ETC safety communication method and system based on key negotiation

Abstract

The invention provides an ETC security communication method and system based on key negotiation. The method comprises the following steps: verifying an authentication credential and a negotiation result; the certificate authentication step comprises the steps that the vehicle-mounted unit or the road side unit receives an identity certificate transmitted by an opposite side, and verifies the identity certificate based on a verification certificate preset by the side; the negotiation result verification comprises the following steps: the vehicle-mounted unit or the road side unit generates a private key of the vehicle-mounted unit or the road side unit based on a random number generated by the vehicle-mounted unit or the road side unit, calculates a temporary public key based on the private key of the vehicle-mounted unit or the road side unit, and sends the temporary public key to an opposite side; obtaining a temporary public key sent by the opposite side, calculating a negotiation secret key based on the temporary public key sent by the opposite side, carrying out Hash calculation on the calculated negotiation secret key by adopting a Hash algorithm, and sending a calculated Hash value to the opposite side; and comparing the hash value received from the opposite side with the hash value calculated by the side, and judging whether the negotiation result verification is passed or not.

Description

Technical Field

[0001] The present invention relates to the field of ETC charging technology, and in particular to an ETC secure communication method and system based on key negotiation. Background Art

[0002] The ETC (Electronic Toll Collection) system is a system that exchanges wireless information and information between an on-board device installed on a vehicle and an antenna installed on the lane of a toll booth.

[0003] In the ETC toll collection system, the controller and the road side unit (RSU) are deployed on the roadside. The controller runs the program to implement the business logic of charging. The RSU is a short-range wireless communication device. The controller controls the RSU through the network to implement the ETC charging business. The on-board unit (OBU) is installed in the car and represents the identity of the car. DSRC communication is used between RSU and OBU. DSRC (Dedicated Short Range Communication) is a dedicated short-range communication technology. The current system uses a logic implementation similar to that of a radio frequency IC card. The communication between RSU and OBU does not use encryption and authentication, but payment data authentication is performed through the ESAM in the OBU. However, since the communication distance of DSRC is much longer than that of radio frequency cards, and vehicles are parked or driving outdoors, this makes the OBU easy to be operated without authorization. Summary of the invention

[0004] In view of this, an embodiment of the present invention provides an ETC secure communication method based on key negotiation to eliminate or improve one or more defects existing in the prior art.

[0005] One aspect of the present invention provides an ETC secure communication method based on key negotiation, the method is applied to the interaction between an on-board unit and a roadside unit in an ETC toll collection system, the method comprising authentication credentials and negotiation result verification;

[0006] The steps of authenticating the credentials include:

[0007] The onboard unit or the roadside unit receives the identity credential transmitted by the opposite side, and verifies the identity credential based on the verification credential preset on the local side;

[0008] The step of verifying the negotiation result includes:

[0009] The onboard unit or roadside unit generates its own private key based on the random number generated by itself, calculates a temporary public key based on its own private key, and sends the temporary public key to the opposite side;

[0010] Obtain the temporary public key sent by the other party, calculate the negotiated secret key based on the temporary public key sent by the other party, use the hash algorithm to perform hash calculation on the calculated negotiated secret key, and send the calculated hash value to the other party;

[0011] Compare the hash value received from the other side with the hash value calculated by this side to determine whether the negotiation result verification is passed.

[0012] The above scheme is adopted and applied before the actual transaction data interaction. Before the actual transaction data interaction, the scheme is provided with two rounds of verification. In the first round of verification, the identity credentials of the device are used for verification to preliminarily ensure the identity of the other party. In the second round of verification, in the verification process of either side, the scheme calculates the negotiated key through the temporary public key sent by the other party, and calculates the hash value through the negotiated key. Whether the verification is successful is determined by comparing the hash value sent by the other party with the hash value calculated by this side. Therefore, for either side of the scheme, the verification can be completed without exposing the negotiated key calculated by itself, which can improve the security of data interaction and avoid unauthorized operation.

[0013] In some embodiments of the present invention, if the verification in the authentication credential step is successful, the session key generation step is initiated.

[0014] In some embodiments of the present invention, the steps of the method also include transaction data transmission, and the step of transaction data transmission includes, the on-board unit or roadside unit determining whether the verification of the authentication credential and the negotiation result verification are both passed, and if passed, encrypting the transaction data by the negotiation key and sending the encrypted transaction data to the other side.

[0015] In some implementations of the present invention, in the step of verifying the identity credential based on the verification credential preset on this side, an SM2 signature verification algorithm is used to verify the identity credential based on the verification credential preset on this side.

[0016] In some embodiments of the present invention, in the step of the on-board unit or the roadside unit generating its own private key based on the random number generated by itself, the SM2 algorithm is used to generate its own private key based on the random number.

[0017] In some embodiments of the present invention, in the step of calculating the temporary public key based on its own private key, the SM2 algorithm is used to calculate the temporary public key using its own private key.

[0018] In some embodiments of the present invention, in the step of obtaining the temporary public key sent by the other side and calculating the negotiated key based on the temporary public key sent by the other side, the SM2 key negotiation algorithm is used to calculate the negotiated key through the temporary public keys of the other side and this side and the private key of this side.

[0019] In some embodiments of the present invention, in the step of using a hash algorithm to perform hash calculation on the calculated negotiation key and sending the calculated hash value to the other side, the hash algorithm includes an SM3 algorithm, an MD5 algorithm, a SHA-1 algorithm and a SHA-256 algorithm.

[0020] In some embodiments of the present invention, in the step of comparing the hash value received from the other side and the hash value calculated by this side to determine whether the negotiation result verification is passed, if the hash value received from the other side and the hash value calculated by this side are the same, the negotiation result verification is passed.

[0021] In some embodiments of the present invention, in the step of encrypting the transaction data by the negotiated key and sending the encrypted transaction data to the other party, a symmetric encryption algorithm is used to encrypt the transaction data based on the negotiated key.

[0022] The second aspect of the present invention also provides an ETC secure communication system based on key negotiation, the system comprising a computer device, the computer device comprising a processor and a memory, the memory storing computer instructions, the processor being used to execute the computer instructions stored in the memory, and when the computer instructions are executed by the processor, the system implements the steps implemented by the method described above.

[0023] The third aspect of the present invention also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps implemented by the aforementioned ETC secure communication method based on key negotiation.

[0024] Additional advantages, purposes, and features of the present invention will be described in part in the following description, and will become apparent to those skilled in the art after studying the following, or may be learned from the practice of the present invention. The purposes and other advantages of the present invention can be specifically pointed out and obtained in the specification and the accompanying drawings.

[0025] Those skilled in the art will appreciate that the objectives and advantages that can be achieved with the present invention are not limited to the above specific description, and the above and other objectives that can be achieved by the present invention will be more clearly understood from the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] The drawings described herein are used to provide a further understanding of the present invention, constitute a part of this application, and do not constitute a limitation of the present invention.

[0027] Figure 1 A schematic diagram of an implementation of an ETC secure communication method based on key negotiation of the present invention;

[0028] Figure 2 A schematic diagram of another implementation of the ETC secure communication method based on key negotiation of the present invention;

[0029] Figure 3 A schematic diagram of the overall architecture of the present invention;

[0030] Figure 4 It is a schematic diagram of the architecture of the authentication credential stage of the present invention;

[0031] Figure 5 Schematic diagram of the interaction between the on-board unit and the roadside unit. DETAILED DESCRIPTION

[0032] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the embodiments and the accompanying drawings. Here, the illustrative embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0033] It should also be noted that, in order to avoid obscuring the present invention due to unnecessary details, only structures and / or processing steps closely related to the solutions according to the present invention are shown in the accompanying drawings, while other details that are not closely related to the present invention are omitted.

[0034] Introduction to existing technology:

[0035] 1. Based on the symmetric key encryption communication scheme: A new set of symmetric keys is added for communication encryption. Since the RSU needs to communicate with all OBUs, the RSU needs to save the master key of the OBU. Once leaked, it will cause system risks. The key in the OBU cannot be replaced, and there is a risk of using the same key for data encryption transmission for a long time.

[0036] 2. PKI-based certificate authentication scheme: PKI-based certificate authentication is widely used in network communications. However, due to the large size of certificate files, authentication used in ETC communications will result in long communication time and a large number of interactions, and is not suitable for DSRC communication scenarios where vehicles move at high speeds.

[0037] like Figure 1 , 3 As shown in Figure 5, the present invention proposes an ETC secure communication method based on key negotiation, which is applied to the interaction between the on-board unit and the roadside unit in the ETC charging system. The method includes authentication credentials and negotiation result verification;

[0038] The steps of authenticating the credentials include:

[0039] Step S100, the vehicle-mounted unit or the roadside unit receives the identity credential transmitted by the opposite side, and verifies the identity credential based on the verification credential preset by the local side;

[0040] like Figure 4 As shown, in the specific implementation process, in the step of authenticating the credentials, after the RSU wakes up the OBU, the two parties exchange compressed identity credentials. Specifically, the RSU compresses the identity credentials using a compression algorithm and sends them to the OBU, and the OBU compresses the identity credentials and returns them to the RSU;

[0041] After receiving the identity certificate of the other party, RSU and OBU use the decompression algorithm to decompress the certificate. RSU and OBU each verify the certificate of the other party and use the public key of the verification certificate preset in the device to verify the signature information of the device certificate. If the identity certificate is legal, continue, otherwise end the session.

[0042] During the issuance phase, RSU and OBU need to pre-set verification credentials, identity credentials and their own generated private keys. The credential information format is ID, validity period, public key and signature. The verification credential is used to verify the legitimacy of the identity credential. The public key of the verification credential can be used to verify the signature of the identity credential. The identity credential represents the identity of the device and is signed by the verification credential to form a key pair with the private key in the device.

[0043] Specifically, the compression algorithm and decompression algorithm include public key compression, gzip and Huffman coding algorithm.

[0044] In the specific implementation process, OBU (On-Board Unit): vehicle-mounted unit, installed on vehicles, used to communicate with RSU, obtain traffic information, provide location services, etc. In ETC (Electronic Toll Collection System), OBU is a key device for identifying vehicles, recording traffic information, sending and receiving data, and processing transactions.

[0045] RSU (Roadside Unit): Roadside unit, installed beside the road, used to communicate with OBUs, collect traffic information, control traffic lights, etc. It is a communication device deployed along the road, capable of receiving and sending wireless signals and communicating with passing vehicles in real time.

[0046] The interaction between OBU and RSU is mainly carried out in the following two ways:

[0047] Internet of Vehicles Communications:

[0048] With the help of mobile communication networks such as 4G and 5G, communication between OBU and RSU is achieved. The on-board equipment is connected to the mobile communication network through a SIM card and communicates with the RSU through the Internet. This communication method has high speed and reliability and is suitable for long-distance communication.

[0049] Radio Frequency Communications:

[0050] OBU and RSU communicate via radio signals, independent of mobile communication networks, and can use technologies such as Bluetooth, Wi-Fi, and DSRC (Dedicated Short-Range Communications) for communication. This communication method is suitable for short-range communication and has a lower transmission rate but higher real-time performance.

[0051] The step of verifying the negotiation result includes:

[0052] Step S210, the onboard unit or roadside unit generates its own private key based on the random number generated by itself, calculates a temporary public key based on its own private key, and sends the temporary public key to the opposite side;

[0053] In a specific implementation process, in the step in which the on-board unit or the roadside unit generates its own private key based on a random number generated by itself, the random number is a 32-byte random number.

[0054] In a specific implementation process, when the vehicle is traveling, the opposite side of the vehicle-mounted unit is the roadside unit, and the opposite side of the roadside unit is the vehicle-mounted unit.

[0055] Step S220, obtaining the temporary public key sent by the opposite side, calculating the negotiated secret key based on the temporary public key sent by the opposite side, performing hash calculation on the calculated negotiated secret key using a hash algorithm, and sending the calculated hash value to the opposite side;

[0056] Step S230: compare the hash value received from the other side with the hash value calculated by the local side to determine whether the negotiation result verification is passed.

[0057] In the specific implementation process, if the hash value received by the other side is the same as the hash value calculated by this side, the negotiation result is verified.

[0058] The above scheme is adopted and applied before the actual transaction data interaction. Before the actual transaction data interaction, the scheme is provided with two rounds of verification. In the first round of verification, the identity credentials of the device are used for verification to preliminarily ensure the identity of the other party. In the second round of verification, in the verification process of either side, the scheme calculates the negotiated key through the temporary public key sent by the other party, and calculates the hash value through the negotiated key. Whether the verification is successful is determined by comparing the hash value sent by the other party with the hash value calculated by this side. Therefore, for either side of the scheme, the verification can be completed without exposing the negotiated key calculated by itself, which can improve the security of data interaction and avoid unauthorized operation.

[0059] In some embodiments of the present invention, if the verification in the authentication credential step is successful, the session key generation step is initiated.

[0060] By adopting the above scheme, the scheme sets the authentication credential step before the negotiation result verification step, so the identity credential verification is performed first, and then the negotiation result verification is performed. First, the identity of the other party is preliminarily determined to preliminarily ensure the interaction security.

[0061] like Figure 2 As shown, in some embodiments of the present invention, the steps of the method also include step S300, transaction data transmission, and the step of transaction data transmission includes, the on-board unit or roadside unit determines whether the verification of the authentication credential and the negotiation result verification are both passed, and if passed, encrypting the transaction data by the negotiation key, and sending the encrypted transaction data to the other side.

[0062] This solution first determines the identities of both parties through a two-stage verification, and calculates the negotiation key in the second stage of verification. In the subsequent data interaction process, the data can be encrypted with the negotiation key to ensure data security. Moreover, since the calculation of the negotiation key relies on the data of both parties, it can ensure that when either party of the interaction is changed, the negotiation key used for data interaction is different, further ensuring the security of data interaction.

[0063] In some implementations of the present invention, in the step of verifying the identity credential based on the verification credential preset on this side, an SM2 signature verification algorithm is used to verify the identity credential based on the verification credential preset on this side.

[0064] Specifically, the SM2 algorithm itself is a public key cryptographic algorithm standard based on elliptic curve cryptography. It is mainly used for digital signatures, key exchange and public key encryption. The SM2 algorithm can be used in the identity authentication process to confirm the user's identity by verifying the user's public key and private key pair.

[0065] In some embodiments of the present invention, in the step of the on-board unit or the roadside unit generating its own private key based on the random number generated by itself, the SM2 algorithm is used to generate its own private key based on the random number.

[0066] In some embodiments of the present invention, in the step of calculating a temporary public key based on its own private key, the temporary public key is calculated using its own private key using the SM2 key exchange algorithm.

[0067] In some embodiments of the present invention, in the step of obtaining the temporary public key sent by the other side and calculating the negotiated key based on the temporary public key sent by the other side, the SM2 key negotiation algorithm is used to calculate the negotiated key through the temporary public keys of the other side and this side and the private key of this side.

[0068] In some embodiments of the present invention, the hash algorithm is used to perform hash calculation on the calculated negotiation key, and in some embodiments of the present invention, the RSU and OBU each generate a temporary key pair, generate a 32-byte random number as a private key, and use the private key to calculate the corresponding point on the elliptic curve as a temporary public key. The private key is held by itself, and the temporary public key is sent to the other party.

[0069] In the step of sending the calculated hash value to the opposite side, the hash algorithm includes SM3 algorithm, MD5 algorithm, SHA-1 algorithm and SHA-256 algorithm.

[0070] In some embodiments of the present invention, in the step of comparing the hash value received from the other side and the hash value calculated by this side to determine whether the negotiation result verification is passed, if the hash value received from the other side and the hash value calculated by this side are the same, the negotiation result verification is passed.

[0071] In some embodiments of the present invention, in the step of encrypting the transaction data by the negotiated key and sending the encrypted transaction data to the other party, a symmetric encryption algorithm is used to encrypt the transaction data based on the negotiated key.

[0072] In the specific implementation process, symmetric encryption algorithm, also known as symmetric encryption, private key encryption or shared key encryption, is an important type of encryption algorithm in cryptography. Symmetric encryption algorithm refers to an encryption algorithm that uses the same key or mutually deducible keys for encryption and decryption; this encryption method requires the communicating parties to jointly agree on a key for encrypting and decrypting data before secure communication.

[0073] In the specific implementation process, in the symmetric encryption algorithm, the data sender processes the plaintext (original data) and the encryption key together through a special encryption algorithm, turning it into a complex encrypted ciphertext and sending it out. After receiving the ciphertext, the recipient uses the same key and the inverse algorithm of the same algorithm to decrypt the ciphertext to restore it to readable plaintext.

[0074] Common symmetric encryption algorithms include SM4, AES, DES, 3DES, Blowfish, IDEA and RC5.

[0075] Symmetric encryption algorithms are widely used in various scenarios due to their high efficiency and ease of use. In network communications, symmetric encryption algorithms are often used to ensure the security and integrity of data during transmission. For example, in network communication protocols such as SSL / TLS and IPSec, symmetric encryption algorithms are used to encrypt data. In addition, symmetric encryption algorithms also play an important role in data storage, mobile payment, financial technology, the Internet of Things and other fields.

[0076] By adopting the above scheme, the beneficial effects of this scheme include:

[0077] This solution fully considers the existing ETC system framework and technical conditions, and upgrades the existing business on the basis of ensuring that the current business is not affected, so as to improve the communication security of the ETC system;

[0078] This solution improves the security of ETC and not only strengthens the security of existing ETC toll collection services and reduces the risk of illegal intrusion, but also lays a solid foundation for ETC to expand other services. In the future, ETC-based services such as information release and vehicle identity authentication can all be based on the security authentication and communication encryption of this technical solution, providing a solid foundation for the business.

[0079] This solution uses symmetric algorithm encryption during business transmission, which does not require changing the length of business data and business processes while ensuring security. The encryption key is obtained through negotiation during the negotiation process and is one-time;

[0080] The SE module of the OBU or RSU equipment in this solution adds the function of implementing the national secret SM2 algorithm, realizing signature verification, encryption and decryption, key exchange and other functions;

[0081] This solution presets verification credentials and device credentials during the release phase, and the device credentials are signed by the verification credentials;

[0082] In this solution, RSU and OBU add identity authentication and key exchange functions before business communication;

[0083] In this solution, business data is encrypted and transmitted using the negotiated key.

[0084] An embodiment of the present invention also provides an ETC secure communication system based on key negotiation, the system comprising a computer device, the computer device comprising a processor and a memory, the memory storing computer instructions, the processor being used to execute the computer instructions stored in the memory, and when the computer instructions are executed by the processor, the system implements the steps implemented by the method described above.

[0085] The embodiment of the present invention also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the steps implemented by the aforementioned ETC secure communication method based on key negotiation are implemented. The computer-readable storage medium can be a tangible storage medium, such as a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a floppy disk, a hard disk, a removable storage disk, a CD-ROM, or any other form of storage medium known in the technical field.

[0086] It should be understood by those skilled in the art that the exemplary components, systems and methods described in conjunction with the embodiments disclosed herein can be implemented in hardware, software or a combination of the two. Whether it is performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a function card, etc. When implemented in software, the elements of the present invention are programs or code segments used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link via a data signal carried in a carrier.

[0087] It should be clear that the present invention is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present invention is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present invention.

[0088] In the present invention, features described and / or illustrated for one embodiment may be used in the same or similar manner in one or more other embodiments, and / or combined with features of other embodiments or replace features of other embodiments.

[0089] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the embodiments of the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. An ETC secure communication method based on key negotiation, characterized in that: The method is applied to the interaction between the on-board unit and the roadside unit in the ETC toll collection system, and the method includes authentication credentials and negotiation result verification; The steps of authenticating the credentials include: The onboard unit or the roadside unit receives the identity credential transmitted by the opposite side, and verifies the identity credential based on the verification credential preset on the local side; The step of verifying the negotiation result includes: The onboard unit or roadside unit generates its own private key based on the random number generated by itself, calculates a temporary public key based on its own private key, and sends the temporary public key to the opposite side; Obtain the temporary public key sent by the other party, calculate the negotiated secret key based on the temporary public key sent by the other party, use the hash algorithm to perform hash calculation on the calculated negotiated secret key, and send the calculated hash value to the other party; Compare the hash value received from the other side with the hash value calculated by this side to determine whether the negotiation result verification is passed.

2. The ETC secure communication method based on key agreement according to claim 1, characterized in that: If the verification in the authentication credential step is successful, the session key generation step begins.

3. The ETC secure communication method based on key agreement according to claim 1 or 2, characterized in that: The method also includes the steps of transaction data transmission, and the transaction data transmission step includes the vehicle-mounted unit or roadside unit determining whether the verification of the authentication credential and the negotiation result verification are both passed, and if passed, encrypting the transaction data using the negotiation key and sending the encrypted transaction data to the other side.

4. The ETC secure communication method based on key agreement according to claim 1, characterized in that: In the step of verifying the identity credential based on the verification credential preset on this side, the identity credential is verified based on the verification credential preset on this side using the SM2 signature verification algorithm.

5. The ETC secure communication method based on key negotiation according to claim 1, characterized in that: In the step in which the on-board unit or the roadside unit generates its own private key based on the random number generated by itself, the SM2 algorithm is used to generate its own private key based on the random number.

6. The ETC secure communication method based on key agreement according to claim 1, characterized in that: In the step of calculating the temporary public key based on its own private key, the SM2 key algorithm is used to calculate the temporary public key through its own private key; in the step of obtaining the temporary public key sent by the other side and calculating the negotiated key based on the temporary public key sent by the other side, the SM2 key negotiation algorithm is used to calculate the negotiated key through the temporary public keys of the other side and this side and the private key of this side.

7. The ETC secure communication method based on key agreement according to claim 1, characterized in that: In the step of using a hash algorithm to perform hash calculation on the calculated negotiation key and sending the calculated hash value to the other side, the hash algorithm includes an SM3 algorithm, an MD5 algorithm, a SHA-1 algorithm and a SHA-256 algorithm.

8. The ETC secure communication method based on key agreement according to claim 1, characterized in that: In the step of comparing the hash value received from the other side with the hash value calculated by the local side to determine whether the negotiation result verification is passed, if the hash value received from the other side and the hash value calculated by the local side are the same, the negotiation result verification is passed.

9. The ETC secure communication method based on key negotiation according to claim 3, characterized in that: In the step of encrypting the transaction data by using the negotiated key and sending the encrypted transaction data to the other party, a symmetric encryption algorithm is used to encrypt the transaction data based on the negotiated key.

10. An ETC secure communication system based on key negotiation, characterized in that: The system includes a computer device, which includes a processor and a memory. The memory stores computer instructions. The processor is used to execute the computer instructions stored in the memory. When the computer instructions are executed by the processor, the system implements the steps implemented by the method as described in any one of claims 1 to 9.

Images