package message If it does not time out, calculate , compare the message authentication code and Equality to verify the package message integrity; if the package message Complete calculation , fog server i uses the third pre-filled quantum key Verify digital signature Decryption to obtain the decrypted true identity and the identity information of the central server , and then determine the equation Is it true? If so, the fog server i completes the identity authentication of the central fog server, and the fog server i updates the count value .

[0072] S36. Fog server i, fog server j and central server simultaneously generate the first session key .

[0073] In this embodiment, after the fog server i, fog server j and central server negotiate the first session key, the fog server i uses the first session key to encrypt the identity information of the vehicle to generate a vehicle encrypted message And sent to fog server j; where, is the vehicle's T-BOX serial number, It is the vehicle's T-BOX integrated circuit card identification.

[0074] When fog server j receives the encrypted message from the vehicle, it uses the first session key to decrypt it. The vehicle and fog server i communicate, and fog server i sends the real identity of fog server j to the vehicle. Sent to the vehicle, so that the vehicle obtains the real identity of fog server j through communication with fog server i It should be understood that in this scenario, there is a session key between the vehicle and fog server i, so the real identity of fog server j can be obtained through communication with fog server i. In other words, fog server i encrypts the real identity information of fog server j with the session key between the vehicle and fog server i and transmits it to the vehicle.

[0075] S4. The second session key negotiation phase includes:

[0076] The vehicle and fog server j complete identity authentication based on the first session key and negotiate a second session key, specifically including steps S41 to S43.

[0077] S41. Vehicle generates quantum random numbers As the second session key, use the fourth pre-filled quantum key The second session key is encrypted to generate And generate a timestamp , then calculate

[0078] , send a message to fog server j .

[0079] S42. Fog server j receives the message Generate timestamp ,Compare Is it established to verify the message Timeout, if the message If it does not time out, the fourth pre-filled quantum key is used Decrypt to get the second session key ,calculate , and verify Is it equal to If they are equal, the fog server j completes the vehicle's identity authentication, and then the fog server j sends a message to the vehicle .

[0080] S43. The vehicle receives the message Generate timestamp ,Compare Is it established to verify the message Whether it has timed out; if the message If it does not time out, calculate , and judge Is it equal to the message In , if they are equal, the vehicle’s identity authentication to fog server j is completed.

[0081] S5. The second session key distribution phase includes:

[0082] The fog server j distributes the second session key to the charging stations and energy servers in its area; the vehicle can achieve encrypted communication with the charging stations and energy servers through the second session key.

[0083] In summary, the communication method provided by the present invention has the following advantages:

[0084] In previous solutions, vehicles can only conduct secure encrypted conversations with the power grid in one area. After entering another area, they can only use plain text to communicate with charging stations and energy servers, which will lead to the leakage of vehicle identity information and cause security risks. The present invention uses fog servers and central servers, based on pre-filled quantum key technology, to design key negotiation and identity authentication mechanisms between fog servers in different areas. When the vehicle leaves the area, the fog server can notify the central server to disconnect from the fog server and connect to other fog servers, so that the vehicle can freely and smoothly enter another area from one area, and the connection with the fog server is guaranteed, and the encrypted communication is not interrupted. The final negotiated session key is used for communication between the vehicle and the charging station and energy server in the next area, ensuring the information security of the vehicle in the cross-domain V2G environment.

[0085] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can make equivalent replacements or changes according to the technical scheme and inventive concept of the present invention within the technical scope disclosed by the present invention, which should be covered by the protection scope of the present invention.

Claims

1. A quantum key-based V2G fog server encryption communication method, characterized in that: include: When a vehicle needs to drive from the area where the current fog server i is located to the area where the target fog server j is located, the fog server i, fog server j and the central server perform identity authentication based on the digital signature of the pre-charged quantum key and negotiate the first session key; The vehicle and fog server j complete identity authentication based on the first session key and negotiate a second session key, and then fog server j distributes the second session key to the charging stations and energy servers in its area; The vehicle can achieve encrypted communication with the charging station and energy server through the second session key; Before negotiating the first session key, the method further includes: an initialization phase and a registration phase; The initialization phase includes: The central server generates three one-way hash functions H1, H2, and H3 and distributes them to all fog servers; The registration phase includes: Each fog server generates a quantum random number α and sends its real identity FID and quantum random number α as a registration message to the central server; After receiving the registration message from the fog server, the central server verifies whether the FID has been registered. If so, the identity information of the fog server is discarded. If not, the pseudonym NID of the fog server is calculated and the NID and FID are recorded. Then the central server sends a package message m1 = {NID, CID} to the smart SC card of the fog server. The smart SC card then sends the package message m1 to the fog server. The fog server stores the package message m1 to complete the registration process. is the XOR symbol; CID is the identity information of the central server; The three parties, fog server i, fog server j and central server, perform identity authentication based on the digital signature of the pre-filled quantum key and negotiate the first session key, including: Fog server i sends its real identity FID i 、Quantum random number α i The vehicle's user biometric information BIO is sent to its own smart SC card, which calculates and compare NID * i Is it equal to the pseudonym NID of fog server i? i If it is equal, it means that the smart SC card accepts the information of fog server i. At this time, the smart SC card generates a new quantum random number β and timestamp t1, and updates the count value seq of the counter. i , and then calculate RID i =H1(BIO||NID i ), Q1={β1,RID i ,seq i ,t1} and MAC1=H3(Q1||NID i ||β1), send a packet message M1 to the central server = (NID i ,Q1,MAC1), || is the connection symbol; After receiving the package message M1 and verifying the freshness and integrity of the message, the central server calculates the RID * i =H1(BIO||NID i ) and recalculate the pseudonym NID of fog server i i * , compare RID * i and RID i Whether they are equal to verify whether the owner's identity is qualified, compare the pseudonym NID of fog server i i and NID i * Whether they are equal is used to verify whether the identity of fog server i is qualified; if the identities of the car owner and fog server i are both qualified, then calculate Generate a random number γ and calculate Generate a digital signature using the first pre-filled quantum key PFK1 And calculate Q2 = {β,γ1,ESG1,seq i ,t2} and MAC2=H3(Q2||CID||NID j ||γ1), send a packet message M2=(Q2,NID j ,MAC2); where Δt is the preset time difference threshold; E (·) Indicates the encryption function using · as the key; FID j is the real identity of fog server j; After receiving the packaged message M2 and verifying the freshness and integrity of the message, the fog server j uses the first pre-filled quantum key PFK1 to verify the digital signature ESG1 for decryption, thereby obtaining the decrypted true identity FID of itself. j * And the central server's identity information CID * , then determine equation H1(FID j ||CID)=H1(FID j * ||CID * ) is established, if established, the fog server j completes the identity authentication of the central server; then the fog server j calculates And its own FID j and quantum random number α j The smart SC card sends the data to itself, and the smart SC card calculates And verify NID * j Is it equal to the pseudonym NID stored during the registration phase? j If it is equal, it means that the smart SC card accepts the information of fog server j, and then the smart SC card generates a quantum random number λ and calculates Generate a digital signature using the second pre-filled quantum key PFK2 And calculate Q3 = {λ1,ESG2,seq i ,t3} and MAC3=H3(Q3||CID||NID j ||λ1), send a packet message M3=(Q3,NID j ,MAC3); After receiving the package message M3 and verifying the freshness and integrity of the message, the central server calculates Use the second pre-filled quantum key PFK2 to verify the digital signature ESG2 for decryption, thereby obtaining the decrypted self-identity information CID * and the real identity FID of fog server j j * , then determine equation H1(FID j ||CID)=H1(FID j * ||CID * ) is true, if true, the central server completes the identity authentication of fog server j; then the central server updates the count value seq i , using the third pre-filled quantum key PFK3 to generate a digital signature And calculate Q4 = {λ,γ1,ESG3,seq i ,t4} and MAC4=H3(Q4||CID||NID i ||γ1), send a packet message M4=(Q4,NID i ,MAC4); After receiving the packaged message M4 and verifying the freshness and integrity of the message, fog server i calculates Fog server i uses the third pre-filled quantum key PFK3 to verify the digital signature ESG3 for decryption, thereby obtaining its own decrypted true identity FID i * And the central server's identity information CID * , and then judge equation H1(FID i ||CID)=H1(FID i * ||CID * ) is true, if so, the fog server i completes the identity authentication of the central fog server, and the fog server i updates the count value seq i ; Fog server i, fog server j and central server generate the first session key simultaneously 2. A quantum key-based V2G fog server encryption communication method according to claim 1, characterized in that: After the fog server i, the fog server j and the central server negotiate a first session key, the method further includes: Fog server i uses the first session key to encrypt the vehicle's identity information and generate a vehicle encrypted message E KEK (BIO, SN, ICCID) and sent to fog server j; where SN is the vehicle's T-BOX serial number, and ICCID is the vehicle's T-BOX integrated circuit card identifier; When fog server j receives the vehicle encrypted message, it decrypts it using the first session key; The vehicle communicates with fog server i, and fog server i sends the real identity FID of fog server j j Send to vehicle.

3. A quantum key-based V2G fog server encryption communication method according to claim 2, characterized in that: The vehicle and the fog server j complete identity authentication based on the first session key and negotiate a second session key, including: Vehicle generates quantum random numbers As the second session key, the second session key is encrypted using the fourth pre-filled quantum key PFK4 to generate And generate timestamp T1, then calculate P1 = H1 (BIO | | SN | | ICCID), send message n1 = {P1, KEK V ,T1}; After receiving the message n1 and verifying the freshness of the message, the fog server j uses the fourth pre-filled quantum key PFK4 to decrypt and obtain the second session key Calculate P1 * =H1(BIO||SN||ICCID), and verify P1 * Is it equal to P1? If so, the fog server j completes the identity authentication of the vehicle, and then the fog server j sends a message n2 = {H2 (FID j ),T2}; After receiving message n2 and verifying the message freshness, the vehicle calculates z = H2 (FID j ), and determine whether z is equal to H2(FID j ), if they are equal, the vehicle’s identity authentication to fog server j is completed.

4. A quantum key-based V2G fog server encryption communication method according to any one of claims 1 to 3, characterized in that: The central server, fog server and vehicle parties all generate a timestamp when receiving a message, and verify whether the difference between the timestamp and the timestamp attached to the message exceeds the preset time difference. If so, it means that the freshness of the message is qualified.

5. A quantum key-based V2G fog server encryption communication method according to claim 4, characterized in that: When receiving a message, the central server and each fog server calculate the message authentication code according to the content of the message, and determine whether the message authentication code is equal to the message authentication code attached to the message. If so, it means that the integrity of the message is qualified.

Images