Management system and method adaptive to multiple sets of public key infrastructure (PKI) security certificates

Abstract

The invention relates to the technical field of intelligent network connection, in particular to a management system and method adaptive to multiple sets of public key infrastructure (PKI) security certificates, and aims to solve the problem of how to reduce the complexity of switching different PKI certificate systems at a vehicle end. The invention provides a management system adaptive to multiple sets of public key infrastructure (PKI) security certificates, which is applied to an Internet of Vehicles terminal, and comprises a security management module used for processing security messages and providing security credentials and security data; the PKI system detection module is in signal connection with the safety management module and is used for acquiring the system type of a PKI system currently applied by the vehicle networking terminal; and the adaptation module is in signal connection with the PKI system detection module and is used for receiving the system type from the PKI system detection module and calling a corresponding vehicle end software development kit SDK according to the system type so as to implement a PKI function corresponding to the system type.

Description

Technical Field

[0001] The present application relates to the field of intelligent network connection technology, and more specifically, to a management system and method for adapting to multiple sets of public key infrastructure (PKI) security certificates. Background Art

[0002] In the Internet of Vehicles system, there are generally multiple independent Public Key Infrastructure (PKI) systems to provide certificate services for Internet of Vehicles devices. The service scope of each PKI is called an authentication domain. An authentication domain refers to a trusted domain consisting of all certificates of a PKI system. Cross-authentication domain authentication means that a vehicle-side software development kit located in an authentication domain can authenticate the certificate issued to the vehicle-side software development kit in the domain by other authentication domains. With the development of Internet of Vehicles technology, communication between vehicles and between vehicles and infrastructure has become more and more common. To ensure the security of communication, PKI security certificates are usually used for identity authentication and encrypted communication. However, different manufacturers or systems may use different PKI security certificate management systems, leading to interoperability and mutual trust issues.

[0003] In related technologies, interoperability between different manufacturers or systems can be ensured by formulating and complying with unified PKI standards and unified identity authentication platforms. However, standardizing PKI is a long process. Although vehicle manufacturers, communication equipment manufacturers, security manufacturers and other companies have already carried out equipment research and development, production and system construction based on this standard, due to the inconsistent understanding of the standard by various manufacturers, there are situations where the consistency check of terminal certificates / certificate chains of different manufacturers fails. Therefore, how to reduce the complexity of switching different PKI certificate systems on the vehicle side is one of the technical problems that technical personnel in this field urgently need to solve. Summary of the invention

[0004] The problem that this application solves: How to reduce the complexity of switching different PKI certificate systems on the vehicle side.

[0005] To solve the above problems, the present application provides a management system that is adapted to multiple sets of public key infrastructure PKI security certificates and is applied to Internet of Vehicles terminals. The management system includes: a security management module, which is used to process security messages and provide security credentials and security data; a PKI system detection module, which is signal-connected to the security management module and is used to obtain the system type of the PKI system currently applied by the Internet of Vehicles terminal; an adaptation module, which is signal-connected to the PKI system detection module and is used to receive the system type from the PKI system detection module, and to call the corresponding vehicle-side software development kit SDK according to the system type to implement the PKI function corresponding to the system type.

[0006] Compared with the existing technology, the technical effects achieved by adopting this technical solution are as follows: the setting of the security management module allows the PKI system detection module to be detected by the security management module before running, which improves the security of the management system during operation and reduces the risks that the management system may encounter during operation. Through the setting of the PKI system detection module, the PKI system currently used by the target can be obtained, and the setting of the adaptation module allows the management system to effectively switch according to different PKI systems. The mutual cooperation of the PKI system detection module and the adaptation module allows the management system to achieve the effect of switching back and forth between different PKI security certificates, and also makes the mutual operation between different systems more convenient.

[0007] In one embodiment of the present application, the security management module includes: the security management module includes: a credential management module, the credential management module is arranged in the vehicle-side SDK, and is connected to the adaptation module signal, the credential management module is used to interact with the PKI system detection module for data; a security service module, the security service module is arranged in the vehicle-side SDK, and is connected to the credential management module signal, the security service module is used to manage security credentials and security data; a data processing module, the data processing module is arranged in the vehicle-side SDK, and is connected to the security service module signal, the data processing module is used to process security messages.

[0008] Compared with the existing technology, the technical effect achieved by adopting this technical solution is as follows: the credential management module conducts data connection with the outside world, and interacts the data generated by the security service module and the data processing module with the outside world, ensuring that the PKI system detection module can run safely. The security service module provides security services such as signing, verification, encryption and decryption for the vehicle-side software development toolkit by generating and processing security protocol data units, thereby improving the security of the management system.

[0009] In one embodiment of the present application, a plurality of application programming interfaces (Application Programming Interface, API) are provided in the adaptation module, and the plurality of APIs are respectively matched with a plurality of sets of PKI security certificates. The corresponding vehicle-side software development kit SDK is called according to the system type to implement the PKI function corresponding to the system type, including: calling the corresponding vehicle-side SDK and the API corresponding to the system type according to the system type to implement the PKI function corresponding to the system type.

[0010] Compared with the existing technology, the technical effect achieved by adopting this technical solution is as follows: the setting of the Adaptor module and multiple API interfaces enables the adapter module to cope with different vehicle-side software development kits, and multiple APIs are matched with multiple sets of PKI security certificates respectively, so that the management system can quickly determine the PKI security certificate required by the vehicle-side software development kit to adapt to different working environments.

[0011] In one embodiment of the present application, the present application also provides a management method for adapting multiple sets of public key infrastructure PKI security certificates. The management method is applied to the management system recorded in the above embodiment, and the management method includes: enabling the security function of the vehicle-side software development kit SDK through the security management module; after the security function is enabled, the PKI system detection module loads and parses the PKI service configuration file, and verifies the legitimacy of the PKI service configuration file to obtain a verification result, and the verification result includes a target type, and the target type refers to the system type of the PKI system corresponding to the vehicle-side SDK; the verification result is sent to the adaptation module, so that the adaptation module switches the system type of the PKI system currently used by the Internet of Vehicles terminal to the target type, and calls the vehicle-side SDK; by calling the vehicle-side SDK, the security function of the PKI system corresponding to the target type is implemented.

[0012] Compared with the existing technology, the technical effects achieved by adopting this technical solution are as follows: through the legitimacy verification of the configuration file, the specified PKI management system is easier to identify, the acquisition of the target system type allows the adaptation module to reasonably call the SDK, and the stability of the management system operation is improved. The setting of clearing useless data reduces the interference items of the PKI system detection module during detection.

[0013] In one embodiment of the present application, the security function of the vehicle-side software development kit is enabled through the security management module, specifically including: the security service module provides security protection services for the vehicle-side SDK by generating and processing security protocol data units; the data processing module processes the security message to obtain the security information contained in the security message, and calls the security protection service through the security service module according to the type of security information; and the credential management module interacts with the security service module to enable security functions.

[0014] Compared with the existing technology, the technical effect achieved by adopting this technical solution is as follows: a safety switch is set through the security service module to ensure that the data read by the PKI system detection module during operation will not be leaked. Furthermore, the security guarantee formation process is completed within the security management module, and information is only exchanged with the outside world through the security service module, which simplifies the integration and deployment process of different PKI security certificate management systems of vehicle-mounted terminal equipment and improves the communication efficiency of the management system.

[0015] In one embodiment of the present application, after the security function is turned on, the PKI system detection module loads and parses the configuration file dedicated to the PKI service, and verifies the legitimacy of the configuration file to obtain the PKI system type required by the vehicle-side software development kit, which is recorded as the target system type. Specifically, when the verification result is passed, the key fields in the PKI service configuration file are read, and the target type is determined from the database based on the key fields; or, when the verification result is failed, the default configuration file is loaded from the database, and the PKI system type corresponding to the default configuration file is determined as the target type.

[0016] Compared with the existing technology, the technical effects achieved by adopting this technical solution are: verification of legitimacy, screening of the working objectives of the PKI system detection module, improving the working efficiency of the PKI system detection module, enabling a single vehicle-side software development toolkit to adapt to multiple sets of PKI security certificate management systems, and improving the interoperability and security of the Internet of Vehicles system.

[0017] In one embodiment of the present application, the safety message includes a basic safety message (BSM), and the management method also includes: obtaining a product registration certificate, generating a joint key for the BSM through a security management module and the product registration certificate; the security management module uses the joint key to encrypt the message content of the BSM to generate a ciphertext, and uses the joint key to digitally sign the BSM; the product registration certificate, ciphertext, part of the joint key and digital signature are packaged to generate encrypted information and then sent to the recipient.

[0018] Compared with the existing technology, the technical effect achieved by adopting this technical solution is as follows: the identity of the BSM sent is ensured by obtaining and verifying the certificate, and the BSM is encrypted by a joint key to further ensure that the BSM will not be leaked after it is sent, thereby improving the security of the BSM.

[0019] In one embodiment of the present application, the joint key includes the public key and private key of the product registration certificate and the encryption key generated by the security service module; the security management module uses the joint key to encrypt the message content of the BSM to generate a ciphertext, and uses the joint key to digitally sign the BSM, including: encrypting the BSM according to the encryption key to generate a ciphertext; encrypting the symmetric key corresponding to the product registration certificate according to the public key to obtain an encrypted symmetric key; digitally signing the BSM according to the private key; wherein the encrypted message content includes the ciphertext, the encrypted symmetric key and the digital signature.

[0020] Compared with the prior art, the technical effects achieved by adopting this technical solution are as follows: the BSM is encrypted by the encryption key generated by the security service module, which improves the security of BSM sending; the encryption key is encrypted by the public key, which can ensure that the BSM will not be leaked even if there is a sending error, thereby improving the fault tolerance of the management system operation; the private key is used for digital signature setting, which ensures that the BSM is sent from the designated system, limits the system of the pseudonym certificate (PC), and further improves the security of the BSM.

[0021] In one embodiment of the present application, after the product registration certificate, ciphertext, partial joint key and digital signature are packaged to generate encrypted information and sent to other recipients, the management method also includes: the recipient uses the product registration certificate to verify the BSM to check the integrity of the certificate chain; the recipient uses the public key to decrypt the encrypted symmetric key to obtain the symmetric key corresponding to the decrypted message content; after decrypting the message content with the symmetric key, the digital signature is verified using the private key, and the recipient uses the product registration certificate to verify the BSM to check the integrity of the certificate chain, specifically including: checking whether the signature of the product registration certificate is valid; obtaining the certificate source of the product certificate, and determining whether the product registration certificate comes from a trusted certificate issuing authority.

[0022] Compared with the existing technology, the technical effect achieved by adopting this technical solution is as follows: by decrypting the BSM, the receiver can accurately obtain the original message content sent by the sender, and the original message content can be ensured not to be leaked, which simplifies the system integration and deployment process, and improves communication efficiency and security. The receiver can filter out messages that do not meet its own decryption conditions through certificate verification, thereby improving the decryption efficiency of BSM. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 Module diagram of the management system for applying for PKI security certificates; Figure 2 A flowchart of a management method for applying for a PKI security certificate; Description of reference numerals: 100. Internet of Vehicles terminal; 200. Security management module; 210. Data processing module; 220. Security service module; 230. Credential management module; 240. PKI system detection module; 250. Adaptation module; 300. CA platform. DETAILED DESCRIPTION

[0024] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, the specific embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0025] In the related technologies, the authentication of public key infrastructure is difficult to adapt to the needs of multiple channels and reduced latency in complex communication environments. The traditional PKI-based authentication mechanism has problems such as cross-domain authentication and single point failure in the multi-domain environment of the Internet of Vehicles. The authentication path between different jurisdictions generally depends on the predecessor trust path common to the jurisdiction. When the depth of this trust path cannot be ignored, cross-domain interaction requires a large communication overhead, and it also consumes computing, storage and bandwidth resources. When there are many certificate issuing authorities involved, the trust relationship between the two mutual trusts is easy to form a complex mesh relationship structure, which is not suitable for deployment and application in large-scale Internet of Vehicles environments.

[0026] In view of this, the present application provides a management system and method for adapting multiple sets of PKI security certificates in order to solve the problems existing in the prior art. The scheme of the present application will be described in detail below in combination with multiple embodiments. It should be noted that the same or corresponding contents in each embodiment can be referenced and supported by each other, which will not be repeated in the following text.

[0027] [First embodiment] See also Figure 1 In a specific embodiment, the present application provides a management system that adapts to multiple sets of public key infrastructure PKI security certificates, which is applied to the Internet of Vehicles terminal 100. The management system includes: a security management module 200, which is used to process security messages and provide security credentials and security data; a PKI system detection module 240, which is signal-connected to the security management module 200 and is used to obtain the system type of the PKI system currently applied by the Internet of Vehicles terminal 100; an adaptation module 250, which is signal-connected to the PKI system detection module 240 and is used to receive the system type from the PKI system detection module 240, and to call the corresponding vehicle-side software development kit (Software Development Kit, SDK) according to the system type to implement the PKI function corresponding to the system type.

[0028] The security management module 200 is used to verify the security protection of the PKI application, that is, the safety switch of the PKI system detection module 240. When the safety switch is turned on, the PKI system detection module 240 can start running. During the operation, the PKI system detection module 240 is responsible for detecting the currently pre-used PKI system and notifying the adaptation module 250 of the system type. The adaptation module 250 selects different PKI security functions according to different system types. The security functions include but are not limited to: PKI certificate management, generation and verification of Secure Protocol Data Unit (SPDU), security reporting module and certificate terminal storage.

[0029] The setting of the security management module 200 allows the PKI system detection module 240 to be detected by the security management module 200 before operation, thereby improving the security of the management system during operation and reducing the risks that the management system may encounter during operation. Through the setting of the PKI system detection module 240, the PKI system currently used by the target can be obtained. The setting of the adaptation module 250 allows the management system to effectively switch according to different PKI systems. The mutual cooperation between the PKI system detection module 240 and the adaptation module 250 allows the management system to achieve the effect of switching back and forth between different PKI security certificates, and also makes the mutual operation between different systems more convenient.

[0030] [Second embodiment] In a specific embodiment, the security management module 200 includes: a credential management module 230, which is arranged in the vehicle-side SDK and is signal-connected to the adaptation module 250. The credential management module 230 is used to interact with the PKI system detection module 240 for data; a security service module 220, which is arranged in the vehicle-side SDK and is signal-connected to the credential management module 230. The security service module 220 is used to manage security credentials and security data; a data processing module 210, which is arranged in the vehicle-side SDK and is signal-connected to the security service module 220. The data processing module 210 is used to process security messages.

[0031] The credential management module 230 can exchange data with the Certificate Authority (CA) platform 300, and can also exchange data with the PKI system detection module 240. The data results obtained in the security management module 200 are exchanged with other modules through the credential management module 230. The credential management module 230 is responsible for interacting with the Internet of Vehicles security credential management entity in the vehicle-side software development kit to obtain relevant public key certificates and certificate revocation lists (CRL). Furthermore, the credential management module 230 and the security service module 220 need to interact to complete the import and export of security credentials and data. At the same time, the generation and export of keys also require the interaction between the security service module 220 and the credential management module 230 to be realized.

[0032] The security service module 220 is located in the vehicle-side software development kit and is responsible for providing storage and cryptographic operation services for security credentials and security data. The storage of security data includes but is not limited to the storage of public key certificates and CRLs and the generation and storage of keys. The cryptographic operation services include but are not limited to signing, signature verification, encryption, decryption and hash operations.

[0033] The data processing module 210 is located in a certain Internet of Vehicles application service entity in the vehicle-side software development kit, and is responsible for processing the generation and processing of security messages based on specific Internet of Vehicles application logic. For example, in an active safety application of the Internet of Vehicles, the vehicle active safety system generates a signature message or verifies a signature message based on the corresponding application logic and obtains the plain text of the message. The data processing module 210 may need to call the basic security services provided by the security service module 220 during the execution of security data processing. The basic security services include but are not limited to digital signatures, digital signature verification, data encryption, and data decryption.

[0034] The credential management module 230 conducts data connection with the outside world, and interacts the data generated by the security service module 220 and the data processing module 210 with the outside world, ensuring that the PKI system detection module 240 can run safely. The security service module 220 provides security services such as signing, verification, encryption and decryption for the vehicle-side software development kit by generating and processing security protocol data units, thereby improving the security of the management system.

[0035] [Third embodiment] In a specific embodiment, the adaptation module 250 is provided with a plurality of application programming interfaces (APIs), and the plurality of APIs are respectively matched with a plurality of sets of PKI security certificates. The corresponding vehicle-side software development kit SDK is called according to the system type to implement the PKI function corresponding to the system type, including: calling the corresponding vehicle-side SDK and the API corresponding to the system type according to the system type to implement the PKI function corresponding to the system type.

[0036] The adaptation module 250 includes an Adaptor module, which is signal-connected to the PKI system detection module 240 and is used to receive the system type from the PKI system detection module 240; wherein, the Adaptor module is provided with a variety of API interfaces, and the corresponding vehicle-side software development kit and API interface are called according to the system type to implement the corresponding PKI function.

[0037] Adaptor module, after receiving the corresponding system type, the Adaptor module calls the SDK of the vehicle-side software development kit to complete various PKI security functions.

[0038] The Adaptor module adopts a modular design, splits the certificate management part, and provides standardized API interfaces to support multiple PKI certificate formats. These interfaces meet interoperability requirements and allow different PKI systems to be quickly integrated through a unified interface. The CA platform 300 is used to send communication certificates and certificate revocation lists to the Internet of Vehicles terminal 100, where the communication certificates include but are not limited to registered CAs, pseudonymous CAs, and application CAs.

[0039] The settings of the Adaptor module and multiple API interfaces enable the adapter module 250 to cope with different vehicle-side software development kits. Multiple APIs are matched with multiple sets of PKI security certificates, allowing the management system to quickly determine the PKI security certificates required by the vehicle-side software development kit to adapt to different working environments.

[0040] [Fourth embodiment] See also Figure 2 In a specific embodiment, the present application also provides a management method for adapting multiple sets of public key infrastructure (PKI) security certificates. The management method is applied to the management system described in the above embodiment. The management method includes: S100, enable the security function of the vehicle-side software development kit SDK through the security management module; S200, after the security function is enabled, the PKI system detection module loads and parses the PKI service configuration file, and verifies the legitimacy of the PKI service configuration file to obtain a verification result, the verification result includes a target type, and the target type refers to the system type of the PKI system corresponding to the vehicle-side SDK; S300, sending the verification result to the adaptation module, so that the adaptation module switches the system type of the PKI system currently applied by the Internet of Vehicles terminal to the target type, and calls the vehicle-side SDK; S400. Implement the security functions of the PKI system corresponding to the target type by calling the vehicle-side SDK.

[0041] In step S100, before the PKI system detection module performs the detection work, it is necessary to turn on the security switch through the security management module.

[0042] In step S200, the main way for the PKI system detection module to detect is to read a predefined configuration file after power-on to detect the type of PKI security certificate management system used by the current system. The following types are currently defined: The first management system: This system packages the PC certificate into the ACF (Aerolink Credential File) file format for management, wherein the ACF file is a file format used by Qualcomm to manage PC certificates.

[0043] Second management system: This system directly manages specific PC certificates.

[0044] The relevant configuration files of various types of pre-supported security functions need to be pre-defined and stored in the relevant paths for use by subsequent security modules.

[0045] It should be noted that the type of management system can be adjusted according to the development of PC certificates, so the number of types of management systems is not limited here.

[0046] In step S300, after the target system type is obtained through verification, the adaptation module determines whether the current system type is the same as the target system type. If they are the same, the current system type does not need to be switched. If they are not the same, the current system type is switched to the target system type.

[0047] In step S400, PKI security functions include but are not limited to PKI certificate management, SPDU message signing and verification, and abnormal behavior detection. The adapter module activates the PKI security functions by calling its SDK according to the configured PKI system type, loads the specified PKI management system, and then implements the corresponding security functions.

[0048] According to the life cycle of the aforementioned security-related certificates, the validity period of credentials, and the storage time of logs, the system scans and deletes useless certificates, credentials, and log files. The certificate cleanup operation does not affect the normal operation of the system. The system supports user-defined configuration, allowing users to adjust the frequency and scope of data cleanup according to actual needs. Users can set expired certificates to be automatically deleted after the validity period, or delete log files that exceed a certain storage period.

[0049] By verifying the legitimacy of the configuration file, the specified PKI management system is easier to identify. The acquisition of the target system type allows the adapter module to reasonably call the SDK, which improves the stability of the management system operation. The setting of clearing useless data reduces the interference items of the PKI system detection module during detection.

[0050] [Fifth embodiment] In a specific embodiment, the security function of the vehicle-side software development kit is enabled through the security management module, specifically including: S110, the security service module provides security services for the vehicle-side SDK by generating and processing security protocol data units; S120, the data processing module processes the security message to obtain security information contained in the security message, and calls the security protection service through the security service module according to the type of security information; S130 , interacting with the security service module through the credential management module to enable security functions.

[0051] In step S110 to step S130, the security assurance instructions are sent from the credential management module to the PKI system detection module. During the security assurance execution process, the credential management module needs to interact with the security service module for data. The data processing module may also need to call data from the security service module during the security data processing process. The credential management module sends an instruction to the PKI system detection module on whether the security function is enabled based on the interaction data provided by the data processing module and the security service module. The PKI system detection module detects the PKI system currently used by the vehicle-side software development kit based on the instruction.

[0052] A safety switch is set through the security service module to ensure that the data read by the PKI system detection module during operation will not be leaked. Furthermore, the security guarantee formation process is completed within the security management module, and information is only exchanged with the outside world through the security service module, which simplifies the integration and deployment process of different PKI security certificate management systems by on-board terminal devices and improves the communication efficiency of the management system.

[0053] [Sixth embodiment] In a specific embodiment, after the security function is turned on, the PKI system detection module loads and parses the configuration file dedicated to the PKI service, and verifies the legitimacy of the configuration file to obtain the PKI system type required by the vehicle-side software development kit, which is recorded as the target system type, specifically including: S210. When the verification result is passed, read the key field in the PKI service configuration file, and determine the target type from the database according to the key field; or, When the verification result is failure, a default configuration file is loaded from the database, and the PKI system type corresponding to the default configuration file is determined as the target type.

[0054] In step S210, each PKI management system has a corresponding PKI system. Through the analysis of the PKI system detection module, the PKI service-specific configuration file can be quickly obtained. After obtaining the PKI service-specific configuration file, the legality of the PKI service-specific configuration file is first verified. After the legality is passed, the pre-defined key fields are identified to determine the target system type. It should be noted that the pre-defined key fields can be adjusted according to different working conditions. For the special configuration files that cannot be verified, the default configuration files pre-defined by the system are loaded from the management system.

[0055] The verification of legality screens the working targets of the PKI system detection module, improves the working efficiency of the PKI system detection module, enables a single vehicle-side software development toolkit to adapt to multiple sets of PKI security certificate management systems, and improves the interoperability and security of the Internet of Vehicles system.

[0056] [Seventh embodiment] In a specific embodiment, the safety message includes a Basic Safety Message (BSM), and the management method further includes: S111, obtaining a product registration certificate, and generating a joint key for BSM through the security management module and the product registration certificate; S112, the security management module uses the joint key to encrypt the message content of the BSM to generate a ciphertext, and uses the joint key to digitally sign the BSM; S113, packaging the product registration certificate, ciphertext, part of the joint key and digital signature to generate encrypted information and then sending it to the recipient.

[0057] In step S111 to step S113, before BSM encryption, the management system obtains a valid PC pseudonym certificate. The management system will request the PKI system to distribute the PC certificate and verify the validity and legitimacy of the certificate, including checking the signature of the certificate, the validity of the certificate chain, etc., to ensure that the certificate comes from a trusted CA.

[0058] In the encryption process of BSM, the management system first generates a symmetric encryption key to encrypt the message content. Then, the management system uses the public key in its PC certificate to encrypt the symmetric encryption key. This encryption key will be sent to the recipient as part of the BSM. To ensure the integrity of the message, the system uses the private key of the PC certificate to digitally sign the encrypted BSM. This signature can ensure that the message has not been tampered with, and only the system with the corresponding private key can generate a legitimate signature.

[0059] It should be noted that the encryption process used to generate the ciphertext usually uses a symmetric encryption algorithm such as the Advanced Encryption Standard (AES) algorithm. Of course, other encryption algorithms may also be used, and this application is not limited to this.

[0060] The management system sends the encrypted BSM, the encrypted symmetric key and the digital signature to the recipient, which is usually a vehicle or infrastructure.

[0061] The identity of the BSM sent is ensured by obtaining and verifying the certificate. By encrypting the BSM with a joint key, it is further ensured that the BSM will not be leaked after it is sent, thereby improving the security of the BSM.

[0062] [Eighth embodiment] In a specific embodiment, the joint key includes the public key and the private key of the product registration certificate and the encryption key generated by the security service module; the security management module uses the joint key to encrypt the message content of the BSM to generate a ciphertext, and uses the joint key to digitally sign the BSM, including: S112a, encrypting the BSM according to the encryption key to generate a ciphertext, and encrypting the symmetric key corresponding to the product registration certificate according to the public key to obtain an encrypted symmetric key; S112b. Digitally sign the BSM according to the private key, wherein the encrypted message content includes the ciphertext, the encrypted symmetric key and the digital signature.

[0063] In step S112a to step S112b, the public key in the PC system is used to encrypt the encryption key, and the private key in the PC system is used to digitally sign the BSM. After digitally signing with the private key, the signature can ensure that the message has not been tampered with, and only the system with the corresponding private key can generate a legal signature.

[0064] BSM is encrypted with the encryption key generated by the security service module, which improves the security of BSM sending. Encrypting the encryption key with the public key can ensure that BSM will not be leaked even if there is a sending error, thereby improving the fault tolerance of the management system operation. The setting of the private key for digital signature ensures that BSM is sent from the designated system and limits the system of the PC certificate, further improving the security of BSM.

[0065] [Ninth embodiment] In a specific embodiment, after the product registration certificate, ciphertext, part of the joint key and digital signature are packaged to generate encrypted information and then sent to other recipients, the management method further includes: S114, the recipient verifies the BSM using the product registration certificate to check the integrity of the certificate chain; S115. The recipient uses the public key to decrypt the encrypted symmetric key to obtain the symmetric key corresponding to the decrypted message content; S116. After decrypting the message content using the symmetric key, the digital signature is verified using the private key.

[0066] By verifying the integrity of the certificate chain, ensure that the certificate comes from a trusted CA. Further, check whether the signature of the PC certificate is valid, obtain the source of the certificate, and determine whether the certificate comes from a trusted CA.

[0067] When the certificate comes from a trusted CA, the certificate verification passes and the decryption work of BSM is allowed to be executed. When the certificate comes from an untrusted CA, the decryption work of BSM is prohibited from being executed.

[0068] In step S114 to step S116, the recipient decrypts the symmetric key of the BSM by sending the sent public key. Using the decrypted symmetric key, the system decrypts the ciphertext to restore the original message content.

[0069] It should be noted that the algorithm used in the decryption process is the same as the algorithm used in the encryption process.

[0070] After decryption is completed, the system uses the public key in the sender's PC certificate to verify the message signature. By verifying the signature, the receiver can confirm the integrity of the message and the identity of the sender, ensuring that the BSM has not been tampered with and the source is legitimate. The decrypted BSM content includes key safety information such as the vehicle's real-time location and speed. The system performs the next step based on this information, which includes but is not limited to collision avoidance reminders and lane keeping assist.

[0071] By decrypting BSM, the receiver can accurately obtain the original message content sent by the sender, and the original message content can be ensured not to be leaked, which simplifies the system integration and deployment process and improves communication efficiency and security. The receiver can filter out messages that do not meet its own decryption conditions through certificate verification, thereby improving the decryption efficiency of BSM.

[0072] Through the PKI security certificate management system, each Internet of Vehicles device has the ability to adapt to multiple sets of PKI security certificate management systems, improving the interoperability and security of the Internet of Vehicles system. By automatically adapting to different PKI security certificate management systems, the system integration and deployment process is simplified, and communication efficiency and security are improved. The PKI security certificate management method ensures that the data read by the management system will not be leaked, improves the security of the management system operation, and encrypts the BSM through multiple encryption methods, further avoiding the impact of BSM sending errors.

[0073] Although the present application is disclosed as above, the present application is not limited thereto. Any person skilled in the art can make various changes and modifications without departing from the spirit and scope of the present application, so the protection scope of the present application shall be subject to the scope defined by the claims.

Claims

1. A management system adapted to multiple sets of public key infrastructure (PKI) security certificates, characterized in that: Applied to the Internet of Vehicles terminal, the management system includes: A security management module, the security management module is used to process security messages and provide security credentials and security data; A PKI system detection module, which is signal-connected to the security management module and is used to obtain the system type of the PKI system currently used by the Internet of Vehicles terminal; An adaptation module, which is signal-connected to the PKI system detection module, is used to receive the system type from the PKI system detection module, and call the corresponding vehicle-side software development kit SDK according to the system type to implement the PKI function corresponding to the system type.

2. The management system according to claim 1, characterized in that: The security management module includes: A credential management module, which is disposed in the vehicle-side SDK and is signal-connected to the adapter module, and is used to perform data interaction with the PKI system detection module; A security service module, which is disposed in the vehicle-side SDK and is signal-connected to the credential management module, and is used to manage the security credentials and the security data; A data processing module is provided in the vehicle-side SDK and is signal-connected to the security service module. The data processing module is used to process the security message.

3. The management system according to claim 2, characterized in that: The adaptation module is provided with a plurality of application programming interfaces API, and the plurality of APIs are matched with the plurality of sets of PKI security certificates respectively. The corresponding vehicle-side software development kit SDK is called according to the system type to implement the PKI function corresponding to the system type, including: According to the system type, the corresponding vehicle-side SDK and the API corresponding to the system type are called to implement the PKI function corresponding to the system type.

4. A management method for adapting multiple sets of public key infrastructure (PKI) security certificates, characterized in that: The management method is applied to the management system according to claim 3, and the management method comprises: Enable the security function of the vehicle-side software development kit SDK through the security management module; After the security function is enabled, the PKI system detection module loads and parses the PKI service configuration file, and verifies the legitimacy of the PKI service configuration file to obtain a verification result, wherein the verification result includes a target type, and the target type refers to the system type of the PKI system corresponding to the vehicle-side SDK; Sending the verification result to the adaptation module, so that the adaptation module switches the system type of the PKI system currently applied by the Internet of Vehicles terminal to the target type, and calls the vehicle-side SDK; The security function of the PKI system corresponding to the target type is implemented by calling the vehicle-side SDK.

5. The management method according to claim 4, characterized in that: The security function of the vehicle-side software development kit SDK is enabled by the security management module, including: The security service module provides security services for the vehicle-side SDK by generating and processing security protocol data units; The data processing module processes the security message to obtain security information contained in the security message, and calls the security assurance service through the security service module according to the type of the security information; The security function is enabled by exchanging information between the credential management module and the security service module.

6. The management method according to claim 4, characterized in that: The PKI service configuration file is stored in a database, and a default configuration file is also provided in the database; The PKI system detection module loads and parses the PKI service configuration file, and verifies the legitimacy of the PKI service configuration file to obtain a verification result, including: When the verification result is passed, reading a key field in the PKI service configuration file, and determining the target type from the database according to the key field; or, When the verification result is failure, the default configuration file is loaded from the database, and the PKI system type corresponding to the default configuration file is determined as the target type.

7. The management method according to claim 5, characterized in that: The safety message includes a basic safety message BSM, and the management method further includes: Obtain a product registration certificate, and generate a joint key for the BSM through the security management module and the product registration certificate; The security management module uses the joint key to encrypt the message content of the BSM to generate a ciphertext, and uses the joint key to digitally sign the BSM; The product registration certificate, the ciphertext, part of the joint key and the digital signature are packaged to generate encrypted information and then sent to the recipient.

8. The management method according to claim 7, characterized in that: The joint key includes the public key and private key of the product registration certificate and the encryption key generated by the security service module; The security management module uses the joint key to encrypt the message content of the BSM to generate a ciphertext, and uses the joint key to digitally sign the BSM, including: Encrypting the BSM according to the encryption key to generate the ciphertext; Encrypting the symmetric key corresponding to the product registration certificate according to the public key to obtain an encrypted symmetric key; Digitally signing the BSM according to the private key; The encrypted message content includes the ciphertext, the encrypted symmetric key and the digital signature.

9. The management method according to claim 8, characterized in that: After the product registration certificate, the ciphertext, part of the joint key and the digital signature are packaged to generate encrypted information and then sent to other recipients, the management method further includes: The recipient verifies the BSM using the product registration certificate to check the integrity of the certificate chain; The recipient uses the public key to decrypt the encrypted symmetric key to obtain the symmetric key corresponding to the message content; After decrypting the message content by using the symmetric key, verifying the digital signature by using the private key; After the digital signature is verified, the recipient is managed according to the content of the message.

10. The management method according to claim 9, characterized in that: The recipient verifies the BSM using the product registration certificate to check the integrity of the certificate chain, specifically including: Check whether the signature of the product registration certificate is valid; Obtain the certificate source of the product certificate and determine whether the product registration certificate comes from a trusted certificate issuing authority.

Images