Communication method and device of vehicle, vehicle and storage medium

Abstract

The invention relates to a vehicle communication method and device, a vehicle and a storage medium, and the method comprises the steps: generating a session key from a shared key in a communication process, and enabling the shared key to be obtained through the public parameters of an elliptic curve; encrypting communication data to be sent by the sending vehicle based on the session key to generate encrypted data; and sending the encrypted data to a receiving vehicle, so that the receiving vehicle decrypts the received encrypted data by using the session key to obtain communication data. Therefore, the problems that an algorithm in the related technology has efficiency and security problems in a resource-limited hovercar communication environment, is easy to cause delay and performance reduction, lacks an effective identity verification mechanism and is easy to suffer from man-in-the-middle attack and other forms of security threats are solved.

Description

Technical Field

[0001] The present application relates to the field of data encryption technology, and in particular to a vehicle communication method, device, vehicle and storage medium. Background Art

[0002] With the continuous advancement of communication technology, the speed of information transmission and the security and reliability of information transmission are becoming increasingly important. Among them, the elliptic curve encryption algorithm is an asymmetric public key encryption algorithm. Compared with the traditional symmetric key encryption algorithm, the elliptic curve encryption algorithm can separate the encryption and decryption keys, and the communicating parties can communicate confidentially without exchanging keys in advance.

[0003] In the related technology, the traditional elliptic curve algorithm is used to generate a shared secret key without directly exchanging private keys. The obtained symmetric key can be used to encrypt the content related to the operation record, and then the symmetric key is processed using the private key and the user's public key.

[0004] However, the algorithms in related technologies have efficiency and security issues in the resource-constrained flying car communication environment, which can easily lead to delays and performance degradation. They also lack effective authentication mechanisms and are vulnerable to man-in-the-middle attacks and other forms of security threats, which urgently need to be improved. Summary of the invention

[0005] The present application provides a vehicle communication method, device, vehicle and storage medium to solve the problems that algorithms in related technologies have efficiency and security issues in a resource-constrained flying car communication environment, which easily lead to delays and performance degradation, lack an effective identity authentication mechanism, and are susceptible to man-in-the-middle attacks and other forms of security threats.

[0006] The first aspect of the present application provides a vehicle communication method, which is applied to a sending vehicle and includes the following steps: during the communication process, generating a session key from a shared key, wherein the shared key is obtained from a public parameter of an elliptic curve; based on the session key, encrypting the communication data to be sent by the sending vehicle to generate encrypted data; sending the encrypted data to a receiving vehicle so that the receiving vehicle uses the session key to decrypt the received encrypted data to obtain the communication data.

[0007] The embodiment of the present application can generate a session key from a shared key during the communication process, wherein the shared key is obtained from the public parameters of the elliptic curve, thereby ensuring higher communication security and efficiency; the embodiment of the present application can encrypt the communication data to be sent by the sending vehicle to generate encrypted data, thereby improving the security of communication; the embodiment of the present application can send encrypted data to a receiving vehicle, so that the receiving vehicle can decrypt the received encrypted data using the session key to obtain the communication data, thereby generating a session key based on elliptic curve cryptography and using it for encrypted communication, which can not only effectively protect the security of the communication data, but also meet the requirements of real-time and efficiency in terms of performance.

[0008] Optionally, in one embodiment of the present application, before generating the session key from the shared key, it also includes: generating the private key of the sending vehicle based on the public parameters of the elliptic curve, and calculating the public key of the sending vehicle based on the private key; generating the shared key of the sending vehicle based on the private key, the public key and the verified identity data.

[0009] The embodiment of the present application can generate a private key of a vehicle based on the public parameters of an elliptic curve, calculate a public key of the sent vehicle based on the private key, and generate a shared key of the sent vehicle based on the private key, the public key and the verified identity data, thereby improving the security of communications and enhancing the reliability of identity authentication while maintaining high efficiency and performance.

[0010] Optionally, in one embodiment of the present application, before generating the shared key of the sending vehicle based on the private key, the public key and the verified identity data, it also includes: obtaining the vehicle identification code of the sending vehicle, and generating a signature of the sending vehicle based on the vehicle identification code, and determining whether the signature meets preset validity conditions; if the signature meets the preset validity conditions, it is determined that the vehicle identification code of the sending vehicle is correct, and the verified identity data is determined.

[0011] The embodiment of the present application can obtain the vehicle identification code of the sending vehicle and generate a signature of the sending vehicle based on the vehicle identification code. Through digital signature technology, it can ensure that the VIN has not been tampered with during the transmission process, thereby preventing man-in-the-middle attacks and data forgery; the embodiment of the present application can determine that the vehicle identification code of the sending vehicle is correct when the signature meets certain validity conditions, and determine the verified identity data, thereby ensuring that the identities of the communicating parties are authentic and reliable, thereby improving the security and reliability of Internet of Vehicles communications.

[0012] A second aspect of the present application provides a vehicle communication method, which is applied to a receiving vehicle and includes the following steps: during the communication process, generating a session key from a shared key, wherein the shared key is obtained from a public parameter of an elliptic curve; receiving encrypted data sent by a sending vehicle; and decrypting the encrypted data using the session key to obtain the communication data of the sending vehicle.

[0013] The embodiment of the present application can generate a session key from a shared key during the communication process, wherein the shared key is obtained from the public parameters of the elliptic curve, thereby ensuring higher communication security and efficiency; the embodiment of the present application can receive encrypted data sent by the sending vehicle, decrypt the encrypted data using the session key to obtain the communication data of the sending vehicle, thereby ensuring the security of key exchange, and is suitable for real-time communication between vehicles, ensuring the security and real-time nature of the data.

[0014] Optionally, in one embodiment of the present application, before generating a session key from a shared key, it also includes: generating a private key of the receiving vehicle based on the public parameters of the elliptic curve, and calculating the public key of the receiving vehicle based on the private key; generating a shared key of the receiving vehicle based on the private key, the public key and the verified identity data.

[0015] The embodiment of the present application can generate a private key of a receiving vehicle based on the public parameters of an elliptic curve, calculate a public key of the receiving vehicle based on the private key, and generate a shared key of the receiving vehicle based on the private key, the public key and verified identity data, thereby improving the security of communications and enhancing the reliability of identity authentication while maintaining high efficiency and performance.

[0016] Optionally, in one embodiment of the present application, before generating the shared key of the receiving vehicle based on the private key, the public key and the verified identity data, it also includes: obtaining the vehicle identification code of the receiving vehicle, generating a signature of the receiving vehicle based on the vehicle identification code, and determining whether the signature meets preset validity conditions; if the signature meets the preset validity conditions, it is determined that the vehicle identification code of the receiving vehicle is correct, and the verified identity data is determined.

[0017] The embodiment of the present application can obtain the vehicle identification code of the receiving vehicle and generate a signature of the receiving vehicle based on the vehicle identification code. Through digital signature technology, it can ensure that the VIN has not been tampered with during the transmission process, thereby preventing man-in-the-middle attacks and data forgery; the embodiment of the present application can determine that the vehicle identification code of the sending vehicle is correct when the signature meets certain validity conditions, and determine the verified identity data, thereby ensuring that the identities of the communicating parties are authentic and reliable, thereby improving the security and reliability of Internet of Vehicles communications.

[0018] The third aspect of the present application provides a vehicle communication device, which is applied to a sending vehicle, including: a generation module, which is used to generate a session key from a shared key during the communication process, wherein the shared key is obtained from the public parameters of an elliptic curve; a sending module, which is used to encrypt the communication data to be sent by the sending vehicle based on the session key to generate encrypted data; and a communication module, which is used to send the encrypted data to a receiving vehicle so that the receiving vehicle can decrypt the received encrypted data using the session key to obtain the communication data.

[0019] Optionally, in one embodiment of the present application, it also includes: a calculation module, used to generate the private key of the sending vehicle according to the public parameters of the elliptic curve before generating the session key from the shared key, and calculate the public key of the sending vehicle based on the private key; an acquisition module, used to generate the shared key of the sending vehicle based on the private key, the public key and the verified identity data.

[0020] Optionally, in one embodiment of the present application, it also includes: a judgment module, which is used to obtain the vehicle identification code of the sending vehicle before generating the shared key of the sending vehicle based on the private key, the public key and the verified identity data, and generate a signature of the sending vehicle based on the vehicle identification code, and judge whether the signature meets preset validity conditions; a judgment module, which is used to judge that the vehicle identification code of the sending vehicle is correct and determine the verified identity data when the signature meets the preset validity conditions.

[0021] The fourth aspect of the present application provides a vehicle communication device, which is applied to a receiving vehicle, including: a key generation module, which is used to generate a session key from a shared key during the communication process, wherein the shared key is obtained from the public parameters of an elliptic curve; a receiving module, which is used to receive encrypted data sent by a sending vehicle; and a decryption module, which is used to decrypt the encrypted data using the session key to obtain the communication data of the sending vehicle.

[0022] Optionally, in one embodiment of the present application, it also includes: a key calculation module, which is used to generate a private key of the receiving vehicle according to the public parameters of the elliptic curve before generating a session key from the shared key, and calculate the public key of the receiving vehicle according to the private key; a key acquisition module, which is used to generate a shared key of the receiving vehicle according to the private key, the public key and the verified identity data.

[0023] Optionally, in one embodiment of the present application, it also includes: a condition judgment module, which is used to obtain the vehicle identification code of the receiving vehicle before generating the shared key of the receiving vehicle based on the private key, the public key and the verified identity data, and generate a signature of the receiving vehicle based on the vehicle identification code, and judge whether the signature meets the preset validity conditions; a determination module, which is used to determine that the vehicle identification code of the receiving vehicle is correct and determine the verified identity data when the signature meets the preset validity conditions.

[0024] The fifth aspect of the present application provides a vehicle, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the vehicle communication method as described in the above embodiment.

[0025] The sixth aspect of the present application provides a computer-readable storage medium, which stores a computer program that, when executed by a processor, implements the above-mentioned vehicle communication method.

[0026] The embodiment of the present application can optimize the encryption security of flying car communication through the improved elliptic curve Diffie-Hellman (ECDH) key exchange protocol, and encrypt the communication data to be sent by the sending vehicle to generate encrypted data, thereby improving the security of communication, and sending the encrypted data to the receiving vehicle so that the receiving vehicle can decrypt the received encrypted data using the session key to obtain the communication data, and then generate the session key based on the elliptic curve cryptography and use it for encrypted communication, which can not only effectively protect the security of the communication data, but also meet the requirements of real-time and high efficiency in terms of performance. Thus, the problem of efficiency and security problems in the algorithm in the resource-constrained flying car communication environment in the related art is solved, which is easy to cause delays and performance degradation, and lacks an effective identity authentication mechanism, and is easy to suffer from man-in-the-middle attacks and other forms of security threats.

[0027] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0029] Figure 1 A flow chart of a vehicle communication method provided in accordance with an embodiment of the present application applied to a sending vehicle;

[0030] Figure 2A flow chart of a vehicle communication method provided according to an embodiment of the present application applied to a receiving vehicle;

[0031] Figure 3 A schematic diagram of the structure of a vehicle communication device provided in accordance with an embodiment of the present application and applied to a sending vehicle;

[0032] Figure 4 A schematic diagram of the structure of a vehicle communication device provided in an embodiment of the present application applied to a receiving vehicle;

[0033] Figure 5 It is a schematic diagram of the structure of a vehicle provided according to an embodiment of the present application. DETAILED DESCRIPTION

[0034] The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present application, and should not be construed as limiting the present application.

[0035] The following describes the communication method, device, vehicle and storage medium of the vehicle of the embodiment of the present application with reference to the accompanying drawings. Aiming at the problem that the algorithm in the related art mentioned in the above background technology has efficiency and security problems in the resource-constrained flying car communication environment, which is easy to cause delays and performance degradation, lacks an effective identity authentication mechanism, and is susceptible to man-in-the-middle attacks and other forms of security threats, the present application provides a vehicle communication method, in which the encryption security of the flying car communication can be optimized by an improved elliptic curve Diffie-Hellman (ECDH) key exchange protocol, and the communication data to be sent by the vehicle is encrypted to generate encrypted data, thereby improving the security of the communication, and sending the encrypted data to the receiving vehicle so that the receiving vehicle uses the session key to decrypt the received encrypted data to obtain the communication data, and then generates the session key based on the elliptic curve cryptography and uses it for encrypted communication, which can not only effectively protect the security of the communication data, but also meet the requirements of real-time and high efficiency in terms of performance. Thus, the problem that the algorithm in the related art has efficiency and security problems in the resource-constrained flying car communication environment, which is easy to cause delays and performance degradation, lacks an effective identity authentication mechanism, and is susceptible to man-in-the-middle attacks and other forms of security threats is solved.

[0036] Specifically, Figure 1 A vehicle communication method provided in an embodiment of the present application is applied to a flow chart of sending a vehicle.

[0037] like Figure 1 As shown, the vehicle communication method includes the following steps:

[0038] In step S101, during the communication process, a session key is generated from a shared key, wherein the shared key is obtained from a public parameter of an elliptic curve.

[0039] It can be understood that the shared key in the embodiment of the present application can be a secret key jointly owned by the communicating parties, which is used for secure communication when encrypting and decrypting data; the session key in the embodiment of the present application can be an encryption key temporarily used in a communication session, which can provide efficient and secure data transmission during the communication process; the public parameters of the elliptic curve in the embodiment of the present application can be a set of parameters agreed upon by all participants in the elliptic curve Diffie-Hellman (ECDH) key exchange protocol.

[0040] Specifically, in the embodiment of the present application, a key derivation function (KDF) can be used to derive a session key Ksession from a shared key K during the communication process. The generated session key Ksession is used for subsequent encryption and decryption of data, wherein the shared key is obtained from the public parameters of the elliptic curve. For example, a domain and parameter p of an elliptic curve E can be selected, including a base point G and an order n of the elliptic curve, and these public parameters E, G, and p can be disclosed to all communicating parties.

[0041] The embodiments of the present application can provide an improved elliptic curve Diffie-Hellma key exchange protocol for flying car communication encryption, which improves the security and efficiency of communication through the improved key exchange protocol.

[0042] It should be noted that the elliptic curve parameters selected are NIST P-256 or Curve25519 to ensure the security of the protocol.

[0043] Optionally, in one embodiment of the present application, before generating a session key from a shared key, it also includes: generating a private key of the sending vehicle based on the public parameters of the elliptic curve, and calculating the public key of the sending vehicle based on the private key; generating a shared key of the sending vehicle based on the private key, the public key and the verified identity data.

[0044] It can be understood that the verified identity data in the embodiment of the present application can be identity information that is confirmed to be real and legal through an identity authentication mechanism.

[0045] In the actual execution process, before generating a session key from the shared key, the embodiment of the present application can generate a private key of the sending vehicle according to the public parameters of the elliptic curve, and calculate the public key of the sending vehicle according to the private key. Among them, Alice selects a private key a, whose value is a randomly generated number satisfying 1≤a<n. Alice calculates her public key A: A = aG, and generates the shared key of the sending vehicle according to the private key, the public key, and the verified identity data. Alice calculates the shared key K using the following public key B of Bob, her private key a, and the verified identity data A : K A = aB = a(bG) = abG.

[0046] The embodiment of the present application can generate the private key of the vehicle according to the public parameters of the elliptic curve, calculate the public key of the sending vehicle according to the private key, and generate the shared key of the sending vehicle according to the private key, the public key, and the verified identity data, which improves the security of communication, enhances the reliability of identity authentication, and at the same time maintains high efficiency and performance.

[0047] Optionally, in an embodiment of the present application, before generating the shared key of the sending vehicle according to the private key, the public key, and the verified identity data, it further includes: obtaining the vehicle identification code of the sending vehicle, generating a signature of the sending vehicle according to the vehicle identification code, and determining whether the signature meets a preset valid condition; if the signature meets the preset valid condition, it is determined that the vehicle identification code of the sending vehicle is correct, and the verified identity data is determined.

[0048] It can be understood that the preset valid condition in the embodiment of the present application can be that Alice in the sending vehicle verifies the signature α of Bob in the receiving vehicle B whether it is valid.

[0049] In the actual execution process, before generating the shared key of the sending vehicle according to the private key, the public key, and the verified identity data, the embodiment of the present application can obtain the vehicle identification code of the sending vehicle, generate a signature of the sending vehicle according to the vehicle identification code, and determine whether the signature meets a preset valid condition, and when the signature meets a certain valid condition, it is determined that the vehicle identification code of the sending vehicle is correct, and the verified identity data is determined. Among them, Alice obtains the VIN code VINA of the vehicle, and Alice signs her public key A and the vehicle VIN code VINA with her private key to generate a signature α A . The signature includes: α A = Sign(a, A, VINA), and Alice verifies whether the following signature α of Bob B is valid and confirms that the following vehicle VIN code VINB of Bob is correct.

[0050] The embodiment of the present application can obtain the vehicle identification code of the sending vehicle and generate a signature of the sending vehicle based on the vehicle identification code. Through digital signature technology, it can ensure that the VIN has not been tampered with during the transmission process, thereby preventing man-in-the-middle attacks and data forgery; the embodiment of the present application can determine that the vehicle identification code of the sending vehicle is correct when the signature meets certain validity conditions, and determine the verified identity data, thereby ensuring that the identities of the communicating parties are authentic and reliable, thereby improving the security and reliability of Internet of Vehicles communications.

[0051] It should be noted that the preset validity conditions can be set by those skilled in the art according to actual conditions and are not specifically limited here.

[0052] In step S102, communication data to be sent by the vehicle is encrypted based on the session key to generate encrypted data.

[0053] It can be understood that the encrypted data in the embodiments of the present application is data that is encrypted using a certain encryption algorithm and a specific session key.

[0054] During the actual execution process, Alice in the embodiment of the present application can use the derived session key Ksession to encrypt the communication data to be sent by the vehicle to generate encrypted data.

[0055] For example, using the HKDF algorithm:

[0056] Ksession = KDF(K, other inputs, such as session identifier)

[0057] The embodiment of the present application can encrypt the communication data to be sent by the sending vehicle to generate encrypted data, provide a basis for the subsequent sending of the encrypted data to the receiving vehicle, and optimize the encryption security of the flying car communication.

[0058] In step S103, the encrypted data is sent to the receiving vehicle, so that the receiving vehicle decrypts the received encrypted data using the session key to obtain the communication data.

[0059] It can be understood that the embodiment of the present application can send encrypted data through Alice, and Alice, as a data sender, has the ability to transmit encrypted data to the receiving vehicle.

[0060] As a possible implementation method, Alice in the embodiment of the present application can send encrypted data to a receiving vehicle, so that the receiving vehicle can use the session key to decrypt the received encrypted data to obtain communication data. It has high security and reliability, ensures the security of key exchange, is suitable for real-time communication between vehicles, and ensures the security and real-time nature of data.

[0061] Further, Figure 2 The flowchart of a communication method for a vehicle provided by an embodiment of the present application applied to a receiving vehicle.

[0062] As Figure 2 shown, the communication method of the vehicle includes the following steps:

[0063] In step S201, during the communication process, a session key is generated from a shared key, where the shared key is obtained from the public parameters of an elliptic curve.

[0064] In the actual execution process, an embodiment of the present application can use a key derivation function (KDF) to derive a session key Ksession from a shared key K during the communication process, where the shared key is obtained from the public parameters of an elliptic curve.

[0065] An embodiment of the present application can provide an improved elliptic curve Diffie - Hellman key exchange protocol for encrypted communication of flying vehicles, improving security and efficiency through the improved key exchange protocol.

[0066] Optionally, in an embodiment of the present application, before generating the session key from the shared key, it further includes: generating a private key of the receiving vehicle according to the public parameters of the elliptic curve, and calculating the public key of the receiving vehicle according to the private key; generating a shared key of the receiving vehicle according to the private key, the public key, and the verified identity data.

[0067] Among them, an embodiment of the present application can generate a private key of the receiving vehicle according to the public parameters of the elliptic curve before generating the session key from the shared key, and calculate the public key of the receiving vehicle according to the private key. Here, Bob selects a private key b, whose value is a randomly generated number satisfying 1 ≤ b < n. Bob calculates his public key B: B = bG. Alice sends the public key A to Bob, and Bob sends the public key B to Alice. A shared key of the receiving vehicle is generated according to the private key, the public key, and the verified identity data. Bob uses Alice's public key A and his private key b to calculate the shared key K B : K B = bA = b(aG) = abG.

[0068] It should be noted that the shared keys K A and K B are the same, both being abG.

[0069] The embodiment of the present application can generate a private key of a receiving vehicle based on the public parameters of an elliptic curve, calculate a public key of the receiving vehicle based on the private key, and generate a shared key of the receiving vehicle based on the private key, the public key and verified identity data, thereby improving the security of communications and enhancing the reliability of identity authentication while maintaining high efficiency and performance.

[0070] Optionally, in one embodiment of the present application, before generating a shared key for the receiving vehicle based on a private key, a public key and verified identity data, it also includes: obtaining a vehicle identification code for the receiving vehicle, generating a signature for the receiving vehicle based on the vehicle identification code, and determining whether the signature meets preset validity conditions; if the signature meets the preset validity conditions, determining that the vehicle identification code of the receiving vehicle is correct, and determining the verified identity data.

[0071] It can be understood that the preset validity condition in the embodiment of the present application can be that Bob in the receiving vehicle verifies the signature α applied to Alice in the sending vehicle. A Is it effective?

[0072] Specifically, the embodiment of the present application can obtain the vehicle identification code of the receiving vehicle before generating the shared key of the receiving vehicle according to the private key, the public key and the verified identity data, and generate the signature of the receiving vehicle according to the vehicle identification code, and judge whether the signature meets certain validity conditions, and when the signature meets the preset validity conditions, judge that the vehicle identification code of the receiving vehicle is correct, and determine the verified identity data, wherein Bob obtains the VIN code VINB of the vehicle, and Bob uses his private key to sign his public key B and the vehicle VIN code VINB to generate the signature α B . The signature includes: α B =Sign(b,B,VINB), Alice and Bob exchange public keys containing signatures and vehicle VIN codes. Bob verifies Alice’s signature α A Is it valid and confirm that Alice’s vehicle VIN code VINA is correct.

[0073] The embodiment of the present application can obtain the vehicle identification code of the receiving vehicle and generate a signature of the receiving vehicle based on the vehicle identification code. Through digital signature technology, it can ensure that the VIN has not been tampered with during the transmission process, thereby preventing man-in-the-middle attacks and data forgery; the embodiment of the present application can determine that the vehicle identification code of the sending vehicle is correct when the signature meets certain validity conditions, and determine the verified identity data, thereby ensuring that the identities of the communicating parties are authentic and reliable, thereby improving the security and reliability of Internet of Vehicles communications.

[0074] In step S202, the encrypted data sent by the sending vehicle is received.

[0075] It can be understood that Bob in the embodiment of the present application is configured to be able to receive encrypted data from the sending vehicle; the encrypted data in the embodiment of the present application refers to the data after the sending vehicle has been encrypted using a certain encryption algorithm and a specific key.

[0076] In the actual execution process, Bob in the embodiment of the present application can receive the encrypted data sent by the sending vehicle, providing a basis for the subsequent decryption of the encrypted data using the session key, thereby optimizing the encryption security of the flying car communication.

[0077] In step S203, the encrypted data is decrypted using the session key to obtain the communication data of the sending vehicle.

[0078] In the actual implementation process, Bob in the embodiment of the present application can use the session key to decrypt the encrypted data to obtain the communication data of the sending vehicle, thereby ensuring the security and reliability of data transmission and improving the security and efficiency of the vehicle communication system. Alice and Bob use the derived session key Ksession to encrypt and decrypt data:

[0079] Ciphertext=Encrypt(,Plaintext)

[0080] Plaintext=Decrypt}(Ksession,Ciphertext)

[0081] According to the communication method of the vehicle proposed in the embodiment of the present application, the encryption security of the flying car communication can be optimized through the improved elliptic curve Diffie-Hellman (ECDH) key exchange protocol, and the communication data to be sent by the sending vehicle is encrypted to generate encrypted data, thereby improving the security of the communication, and the encrypted data is sent to the receiving vehicle so that the receiving vehicle decrypts the received encrypted data using the session key to obtain the communication data, and the encrypted data sent by the receiving sending vehicle is optimized. The encryption security of the flying car communication is optimized, and then the session key is generated based on the elliptic curve cryptography and used for encrypted communication, which can not only effectively protect the security of the communication data, but also meet the requirements of real-time and high efficiency in terms of performance. Thus, the problem that the algorithm in the related art has efficiency and security problems in the resource-constrained flying car communication environment, which is prone to delays and performance degradation, and lacks an effective identity authentication mechanism, and is susceptible to man-in-the-middle attacks and other forms of security threats is solved.

[0082] Next, the communication device of the vehicle proposed in accordance with the embodiment of the present application is described with reference to the accompanying drawings.

[0083] Figure 3 It is a structural diagram of a vehicle communication device used for sending a vehicle according to an embodiment of the present application.

[0084] like Figure 3 As shown, the vehicle communication device 10 includes: a generating module 100 , a sending module 200 and a communication module 300 .

[0085] Specifically, the generating module 100 is used to generate a session key from a shared key during the communication process, wherein the shared key is obtained from a public parameter of an elliptic curve.

[0086] The sending module 200 is used to encrypt and send the communication data to be sent by the vehicle based on the session key to generate encrypted data.

[0087] The communication module 300 is used to send encrypted data to a receiving vehicle, so that the receiving vehicle decrypts the received encrypted data using a session key to obtain communication data.

[0088] Optionally, in one embodiment of the present application, the vehicle communication device 10 further includes: a calculation module and an acquisition module.

[0089] Among them, the calculation module is used to generate a private key of the sending vehicle according to the public parameters of the elliptic curve before generating a session key from the shared key, and calculate the public key of the sending vehicle according to the private key.

[0090] The acquisition module is used to generate a shared key of the sending vehicle based on the private key, the public key and the verified identity data.

[0091] Optionally, in one embodiment of the present application, the vehicle communication device 10 further includes: a judgment module and a determination module.

[0092] Among them, the judgment module is used to obtain the vehicle identification code of the sending vehicle before generating the shared key of the sending vehicle based on the private key, the public key and the verified identity data, and to generate the signature of the sending vehicle based on the vehicle identification code, and to judge whether the signature meets the preset validity conditions.

[0093] The determination module is used to determine that the vehicle identification code of the sending vehicle is correct and determine the verified identity data when the signature meets the preset validity conditions.

[0094] Further, Figure 4 It is a structural diagram of a vehicle communication device according to an embodiment of the present application applied to a receiving vehicle.

[0095] like Figure 4 As shown, the communication device 20 of the vehicle includes: a key generation module 400 , a receiving module 500 and a decryption module 600 .

[0096] Specifically, the key generation module 400 is used to generate a session key from a shared key during the communication process, wherein the shared key is obtained from a public parameter of an elliptic curve.

[0097] The receiving module 500 is used to receive the encrypted data sent by the sending vehicle.

[0098] The decryption module 600 is used to decrypt the encrypted data using the session key to obtain the communication data of the sending vehicle.

[0099] Optionally, in one embodiment of the present application, the vehicle communication device 20 further includes: a key calculation module and a key acquisition module.

[0100] Among them, the key calculation module is used to generate a private key of the receiving vehicle according to the public parameters of the elliptic curve before generating a session key from the shared key, and calculate the public key of the receiving vehicle according to the private key.

[0101] The key acquisition module is used to generate a shared key of the receiving vehicle based on the private key, the public key and the verified identity data.

[0102] Optionally, in one embodiment of the present application, the vehicle communication device 20 further includes: a condition judgment module and a determination module.

[0103] Among them, the conditional judgment module is used to obtain the vehicle identification code of the receiving vehicle before generating the shared key of the receiving vehicle based on the private key, the public key and the verified identity data, and to generate the signature of the receiving vehicle based on the vehicle identification code, and to judge whether the signature meets the preset validity conditions.

[0104] The determination module is used to determine that the vehicle identification code of the receiving vehicle is correct and determine the verified identity data when the signature meets the preset validity conditions.

[0105] It should be noted that the above explanation of the embodiment of the vehicle communication method is also applicable to the vehicle communication device of this embodiment, which will not be repeated here.

[0106] According to the communication device of the vehicle proposed in the embodiment of the present application, encrypted data can be sent to the receiving vehicle, so that the receiving vehicle decrypts the received encrypted data using the session key to obtain the communication data, and decrypts the encrypted data using the session key to obtain the communication data of the sending vehicle, thereby optimizing the encryption security of the flying car communication through the improved elliptic curve Diffie-Hellman (ECDH) key exchange protocol. Thus, the problem of efficiency and security problems in the algorithm in the related art in the resource-constrained flying car communication environment, which is prone to delays and performance degradation, and lacks an effective identity authentication mechanism, and is susceptible to man-in-the-middle attacks and other forms of security threats is solved.

[0107] Figure 5 A schematic diagram of the structure of a vehicle provided in an embodiment of the present application. The vehicle may include:

[0108] A memory 501 , a processor 502 , and a computer program stored in the memory 501 and executable on the processor 502 .

[0109] When the processor 502 executes the program, the vehicle communication method provided in the above embodiment is implemented.

[0110] Furthermore, the vehicle also includes:

[0111] The communication interface 503 is used for communication between the memory 501 and the processor 502 .

[0112] The memory 501 is used to store computer programs that can be executed on the processor 502 .

[0113] The memory 501 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

[0114] If the memory 501, the processor 502 and the communication interface 503 are implemented independently, the communication interface 503, the memory 501 and the processor 502 can be connected to each other through a bus and communicate with each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 5 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0115] Optionally, in a specific implementation, if the memory 501, the processor 502 and the communication interface 503 are integrated on a chip, the memory 501, the processor 502 and the communication interface 503 can communicate with each other through an internal interface.

[0116] The processor 502 may be a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application.

[0117] This embodiment also provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the vehicle communication method as described above is implemented.

[0118] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or N embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0119] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include at least one of the features. In the description of this application, "N" means at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0120] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, fragment or portion of code comprising one or N executable instructions for implementing the steps of a custom logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.

[0121] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purpose of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or N wirings (electronic devices), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically by optically scanning the paper or other medium and then editing, interpreting or processing in other suitable ways as necessary and then storing it in a computer memory.

[0122] It should be understood that the various parts of the present application can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiment, the N steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0123] A person skilled in the art may understand that all or part of the steps in the method for implementing the above-mentioned embodiment may be completed by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, which, when executed, includes one or a combination of the steps of the method embodiment.

[0124] In addition, each functional unit in each embodiment of the present application may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0125] The storage medium mentioned above may be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present application. A person of ordinary skill in the art may change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. A vehicle communication method, characterized in that: Applied to sending a vehicle, the method comprises the following steps: During the communication, a session key is generated from a shared key, wherein the shared key is obtained from a public parameter of an elliptic curve; Encrypting the communication data to be sent by the sending vehicle based on the session key to generate encrypted data; The encrypted data is sent to a receiving vehicle, so that the receiving vehicle decrypts the received encrypted data using the session key to obtain the communication data.

2. The method according to claim 1, characterized in that Before generating the session key from the shared key, the method further comprises: Generating a private key of the sending vehicle according to the public parameters of the elliptic curve, and calculating a public key of the sending vehicle according to the private key; A shared key of the sending vehicle is generated based on the private key, the public key and the verified identity data.

3. The method according to claim 2, characterized in that Before generating the shared key of the sending vehicle according to the private key, the public key and the verified identity data, the method further includes: Obtaining a vehicle identification code of the sending vehicle, generating a signature of the sending vehicle according to the vehicle identification code, and determining whether the signature meets a preset validity condition; If the signature meets the preset validity condition, the vehicle identification code of the sending vehicle is determined to be correct, and the verified identity data is determined.

4. A vehicle communication method, characterized in that: Applied to receiving a vehicle, the method comprises the following steps: During the communication, a session key is generated from a shared key, wherein the shared key is obtained from a public parameter of an elliptic curve; Receive encrypted data sent by the sending vehicle; The encrypted data is decrypted using the session key to obtain the communication data of the sending vehicle.

5. The method according to claim 4, characterized in that Before generating the session key from the shared secret, also include: generating a private key of the receiving vehicle according to the public parameters of the elliptic curve, and calculating a public key of the receiving vehicle according to the private key; A shared key of the receiving vehicle is generated based on the private key, the public key and the verified identity data.

6. The method according to claim 5, characterized in that Before generating the shared key of the receiving vehicle according to the private key, the public key and the verified identity data, the method further includes: Obtaining a vehicle identification code of the receiving vehicle, generating a signature of the receiving vehicle according to the vehicle identification code, and determining whether the signature meets a preset validity condition; If the signature satisfies the preset validity condition, the vehicle identification code of the receiving vehicle is determined to be correct, and the verified identity data is determined.

7. A vehicle communication device, characterized in that: Applied to sending a vehicle, the device comprises: A generating module, used for generating a session key from a shared key during communication, wherein the shared key is obtained from a public parameter of an elliptic curve; A sending module, used for encrypting the communication data to be sent by the sending vehicle based on the session key to generate encrypted data; The communication module is used to send the encrypted data to a receiving vehicle, so that the receiving vehicle decrypts the received encrypted data using the session key to obtain the communication data.

8. A vehicle communication device, characterized in that: Applied to receiving vehicles, the device comprises: A key generation module, used for generating a session key from a shared key during communication, wherein the shared key is obtained from a public parameter of an elliptic curve; A receiving module, used for receiving encrypted data sent by a sending vehicle; A decryption module is used to decrypt the encrypted data using the session key to obtain the communication data of the sending vehicle.

9. A vehicle, characterized in that: include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the vehicle communication method as described in any one of claims 1-3 or 4-6.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: The program is executed by a processor to implement the vehicle communication method as described in any one of claims 1-3 or 4-6.

Images