Multi-party benefit protection incentive method and system for privacy protection in vehicle formation

Abstract

The invention discloses a multi-party benefit protection incentive method and system for privacy protection in a vehicle formation. A vehicle submits an initial ID to a trusted agency TA to obtain a pseudonym; the cloud service provider CSP selects a pilot vehicle PV of each road section according to the competition request information RE; the following vehicle FV encrypts its own score, and encrypts and transmits the score to the cloud service provider CSP through a public key of the cloud service provider CSP; the cloud service provider CSP issues a reward certificate and a validity period of the reward certificate to the following vehicle FV which meets the scoring review value requirement; and the TA sends the reward certificate and the validity period thereof to a reward distribution center (RDC), so that the vehicle needing reward exchange can exchange the reward by means of the related certificate. By adopting the technical scheme of the invention, strong privacy protection of the vehicle is carried out, and the enthusiasm of the piloting vehicle PV, the following vehicle FV and the Internet of Vehicles system is improved at the same time.

Description

Technical Field

[0001] The present invention belongs to the technical field of security of vehicle networking systems, and specifically relates to a multi-party interest protection incentive method and system for privacy protection in a vehicle formation. Background Art

[0002] In a vehicle formation, the team members can be divided into a pilot vehicle and a follower vehicle. With the rapid development of vehicle formation technology, the selection of the pilot vehicle in the team has attracted widespread attention. The follower vehicles follow the pilot vehicle in a specific order, and the entire team moves forward as a whole at a closer distance than driving alone, which can achieve more efficient driving, save fuel consumption and reduce the probability of accidents. However, the election of the pilot vehicle is challenging because each individual vehicle is selfish, and the benefits of the team are not equal between the pilot vehicle and the follower vehicle. The pilot vehicle needs to monitor the road conditions, collect and process this information, and issue instructions to the follower vehicle to change the driving strategy in real time. In contrast, the follower vehicle only needs to follow the instructions. Secondly, under the same conditions, the pilot vehicle will bear more wind resistance than the follower vehicle, resulting in more fuel consumption. At present, existing studies usually use the reputation value of the vehicle to evaluate the reliability of the vehicle, and use the reputation value as a standard to elect the pilot vehicle. At the same time, an incentive mechanism is designed to consider giving the pilot vehicle more reasonable rewards to stimulate vehicles with high reputation values ​​to participate in the election of the pilot vehicle. However, this method of selecting the pilot vehicle has some defects and deficiencies. It does not balance the benefits between the pilot vehicle, the following vehicle, and the entire connected vehicle system, and ignores the benefits of the following vehicle and the connected vehicle system. At present, most connected vehicle systems require expenses to operate. Ignoring the benefits of the system will increase the operating costs of the connected vehicle system. Ignoring the benefits of the following vehicle will reduce the interest of the following vehicle in submitting a trustworthy score. In addition, other studies have considered the issue of benefit balance, but these technologies have serious problems of privacy leakage or high requirements for the trusted institution TA. In order to prevent privacy leakage or malicious retaliation, the vehicle will hesitate whether to reflect the real score, and it is still impossible to implement in practical applications. Summary of the invention

[0003] The technical problem to be solved by the present invention is to provide a multi-party interest protection incentive method and system for privacy protection in a vehicle formation, which achieves strong privacy protection for vehicles under acceptable computing, communication and storage overheads while improving the enthusiasm of the three parties: the pilot vehicle, the following vehicle and the Internet of Vehicles system. While incentivizing vehicles to participate in the election of the pilot vehicle, the following vehicles can also be incentivized to submit more authentic and reliable data. The whole process of scoring information protection is also achieved through an encryption algorithm to ensure that the privacy of vehicle information is not leaked.

[0004] To achieve the above object, the present invention adopts the following technical solution: A multi-party interest protection incentive method for privacy protection in vehicle platooning, comprising: The trusted authority TA issues an initial ID to the vehicle; The vehicle obtains a pseudonym by submitting an initial ID to a trusted agency TA, where the vehicles that obtain pseudonyms include: the contesting vehicle CV and the following vehicle FV; The candidate vehicle CV submits a campaign request message RE to the cloud service provider CSP. The cloud service provider CSP selects the pilot vehicle PV for each road section through the pilot vehicle election algorithm within the specified time according to the campaign request message RE. The follower vehicle FV joins the convoy led by the lead vehicle PV; The following vehicle FV encrypts its own score using the Paillier encryption algorithm and transmits it to the cloud service provider CSP through the public key encryption of the cloud service provider CSP; the cloud service provider CSP performs request verification and score aggregation, and sends the aggregated message to the trusted agency TA; the trusted agency TA updates the score reputation values ​​of all vehicles; the cloud service provider CSP issues a reward certificate and its validity period based on the following vehicle FV that meets the score reputation value requirements; The trusted structure TA sends the reward certificate and its validity period to the reward distribution center RDC, so that the vehicles that need to redeem the rewards can redeem the rewards with the relevant certificates.

[0005] The present invention also provides a multi-party interest protection incentive system for privacy protection in vehicle formation, comprising: A first processing module is used to enable a trusted agency TA to issue an initial ID to the vehicle; The second processing module is used to enable the vehicle to obtain a pseudonym by submitting an initial ID to a trusted agency TA, wherein the vehicles that obtain the pseudonym include: a contesting vehicle CV and a following vehicle FV; The third processing module is used to make the candidate vehicle CV submit a campaign request information RE to the cloud service provider CSP. The cloud service provider CSP selects the pilot vehicle PV of each road section through the pilot vehicle election algorithm within a specified time according to the campaign request information RE. A fourth processing module is used to make the following vehicle FV join the convoy led by the pilot vehicle PV; The fifth processing module is used to enable the following vehicle FV to encrypt its own score using the Paillier encryption algorithm, and transmit it to the cloud service provider CSP through the public key encryption of the cloud service provider CSP; the cloud service provider CSP performs request verification and score aggregation, and sends the aggregated message to the trusted agency TA; the trusted agency TA updates the score reputation values ​​of all vehicles; the cloud service provider CSP issues a reward certificate and its validity period according to the following vehicle FV that meets the score reputation value requirements; The sixth processing module is used to enable the trusted structure TA to send the reward certificate and its validity period to the reward distribution center RDC, so that the vehicle that needs to redeem the reward can redeem the reward with the relevant certificate.

[0006] Compared with the prior art, the present invention has the following advantages and beneficial effects: 1. The present invention realizes strong privacy protection for vehicles while improving the enthusiasm of the pilot vehicle PV, the following vehicle FV and the Internet of Vehicles system. In the vehicle scenario, it proposes for the first time to consider the incentives of the pilot vehicle PV, the following vehicle FV and the Internet of Vehicles system. Through the present invention, not only can the vehicle be incentivized to participate in the election process of the pilot vehicle PV, but the following vehicle FV can also be incentivized to submit more authentic and reliable data. The incentive for the system is conducive to improving the flexibility of the system and increasing the funds for infrastructure construction.

[0007] 2. The present invention realizes the protection of the scoring information in the whole process through encryption algorithm, and uses the Paillier cryptographic system to encrypt the private information (scoring information, reward information, etc.), so as to ensure that any malicious opponent cannot obtain the private information of the vehicle by monitoring the channel in an open communication environment, and ensure that the privacy of vehicle information is not leaked.

[0008] 3. The present invention can not only protect the vehicle's scoring privacy, but also resist various common attacks in the Internet of Vehicles to ensure the security of communication.

[0009] 4. The present invention has an incentive effect on the pilot vehicle PV, the following vehicle FV, the vehicle that failed in the election, and the Internet of Vehicles system, can achieve robust incentives, has high practicality, and can be carried out under acceptable computing, communication and storage overheads. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0011] Figure 1 A schematic diagram of the composition of a multi-party interest protection incentive method for privacy protection in a vehicle formation provided by an embodiment of the present invention; Figure 2 The present invention is a flowchart of a method for motivating multiple parties to protect their interests. DETAILED DESCRIPTION

[0012] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0013] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0014] Embodiment 1: An embodiment of the present invention provides a multi-party interest protection incentive method for privacy protection in a vehicle formation, as shown in FIG1 , involving four entities, including a trusted agency TA, a cloud service provider CSP, a reward distribution center RDC, and a large number of vehicles.

[0015] The TA includes a clock and divides the time into equal time intervals. It is responsible for initializing encryption system parameters and generating public and private key pairs for CSP and RDC. It also generates pseudonyms and their public and private key pairs for vehicles and participates in the calculation of vehicle reputation and reward values. The CSP is equipped with a clock that is synchronized with the TA and has powerful computing and storage capabilities. It is responsible for the election of pilot vehicles and the summary of follow-up vehicle scores. The RDC is equipped with a clock that is synchronized with the TA and is responsible for the calculation and distribution of rewards. The vehicles are mobile vehicles equipped with a clock and an on-board unit OBU that are synchronized with the trusted institution TA. In the embodiment of the present invention, they are subdivided into campaign vehicles CV, pilot vehicles PV and follow-up vehicles FV: CV refers to vehicles participating in the campaign for PV; PV refers to vehicles responsible for leading the entire fleet to drive safely. After each trip, the reputation of PV will be updated, and all vehicles can voluntarily participate in the campaign for PV; FV refers to non-PV vehicles in each fleet. After each trip, FV needs to pay a certain fee and submit a score for PV. When the difference between the score submitted by the vehicle and the final score meets certain conditions, FV will receive a certain reward.

[0016] In addition, TA is considered to be fully trustworthy (i.e., able to honestly execute system instructions and fully protect the privacy of the vehicle), CSP and RDC are considered to be semi-trustworthy (also known as honest and curious, i.e., able to honestly execute system instructions but may reveal the privacy of the vehicle, for example, they may try to reveal the true identity of the vehicle from known information or follow the rating information submitted by the vehicle), assuming that most vehicles are honest (but some malicious vehicles may still launch attacks to try to destroy the system).

[0017] like Figure 2As shown, an embodiment of the present invention provides a multi-party interest protection incentive method for privacy protection in a vehicle formation, including: Step S1, the trusted institution TA generates the parameters required by the system and sets the public key and private key for itself, the cloud service provider CSP and the reward distribution center RDC; Step S2: The trusted institution TA issues an initial ID to the vehicle; Step S3: The vehicle obtains a pseudonym by submitting an initial ID to a trusted agency TA, wherein the vehicles that obtain the pseudonym include: the contesting vehicle CV and the following vehicle FV; Step S4: The candidate vehicle CV submits a campaign request message RE to the cloud service provider CSP. The cloud service provider CSP selects the pilot vehicle PV for each road section through the pilot vehicle election algorithm within a specified time according to the campaign request message RE. Step S5, the following vehicle FV joins the convoy led by the pilot vehicle PV; Step S6: The following vehicle FV encrypts its own score using the Paillier encryption algorithm, and transmits it to the cloud service provider CSP through the public key encryption of the cloud service provider CSP; the cloud service provider CSP performs request verification and score aggregation, and sends the aggregated message to the trusted agency TA; the trusted agency TA updates the score reputation values ​​of all vehicles; the cloud service provider CSP issues a reward certificate and its validity period according to the following vehicle FV that meets the score reputation value requirements; Step S7: The trusted structure TA sends the reward certificate and its validity period to the reward distribution center RDC, so that the vehicle that needs to redeem the reward can redeem the reward with the relevant certificate.

[0018] As an implementation of the embodiment of the present invention, step S1 is specifically: TA, CSP and RDC first set their respective clocks, then TA initializes the Elliptic Curve Cryptosystem (ECC) and Paillier cryptosystem, and generates the public key of the Paillier cryptosystem and private key ,in Next, TA selects four hash functions , , and TA selects a random number As a private key, generate TA public key ,in is the product of two large prime numbers, , Elliptic curve chosen for ECC An additive cyclic group consisting of all points on and a point at infinity TA selects random numbers in the same way. As private key, generate CSP public key RDC selects a random number As a private key, generate an RDC public key Finally, TA publishes the global system parameters , and the public key that publishes the CSP and the public key of RDC ,in is a given large prime number, Generator The CSP's private key The private key of RDC is sent to CSP secretly through a secure channel. Sent secretly to RDC via a secure channel.

[0019] As an implementation of the embodiment of the present invention, step S2 is specifically: When a new vehicle When registering with TA, TA assigns an initial ID to it , and synchronize its clock. TA is based on the type of vehicle. Set the initial pilot reputation value , as shown in formula (1): in, is the scaling factor used to control the range of reputation values, Indicates rounding up (the same below). In addition, TA initializes the vehicle's reputation score , the calculation of the rating reputation value is shown in formula (2): TA will vehicle , and The data is sent to the vehicle and saved in the database.

[0020] As an implementation of the embodiment of the present invention, step S3 is specifically: When the vehicle If you want to join a team, apply to become the pilot vehicle of a team on a road, or redeem rewards, you need to apply for a pseudonym from the driver. To prevent vehicles from repeatedly applying for pseudonyms from the driver, vehicles can only apply for a pseudonym from the driver once a day. After applying, there will be no restrictions on the vehicle joining the team.

[0021] Vehicle The initial ID is , Choose a number at random ,calculate . Will After receiving the message, TA first verifies If the verification is successful, then calculate .therefore, The pseudonym is ,in The timestamp for pseudonym generation. Then TA calculates , and randomly select ,calculate The public key is , and then calculate Private key , and finally TA will and Packing, forming TA will Sent to the vehicle via a secure channel .

[0022] In addition, TA queries the reputation value of the vehicle , Rating Reputation , incentive score , the vehicle's pseudonym, reputation, rating reputation, and incentive score are packaged into Sent to CSP via secure channel.

[0023] As an implementation of the embodiment of the present invention, step S4 is specifically: CSP first sets the value of the road before the election pilot vehicle , Demand for pilot vehicles Then CSP broadcasts the road pilot vehicle demand information, which is predictable and can be set in advance and sent out at the agreed time. When planning to run for the lead vehicle of a road team, Take out your own pseudonym , and select a departure location , the end point of the road Next, we introduce the expected reward ratio of the vehicle , , which means if the campaign vehicle Become the lead vehicle, and all following vehicles pay , then the fixed income of the vehicle is .Then, calculate ,in express The timestamp of when it was generated. Then, Select random number , and then calculate , generate a signature .at last, Will , , , , , , Use the CSP's public key Encrypted to form request information RE, that is, . Campaign Vehicles The election request message RE is sent to the CSP.

[0024] After receiving RE, CSP first uses Then CSP verifies whether formula (3) and formula (4) are valid, where: , Respectively represent timestamps The upper and lower bounds of represents the set of currently received campaign vehicles. Formula (3) is used and , The value of is compared to determine whether the message is expired. Formula (4) is used to determine whether the vehicle is already included in the set of candidate vehicles to prevent the vehicle from joining the election multiple times.

[0025] If formula (3) and formula (4) hold, CSP calculation ,in Next, the CSP verifies whether formula (5) holds. The CSP can verify multiple signatures in batches, as shown in formula (6).

[0026] If all the above verifications are passed, CSP will extract all the received campaign vehicles pseudonym , departure location , the end point of the road , expected reward ratio Based on the vehicle's pseudonym, the CSP sends the information to the TA Check the vehicle reputation value , incentive score , It is used to prevent the campaign vehicle from withdrawing from the campaign due to multiple campaign failures. It is cumulative and the calculation formula is shown in formula (7): in, Set by the system and is a fixed value.

[0027] Based on the vehicle's departure location , the end point of the road Information, CSP queries the ID of the corresponding road When the agreed deadline is reached, CSP generates a collection of information about each vehicle. And corresponding road information Next, CSP executes the pilot vehicle election algorithm for all verified candidate vehicles, namely, Algorithm 1.

[0028] After the pilot vehicle election is completed, the CSP sends a confirmation message to the vehicle that becomes the pilot vehicle and broadcasts the winning vehicle of this round. In addition, the CSP also pseudonym Together with its corresponding expected reward ratio Packaging, generating messages , sent to RDC, that is . RDC received After that, the pilot vehicle and its corresponding expected reward ratio are saved. Then RDC records a reward ratio table to record all online pilot vehicles and their corresponding expected reward ratios, which is convenient for the subsequent calculation of the rewards for the pilot vehicle, as shown in Table 1. RDC records all received pilot vehicles and their corresponding expected reward ratios and timestamps in .

[0029] Table 1 As an implementation of the embodiment of the present invention, step S5 is specifically: After the formation of the team, only vehicles with a reputation value greater than 0 can submit a team application to the CSP, and can join the team only after the application is approved. After joining the team, the CSP assigns a team certificate to the vehicle. ,in The queue ID encrypted with the CSP private key , in order to submit the scoring and sorting of vehicles joining the fleet Should be smaller than the previous vehicle joining the convoy , Satisfies formula (8), where After Paillier encryption , is the number used to distinguish the scores of each vehicle, in, is a random number, Satisfies formula (9): in, Indicates the maximum value of the rating reputation value. Indicates the highest score. CSP will enter the certificate and its corresponding Save in the database, Exists in the database.

[0030] Following vehicle When you need to leave the queue, you need to submit a request to the CSP in advance. After the request is approved, you can follow the vehicle. Only then can you leave the team.

[0031] As an implementation of the embodiment of the present invention, step S6 is specifically: Set the following vehicle The rating given is ,in, for An integer within the range of , where the range of scores is enforced by the vehicle’s trusted hardware TPM. Next, calculate ,in is a random number, for Then, calculate ,in, For the pseudonym of the following vehicle, is the corresponding team admission certificate, is the timestamp, is the pseudonym of the corresponding pilot vehicle. Randomly selected ,calculate , generate a signature ,therefore Generate final scoring information , For pilot vehicles 's pseudonym. Will MK Sent to CSP.

[0032] CSP receives rating information MK Afterwards, according to Query the corresponding fleet and find the team certificate in the corresponding fleet data Query the corresponding If all queries pass, CSP verifies the correctness of the enqueue certificate. Then, CSP verifies whether formula (10) and formula (11) are valid, where: , Respectively represent timestamps The upper and lower bounds of is the set of currently received enqueue certificate IDs. Formula (10) is used and , The value of is compared to determine whether the message is expired. Formula (11) is used to determine whether the vehicle has submitted rating information for this journey, which can prevent the vehicle from submitting information multiple times.

[0033] If the verification is successful, continue to MK First, CSP calculates ,in If formula (12) holds true, the message is received, otherwise it is discarded directly.

[0034] CSP can verify multiple signatures in batch verification mode according to formula (13).

[0035] After verification, CSP will join in Then CSP queries the vehicle's reputation score , then according to Paillier's homomorphic properties, first calculate formulas (14) and (15) respectively: in, , . After polymerization , After polymerization , After polymerization .

[0036] After reaching a certain threshold condition (such as time limit), CSP is calculated according to formula (16): : Next, CSP will , , Upload to TA. After TA receives the data, it decrypts it. ,get Calculate the final score of the pilot vehicle M As shown in formula (17).

[0037] TA uses formula (18) to update the pilot vehicle 's pilot reputation value.

[0038] in, is the time decay function, is the system parameter.

[0039] Next, TA calculates , TA uses formula (19) to decrypt Then use formula (20) to calculate SUM Value, CSP through SUM The value determines the difference between the vehicle's feedback score and incremental reputation value.

[0040] TA will SUM The value is returned to the CSP via a secure channel. SUM After the value is obtained, first decrypt the entry certificates of all following vehicles. , then follow Sort the information of all vehicles from small to large, and then use Algorithm 2 to calculate After the algorithm is completed, CSP verifies all Whether formula (21) or formula (22) or formula (23) is satisfied.

[0041] in, is the reward threshold, is the penalty threshold.

[0042] CSP updates the rating reputation of all vehicles according to formula (24) : in, , and Customize parameters for the system.

[0043] when When formula (21) is satisfied, it means that the score reputation value proposed by the following vehicle is close to the final score of the vehicle, so the score reputation value of the following vehicle increases, and its update formula is: , ensuring that the rating reputation value grows within the reward threshold. When formula (22) or formula (23) is satisfied, it means that the difference between the score submitted by the following vehicle and the final score exceeds the penalty threshold, so the rating reputation of the following vehicle decreases. Therefore, its update formula is: If all three formulas are not satisfied, the rating reputation of the following vehicle remains unchanged.

[0044] In addition, for vehicles that satisfy formula (21), CSP Collect statistics and send them to TA through a secure channel. TA generates Reward certificate ID, and use the private key Sign it, and finally package the certificate ID and the corresponding signature and send it to CSP. After receiving the message, CSP signs it with its own private key and returns the reward certificate to the winning vehicle. .in, For the award certificate ID, The validity period of the award certificate is The signature of the certificate by TA.

[0045] As an implementation of the embodiment of the present invention, step S7 is specifically: First, TA will follow the vehicle's relevant reward certificate and its corresponding validity period Sent to RDC. RDC saves it in the reward certificate list. RDC periodically destroys expired reward certificates. The fees paid by the following vehicles are directly counted by RDC, and RDC knows the fees paid by all the following vehicles in this queue. When RDC receives the value from TA The value of and the corresponding pilot vehicle pseudonym After the message, RDC calculates The final reward , the calculation method is shown in formula (25).

[0046] in, Indicates the fee paid by all following vehicles in this queue. Indicates the budget status of the system. If the budget is sufficient, then ,otherwise, . is a fixed system parameter. Only when the system budget is sufficient and the pilot vehicle's score reaches the score reward threshold, the pilot vehicle can get additional rewards. RDC will calculate And the corresponding pilot vehicle pseudonym The reward list is sent to TA through a secure channel, and the data of the pilot vehicle in the reward ratio table is deleted. The reward list is shown in Table 2 to facilitate TA to record the rewards of all pilot vehicles.

[0047] Table 2 After receiving the RDC message, TA first calculates the initial ID of the vehicle. The calculation formula for the initial ID is shown in formula (26).

[0048] Then, TA updates the reward value of the corresponding vehicle. , its latest reward value The calculation formula is shown in formula (27).

[0049] in, Represents the original reward value.

[0050] Furthermore, in order to reduce overhead and prevent link attacks, the reward exchange channel of the reward exchange scenario of the embodiment of the present invention is open periodically. Some time before the opening period, the vehicle needs to submit an application for redemption to the RDC. Before the opening period begins, the TA generates pseudonyms for all applied vehicles, and sends the pseudonyms and corresponding reward values ​​to the RDC to generate a temporary reward list. Then, the TA sets the reward values ​​of the reward lists corresponding to these vehicles to 0.

[0051] During the open period, vehicles apply to RDC for redemption rewards If the vehicle Need to redeem the reward as a pilot vehicle, then ,in The calculation of is similar to step S4 in the embodiment of the present invention (hereinafter the same), The value of is 1; if the vehicle Need to be redeemed as a reward for following the vehicle, then , The value of is 0, For the corresponding reward certificate; if the vehicle If both rewards are needed, then , The value is -1, where the reward for the pilot vehicle is directly linked to the vehicle identity, while the reward for the follower vehicle only requires a reward certificate.

[0052] RDC Received After that, first sign it After verification, the relevant rewards will be returned to the corresponding vehicle. , RDC sets the reward value corresponding to the pseudonym in the temporary reward list to 0; , RDC destroys the relevant reward certificate information; for , RDC sets the reward value corresponding to the pseudonym in the temporary reward list to 0 and destroys the relevant reward certificate information.

[0053] After the open period ends, RDC sends the information in the temporary reward list to TA. After TA obtains the initial IDs of all vehicles whose rewards are not set to 0, it updates their reward values ​​in its reward list.

[0054] Embodiment 2: The embodiment of the present invention also provides a multi-party interest protection incentive system for privacy protection in a vehicle formation, including: A first processing module is used to enable a trusted agency TA to issue an initial ID to the vehicle; The second processing module is used to enable the vehicle to obtain a pseudonym by submitting an initial ID to a trusted agency TA, wherein the vehicles that obtain the pseudonym include: a contesting vehicle CV and a following vehicle FV; The third processing module is used to make the candidate vehicle CV submit a campaign request information RE to the cloud service provider CSP. The cloud service provider CSP selects the pilot vehicle PV of each road section through the pilot vehicle election algorithm within a specified time according to the campaign request information RE. A fourth processing module is used to make the following vehicle FV join the convoy led by the pilot vehicle PV; The fifth processing module is used to enable the following vehicle FV to encrypt its own score using the Paillier encryption algorithm, and transmit it to the cloud service provider CSP through the public key encryption of the cloud service provider CSP; the cloud service provider CSP performs request verification and score aggregation, and sends the aggregated message to the trusted agency TA; the trusted agency TA updates the score reputation values ​​of all vehicles; the cloud service provider CSP issues a reward certificate and its validity period according to the following vehicle FV that meets the score reputation value requirements; The sixth processing module is used to enable the trusted structure TA to send the reward certificate and its validity period to the reward distribution center RDC, so that the vehicle that needs to redeem the reward can redeem the reward with the relevant certificate.

[0055] The embodiments described above are only descriptions of the preferred embodiments of the present invention and are not intended to limit the scope of the present invention. Without departing from the design spirit of the present invention, various modifications and improvements made to the technical solutions of the present invention by ordinary technicians in this field should all fall within the protection scope determined by the claims of the present invention.

Claims

1. A multi-party interest protection incentive method for privacy protection in vehicle formation, characterized in that: include: The trusted authority TA issues an initial ID to the vehicle; The vehicle obtains a pseudonym by submitting an initial ID to a trusted agency TA, where the vehicles that obtain pseudonyms include: the contesting vehicle CV and the following vehicle FV; The candidate vehicle CV submits a campaign request message RE to the cloud service provider CSP. The cloud service provider CSP selects the pilot vehicle PV for each road section through the pilot vehicle election algorithm within the specified time according to the campaign request message RE. The follower vehicle FV joins the convoy led by the lead vehicle PV; The following vehicle FV encrypts its own score using the Paillier encryption algorithm and transmits it to the cloud service provider CSP through the public key encryption of the cloud service provider CSP; the cloud service provider CSP performs request verification and score aggregation, and sends the aggregated message to the trusted agency TA; the trusted agency TA updates the score reputation values ​​of all vehicles; the cloud service provider CSP issues a reward certificate and its validity period based on the following vehicle FV that meets the score reputation value requirements; The trusted structure TA sends the reward certificate and its validity period to the reward distribution center RDC, so that the vehicles that need to redeem the rewards can redeem the rewards with the relevant certificates.

2. A multi-party interest protection incentive system for privacy protection in vehicle formation, characterized in that: include: A first processing module is used to enable a trusted agency TA to issue an initial ID to the vehicle; The second processing module is used to enable the vehicle to obtain a pseudonym by submitting an initial ID to a trusted agency TA, wherein the vehicles that obtain the pseudonym include: a contesting vehicle CV and a following vehicle FV; The third processing module is used to make the candidate vehicle CV submit a campaign request information RE to the cloud service provider CSP. The cloud service provider CSP selects the pilot vehicle PV of each road section through the pilot vehicle election algorithm within a specified time according to the campaign request information RE. A fourth processing module is used to make the following vehicle FV join the convoy led by the pilot vehicle PV; The fifth processing module is used to enable the following vehicle FV to encrypt its own score using the Paillier encryption algorithm, and transmit it to the cloud service provider CSP through the public key encryption of the cloud service provider CSP; the cloud service provider CSP performs request verification and score aggregation, and sends the aggregated message to the trusted agency TA; the trusted agency TA updates the score reputation values ​​of all vehicles; the cloud service provider CSP issues a reward certificate and its validity period according to the following vehicle FV that meets the score reputation value requirements; The sixth processing module is used to enable the trusted structure TA to send the reward certificate and its validity period to the reward distribution center RDC, so that the vehicle that needs to redeem the reward can redeem the reward with the relevant certificate.

Images