Internet of vehicles data controlled sharing method and system

Abstract

The invention relates to the technical field of Internet of Vehicles communication, and discloses an Internet of Vehicles data controlled sharing method and system. The method comprises a data uploading stage: a data owner encrypts a data plaintext into a ciphertext by using a quantum session key, and uploads the ciphertext to a cloud server; the quantum session key is composed of a quantum key generated by a data owner and a quantum key distributed by a cloud server; identity authentication is also carried out when the data owning party carries out data interaction with the cloud server. And an authorized access stage: the data uploader obtains public key information from the block chain based on the pseudonym information of the data access party, constructs an authorization message containing a service data ciphertext and broadcasts the authorization message to the data access party and the cloud server. And a data decryption stage: the data access party calculates a temporary authorization code according to the authorization message, and recovers the quantum session key by using the temporary authorization code so as to decrypt the service data ciphertext. According to the invention, rapid sharing of the Internet of Vehicles data among a plurality of receiving entities can be realized, and the privacy of the data is protected.

Description

Technical Field

[0001] The present invention relates to the field of vehicle networking communication technology, and in particular to a method and system for controlled sharing of vehicle networking data. Background Art

[0002] As the functions of connected cars become more and more complex, the amount and type of data they generate during driving are also increasing. Sharing data between connected vehicles can improve users' driving experience and reduce traffic pressure. However, the leakage of user privacy information caused by data sharing may harm the interests and safety of vehicle users. At the same time, since the quality of data collected by vehicles varies, high-quality data sharing means that users get more reliable services, while low-quality data will reduce service reliability, reduce driving experience, and even cause traffic accidents.

[0003] At present, the Internet of Vehicles system uses sensors and interconnected devices to transmit key information and provide cloud servers for connected vehicles. In order to protect the privacy of Internet of Vehicles users, the information collected by sensors needs to be encrypted before uploading to the cloud. However, although the existing Internet of Vehicles data encryption schemes have achieved data confidentiality and authenticity, they have not taken into account data sharing in multi-receiver scenarios, such as data sharing between various devices in V2X. Moreover, in these schemes, the session keys between communication entities are generated through negotiation or issuance by the key center, facing problems such as key escrow and key leakage attacks. At the same time, most of these schemes use proxy re-encryption technology based on bilinear pairings to achieve secure sharing of vehicle data. However, the high computational complexity of bilinear pairing operations will lead to high latency, which is difficult to meet the needs of rapid response of cloud services in intelligent transportation systems, and therefore needs to be solved urgently. Summary of the invention

[0004] In order to solve the technical problems existing in the prior art, the present invention provides a method and system for controlled sharing of Internet of Vehicles data, which can realize rapid sharing of Internet of Vehicles data among multiple receiving entities and protect the privacy of the data.

[0005] To achieve the above object, the present invention provides the following technical solutions: The present invention discloses a method for controlled sharing of vehicle network data, comprising: Data upload stage: The data owner uses the quantum session key to encrypt the data plaintext into ciphertext, and uploads the ciphertext to the cloud server; wherein the quantum session key is formed by the quantum key generated by the quantum random number generator of the data owner and the pre-injected quantum key; the data owner also performs identity authentication when interacting with the cloud server.

[0006] Authorized access phase: When the data access party needs to obtain service data, the cloud server queries the corresponding data uploader and informs the data uploader of the data access party's pseudonym information; the data uploader obtains the data access party's public key information from the blockchain based on the pseudonym information, constructs an authorization message containing the service data ciphertext, and broadcasts it to the data access party and the cloud server.

[0007] Data decryption stage: The data access party calculates a temporary authorization code based on the authorization message, and uses the temporary authorization code to recover the quantum session key to decrypt the service data ciphertext.

[0008] As a further improvement of the above solution, the method for controlled sharing of Internet of Vehicles data further includes: Initialization phase: cloud server selects elliptic curve , and choose a one-way hash function , and then disclose the system parameters ;in, ; Elliptic curves satisfy , Express Take the remainder, is a prime number greater than 3, , represents a finite field, is the base point of the elliptic curve; The public key of the cloud server.

[0009] As a further improvement of the above solution, the method for controlled sharing of Internet of Vehicles data further includes: Registration phase: Each communicating entity sends its real identity To the cloud server; wherein each communication entity is a vehicle or a roadside unit or a third-party cloud server.

[0010] The cloud server obtains the temporary identity key of the communication entity from its own database and Key index of , generate pseudonyms corresponding to the communication entities , public and private key pairs , Authentication parameters and , then construct the message And send messages through secure channels To the corresponding communication entity, and at the same time call the blockchain's smart contract writing interface to write the pseudonym, public key and key index of the communication entity Deposited into blockchain; , Represents the exclusive OR operation; ; ; ; For the connection symbol.

[0011] The communication entity receives the message Then store the content of the message.

[0012] As a further improvement of the above solution, the data owner is a vehicle; the data access party is a vehicle or a roadside unit or a third-party cloud server, and the number of the data access parties is greater than 1.

[0013] For any vehicle , the data upload phase includes the following specific steps: vehicle Extract the pre-distributed data from the cloud server from its own security chip , choose a random number K And calculate the safety parameters ;in, For vehicles The security parameter key of for The key index of .

[0014] vehicle Select the quantum key generated by its own quantum random number generator and Key index of , and extract the quantum key distributed by the cloud server from its own security chip and Key index of , and use symmetric encryption to encrypt the data plaintext Encryption generates ciphertext ;in, ; is the quantum session key, ; Indicates A symmetric encryption algorithm used as a key.

[0015] vehicle Calculate signature parameters and signature parameters , generate a message signature , and then calculate the message verification code , build the message And send messages through public channels To the cloud server; , , ; For vehicles The private key of Message request, the types of message request include message request for data upload, message request for data request and message request for registration; ; ; ; For vehicles calculate The timestamp generated when

[0016] The cloud server receives the message Generate timestamp , judge the inequality Is it true? If so, calculate the message verification code , and determine the equation Is it established? If established, judge Is the type of message request for data upload? If so, the cloud server Query and obtain the security parameter key from the data memory , and calculate , , ; The preset duration; For vehicles The public key of

[0017] Cloud server judgment and Are they equal? ​​If they are equal, then the vehicle The identity is legitimate, and the cloud server stores encrypted data .

[0018] As a further improvement of the above solution, if the service data that the data access party needs to obtain comes from the vehicle , the authorization access phase includes the following specific steps: When the data access party needs to obtain service data, it sends a query request to the cloud server and requests authorization from the data owner; The cloud server verifies the identity of the data accessor. If it is legitimate, it will query the database to find that the data owner of the service data is the vehicle. After that, the pseudonym information set of all data access parties requesting authorization is sent to the vehicle ; The pseudonym information set is represented as , Indicates Pseudonymous information of the data access party, , The total number of parties requesting data access. .

[0019] vehicle Calculate temporary authorization code , and construct the following equation , and are two randomly selected quantum random numbers; then the vehicle Constructing Lagrange interpolation polynomials : ; in, For the Lagrangian basis functions, ,when hour, = 1, the Lagrange interpolation polynomial passes through Known data points , and thus solve for the coefficients .

[0020] vehicle Generate authorization information ;in, , .

[0021] vehicle Obtain the public key information of the data access party by calling the blockchain's smart contract information query interface , then the vehicle choose , and calculate the temporary authorization key and message verification code ;in, is a random number, Indicates all q Integers that are relatively prime in the modulus q Groups formed under multiplication; ; ; ; ; For vehicles calculate The timestamp generated when

[0022] vehicle Constructing an authorization message And the authorization message Broadcast to data access entities and cloud servers; where: .

[0023] As a further improvement of the above solution, in the early stage of the authorized access phase, the cloud server verifies the identity of the data access party including the following steps: Step 1: n The data access direction initiates identity authentication to the cloud server;j The authentication process for a data access party is as follows: No. j Data access parties select authentication random numbers And calculate , calculate batch signature parameters: , , ;in, , , , and The first j The pseudonym, public key, private key, and ; No. j The data access party generates the corresponding signature message ;in, ; For message requests; Step 2: Cloud server receives n When the signature message of each data access party is judged After the message request of type is data request, batch signature verification is performed to improve the efficiency of identity authentication. The specific process is as follows: Cloud server computing parameters , and ; Cloud Server Verification Batch Authentication Equation Is it true? If so, the identities of all data access parties are legal.

[0024] As a further improvement of the above solution, in the data decryption stage, the data access party calculates the temporary authorization code according to the authorization message, including: After receiving the authorization message, the data access party Generate timestamp , judge the inequality Is it true? If so, calculate the message verification code , and determine the equation Is it established? If established, according to the authorization information calculate , , and calculate the temporary authorization code .

[0025] As a further improvement of the above solution, in the data decryption stage, the use of the temporary authorization code to recover the quantum session key to decrypt the service data ciphertext includes: Data access party calculates quantum key identity and through Get the first part of the quantum session key, the quantum key, from the cloud server .

[0026] Data access party calculation , thereby calculating the second part of the quantum session key .

[0027] The data access party calculates the quantum session key , so that through the equation Get the data plaintext; among them, Indicates A symmetric decryption algorithm with a key.

[0028] As a further improvement of the above solution, when any communication entity exhibits malicious behavior, the cloud server traces the real identity of the communication entity and revokes the cloud service authority. The specific process is as follows: The cloud server calls the information query interface of the blockchain's smart contract to obtain the key index of the temporary identity key of the malicious communication entity. , query the corresponding temporary identity key according to the key index , thereby calculating the true identity of the malicious communication entity , revoke the registration information of the malicious communication entity according to its real identity, and revoke the public key information of the malicious communication entity by calling the revocation interface of the smart contract. Among them, when the cloud server detects that any communication entity reports data at an abnormal frequency, the communication entity is judged as a malicious communication entity.

[0029] The present invention also discloses a controlled sharing system for Internet of Vehicles data, which applies the controlled sharing method for Internet of Vehicles data as described above; the controlled sharing system for Internet of Vehicles data includes a blockchain, a cloud server, a data owner and a data access party; wherein the data owner is a vehicle; the data access party is a vehicle or a roadside unit or a third-party cloud server, and the number of data access parties is greater than 1.

[0030] Compared with the prior art, the present invention has the following beneficial effects: 1. The invention discloses a controlled sharing method for Internet of Vehicles data. The quantum session key between communication entities is generated by a quantum key generated by a quantum random number generator integrated by the data owner and a pre-filled quantum key. Only authorized data accessors can obtain the session key, which realizes the privacy of the session key and avoids the problems of key escrow and key leakage attacks. Batch authorization can realize the rapid sharing of Internet of Vehicles data among multiple receiving entities and protect the privacy of data.

[0031] 2. The present invention proposes a data authorization access mechanism based on quantum key and lightweight signature algorithm. Compared with the traditional data sharing scheme based on proxy re-encryption, this mechanism has lower computational complexity and communication latency, and can realize controlled data sharing in scenarios with multiple receiving communication entities.

[0032] 3. The present invention proposes lightweight batch identity authentication, and the cloud server can authenticate the identities of multiple data accessors at the same time, which can reduce the communication rounds and computational complexity of identity authentication, thereby improving the response speed of data sharing requests.

[0033] 4. The present invention proposes to use blockchain to record only the identities of communication entities in the Internet of Vehicles system. Compared with the traditional blockchain-based data sharing solution, the data sharing process of the present invention only queries the identities of communication entities through blockchain, and does not perform blockchain write operations, thereby avoiding the calculation delay caused by block consensus. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 This is a network architecture diagram for controlled sharing of Internet of Vehicles data in an embodiment of the present invention. DETAILED DESCRIPTION

[0035] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0036] This embodiment provides a controlled sharing system for Internet of Vehicles data, including a blockchain, a cloud server, a data owner, and a data access party. The data owner is a vehicle; the data access party is a vehicle or a roadside unit or a third-party cloud server, and the number of data access parties is greater than 1. In this embodiment, the data access party is n Vehicle data requesters, n ≥2.

[0037] Among them, blockchain is a decentralized distributed ledger that is tamper-proof, secure and reliable. Smart contracts are computer protocols stored on blockchains, written in programming languages ​​(such as Solidity), and can automatically execute related operations when preset conditions are met without human intervention. Principle: The operation of smart contracts is based on the distributed ledger technology of blockchains, which realizes decentralized information verification and dissemination through point-to-point links. This kind of link is distributed and there is no centralization, which ensures the immutability and transparency of the contract content. Smart contracts write the contract content into the blockchain in a digital form. Each contract will be copied and stored in the distributed ledger, and all transaction information will not be destroyed or tampered with.

[0038] The vehicle is equipped with a quantum random number generator (QRNG). A quantum random number generator is a device that generates true random numbers based on the principles of quantum mechanics. It uses the uncertainty of the quantum state of microscopic particles (such as photons) to generate an unpredictable and theoretically unreplicable sequence of random numbers. This randomness is derived from the intrinsic randomness in quantum mechanics, which ensures the high security and unpredictability of random numbers. QRNG has a wide range of applications in information security, encrypted communications, scientific research sampling and other fields, and can significantly improve the security and randomness quality of the system. With the rapid development of quantum technology, QRNG technology is also constantly improving, gradually realizing more efficient, more stable and more economical random number generation solutions, providing strong support for future information security protection.

[0039] See also Figure 1 This embodiment also provides a method for controlled sharing of Internet of Vehicles data, which is applied to the above-mentioned Internet of Vehicles data controlled sharing system. The method for controlled sharing of Internet of Vehicles data includes: S1, initialization phase, S2, registration phase, S3, data uploading phase, S4, authorized access phase, and S5, data decryption phase.

[0040] For ease of understanding, the relevant symbols in the method are explained as shown in Table 1 below.

[0041] Table 1: Explanation of relevant symbols in the method

[0042] S1, Initialization phase: Cloud server selects elliptic curve , and choose a one-way hash function , and then disclose the system parameters ;in, ; Elliptic curves satisfy , Express Take the remainder, is a prime number greater than 3, , represents a finite field, is the base point of the elliptic curve; The public key of the cloud server.

[0043] Elliptic Curve Cryptography (ECC) is an advanced public key cryptography technology that builds a security system based on mathematical operations on elliptic curves. ECC uses point groups and discrete logarithm problems on elliptic curves to achieve encryption, decryption, key exchange and digital signatures. Compared with traditional encryption algorithms (such as RSA), ECC can provide the same or higher security level with a shorter key length, thereby saving storage space and computing resources. It is widely used in blockchain technology, network security, the Internet of Things and other fields, providing strong security for data communications and transactions.

[0044] S2: Registration phase, which includes steps S21 to S23.

[0045] S21. Each communication entity sends its real identity To the cloud server; wherein each communication entity is a vehicle or a roadside unit or a third-party cloud server.

[0046] S22. The cloud server obtains the temporary identity key of the communication entity from its own database and Key index of , generate pseudonyms corresponding to the communication entities , public and private key pairs , Authentication parameters and , then construct the message And send messages through secure channels To the corresponding communication entity, and at the same time call the blockchain's smart contract writing interface to write the pseudonym, public key and key index of the communication entity Deposited into blockchain; , Represents the exclusive OR operation; ; ; ; For the connection symbol.

[0047] It should be noted that the secure channel usually appears during the registration phase. This means that this channel will not be attacked. The public channel means that there may be attackers and needs to be protected by a security protocol.

[0048] S23, the communication entity receives the message Then store the content of the message.

[0049] S3, data upload stage: the data owner uses the quantum session key to encrypt the data plaintext into ciphertext, and uploads the ciphertext to the cloud server; wherein, the quantum session key is formed by the quantum key generated by the quantum random number generator of the data owner and the pre-injected quantum key; the data owner also performs identity authentication when interacting with the cloud server for data.

[0050] For any vehicle , its data uploading stage includes the following specific steps, namely S31~S35.

[0051] S31. Vehicles Extract the pre-distributed data from the cloud server from its own security chip (i.e., the vehicle-side integrated security chip) , choose a random number K And calculate the safety parameters ;in, For vehicles The security parameter key of for The key index of .

[0052] S32, Vehicle Select the quantum key generated by its own quantum random number generator and Key index of , and extract the quantum key distributed by the cloud server from its own security chip and Key index of , and use symmetric encryption to encrypt the data plaintext Encryption generates ciphertext ;in, ; is the quantum session key, ; Indicates A symmetric encryption algorithm used as a key.

[0053] S33, Vehicle Calculate signature parameters and signature parameters , generate a message signature , and then calculate the message verification code , build the message And send messages through public channels To the cloud server; , , ; For vehicles The private key of Message request, the types of message request include message request for data upload, message request for data request and message request for registration; ; ; ; For vehicles calculate The timestamp generated when

[0054] S34, the cloud server receives the message Generate timestamp , judge the inequality Is it true? If so, calculate the message verification code , and determine the equation Is it established? If established, judge Is the type of message request for data upload? If so, the cloud server Query and obtain the security parameter key from the data memory , and calculate , , ; The preset duration; For vehicles The public key of

[0055] S35, cloud server judgment and Are they equal? ​​If they are equal, then the vehicle The identity is legitimate, and the cloud server stores encrypted data .

[0056] S4, authorized access stage: When the data access party needs to obtain service data, the cloud server queries the corresponding data uploader and informs the data uploader of the data access party's pseudonym information; the data uploader obtains the data access party's public key information from the blockchain based on the pseudonym information, constructs an authorization message containing the service data ciphertext, and broadcasts it to the data access party and the cloud server.

[0057] If the service data that the data access party needs to obtain comes from the vehicle , then the authorized access stage includes the following specific steps, namely S41~S46.

[0058] S41. When the data access party needs to obtain service data, it sends a query request to the cloud server and requests authorization from the data owner.

[0059] S42, the cloud server verifies the identity of the data accessor, and if it is legitimate, it searches the database to find that the data owner of the service data is the vehicle. After that, the pseudonym information set of all data access parties requesting authorization is sent to the vehicle ; The pseudonym information set is represented as , Indicates Pseudonymous information of the data access party, , The total number of parties requesting data access. .

[0060] S43, Vehicle Calculate temporary authorization code , and construct the following equation , and are two randomly selected quantum random numbers; then the vehicle Constructing Lagrange interpolation polynomials : ; in, For the Lagrangian basis functions, ,when hour, = 1, the Lagrange interpolation polynomial passes through Known data points , and thus solve for the coefficients .

[0061] S44, Vehicle Generate authorization information ;in, , .

[0062] S45, Vehicle Obtain the public key information of the data access party by calling the blockchain's smart contract information query interface , then the vehicle choose , and calculate the temporary authorization key and message verification code ;in, is a random number, Indicates all q Integers that are relatively prime in the modulus q Groups formed under multiplication; ; ; ; ; For vehicles calculate The timestamp generated when

[0063] S46, Vehicle Constructing an authorization message And the authorization message Broadcast to data access entities and cloud servers; where: .

[0064] In this embodiment, in the early stage of the authorized access phase, the cloud server verifies the identity of the data access party including the following steps 1 and 2.

[0065] Step 1: n The data access direction initiates identity authentication to the cloud server; j The authentication process for a data access party is as follows: No. j Data access parties select authentication random numbers And calculate , calculate batch signature parameters: , , ;in, , , , and The first j The pseudonym, public key, private key, and ; No. j The data access party generates the corresponding signature message ;in, ; Request for message.

[0066] Step 2: Cloud server receives n When the signature message of each data access party is judged After the message request of type is data request, batch signature verification is performed to improve the efficiency of identity authentication. The specific process is as follows: Cloud server computing parameters , and ; Cloud Server Verification Batch Authentication Equation Is it true? If so, the identities of all data access parties are legal.

[0067] S5, data decryption stage: the data access party calculates a temporary authorization code according to the authorization message, and uses the temporary authorization code to restore the quantum session key to decrypt the service data ciphertext.

[0068] The data decryption stage includes the following specific steps, namely S51~S54.

[0069] S51: The data access party receives the authorization message Generate timestamp , judge the inequality Is it true? If so, calculate the message verification code , and determine the equation Is it established? If established, according to the authorization information calculate , , and calculate the temporary authorization code .

[0070] S52. Data access party calculates quantum key identifier and through Get the first part of the quantum session key, the quantum key, from the cloud server .

[0071] S53, data access party calculation , thereby calculating the second part of the quantum session key .

[0072] S54. The data access party calculates the quantum session key , so that through the equation Get the data plaintext; among them, Indicates A symmetric decryption algorithm with a key.

[0073] In addition, when any communication entity exhibits malicious behavior, the cloud server will trace the real identity of the communication entity and revoke the cloud service permissions. The specific process is as follows: The cloud server calls the information query interface of the blockchain's smart contract to obtain the key index of the temporary identity key of the malicious communication entity. , query the corresponding temporary identity key according to the key index , thereby calculating the true identity of the malicious communication entity , revoke the registration information of the malicious communication entity based on its real identity, and revoke the public key information of the malicious communication entity by calling the revocation interface of the smart contract.

[0074] In this embodiment, when the cloud server detects that any communication entity reports data at an abnormal frequency, the communication entity is determined to be a malicious communication entity.

[0075] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can make equivalent replacements or changes according to the technical scheme and inventive concept of the present invention within the technical scope disclosed by the present invention, which should be covered by the protection scope of the present invention.

Claims

1. A method for controlled sharing of Internet of Vehicles data, characterized in that: include: Data upload stage: The data owner uses the quantum session key to encrypt the data plaintext into ciphertext, and uploads the ciphertext to the cloud server; wherein the quantum session key is formed by the quantum key generated by the quantum random number generator of the data owner and the pre-injected quantum key; the data owner also performs identity authentication when interacting with the cloud server; Authorized access phase: When the data access party needs to obtain service data, the cloud server queries the corresponding data uploader and informs the data uploader of the data access party's pseudonym information; the data uploader obtains the data access party's public key information from the blockchain based on the pseudonym information, constructs an authorization message containing the service data ciphertext, and broadcasts it to the data access party and the cloud server; Data decryption stage: The data access party calculates a temporary authorization code based on the authorization message, and uses the temporary authorization code to recover the quantum session key to decrypt the service data ciphertext.

2. A method for controlled sharing of Internet of Vehicles data according to claim 1, characterized in that: Also includes: Initialization phase: cloud server selects elliptic curve , and choose a one-way hash function , and then disclose the system parameters ;in, ; Elliptic curves satisfy , Express Take the remainder, is a prime number greater than 3, , represents a finite field, is the base point of the elliptic curve; The public key of the cloud server.

3. A method for controlled sharing of Internet of Vehicles data according to claim 2, characterized in that: Also includes: Registration phase: Each communicating entity sends its real identity To a cloud server; wherein each communication entity is a vehicle or a roadside unit or a third-party cloud server; The cloud server obtains the temporary identity key of the communication entity from its own database and Key index of , generate pseudonyms corresponding to the communication entities , public and private key pairs , Authentication parameters and , then construct the message And send messages through secure channels To the corresponding communication entity, and at the same time call the blockchain's smart contract writing interface to write the pseudonym, public key and key index of the communication entity Deposited into blockchain; where , Represents the exclusive OR operation; ; ; ; is the connection symbol; The communication entity receives the message Then store the content of the message.

4. A method for controlled sharing of Internet of Vehicles data according to claim 3, characterized in that: The data owner is a vehicle; the data access party is a vehicle or a roadside unit or a third-party cloud server, and the number of the data access parties is greater than 1; For any vehicle , the data upload phase includes the following specific steps: vehicle Extract the pre-distributed data from the cloud server from its own security chip , choose a random number K And calculate the safety parameters ;in, For vehicles The security parameter key of for The key index of ; vehicle Select the quantum key generated by its own quantum random number generator and Key index of , and extract the quantum key distributed by the cloud server from its own security chip and Key index of , and use symmetric encryption to encrypt the data plaintext Encryption generates ciphertext ;in, ; is the quantum session key, ; Indicates A symmetric encryption algorithm as a key; vehicle Calculate signature parameters and signature parameters , generate a message signature , and then calculate the message verification code , build the message And send messages through public channels To the cloud server; , , ; For vehicles The private key of Message request, the types of message request include message request for data upload, message request for data request and message request for registration; ; ; ; For vehicles calculate The timestamp generated when The cloud server receives the message Generate timestamp , judge the inequality Is it true? If so, calculate the message verification code , and determine the equation Is it established? If established, judge Is the type of message request for data upload? If so, the cloud server Query and obtain the security parameter key from the data memory , and calculate , , ; The preset duration; For vehicles 's public key; Cloud server judgment and Are they equal? ​​If they are equal, then the vehicle The identity is legitimate, and the cloud server stores encrypted data .

5. A method for controlled sharing of Internet of Vehicles data according to claim 4, characterized in that: If the service data that the data access party needs to obtain comes from the vehicle , the authorization access phase includes the following specific steps: When the data access party needs to obtain service data, it sends a query request to the cloud server and requests authorization from the data owner; The cloud server verifies the identity of the data accessor. If it is legitimate, it will query the database to find that the data owner of the service data is the vehicle. After that, the pseudonym information set of all data access parties requesting authorization is sent to the vehicle ; The pseudonym information set is represented as , Indicates Pseudonymous information of the data access party, , The total number of parties requesting data access. ; vehicle Calculate temporary authorization code , and construct the following equation , and are two randomly selected quantum random numbers; Subsequent vehicles Constructing Lagrange interpolation polynomials : ； in, For the Lagrangian basis functions, ,when hour, = 1, the Lagrange interpolation polynomial passes through Known data points , and thus solve for the coefficients ; vehicle Generate authorization information ;in, , ; vehicle Obtain the public key information of the data access party by calling the blockchain's smart contract information query interface , then the vehicle choose , and calculate the temporary authorization key and message verification code ;in, is a random number, Indicates all q Integers that are relatively prime in the modulus q Groups formed under multiplication; ; ; ; ; For vehicles calculate The timestamp generated when vehicle Constructing an authorization message And the authorization message Broadcast to data access entities and cloud servers; where: .

6. A method for controlled sharing of Internet of Vehicles data according to claim 5, characterized in that: In the early stage of the authorized access phase, the cloud server verifies the identity of the data access party by the following steps: Step 1: n The data access direction initiates identity authentication to the cloud server; j The authentication process for a data access party is as follows: No. j Data access parties select authentication random numbers And calculate , calculate batch signature parameters: , , ;in, , , , and The first j The pseudonym, public key, private key, and ; No. j The data access party generates the corresponding signature message ;in, ; For message requests; Step 2: Cloud server receives n When the signature message of each data access party is judged After the message request of type is data request, batch signature verification is performed to improve the efficiency of identity authentication. The specific process is as follows: Cloud server computing parameters , and ; Cloud Server Verification Batch Authentication Equation Is it true? If so, the identities of all data access parties are legal.

7. A method for controlled sharing of Internet of Vehicles data according to claim 6, characterized in that: In the data decryption stage, the data access party calculates the temporary authorization code according to the authorization message, including: After receiving the authorization message, the data access party Generate timestamp , judge the inequality Is it true? If so, calculate the message verification code , and determine the equation Is it established? If established, according to the authorization information calculate , , and calculate the temporary authorization code .

8. A method for controlled sharing of Internet of Vehicles data according to claim 7, characterized in that: In the data decryption stage, the use of the temporary authorization code to recover the quantum session key to decrypt the service data ciphertext includes: Data access party calculates quantum key identity and through Get the first part of the quantum session key, the quantum key, from the cloud server ; Data access party calculation , thereby calculating the second part of the quantum session key ; The data access party calculates the quantum session key , so that through the equation Get the data plaintext; among them, Indicates A symmetric decryption algorithm with a key.

9. A method for controlled sharing of Internet of Vehicles data according to any one of claims 3 to 8, characterized in that: When any communication entity exhibits malicious behavior, the cloud server will trace the real identity of the communication entity and revoke the cloud service permissions. The specific process is as follows: The cloud server calls the information query interface of the blockchain's smart contract to obtain the key index of the temporary identity key of the malicious communication entity. , query the corresponding temporary identity key according to the key index , thereby calculating the true identity of the malicious communication entity , revoke the registration information of the malicious communication entity according to its real identity, and revoke the public key information of the malicious communication entity by calling the revocation interface of the smart contract; wherein, when the cloud server detects that any communication entity reports data at an abnormal frequency, the communication entity is determined to be a malicious communication entity.

10. A controlled sharing system for Internet of Vehicles data, characterized in that: A method for controlled sharing of Internet of Vehicles data as described in claim 9 is applied; the Internet of Vehicles data controlled sharing system includes a blockchain, a cloud server, a data owner and a data access party; wherein the data owner is a vehicle; the data access party is a vehicle or a roadside unit or a third-party cloud server, and the number of data access parties is greater than 1.

Images