Digital driving license management method, related device and storage medium

Abstract

The invention provides a digital driving license management method, a related device and a storage medium. The management method comprises the following steps: acquiring first broadcast data of a road side unit for acquiring a digital driving license of a vehicle, wherein the first broadcast data comprises plaintext data of digital driving license acquisition information and a first digital signature; under the condition that the first digital signature passes verification, obtaining a digital driving license stored in a safety carrier of the vehicle-mounted unit; sending second broadcast data to the road side unit, wherein the second broadcast data comprises ciphertext data of the digital driving license and a second digital signature of the ciphertext data; wherein under the condition that the second digital signature passes the verification, the ciphertext data of the digital driving license is decrypted at the road side unit, and the plaintext data of the digital driving license is sent to the traffic control platform, so that the traffic control platform can execute the business processing related to the digital driving license. The storage safety, the use convenience and the safety of the digital driving license and the diversification of application scenes are improved.

Description

Technical Field

[0001] The present disclosure belongs to the field of information security technology, and specifically relates to a management method, related device and storage medium for a digital driving license. Background Art

[0002] The electronicization of vehicle driving licenses is a new type of license management method. It converts traditional paper driving licenses into electronic formats through electronic technology to facilitate the handling of various traffic management services by car owners. At present, the implementation of the electronicization of vehicle driving licenses mainly relies on a special electronic license system (for example, traffic management 12123). Users can apply for a digital driving license through the electronic license system, and after the review is passed, the electronic license system will generate the corresponding driving license data in the cloud. In the relevant usage scenarios of digital driving licenses, users need to request the electronic license system through the network to obtain the QR code generated by the encrypted data of the digital driving license, so that users can present the vehicle driving license in the form of a QR code, or facilitate the authorization of the driving license information to other users on the electronic license system, and other users can present the vehicle driving license in the form of a QR code. Although digital driving licenses have brought many conveniences, there are still some technical problems: 1. Digital driving licenses are not physically bound to vehicles in terms of data, and paper driving licenses that must be carried with the vehicle may be lost or forgotten; 2. Digital driving licenses requested in the electronic license system are stored in the cloud and users can only use digital driving licenses through the electronic license system, which means that only when there is a network can the driving license information be queried in the electronic license system, and the application scenario of digital driving licenses is single; 3. When a driver violates traffic rules while using a vehicle, it is impossible to confirm the driver's identity information when the violation occurs, resulting in impersonation and deduction of points, and the person evading punishment. Therefore, it is urgent to provide a management method for digital driving licenses to solve the above problems. Summary of the invention

[0003] In view of the above problems, the present disclosure provides a management method, related devices and storage media for a digital driving license, aiming to improve the storage security, ease of use and safety of the digital driving license, as well as the diversification of application scenarios.

[0004] According to a first aspect of the present disclosure, a method for managing a digital driving license is provided, which is applied to an on-board unit of a vehicle, and the management method includes:

[0005] Acquire first broadcast data of the digital driving license of the vehicle collected by the roadside unit, wherein the first broadcast data includes plain text data of the digital driving license collection information and a first digital signature;

[0006] If the first digital signature is verified, obtaining the digital driving license stored in the security carrier of the vehicle-mounted unit;

[0007] Sending second broadcast data to the roadside unit, wherein the second broadcast data includes the ciphertext data of the digital driving license and a second digital signature of the ciphertext data;

[0008] Among them, when the second digital signature is verified, the ciphertext data of the digital driving license is decrypted in the roadside unit, and the plaintext data of the digital driving license is sent to the traffic management platform, so as to perform business processing related to the digital driving license on the traffic management platform.

[0009] Optionally, the first broadcast data also includes the application digital certificate of the roadside unit, and the second broadcast data also includes the identity digital certificate of the vehicle-mounted unit. The plaintext data of the digital driving license collected information is digitally signed using the private key of the application digital certificate to obtain the first digital signature, the ciphertext data of the digital driving license is digitally signed using the private key of the identity digital certificate to obtain the second digital signature, the digital driving license is encrypted using the public key of the application digital certificate to obtain the ciphertext data of the digital driving license, and the ciphertext data of the digital driving license is decrypted using the private key of the application digital certificate to obtain the plaintext data of the digital driving license.

[0010] Optionally, before obtaining the first broadcast data collected by the roadside unit on the digital driving license of the vehicle, the management method further includes:

[0011] Acquiring the driver identity information of the vehicle, wherein the driver identity information includes ID card information and / or face recognition information;

[0012] Sending an association request to associate the driver's license of the driver of the vehicle with the digital driving license, the association request including the driver's identity information and the vehicle unique identifier of the vehicle;

[0013] The association request is forwarded to the traffic management platform through the cloud control platform to establish an association between the driver's license of the driver of the vehicle and the digital driving license on the traffic management platform.

[0014] Optionally, the acquiring of the first broadcast data collected by the roadside unit from the digital driving license of the vehicle includes:

[0015] The cloud control platform examines and approves the application request for collecting the digital driving license of the vehicle sent by the roadside unit. If the application request is approved, the cloud control platform obtains the first broadcast data of the roadside unit collecting the digital driving license of the vehicle.

[0016] Optionally, before obtaining the first broadcast data collected by the roadside unit on the digital driving license of the vehicle, the management method further includes:

[0017] Sending a digital driving license application request, the digital driving license application request including ciphertext data of the digital driving license application request information and a third digital signature, wherein the on-board unit uses the private key of the identity digital certificate to digitally sign and encrypt the digital driving license application request information, and the cloud control platform uses the public key of the identity digital certificate to verify and decrypt the digital driving license application request information, and if the signature verification passes, forwarding the plaintext data of the digital driving license application request information to the traffic management platform, so that the traffic management platform can issue the digital driving license to the cloud control platform, and the cloud control platform uses the public key of the identity digital certificate to digitally sign and encrypt the digital driving license to obtain the fourth digital signature and ciphertext data of the digital driving license;

[0018] Receiving the fourth digital signature and ciphertext data of the digital driving license;

[0019] The fourth digital signature and ciphertext data of the digital driving license are verified and decrypted using the private key of the identity digital certificate. If the verification is successful, the plaintext data of the digital driving license is stored in the secure carrier of the on-board unit.

[0020] Optionally, before obtaining the first broadcast data collected by the roadside unit on the digital driving license of the vehicle, the management method further includes:

[0021] When the vehicle real-name authentication is passed, sending an identity digital certificate application request to the certificate management agency;

[0022] Receiving the identity digital certificate issued by the certificate management agency;

[0023] If the identity digital certificate passes the verification, storing the identity digital certificate in the security carrier of the vehicle-mounted unit;

[0024] The identity digital certificate is synchronized to the cloud control platform.

[0025] Optionally, before obtaining the first broadcast data collected by the roadside unit on the digital driving license of the vehicle, the management method further includes:

[0026] The roadside unit sends an application request for an application digital certificate to a certificate management agency;

[0027] Receiving, at the roadside unit, the application digital certificate issued by the certificate management agency;

[0028] When the application digital certificate passes verification, the roadside unit stores the application digital certificate in a secure carrier of the roadside unit;

[0029] The application digital certificate is synchronized to the cloud control platform.

[0030] According to a second aspect of the present disclosure, a digital driving license management device is provided, which is used for an on-board unit of a vehicle, and the management device includes:

[0031] A first broadcast data acquisition unit, configured to acquire first broadcast data collected by a roadside unit from a digital driving license of the vehicle, wherein the first broadcast data includes plain text data of the collected information of the digital driving license and a first digital signature;

[0032] A digital driving license acquisition unit, configured to acquire the digital driving license stored in the security carrier of the vehicle-mounted unit when the first digital signature is verified;

[0033] A second broadcast data sending unit, configured to send second broadcast data to the roadside unit, wherein the second broadcast data includes the ciphertext data of the digital driving license and a second digital signature of the ciphertext data;

[0034] Among them, when the second digital signature is verified, the ciphertext data of the digital driving license is decrypted in the roadside unit, and the plaintext data of the digital driving license is sent to the traffic management platform, so as to perform business processing related to the digital driving license on the traffic management platform.

[0035] According to a third aspect of the present disclosure, there is provided a vehicle-mounted unit, comprising:

[0036] A secure carrier for storing the digital driving license of the vehicle;

[0037] The management device as described above implements the steps of the method as described above and sends the digital driving license to the traffic management platform so that business processing related to the digital driving license can be performed on the traffic management platform.

[0038] According to a fourth aspect of the present disclosure, a management system for digital driving licenses is provided, comprising:

[0039] A roadside unit is located at the roadside infrastructure and is used to communicate with passing vehicles and other roadside units to achieve vehicle-road cooperative communication between the vehicle and the roadside infrastructure;

[0040] The on-board unit as described above is arranged in the vehicle, and is used to obtain first broadcast data collected by the roadside unit on the digital driving license of the vehicle, the first broadcast data including plain text data and a first digital signature of the digital driving license collection information, and when the first digital signature is verified, the digital driving license stored in the security carrier of the on-board unit is obtained, and second broadcast data is sent to the roadside unit, the second broadcast data including the ciphertext data of the digital driving license and the second digital signature of the ciphertext data, and when the second digital signature is verified, the ciphertext data of the digital driving license is decrypted at the roadside unit, and the plaintext data of the digital driving license is sent to the traffic management platform;

[0041] The cloud control platform is used to provide a security management function for the vehicle-road cooperative communication between the on-board unit and the roadside unit;

[0042] The traffic management platform is used to execute business processing related to the digital driving license.

[0043] According to a fifth aspect of the present disclosure, an electronic device is provided, comprising: a processor, a memory, and a program stored in the memory and executable on the processor, wherein the program implements the steps of the method described above when executed by the processor.

[0044] According to a sixth aspect of the present disclosure, a storage medium is provided, on which a computer program or instruction is stored, and the computer program or instruction, when executed by a processor, implements the steps of the method described above.

[0045] The present disclosure brings the following beneficial effects:

[0046] The management method provided by the present disclosure is applied to the on-board unit of the vehicle, and obtains the first broadcast data collected by the roadside unit on the digital driving license of the vehicle, the first broadcast data including the plaintext data of the digital driving license collection information and the first digital signature. When the first digital signature is verified, the digital driving license stored in the security carrier of the on-board unit is obtained, and the second broadcast data is sent to the roadside unit. The second broadcast data includes the ciphertext data of the digital driving license and the second digital signature of the ciphertext data. When the second digital signature is verified, the ciphertext data of the digital driving license is decrypted on the roadside unit, and the plaintext data of the digital driving license is sent to the traffic management platform, so as to perform business processing related to the digital driving license on the traffic management platform. In this way, the digital driving license is stored in the security carrier of the on-board unit, so as to realize the real data "physical binding" between the digital driving license and the vehicle, avoid the need to carry a paper driving license with the vehicle and the problem of losing or forgetting the paper driving license, and improve the storage security and convenience of the digital driving license. When the vehicle-mounted unit is not connected to the network, the digital driving license is sent to the traffic control platform through near-field communication between the vehicle-mounted unit and the roadside unit, and the traffic control platform performs business processing related to the digital driving license, which improves the diversification of the application scenarios of the digital driving license. In the use scenario of the digital driving license, the interaction between the vehicle-mounted unit and the roadside unit uses the PKI (Public Key Infrastructure) certificate chain to ensure the legitimacy of both devices and the security of the data, which improves the security of the use of the digital driving license.

[0047] Other features and advantages of the present disclosure will be described in the following description, and partly become apparent from the description, or understood by practicing the present disclosure. The purpose and other advantages of the present disclosure are realized and obtained by the structures particularly pointed out in the description and the drawings.

[0048] In order to make the above-mentioned objectives, features and advantages of the present disclosure more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] The above and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0050] Figure 1 A schematic diagram of the structure of a digital driving license management system provided according to an embodiment of the present disclosure;

[0051] Figure 2 A flowchart of a method for managing a digital driving license provided according to an embodiment of the present disclosure;

[0052] Figure 3A schematic diagram of a process for applying for an identity digital certificate according to an embodiment of the present disclosure;

[0053] Figure 4 A schematic diagram of a process for applying for a digital certificate according to an embodiment of the present disclosure;

[0054] Figure 5 A schematic diagram of a process for applying for a digital driving license according to an embodiment of the present disclosure;

[0055] Figure 6 A schematic diagram of a process for executing a digital driving license-related business process according to an embodiment of the present disclosure;

[0056] Figure 7 A schematic diagram of the structure of a digital driving license management device provided according to an embodiment of the present disclosure;

[0057] Figure 8 The present invention is a schematic diagram of the structure of an electronic device provided according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0058] Various embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. In each of the accompanying drawings, the same elements are represented by the same or similar reference numerals. For the sake of clarity, the various parts in the accompanying drawings are not drawn to scale.

[0059] The following terms are used in this article:

[0060] Digital signature is a technology based on public key encryption technology to verify the integrity of digital information and the identity of the sender. It is similar to the electronic form of a handwritten signature or seal, but more secure.

[0061] An onboard unit (OBU) is an electronic device installed on a vehicle. Its main function is to communicate with roadside infrastructure (such as toll booths, traffic lights, etc.) to realize information exchange between vehicles and roadside infrastructure in order to provide various traffic services. In a non-stop toll collection system, OBU can automatically identify the signals at toll booths and automatically complete the transaction process, including deductions and charges. In a vehicle-road collaborative system, OBU can receive various traffic information sent by roadside infrastructure (such as traffic light status, road conditions ahead, etc.) and display this information to the driver to help the driver make safer and more efficient driving decisions. At the same time, OBU can also send vehicle status information (such as location, speed, driving direction, etc.) to roadside infrastructure for traffic management and services.

[0062] Road Side Unit (RSU) is an important wireless communication device in the vehicle-to-everything (V2X) system. It is installed on roadside infrastructure (such as traffic lights, road signs, etc.). Its main function is to communicate with passing vehicles and other RSUs to achieve information exchange between vehicles and roadside infrastructure. RSU can collect and process various information about the vehicle, such as the vehicle's location, speed, direction, etc., and send this information to other vehicles or traffic control platforms. At the same time, RSU can also receive information from the traffic control platform, such as traffic conditions, weather information, etc., and pass this information to the vehicle to help the driver make better driving decisions.

[0063] The secure carrier includes a secure element (SE) and / or a TEE system. SE is an electronic component with tamper-proof function that can be installed on the terminal device to provide a secure and confidential data storage and operation environment. SE consists of software and tamper-proof hardware, supports high-level security, such as SIM cards, financial IC cards, smart SD cards, etc., and can run with TEE. SE includes a chip operating system (Chip Operating System, COS), a secure carrier application (Applet) and a memory to provide secure authentication, encryption and data protection functions.

[0064] Figure 1 FIG. 1 is a schematic diagram of a digital driving license management system according to an embodiment of the present disclosure. Figure 1 As shown, the management system 100 provided by the embodiment of the present disclosure includes: an on-board unit 110, a roadside unit 120, a cloud control platform 130, a real-name authentication platform 140, a traffic management platform 150 and a PKI certificate management agency 160. The on-board unit 110 includes a secure carrier 111 and a digital driving license management device 112. The roadside unit 120 includes a secure carrier 121.

[0065] In some embodiments, the roadside unit 120 is located in the roadside infrastructure, and is used to communicate with the passing vehicles and other roadside units to realize the vehicle-road cooperative communication between the vehicle and the roadside infrastructure. In some embodiments, the vehicle-mounted unit 110 is set in the vehicle, and is used to obtain the first broadcast data collected by the roadside unit 120 for the digital driving license of the vehicle, the first broadcast data includes the plain text data and the first digital signature of the digital driving license collection information, and when the first digital signature is verified, the digital driving license stored in the security carrier of the vehicle-mounted unit 110 is obtained, and the second broadcast data is sent to the roadside unit 120, the second broadcast data includes the ciphertext data of the digital driving license and the second digital signature of the ciphertext data, and when the second digital signature is verified, the ciphertext data of the digital driving license is decrypted at the roadside unit 120, and the plaintext data of the digital driving license is sent to the traffic management platform 150. In some embodiments, the cloud control platform 130 provides security management functions for the vehicle-road cooperative communication between the vehicle-mounted unit 110 and the roadside unit 120. In some embodiments, the traffic management platform 10 is used to perform business processing related to the digital driving license. In some embodiments, the real-name authentication platform 140 is used to verify the real identity of the vehicle, which can usually be achieved by requiring the user to provide some real-name information (such as the vehicle's unique identifier). The PKI (Public Key Infrastructure) certificate management agency 160, also known as the Certificate Authority (CA), is a core component of the PKI system and is responsible for issuing, managing, revoking and updating digital certificates, and will authenticate the entity that applies for the digital certificate.

[0066] Since the management method of the embodiment of the present disclosure is used to send the digital driving license to the traffic management platform, the specific process of executing business processing related to the digital driving license on the traffic management platform will be described in detail below, so it will not be repeated here.

[0067] Figure 2 FIG. 1 is a flow chart of a method for managing a digital driving license according to an embodiment of the present disclosure. The management method in the embodiment of the present disclosure is applied to the vehicle-mounted unit 110 and executed by the management device 112. Figure 2 As shown, management methods include:

[0068] In step S210, first broadcast data of the digital driving license of the vehicle collected by the roadside unit is obtained, and the first broadcast data includes plain text data of the digital driving license collection information and a first digital signature.

[0069] In some embodiments, when the vehicle travels to a certain range from the roadside infrastructure, the vehicle-mounted unit 110 located in the vehicle and the roadside unit 120 located in the roadside infrastructure can perform near field communication (for example, PC5 communication mode). In some embodiments, before step S210, the vehicle-mounted unit 110 can send an identity digital certificate application request to the PKI certificate management agency 160 if the vehicle real-name authentication is passed, receive the identity digital certificate issued by the PKI certificate management agency 160, and if the identity digital certificate is verified, store the identity digital certificate in the secure carrier 111 of the vehicle-mounted unit 110, and synchronize the identity digital certificate to the cloud control platform 130. In some embodiments, before step S210, the roadside unit 120 can send an application digital certificate application request to the PKI certificate management agency 160, receive the application digital certificate issued by the PKI certificate management agency 160, and if the application digital certificate is verified, store the application digital certificate in the secure carrier 121 of the roadside unit 120, and synchronize the application digital certificate to the cloud control platform 130.

[0070] In some embodiments, before step S210, the vehicle-mounted unit 110 may send a digital driving license application request. It should be noted that the digital driving license application request includes the ciphertext data and the third digital signature of the digital driving license application request information. The vehicle-mounted unit 110 uses the private key of the identity digital certificate to digitally sign and encrypt the digital driving license application request information to obtain the ciphertext data and the third digital signature of the digital driving license application request information. In some embodiments, the cloud control platform 130 uses the public key of the identity digital certificate to verify and decrypt the ciphertext data and the third digital signature of the digital driving license application request information. If the verification is passed, the plaintext data of the digital driving license application request information is forwarded to the traffic control platform 150, so that the traffic control platform 150 can issue the digital driving license to the cloud control platform 130, and the cloud control platform 130 uses the public key of the identity digital certificate to digitally sign and encrypt the digital driving license to obtain the fourth digital signature and ciphertext data of the digital driving license. It should be noted that the digital driving license issued by the traffic control platform 150 is the desensitized data of the digital driving license. In some embodiments, the vehicle-mounted unit 110 can receive the fourth digital signature and ciphertext data of the digital driving license, and use the private key of the identity digital certificate to verify and decrypt the fourth digital signature and ciphertext data of the digital driving license. If the verification is passed, the plaintext data of the digital driving license is stored in the secure carrier 111 of the vehicle-mounted unit 110. It can be understood that in the process of the vehicle-mounted unit 110 applying for a digital driving license from the cloud control platform 130, the activated identity digital certificate protects the data security of the entire application process. The applied digital driving license is stored in the secure carrier 111 of the vehicle-mounted unit 110, rather than in the cloud, which improves the storage security and convenience of the digital driving license.

[0071] In some embodiments, before step S210, the on-board unit 110 may obtain the driver's identity information of the vehicle and send an association request to associate the driver's license of the vehicle with the digital driving license. It is understandable that the association request includes the driver's identity information of the vehicle and the unique identifier of the vehicle (such as the license plate number). The driver's identity information includes ID card information (including name and ID card number) and / or face recognition information. In some embodiments, the association request may be forwarded to the traffic control platform 150 through the cloud control platform 130 to establish an association relationship between the driver's license and the digital driving license of the vehicle on the traffic control platform 150. It is easy to understand that after the vehicle applies to store the digital driving license, the driver can bind the driver's license with the digital driving license of the vehicle by inputting the driver's identity information before driving, so that when the vehicle is used to violate traffic rules, the driver's identity at the time of the traffic violation can be confirmed, so as to avoid the situation where the driver's license of another person is used to handle the traffic violation (for example, using the driver's license of another person to deduct points) after the traffic violation occurs.

[0072] In some embodiments, the cloud control platform 130 approves the application request sent by the roadside unit 120 to collect the digital driving licenses of passing vehicles. If approved, the on-board unit 110 can obtain the first broadcast data of the roadside unit 120 collecting the digital driving licenses of the vehicles. In some embodiments, the first broadcast data includes the plaintext data and the first digital signature of the digital driving license collection information, and the application digital certificate of the roadside unit 120. In some embodiments, the roadside unit 120 uses the private key of the application digital certificate to digitally sign the plaintext data of the digital driving license collection information to obtain a first digital signature. In some embodiments, the on-board unit 110 can verify the application digital certificate, and when the application digital certificate is verified to be legal, the first digital signature is verified using the public key of the application digital certificate.

[0073] In step S220, when the first digital signature is verified, the digital driving license stored in the security carrier of the vehicle-mounted unit is obtained.

[0074] In some embodiments, when the vehicle-mounted unit 110 passes the verification of the first digital signature, the digital driving license stored in the secure carrier 111 of the vehicle-mounted unit 110 is obtained. In some embodiments, the digital driving license is encrypted using the public key of the application digital certificate to obtain the ciphertext data of the digital driving license, and the ciphertext data of the digital driving license is digitally signed using the private key of the identity digital certificate to obtain the second digital signature.

[0075] In step S230, the second broadcast data is sent to the roadside unit, the second broadcast data including the ciphertext data of the digital driving license and the second digital signature of the ciphertext data. If the second digital signature is verified, the ciphertext data of the digital driving license is decrypted in the roadside unit, and the plaintext data of the digital driving license is sent to the traffic control platform, so that the traffic control platform can perform business processing related to the digital driving license.

[0076] In some embodiments, the vehicle-mounted unit 110 sends the second broadcast data to the roadside unit 120. In some embodiments, the second broadcast data includes the ciphertext data of the digital driving license and the second digital signature of the ciphertext data, and the identity digital certificate of the vehicle-mounted unit 110. In some embodiments, the roadside unit 120 can verify the identity digital certificate, and when the identity digital certificate is verified to be legitimate, the second digital signature is verified using the public key of the identity digital certificate. When the second digital signature is verified, the ciphertext data of the digital driving license is decrypted using the private key of the application digital certificate to obtain the plaintext data of the digital driving license. In some embodiments, the roadside unit 120 sends the plaintext data of the digital driving license to the traffic control platform 150, so as to perform business processing related to the digital driving license on the traffic control platform 150. For example, the digital driving license of the vehicle uploaded in real time by the roadside unit 120 can be used on the traffic control platform 150 to confirm whether the vehicle passing through has been overdue for annual inspection, whether the vehicle passing through has been illegally modified to change the body color, etc., without the need for the traffic police to stop the vehicle for inspection. It is easy to understand that when the vehicle-mounted unit 110 is not connected to the network, the digital driving license is sent to the traffic control platform 150 through the near field communication between the vehicle-mounted unit 110 and the roadside unit 120, and the traffic control platform 150 performs business processing related to the digital driving license, thereby improving the diversification of the application scenarios of the digital driving license. It is easy to understand that in the use scenario of the digital driving license, the interaction between the vehicle-mounted unit and the roadside unit ensures the legitimacy of the devices of both parties and the security of the data through the PKI certificate chain, thereby improving the security of the use of the digital driving license.

[0077] Figure 3 FIG. 1 is a flow chart of applying for an identity digital certificate according to an embodiment of the present disclosure. Figure 3 As shown in the figure, the process of applying for an identity digital certificate includes:

[0078] In step S301, the real-name authentication information is filled in the vehicle real-name authentication APP corresponding to the real-name authentication platform 140, and a real-name authentication request is initiated to the cloud control platform 130. The cloud control platform 130 can forward the real-name authentication information to the real-name authentication platform 140, so as to perform real-name authentication on the vehicle on the real-name authentication platform 140.

[0079] In step S302 , the vehicle-mounted unit 110 sends a vehicle real-name authentication status query request to the cloud control platform 130 .

[0080] In step S303 , when the vehicle real-name authentication is passed, the on-board unit 110 sends an identity digital certificate application request to the PKI certificate management agency 160 .

[0081] In step S304, when the identity digital certificate application request is verified, the PKI certificate authority 160 issues the identity digital certificate.

[0082] In step S305 , the onboard unit 110 receives the identity digital certificate issued by the PKI certificate authority 160 .

[0083] In step S306 , when the onboard unit 110 passes the identity digital certificate verification, the identity digital certificate is stored in the secure element 111 of the onboard unit 110 .

[0084] In step S307 , the vehicle-mounted unit 110 synchronizes the identity digital certificate to the cloud control platform 130 .

[0085] In step S308 , when the vehicle real-name authentication fails, the onboard unit 110 prompts that the vehicle real-name authentication fails.

[0086] Figure 4 The following is a flow chart of applying for a digital certificate according to an embodiment of the present disclosure. Figure 4 As shown in the figure, the process of applying for an application digital certificate includes:

[0087] In step S401 , the roadside unit 120 sends an application digital certificate application request to the PKI certificate authority 160 .

[0088] In step S402, when the application digital certificate application request is verified and passed, the PKI certificate authority 160 issues the application digital certificate.

[0089] In step S403 , the roadside unit 120 receives the application digital certificate issued by the PKI certificate authority 160 .

[0090] In step S404 , when the roadside unit 120 passes the verification of the application digital certificate, the roadside unit 120 stores the application digital certificate in the secure element 121 of the roadside unit 120 .

[0091] In step S405 , the roadside unit 120 synchronizes the application digital certificate to the cloud control platform 130 .

[0092] Figure 5The following is a flow chart of applying for a digital driving license according to an embodiment of the present disclosure. Figure 5 As shown in the figure, the process of applying for a digital driving license includes:

[0093] In step S501 , the vehicle-mounted unit 110 generates digital driving license application request information.

[0094] In step S502, the onboard unit 110 uses the private key of the identity digital certificate to digitally sign and encrypt the digital driving license application request information to obtain the ciphertext data of the digital driving license application request information and the third digital signature.

[0095] In step S503, the vehicle-mounted unit 110 sends a digital driving license application request to the cloud control platform 130. It should be noted that the digital driving license application request includes ciphertext data of the digital driving license application request information and a third digital signature.

[0096] In step S504, the cloud control platform 130 uses the public key of the identity digital certificate to verify and decrypt the ciphertext data and the third digital signature of the digital driving license application request information.

[0097] In step S505 , when the cloud control platform 130 passes the signature verification, the plain text data of the digital driving license application request information is forwarded to the traffic management platform 150 .

[0098] In step S506 , the traffic management platform 150 sends the digital driving license to the cloud control platform 130 .

[0099] In step S507, the cloud control platform 130 uses the public key of the identity digital certificate to digitally sign and encrypt the digital driving license to obtain the fourth digital signature and ciphertext data of the digital driving license.

[0100] In step S508 , the onboard unit 110 receives the fourth digital signature and ciphertext data of the digital driving license.

[0101] In step S509, the onboard unit 110 uses the private key of the identity digital certificate to verify and decrypt the fourth digital signature and ciphertext data of the digital driving license.

[0102] In step S510 , when the onboard unit 110 passes the signature verification, the plain text data of the digital driving license is stored in the secure carrier 111 of the onboard unit 110 .

[0103] Figure 6 The following is a flow chart of executing business processing related to a digital driving license according to an embodiment of the present disclosure. Figure 6 As shown, the process of executing business processing related to digital driving license includes:

[0104] In step S601, the vehicle-mounted unit 110 obtains the driver's identity information of the vehicle. It is understandable that the driver's identity information includes ID card information (including name and ID card number) and / or face recognition information.

[0105] In step S602, the vehicle-mounted unit 110 sends an association request for associating the driver's license of the vehicle with the digital driving license to the cloud control platform 130. It is understandable that the association request includes the driver's identity information and the vehicle's unique identifier (such as the license plate number).

[0106] In step S603 , the cloud control platform 130 forwards the association request to the traffic management platform 150 to establish an association between the driver's license and the digital vehicle license of the driver of the vehicle on the traffic management platform 150 .

[0107] In step S604, the roadside unit 120 sends an application request to the cloud control platform 130 for collecting digital driving licenses of passing vehicles.

[0108] In step S605 , the cloud control platform 130 approves the application request sent by the roadside unit 120 to collect the digital driving licenses of passing vehicles.

[0109] In step S606, when the application request for collecting the digital driving license of the vehicle is not approved, the roadside unit 120 prompts that the application request has failed to be approved.

[0110] In step S607 , when the application request for collecting the digital driving license of the vehicle is approved, the roadside unit 120 generates digital driving license collection information.

[0111] In step S608, the roadside unit 120 uses the private key of the application digital certificate to digitally sign the plain text data of the digital driving license collected information to obtain a first digital signature.

[0112] In step S609, the vehicle-mounted unit 110 obtains first broadcast data of the digital driving license collected by the roadside unit 120. In some embodiments, the first broadcast data includes plain text data and a first digital signature of the digital driving license collection information, and an application digital certificate of the roadside unit 120.

[0113] In step S610 , the application digital certificate is verified in the onboard unit 110 .

[0114] In step S611, when the vehicle-mounted unit 110 verifies that the application digital certificate is legitimate, the first digital signature is verified using the public key of the application digital certificate. When the vehicle-mounted unit 110 verifies that the application digital certificate is not legitimate, the process ends.

[0115] In step S612, if the vehicle-mounted unit 110 verifies the first digital signature successfully, the digital driving license stored in the secure element 110 of the vehicle-mounted unit 110 is obtained. If the vehicle-mounted unit 110 fails to verify the first digital signature, the process ends.

[0116] In step S613, the onboard unit 110 uses the public key of the application digital certificate to encrypt the digital driving license to obtain the ciphertext data of the digital driving license.

[0117] In step S614, the onboard unit 110 uses the private key of the identity digital certificate to digitally sign the ciphertext data of the digital driving license to obtain a second digital signature.

[0118] In step S615, the onboard unit 110 sends the second broadcast data to the roadside unit 120. In some embodiments, the second broadcast data includes the ciphertext data of the digital driving license and the second digital signature of the ciphertext data, and the identity digital certificate of the onboard unit 110.

[0119] In step S616 , the identity digital certificate is verified at the roadside unit 120 .

[0120] In step S617, when the roadside unit 120 verifies that the identity digital certificate is legitimate, it uses the public key of the identity digital certificate to verify the second digital signature. When the roadside unit 120 verifies that the identity digital certificate is not legitimate, the process ends.

[0121] In step S618, if the roadside unit 120 passes the second digital signature verification, it uses the private key of the application digital certificate to decrypt the ciphertext data of the digital driving license to obtain the plaintext data of the digital driving license. If the roadside unit 120 fails the second digital signature verification, the process ends.

[0122] In step S619 , the roadside unit 120 initiates a request to upload the digital driving license to the cloud control platform 130 .

[0123] In step S620 , the roadside unit 120 uploads the digital driving license to the cloud control platform 130 .

[0124] In step S621 , the cloud control platform 130 sends the plain text data of the digital driving license to the traffic management platform 150 .

[0125] In step S622, business processing related to the digital driving license is executed on the traffic management platform 150.

[0126] Figure 7FIG. 7 is a schematic diagram of a digital driving license management device according to an embodiment of the present disclosure. The management device 700 may be located in the vehicle-mounted unit 110 of the vehicle. Figure 7 As shown, the management device 700 includes a first broadcast data acquisition unit 710, a digital driving license acquisition unit 720 and a second broadcast data sending unit 730.

[0127] The first broadcast data acquisition unit 710 is used to acquire the first broadcast data collected by the roadside unit from the digital driving license of the vehicle, wherein the first broadcast data includes the plain text data of the digital driving license collection information and a first digital signature.

[0128] The digital driving license acquisition unit 720 is used to acquire the digital driving license stored in the security carrier of the vehicle-mounted unit when the first digital signature is verified.

[0129] A second broadcast data sending unit 730 is used to send second broadcast data to the roadside unit, where the second broadcast data includes the ciphertext data of the digital driving license and a second digital signature of the ciphertext data;

[0130] Among them, when the second digital signature is verified, the ciphertext data of the digital driving license is decrypted in the roadside unit, and the plaintext data of the digital driving license is sent to the traffic management platform, so as to perform business processing related to the digital driving license on the traffic management platform.

[0131] Since the specific process of using the management method of the embodiment of the present disclosure to send the digital driving license to the traffic management platform so as to execute the business processing related to the digital driving license on the traffic management platform has been described in detail above, it will not be repeated here.

[0132] The present disclosure also provides an electronic device, such as Figure 8 As shown, it includes a memory 820, a processor 810, and a program stored in the memory 820 and executable on the processor 810. When the program is executed by the processor 810, each process of each embodiment of the above-mentioned management method can be implemented, and the same technical effect can be achieved. To avoid repetition, it will not be described here.

[0133] Those skilled in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructions, or by controlling related hardware through instructions, and the instructions can be stored in a computer-readable storage medium and loaded and executed by a processor. To this end, the embodiments of the present disclosure also provide a storage medium, on which a computer program or instruction is stored, and when the computer program or instruction is executed by the processor, each process of each embodiment of the above management method can be implemented.

[0134] Since the instructions stored in the storage medium can execute the steps in the management method provided in the embodiment of the present disclosure, the beneficial effects that can be achieved by the management method provided in the embodiment of the present disclosure can be achieved. For details, please refer to the previous embodiment, which will not be repeated here. The specific implementation of each of the above operations can be referred to the previous embodiment, which will not be repeated here.

[0135] In summary, the management method provided by the present invention is applied to the vehicle's on-board unit to obtain the first broadcast data collected by the roadside unit for the vehicle's digital driving license, the first broadcast data including the plaintext data of the digital driving license collection information and the first digital signature, and when the first digital signature is verified, the digital driving license stored in the secure carrier of the on-board unit is obtained, and the second broadcast data is sent to the roadside unit, the second broadcast data including the ciphertext data of the digital driving license and the second digital signature of the ciphertext data, and when the second digital signature is verified, the ciphertext data of the digital driving license is decrypted at the roadside unit, and the plaintext data of the digital driving license is sent to the traffic management platform, so as to perform business processing related to the digital driving license on the traffic management platform, so that the digital driving license is stored in the secure carrier of the on-board unit, so as to realize the real data "physical binding" between the digital driving license and the vehicle, avoiding the need to carry a paper driving license with the vehicle and the problem of losing or forgetting the paper driving license, thereby improving the storage security and convenience of the digital driving license. When the vehicle-mounted unit is not connected to the network, the digital driving license is sent to the traffic control platform through near-field communication between the vehicle-mounted unit and the roadside unit, and the traffic control platform performs business processing related to the digital driving license, which improves the diversification of the application scenarios of the digital driving license. In the use scenario of the digital driving license, the interaction between the vehicle-mounted unit and the roadside unit uses the PKI certificate chain to ensure the legitimacy of both devices and the security of the data, which improves the security of the use of the digital driving license.

[0136] Finally, it should be noted that: Obviously, the above embodiments are only examples for clearly illustrating the present disclosure, and are not intended to limit the implementation methods. For ordinary technicians in the relevant field, other different forms of changes or modifications can be made based on the above description. It is not necessary and impossible to list all the implementation methods here. The obvious changes or modifications derived from this are still within the scope of protection of the present disclosure.

Claims

1. A method for managing a digital driving license, applied to an on-board unit of a vehicle, the method comprising: Acquire first broadcast data of the digital driving license of the vehicle collected by the roadside unit, wherein the first broadcast data includes plain text data of the digital driving license collection information and a first digital signature; If the first digital signature is verified, obtaining the digital driving license stored in the security carrier of the vehicle-mounted unit; Sending second broadcast data to the roadside unit, wherein the second broadcast data includes the ciphertext data of the digital driving license and a second digital signature of the ciphertext data; Among them, when the second digital signature is verified, the ciphertext data of the digital driving license is decrypted in the roadside unit, and the plaintext data of the digital driving license is sent to the traffic management platform, so as to perform business processing related to the digital driving license on the traffic management platform.

2. The management method according to claim 1, wherein: The first broadcast data also includes the application digital certificate of the roadside unit, and the second broadcast data also includes the identity digital certificate of the vehicle-mounted unit. The plaintext data of the digital driving license collected information is digitally signed using the private key of the application digital certificate to obtain the first digital signature, the ciphertext data of the digital driving license is digitally signed using the private key of the identity digital certificate to obtain the second digital signature, the digital driving license is encrypted using the public key of the application digital certificate to obtain the ciphertext data of the digital driving license, and the ciphertext data of the digital driving license is decrypted using the private key of the application digital certificate to obtain the plaintext data of the digital driving license.

3. The management method according to claim 1, wherein: Before obtaining the first broadcast data collected by the roadside unit from the digital driving license of the vehicle, the management method further includes: Acquiring the driver identity information of the vehicle, wherein the driver identity information includes ID card information and / or face recognition information; Sending an association request to associate the driver's license of the driver of the vehicle with the digital driving license, the association request including the driver's identity information and the vehicle unique identifier of the vehicle; The association request is forwarded to the traffic management platform through the cloud control platform to establish an association between the driver's license of the driver of the vehicle and the digital driving license on the traffic management platform.

4. The management method according to claim 1, wherein: The obtaining of the first broadcast data collected by the roadside unit from the digital driving license of the vehicle includes: The cloud control platform examines and approves the application request for collecting the digital driving license of the vehicle sent by the roadside unit. If the application request is approved, the cloud control platform obtains the first broadcast data of the roadside unit collecting the digital driving license of the vehicle.

5. The management method according to claim 2, wherein: Before obtaining the first broadcast data collected by the roadside unit from the digital driving license of the vehicle, the management method further includes: Sending a digital driving license application request, the digital driving license application request including ciphertext data of the digital driving license application request information and a third digital signature, wherein the on-board unit uses the private key of the identity digital certificate to digitally sign and encrypt the digital driving license application request information, and the cloud control platform uses the public key of the identity digital certificate to verify and decrypt the digital driving license application request information. If the signature verification passes, the plaintext data of the digital driving license application request information is forwarded to the traffic management platform, so that the traffic management platform can issue the digital driving license to the cloud control platform, and the cloud control platform uses the public key of the identity digital certificate to digitally sign and encrypt the digital driving license to obtain the fourth digital signature and ciphertext data of the digital driving license; Receiving the fourth digital signature and ciphertext data of the digital driving license; The fourth digital signature and ciphertext data of the digital driving license are verified and decrypted using the private key of the identity digital certificate. If the verification is successful, the plaintext data of the digital driving license is stored in the secure carrier of the on-board unit.

6. The management method according to claim 2, wherein: Before obtaining the first broadcast data collected by the roadside unit from the digital driving license of the vehicle, the management method further includes: When the vehicle real-name authentication is passed, sending an identity digital certificate application request to the certificate management agency; Receiving the identity digital certificate issued by the certificate management agency; If the identity digital certificate passes the verification, storing the identity digital certificate in the security carrier of the vehicle-mounted unit; The identity digital certificate is synchronized to the cloud control platform.

7. The management method according to claim 2, wherein: Before obtaining the first broadcast data collected by the roadside unit from the digital driving license of the vehicle, the management method further includes: The roadside unit sends an application request for an application digital certificate to a certificate management agency; Receiving, at the roadside unit, the application digital certificate issued by the certificate management agency; When the application digital certificate passes verification, the roadside unit stores the application digital certificate in a secure carrier of the roadside unit; The application digital certificate is synchronized to the cloud control platform.

8. A digital driving license management device, used for an on-board unit of a vehicle, the management device comprising: A first broadcast data acquisition unit, configured to acquire first broadcast data collected by a roadside unit from a digital driving license of the vehicle, wherein the first broadcast data includes plain text data of the collected information of the digital driving license and a first digital signature; A digital driving license acquisition unit, configured to acquire the digital driving license stored in the security carrier of the vehicle-mounted unit when the first digital signature is verified; A second broadcast data sending unit, configured to send second broadcast data to the roadside unit, wherein the second broadcast data includes the ciphertext data of the digital driving license and a second digital signature of the ciphertext data; Among them, when the second digital signature is verified, the ciphertext data of the digital driving license is decrypted in the roadside unit, and the plaintext data of the digital driving license is sent to the traffic management platform, so as to perform business processing related to the digital driving license on the traffic management platform.

9. A vehicle-mounted unit, comprising A secure carrier for storing the digital driving license of the vehicle; The management device as described in claim 8 implements the steps of the method as described in any one of claims 1 to 7, and sends the digital driving license to the traffic management platform so as to perform business processing related to the digital driving license on the traffic management platform.

10. A digital driving license management system, comprising: A roadside unit is located at the roadside infrastructure and is used to communicate with passing vehicles and other roadside units to achieve vehicle-road cooperative communication between the vehicle and the roadside infrastructure; The on-board unit according to claim 9 is arranged in the vehicle, and is used to obtain the first broadcast data collected by the roadside unit for the digital driving license of the vehicle, the first broadcast data including the plaintext data and the first digital signature of the digital driving license collection information, and when the first digital signature is verified, the digital driving license stored in the security carrier of the on-board unit is obtained, and the second broadcast data is sent to the roadside unit, the second broadcast data including the ciphertext data of the digital driving license and the second digital signature of the ciphertext data, and when the second digital signature is verified, the ciphertext data of the digital driving license is decrypted at the roadside unit, and the plaintext data of the digital driving license is sent to the traffic management platform; The cloud control platform is used to provide a security management function for the vehicle-road cooperative communication between the on-board unit and the roadside unit; The traffic management platform is used to execute business processing related to the digital driving license.

11. An electronic device, comprising: A processor, a memory, and a program stored in the memory and executable on the processor, wherein the program implements the steps of the method according to any one of claims 1 to 7 when executed by the processor.

12. A storage medium having a computer program or instruction stored thereon, wherein the computer program or instruction, when executed by a processor, implements the steps of the method according to any one of claims 1 to 7.

Images