A batch authorized vehicle network data security sharing method and system

Abstract

The present invention relates to the field of vehicle networking communication technology, and discloses a batch-authorized vehicle networking data security sharing method and system. The method comprises: the sending vehicle encrypts the shared data using a quantum symmetric key and uploads it to a cloud server and an edge proxy server; after receiving an authorization request from the requesting vehicle to obtain specific service data, the edge proxy server sends the pseudonym information of the requesting vehicle to the sending vehicle, and the sending vehicle generates a batch authorization code based on the pseudonym information using a Lagrange interpolation algorithm and sends it to the edge proxy server, and then forwards it to the requesting vehicle; the requesting vehicle obtains the encrypted shared data in the cloud server according to the encrypted data index, calculates the quantum symmetric key according to the batch authorization code, and after verifying that the quantum symmetric key is correct, uses the quantum symmetric key to decrypt the encrypted shared data to obtain the shared data. The present invention can achieve batch authorization that takes into account both efficiency and security in vehicle networking communication.

Description

Technical Field

[0001] The present invention relates to the field of vehicle networking communication technology, and in particular to a batch-authorized vehicle networking data security sharing method and system. Background Art

[0002] Vehicle-to-vehicle networks (VANETs) are a network technology that interconnects vehicles, roadside infrastructure, and mobile devices. It plays a vital role in intelligent transportation systems (ITS). VANETs involve frequent data sharing among multiple parties such as vehicles, traffic management, and service providers. One-by-one authorization is inefficient and difficult to manage. Batch authorization improves authorization efficiency and system scalability by granting data access rights to multiple entities at one time, ensuring the smoothness of real-time data exchange. In addition, the dynamic and complex nature of VANETs requires simplified authorization management. Batch authorization can provide unified authorization rules, ensure policy consistency, and reduce human errors. Therefore, through batch authorization, the VANET system can effectively cope with complex authorization scenarios and improve overall efficiency and security.

[0003] Existing batch authorization solutions mainly include attribute-based access control, blockchain technology, and proxy re-encryption technology. Attribute-based access control dynamically sets access rights according to the attributes of users, resources, and environments. It is suitable for complex scenarios in the Internet of Vehicles and has the advantages of flexibility and fine-grained control, but its management complexity is relatively high, especially in large-scale systems. Blockchain technology manages authorization in a decentralized manner to ensure that authorization records are transparent and cannot be tampered with. It is suitable for cross-organizational data sharing, but scalability and performance face challenges in the Internet of Vehicles, especially in application scenarios that require high throughput and low latency. Proxy re-encryption technology allows encrypted data to be re-encrypted through a proxy to achieve secure batch data sharing and protect sensitive information from being directly exposed. It is suitable for scenarios with high security requirements. However, this technology relies on a secure proxy party, and the encryption and decryption process is complex, which may increase computing overhead. Therefore, it needs to be solved urgently. Summary of the invention

[0004] In order to solve the technical problem that the existing batch authorization scheme for sharing data in Internet of Vehicles is difficult to achieve both efficiency and security, the present invention provides a batch authorized Internet of Vehicles data security sharing method and system.

[0005] To achieve the above object, the present invention provides the following technical solutions:

[0006] The present invention discloses a batch authorized vehicle networking data security sharing method, comprising:

[0007] Data encryption and upload stage: The sending vehicle uses the quantum symmetric key to encrypt the shared data, obtains the encrypted shared data and uploads it to the cloud server, and uploads the metadata containing the shared data to the edge proxy server for storage.

[0008] Batch authorization stage: After receiving the authorization request from the requesting vehicle to obtain specific service data, the edge proxy server determines the sending vehicle by querying the locally stored metadata and sends the pseudonym information of the requesting vehicle to the sending vehicle; the sending vehicle generates a batch authorization code based on the pseudonym information of the requesting vehicle using a polynomial interpolation algorithm and sends the batch authorization code to the edge proxy server.

[0009] Authorization conversion phase: The edge proxy server sends an authorization message containing a batch authorization code and encrypted data index to the requesting vehicle.

[0010] Data decryption phase: The requesting vehicle obtains the encrypted shared data in the cloud server according to the encrypted data index, calculates the quantum symmetric key according to the batch authorization code, and after verifying that the quantum symmetric key is correct, uses the quantum symmetric key to decrypt the encrypted shared data to obtain the shared data.

[0011] As a further improvement of the above solution, before the data encryption and uploading stage, the method further includes:

[0012] Initialization phase: The trusted institution selects an asymmetric encryption algorithm and decryption algorithm to generate its own public and private key pair. , and select four one-way collision-free hash functions , , , , and then output the global public parameters ;in, for Factorial cyclic group The generator of .

[0013] As a further improvement of the above solution, before the data encryption and uploading stage, the method further includes:

[0014] Registration phase: The edge proxy server registers, including the following specific processes:

[0015] The edge proxy server sends a registration request to the trusted agency, and the trusted agency generates the unique identity information of the edge proxy server. .

[0016] Trusted institutions generate true random numbers , using asymmetric encryption algorithms to generate pseudonymous information for edge proxy servers ;in, , Generates an identity function for edge proxy servers; , is a random number generation function; , represents an asymmetric encryption function using · as the key; Encryption keys for trusted institutions; For the connector.

[0017] The trusted institution selects a public-private key pair for the edge proxy server , and then sends the information to the edge proxy server .

[0018] As a further improvement of the above solution, during the registration phase, each vehicle is also registered, including the following specific processes:

[0019] Each vehicle sends a registration request to a trusted agency, which generates a unique identity for the vehicle. ;

[0020] Trusted institutions generate true random numbers , using an asymmetric encryption algorithm to generate pseudonym information for each vehicle ;in, , Generate a function for the identity of the vehicle; ; .

[0021] Each vehicle sends a registration request to the edge proxy server to obtain the pseudonym information of the edge proxy server and the public key , and then the vehicle calculates the ciphertext , and the ciphertext Sent to the edge proxy server.

[0022] Edge proxy server ciphertext Decrypt and get the vehicle's pseudonym information , and add the pseudonym information of the vehicle to the registry of the edge proxy server, which can be synchronized to the system composed of all edge proxy servers and trusted institutions; Represents an asymmetric decryption function using · as the key.

[0023] The edge proxy server distributes the public-private key pair of the vehicle, the vehicle stores the public-private key pair, and the edge proxy server stores the public key of the corresponding vehicle.

[0024] As a further improvement of the above solution, for the sending vehicle i, it performs the following specific process in the data encryption and uploading stage:

[0025] Generate true random numbers And get the current time , calculate the quantum symmetric key ;in, is the pseudonym information of vehicle i.

[0026] Generate true random numbers , calculate the temporary authorization code .

[0027] Using quantum symmetric encryption algorithm to share data Encrypt to obtain encrypted shared data .

[0028] Will Upload to the cloud server to obtain the encrypted data index .

[0029] calculate And get the current time ,calculate and , and upload metadata to the edge proxy server ;in, ; ; ; is the XOR symbol; Indicates the service tag of the metadata uploaded by vehicle i this time. The data receiver can locate specific types of data through the service tag; Representation metadata Serial number; .

[0030] As a further improvement of the above solution, it is defined that the specific service data that multiple requesting vehicles need to obtain is shared by vehicle i, and the batch authorization stage includes the following specific processes:

[0031] when n When a requesting vehicle needs to obtain specific service data, it sends a query to the edge proxy server and requests authorization; n ≥2.

[0032] The edge proxy server queries the locally stored metadata After the data is found, Query the corresponding metadata , and determine the data uploader, i.e., vehicle i; then the edge proxy server sends the pseudonym information of all requesting vehicle j Sent to vehicle i through an encrypted channel.

[0033] Vehicle i receives all pseudonym information of requesting vehicle j. , its own temporary authorization code and the selected random number and , calculate and , and calculate the Lagrange interpolation polynomial: ;

[0034] In the formula, is the jth Lagrangian basis function, ;when hour, , and the Lagrange interpolation polynomial At each data point Take , so that the polynomial passes through n The known data points are , find the coefficients in the polynomial .

[0035] Vehicle iCalculation Batch Authorization Code And sent to the edge proxy server; , , .

[0036] As a further improvement of the above solution, the authorization conversion stage includes the following specific processes:

[0037] After receiving the batch authorization code sent by vehicle i, the edge proxy server retrieves the local metadata , and calculate separately , , ;in, is the public key of vehicle j.

[0038] The edge proxy server will authorize the message Sent to vehicle j; where, .

[0039] As a further improvement of the above solution, for the requesting vehicle j, it performs the following specific process in the data decryption stage:

[0040] According to the authorization message Encrypted data index in Get encrypted shared data in the cloud server , and calculate .

[0041] calculate and ,thereby , calculate the temporary authorization code .

[0042] Using the private key of vehicle j Authorization message In Decrypt to obtain the quantum symmetric key The decryption process is .

[0043] Judgement equation Is it true? If the equation is true, it means the quantum symmetric key Correct; if the equation does not hold or the temporary authorization code , then it represents the quantum symmetric key mistake.

[0044] Using verified quantum symmetric keys Decrypt to get shared data .

[0045] As a further improvement of the above scheme, true random number , True Random Numbers , True Random Numbers , True Random Numbers All use quantum random numbers.

[0046] The present invention also discloses a batch-authorized Internet of Vehicles data security sharing system, including a trusted organization, a cloud server, an edge proxy server and multiple vehicles, all of which are divided into data senders and data receiving groups. The sharing system applies the above-mentioned batch-authorized Internet of Vehicles data security sharing method, thereby enabling the data receiving group to receive shared data from the data sender.

[0047] Compared with the prior art, the present invention has the following beneficial effects:

[0048] 1. The batch-authorized Internet of Vehicles data security sharing method disclosed in the present invention, on the one hand, uses a polynomial interpolation algorithm (such as a Lagrange interpolation algorithm) to innovatively solve the cumbersome authorization problem of the data sharing solution and improve the efficiency of data sharing, realize batch authorization and hide the identity information of other recipients during data sharing, so as to better protect the privacy of the recipient group; on the other hand, compared with the traditional data sharing system based on asymmetric encryption, this solution adopts a data sharing system based on a quantum symmetric encryption algorithm, which increases the difficulty for third parties to crack information and greatly improves the efficiency and security of data sharing. Finally, the solution also uses edge computing technology to improve the computing efficiency in the data sharing process, thereby further improving the efficiency of data sharing.

[0049] 2. The efficient and secure data sharing solution in the Internet of Vehicles scenario of the present invention can optimize service quality and enhance travel experience. On the one hand, while providing high-quality services to drivers and passengers, it ensures that the privacy data of relevant personnel is not leaked; on the other hand, the use of quantum symmetric encryption algorithms and batch authorization technology provides guarantees for the efficient implementation of data sharing. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 This is an architectural diagram of a secure sharing solution for Internet of Vehicles data with batch authorization in an embodiment of the present invention.

[0051] Figure 2 This is an information interaction diagram of the registration phase in an embodiment of the present invention.

[0052] Figure 3 This is an information interaction diagram for the data encryption and upload phase in an embodiment of the present invention.

[0053] Figure 4 This is an information interaction diagram of the batch authorization stage and the authorization conversion stage in an embodiment of the present invention.

[0054] Figure 5 Information interaction diagram of the data decryption stage in an embodiment of the present invention. DETAILED DESCRIPTION

[0055] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0056] See also Figure 1 This embodiment provides a batch-authorized Internet of Vehicles data security sharing system, including a trusted organization, a cloud server, an edge proxy server and multiple vehicles, all of which are divided into data senders and data receiving groups. The sharing system applies a batch-authorized Internet of Vehicles data security sharing method, so that the data receiving group receives the shared data from the data sender.

[0057] Trusted institution: It is a third-party entity trusted by all participants in the system. Its main responsibility is to help manage and maintain the security and integrity of the system. In this system, the trusted institution is mainly responsible for system initialization, setting security parameters, distributing keys to edge proxy servers and generating node information NID, and generating pseudonymous PVID for each vehicle.

[0058] Cloud server: As a semi-trusted organization, it is mainly responsible for storing the encrypted data uploaded by the vehicle and generating a storage index for the encrypted data. The vehicle can obtain the encrypted data based on the index.

[0059] Edge Proxy Server (EPN): It combines the advantages of edge computing and proxy servers, and provides efficient, low-latency and secure services by processing and managing data at the edge of the network. It is mainly responsible for registering the vehicle information running in the service area into the registry List and storing the metadata MD uploaded by the data sender. On the other hand, it is responsible for converting the authorized ciphertext and encrypting it and sending it to the information receiving group.

[0060] Data sender: Mainly serves as the sender of data broadcast sharing. It is mainly responsible for encrypting the data message to be shared and uploading it to the cloud server for storage. It generates a temporary authorization code in advance for this data sharing and sends relevant information such as the quantum key to the corresponding edge proxy server. When receiving the corresponding data authorization request message, it generates a batch authorization code based on the vehicle pseudonym information in the request message using the Lagrange interpolation formula and sends the authorization ciphertext to the corresponding edge proxy server.

[0061] Data receiving group: This group is mainly determined by the edge proxy server. When a vehicle wants to obtain a certain type of service data, it will send a data request to the nearest edge proxy server. When the edge proxy server finds the relevant data in the local metadata, it will send a data authorization request to the corresponding vehicle. Considering that there are more than one vehicle that wants to obtain a certain type of service data, the edge proxy server will receive many data authorization requests. All vehicles that issue these data authorization requests are defined as the data receiving group.

[0062] The batch-authorized Internet of Vehicles data security sharing method of the present invention includes six stages: an initialization stage, a registration stage, a data encryption and upload stage, a batch authorization stage, an authorization conversion stage, and a data decryption stage.

[0063] 1. Initialization phase

[0064] The trusted institution selects the appropriate asymmetric encryption and decryption algorithms based on the input security parameters and generates its own public and private key pairs. , and select four one-way collision-free hash functions , , , , and then output the global public parameters ;in, for Factorial cyclic group The generator of .

[0065] It should be noted that symmetric encryption uses the same key to encrypt and decrypt data. This means that both the sender and the receiver need to share the same key to protect the confidentiality of the information. Since the encryption and decryption process uses the same key, symmetric encryption is fast and suitable for processing large amounts of data. However, key management is a challenge, especially when keys need to be distributed securely.

[0066] In contrast, asymmetric encryption uses a pair of keys: a public key and a private key. The public key is used to encrypt data, while the private key is used to decrypt data. The public key can be made public and anyone can use it to encrypt information, but only those with the corresponding private key can decrypt that information. Asymmetric encryption improves security because even if the public key is made public, the data remains secure.

[0067] 2. Registration Phase

[0068] like Figure 2 As shown, the registration phase includes the registration of the edge proxy server and the vehicle.

[0069] 1. Edge proxy server registration, which includes steps S2a1 to S2a3.

[0070] S2a1. The edge proxy server sends a registration request to the trusted institution, and the trusted institution generates the unique identity information of the edge proxy server .

[0071] S2a2. Trusted institutions use quantum random number generators to generate true random numbers , using asymmetric encryption algorithms to generate pseudonymous information for edge proxy servers ;in, , Generates an identity function for edge proxy servers; , is a random number generation function; , represents an asymmetric encryption function using · as the key; Encryption keys for trusted institutions; For the connector.

[0072] S2a3. The trusted institution selects a public-private key pair for the edge proxy server , and then sends the information to the edge proxy server .

[0073] 2. Vehicle registration, which includes steps S2b1 to S2b5.

[0074] S2b1. Each vehicle sends a registration request to a trusted institution, and the trusted institution generates a unique identity information for the vehicle. .

[0075] S2b2. Trusted institutions use quantum random number generators to generate true random numbers , using an asymmetric encryption algorithm to generate pseudonym information for each vehicle ;in, , Generate a function for the identity of the vehicle; ; .

[0076] S2b3. Each vehicle sends a registration request to the edge proxy server to obtain the pseudonym information of the edge proxy server and the public key , and then the vehicle calculates the ciphertext , and the ciphertext Sent to the edge proxy server.

[0077] S2b4. Edge proxy server ciphertext Decrypt and get the vehicle's pseudonym information , and add the pseudonym information of the vehicle to the registry of the edge proxy server, which can be synchronized to the system composed of all edge proxy servers and trusted institutions; Represents an asymmetric decryption function using · as the key.

[0078] S2b5. The edge proxy server distributes the public-private key pair of the vehicle, the vehicle stores the public-private key pair, and the edge proxy server stores the public key of the corresponding vehicle.

[0079] 3. Data encryption and upload stage

[0080] like Figure 3 As shown, the sending vehicle uses the quantum symmetric key to encrypt the shared data, obtains the encrypted shared data and uploads it to the cloud server, and uploads the metadata containing the shared data to the edge proxy server for storage.

[0081] The data encryption and uploading stage specifically includes steps S31 to S35.

[0082] S31. The sending vehicle i generates a true random number using the on-board quantum random number generator And get the current time , calculate the quantum symmetric key ;in, is the pseudonym information of vehicle i.

[0083] S32. Vehicle i generates true random numbers using the on-board quantum random number generator , calculate the temporary authorization code .

[0084] S33. Vehicle i uses quantum symmetric encryption algorithm to share data Encrypt to obtain encrypted shared data .

[0085] S34. Vehicle i will Upload to the cloud server to obtain the encrypted data index .

[0086] S35. Vehicle i calculation And get the current time ,calculate and , and upload metadata to the edge proxy server ;in,

[0087] ; ; ; is the XOR symbol; Indicates the service tag of the metadata uploaded by vehicle i this time. The data receiver can locate specific types of data through the service tag; Representation metadata Serial number for easy retrieval; .

[0088] It should be noted that there can be multiple sending vehicles, that is, each vehicle in the system can be used as a data sender to upload the sharable data to the server. In this article, i is used to refer to any sending vehicle. There are multiple receiving vehicles, and j is used to refer to any receiving vehicle. The receiving vehicle does not know in advance which sending vehicle the required data comes from.

[0089] IV. Bulk Authorization Phase

[0090] like Figure 4 As shown, after receiving the authorization request from the requesting vehicle to obtain specific service data, the edge proxy server determines the sending vehicle by querying the locally stored metadata, and sends the pseudonym information of the requesting vehicle to the sending vehicle; the sending vehicle generates a batch authorization code based on the pseudonym information of the requesting vehicle using a polynomial interpolation algorithm, and sends the batch authorization code to the edge proxy server.

[0091] In this embodiment, the polynomial interpolation algorithm may adopt the Lagrange interpolation algorithm.

[0092] The batch authorization stage specifically includes steps S41 to S44.

[0093] S41. When nWhen a requesting vehicle needs to obtain specific service data, it sends a query to the edge proxy server and requests authorization; n ≥2.

[0094] S42. The edge proxy server queries the locally stored metadata After the data is found, Query the corresponding metadata , and determine the data uploader, i.e., vehicle i; then the edge proxy server sends the pseudonym information of all requesting vehicle j Sent to vehicle i through an encrypted channel.

[0095] S43. Vehicle i receives all pseudonym information of requesting vehicle j , its own temporary authorization code and the selected random number and , calculate and , and calculate the Lagrange interpolation polynomial: ;

[0096] In the formula, is the jth Lagrangian basis function, ;when hour, , and the Lagrange interpolation polynomial At each data point Take , so that the polynomial passes through n The known data points are , find the coefficients in the polynomial .

[0097] In some embodiments, in addition to the Lagrange interpolation algorithm, there are other polynomial interpolation algorithms, such as Newton interpolation and Hermite interpolation.

[0098] S44. Vehicle i calculation batch authorization code And sent to the edge proxy server; , , .

[0099] In information systems, authorization refers to the right given to users to access resources. Traditional authorization methods are usually long-term, but in some cases, only short-term permissions are required. Temporary authorization is such a permission management mechanism that allows users to obtain permission to access resources or perform specific operations for a limited period of time. This mechanism facilitates users to obtain necessary access rights in specific scenarios while ensuring security and flexibility. In this invention, the true random number generated by the quantum random generator is combined with the vehicle pseudonym. PVID A temporary authorization code is jointly generated. The temporary authorization code can only be used once, and a new temporary authorization code will be generated each time data is shared. This design ensures that the privacy data of the data sender will not be easily leaked. On the other hand, the present invention takes into account the data broadcasting scenario, and multiple data recipients need to be authorized, so batch authorization is required. Batch authorization generally refers to authorizing multiple projects, users or devices at one time so that they can access certain specific resources or services. The present invention uses the Lagrange interpolation algorithm to construct a Lagrange interpolation formula based on the pseudonym of the data recipient and the temporary authorization code generated by the data sender to achieve batch authorization. Lagrange interpolation is a classic polynomial interpolation method used to find a polynomial through a set of known data points so that the polynomial passes through these points accurately.

[0100] 5. Authorization Conversion Phase

[0101] The edge proxy server sends an authorization message containing a batch authorization code and an encrypted data index to the requesting vehicle.

[0102] The authorization conversion stage specifically includes steps S51-S52.

[0103] S51. After receiving the batch authorization code sent by vehicle i, the edge proxy server retrieves the local metadata , and calculate separately , , ;in, is the public key of vehicle j.

[0104] S52. The edge proxy server sends the authorization message Sent to vehicle j; where, .

[0105] 6. Data Decryption Phase

[0106] like Figure 5 As shown, the requesting vehicle obtains the encrypted shared data in the cloud server according to the encrypted data index, calculates the quantum symmetric key according to the batch authorization code, and after verifying that the quantum symmetric key is correct, uses the quantum symmetric key to decrypt the encrypted shared data to obtain the shared data.

[0107] The data decryption stage specifically includes steps S61 to S65.

[0108] S61. The requesting vehicle j receives the authorization message Encrypted data index in Get encrypted shared data in the cloud server , and calculate .

[0109] S62. Calculation of requesting vehicle j and ,thereby , calculate the temporary authorization code .

[0110] S63. The requesting vehicle j uses its own private key Authorization message In Decrypt to obtain the quantum symmetric key The decryption process is .

[0111] S64. Judge the equation Is it true? If the equation is true, it means the quantum symmetric key Correct; if the equation does not hold or the temporary authorization code , then it represents the quantum symmetric key mistake.

[0112] S65. Using verified quantum symmetric keys Decrypt to get shared data .

[0113] In summary, the present invention proposes a batch-authorized secure sharing scheme for Internet of Vehicles data based on the Lagrange interpolation algorithm. On the one hand, the Lagrange interpolation algorithm is used to achieve batch authorization and hide the identity information of other recipients during data sharing, so as to better protect the privacy of the recipient group. On the other hand, compared with the traditional data sharing system based on asymmetric encryption, this scheme adopts a data sharing system based on quantum symmetric encryption algorithm, which greatly improves the efficiency and security of data sharing. Finally, the scheme also uses edge computing technology to improve the efficiency of the system.

[0114] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can make equivalent replacements or changes according to the technical scheme and inventive concept of the present invention within the technical scope disclosed by the present invention, which should be covered by the protection scope of the present invention.

Claims

1. A batch authorized vehicle network data security sharing method, characterized in that: include: Data encryption and upload stage: The sending vehicle uses the quantum symmetric key to encrypt the shared data, obtains the encrypted shared data and uploads it to the cloud server, and uploads the metadata containing the shared data to the edge proxy server for storage; Batch authorization stage: After receiving the authorization request from the requesting vehicle to obtain specific service data, the edge proxy server determines the sending vehicle by querying the locally stored metadata and sends the pseudonym information of the requesting vehicle to the sending vehicle; The sending vehicle generates a batch authorization code using a polynomial interpolation algorithm based on the pseudonym information of the requesting vehicle, and sends the batch authorization code to the edge proxy server; Authorization conversion phase: The edge proxy server sends an authorization message containing a batch authorization code and an encrypted data index to the requesting vehicle; Data decryption phase: The requesting vehicle obtains the encrypted shared data in the cloud server according to the encrypted data index, calculates the quantum symmetric key according to the batch authorization code, and after verifying that the quantum symmetric key is correct, uses the quantum symmetric key to decrypt the encrypted shared data to obtain the shared data.

2. A method for securely sharing Internet of Vehicles data with batch authorization according to claim 1, characterized in that: Before the data encryption and uploading stage, the method further includes: Initialization phase: The trusted institution selects an asymmetric encryption algorithm and decryption algorithm to generate its own public and private key pair. , and select four one-way collision-free hash functions , , , , and then output the global public parameters ;in, for Factorial cyclic group The generator of .

3. A method for secure sharing of Internet of Vehicles data with batch authorization according to claim 2, characterized in that: Before the data encryption and uploading stage, the method further includes: Registration phase: The edge proxy server registers, including the following specific processes: The edge proxy server sends a registration request to the trusted agency, and the trusted agency generates the unique identity information of the edge proxy server. ; Trusted institutions generate true random numbers , using asymmetric encryption algorithms to generate pseudonymous information for edge proxy servers ;in, , Generates an identity function for edge proxy servers; , is a random number generation function; , represents an asymmetric encryption function using · as the key; Encryption keys for trusted institutions; is a connector; The trusted institution selects a public-private key pair for the edge proxy server , and then sends the information to the edge proxy server .

4. A method for securely sharing Internet of Vehicles data with batch authorization according to claim 3, characterized in that: During the registration phase, each vehicle is also registered, including the following specific processes: Each vehicle sends a registration request to a trusted agency, which generates a unique identity for the vehicle. ; Trusted institutions generate true random numbers , using an asymmetric encryption algorithm to generate pseudonym information for each vehicle ;in, , Generate a function for the identity of the vehicle; ; ; Each vehicle sends a registration request to the edge proxy server to obtain the pseudonym information of the edge proxy server and the public key , and then the vehicle calculates the ciphertext , and the ciphertext Send to edge proxy server; Edge proxy server ciphertext Decrypt and get the vehicle's pseudonym information , and add the pseudonym information of the vehicle to the registry of the edge proxy server, which can be synchronized to the system composed of all edge proxy servers and trusted institutions; represents an asymmetric decryption function using · as the key; The edge proxy server distributes the public-private key pair of the vehicle, the vehicle stores the public-private key pair, and the edge proxy server stores the public key of the corresponding vehicle.

5. A method for secure sharing of Internet of Vehicles data with batch authorization according to claim 4, characterized in that: For the sender vehicle i, it performs the following specific processes during the data encryption and uploading phase: Generate true random numbers And get the current time , calculate the quantum symmetric key ;in, is the pseudonym information of vehicle i; Generate true random numbers , calculate the temporary authorization code ; Using quantum symmetric encryption algorithm to share data Encrypt to obtain encrypted shared data ; Will Upload to the cloud server to obtain the encrypted data index ; calculate And get the current time ,calculate and , and upload metadata to the edge proxy server ;in, ; ; ; is the XOR symbol; Indicates the service tag of the metadata uploaded by vehicle i this time. The data receiver can locate specific types of data through the service tag; Representation metadata Serial number; .

6. A method for secure sharing of Internet of Vehicles data with batch authorization according to claim 5, characterized in that: It is defined that the specific service data that multiple requesting vehicles need to obtain is shared by vehicle i, and the batch authorization stage includes the following specific processes: when n When a requesting vehicle needs to obtain specific service data, it sends a query to the edge proxy server and requests authorization; n ≥2; The edge proxy server queries the locally stored metadata After the data is found, Query the corresponding metadata , and determine the data uploader, i.e., vehicle i; The edge proxy server then sends the pseudonym information of all requesting vehicles j to Sent to vehicle i through an encrypted channel; Vehicle i receives all pseudonym information of requesting vehicle j. , its own temporary authorization code and the selected random number and , calculate and , and calculate the Lagrange interpolation polynomial: ; In the formula, is the jth Lagrangian basis function, ;when hour, , and the Lagrange interpolation polynomial At each data point Take , so that the polynomial passes through n The known data points are , find the coefficients in the polynomial ; Vehicle iCalculation Batch Authorization Code , and sent to the edge proxy server; among them, , , .

7. A method for secure sharing of Internet of Vehicles data with batch authorization according to claim 6, characterized in that: The authorization conversion phase includes the following specific processes: After receiving the batch authorization code sent by vehicle i, the edge proxy server retrieves the local metadata , and calculate , , ;in, is the public key of vehicle j; The edge proxy server will authorize the message Sent to vehicle j; where, .

8. A method for securely sharing Internet of Vehicles data with batch authorization according to claim 7, characterized in that: For the requesting vehicle j, it performs the following specific process in the data decryption stage: According to the authorization message Encrypted data index in Get encrypted shared data in the cloud server , and calculate ; calculate and ,thereby , calculate the temporary authorization code ; Using the private key of vehicle j Authorization message In Decrypt to obtain the quantum symmetric key The decryption process is ; Judgement equation Is it true? If the equation is true, it means the quantum symmetric key Correct; if the equation does not hold or the temporary authorization code , then it represents the quantum symmetric key mistake; Using verified quantum symmetric keys Decrypt to get shared data .

9. A method for secure sharing of Internet of Vehicles data with batch authorization according to any one of claims 5 to 8, characterized in that: True random numbers , True Random Numbers , True Random Numbers , True Random Numbers All use quantum random numbers.

10. A batch-authorized Internet of Vehicles data security sharing system, characterized in that: It includes a trusted organization, a cloud server, an edge proxy server and multiple vehicles. All vehicles are divided into data senders and data receiving groups. The sharing system applies a batch-authorized vehicle network data security sharing method as described in any one of claims 1 to 8, so that the data receiving group receives the shared data from the data sender.

Images