Road traffic terminal identification method and related device

Abstract

The invention provides a road traffic terminal identification method and a related device. The method comprises the following steps: a client acquires hardware information and a timestamp from road traffic terminal equipment, generates a symmetric key and creates a terminal identification code; and encrypting the terminal identification code by using the symmetric key, receiving a proxy public key of the proxy node and encrypting the symmetric key. And generating client public and private keys, and signing the terminal identification code by using the private key. And the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature are sent to the proxy node, and a terminal identification analysis result is generated and returned by the proxy node. According to the method and the device, the calculation and storage pressure of the terminal equipment is relieved, the identification management efficiency and safety are improved, and the real-time performance and the analysis efficiency of the system are enhanced.

Description

Technical Field

[0001] The present disclosure relates to the field of intelligent transportation technology, and in particular to a road traffic terminal identification method and related devices. Background Art

[0002] This section is intended to provide a background or context to the embodiments of the disclosure that are recited in the claims. No description herein is admitted to be prior art by inclusion in this section.

[0003] With the rapid development of intelligent transportation systems, the number and types of road traffic terminal equipment are increasing, including traffic lights, electronic police, vehicle terminals, sensor nodes, etc. They play an important role in traffic management, vehicle monitoring, environmental monitoring, etc.

[0004] However, in the related technologies, terminal devices have difficulty supporting complex identification generation, registration and resolution operations due to limited resources. At the same time, the identification resolution system also has obvious deficiencies in terms of security, resolution efficiency and real-time performance. Summary of the invention

[0005] In view of this, the purpose of the present disclosure is to propose a road traffic terminal identification method and related devices, which at least to a certain extent solve one of the technical problems in the related art.

[0006] Based on the above purpose, the first aspect of the exemplary embodiment of the present disclosure provides a road traffic terminal identification method, which is applied to a client, and the method includes: Collecting information from road traffic terminal equipment to obtain hardware information and a timestamp; generating a symmetric key to obtain a terminal identification code based on the hardware information and the timestamp; encrypting the terminal identification code based on the symmetric key to obtain an encrypted terminal identification code; Receiving a proxy public key transmitted by a proxy node; encrypting the symmetric key by using the proxy public key to obtain an encrypted symmetric key; Generate a client public key and a client private key, and sign the terminal identification code based on the client private key to obtain a terminal identification signature; The client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature are transmitted to the proxy node so that the proxy node generates a terminal identification resolution result, and the terminal identification resolution result generated by the proxy node is received.

[0007] Based on the same inventive concept, a second aspect of the exemplary embodiment of the present disclosure provides a road traffic terminal identification method, which is applied to a proxy node, and the method includes: Generate a proxy public key and a proxy private key, and transmit the proxy public key to the client, receive the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature transmitted by the client; verify the terminal identification signature based on the client public key to obtain a signature verification result; Decrypting the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain the terminal identification code; Verifying the terminal identification code to obtain a terminal identification code verification result; Determine authentication information of the terminal identification code, and obtain resolution request information based on the authentication information, the terminal identification code verification result, the terminal identification code, and the terminal identification signature; Performing format conversion on the resolution request information to obtain adapted resolution request information; transmitting the adapted resolution request information to an identification resolution system; receiving a terminal identification resolution result transmitted by the identification resolution system, and transmitting the terminal identification resolution result to a client; wherein the terminal identification resolution result is obtained by the identification resolution system parsing the adapted resolution request information.

[0008] Based on the same inventive concept, the third aspect of the exemplary embodiment of the present disclosure provides a road traffic terminal active identification device, which is applied to a client, including: The encryption identification code determination module is configured to collect information from the road traffic terminal equipment to obtain hardware information and a timestamp; generate a symmetric key to obtain a terminal identification code based on the hardware information and the timestamp; encrypt the terminal identification code based on the symmetric key to obtain an encrypted terminal identification code; The encryption key determination module is configured to receive the proxy public key transmitted by the proxy node; encrypt the symmetric key by the proxy public key to obtain the encrypted symmetric key; The identification signature determination module is configured to generate a client public key and a client private key, and sign the terminal identification code based on the client private key to obtain a terminal identification signature; The resolution result receiving module is configured to transmit the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature to the proxy node so that the proxy node generates a terminal identification resolution result, and receive the terminal identification resolution result generated by the proxy node.

[0009] Based on the same inventive concept, the fourth aspect of the exemplary embodiment of the present disclosure provides a road traffic terminal active identification device, which is applied to a proxy node, including: The signature verification result determination module is configured to generate a proxy public key and a proxy private key, transmit the proxy public key to the client, receive the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature transmitted by the client; verify the terminal identification signature based on the client public key to obtain a signature verification result; a terminal identification code determination module, configured to decrypt the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain the terminal identification code; an identification code verification result determination module, configured to verify the terminal identification code to obtain a terminal identification code verification result; a request information determination module configured to determine authentication information of the terminal identification code, and obtain resolution request information based on the authentication information, the terminal identification code verification result, the terminal identification code, and the terminal identification signature; The resolution result transmission module is configured to perform format conversion on the resolution request information to obtain adapted resolution request information; transmit the adapted resolution request information to the identity resolution system; and receive the terminal identity resolution result transmitted by the identity resolution system, wherein the terminal identity resolution result is obtained by the identity resolution system parsing the adapted resolution request information.

[0010] Based on the same inventive concept, the fifth aspect of the exemplary embodiment of the present disclosure provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the method described in the first aspect is implemented.

[0011] Based on the same inventive concept, the sixth aspect of the exemplary embodiment of the present disclosure provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the method described in the first aspect.

[0012] Based on the same inventive concept, a seventh aspect of the exemplary embodiments of the present disclosure provides a computer program product, including computer program instructions. When the computer program instructions are executed on a computer, the computer executes the method described in the first aspect.

[0013] It can be seen from the above that an embodiment of the present disclosure provides a road traffic terminal identification method, which is applied to a client, and the method includes: Collect information from road traffic terminal equipment to obtain hardware information and timestamp; generate a symmetric key, and obtain a terminal identification code based on the hardware information and timestamp; encrypt the terminal identification code based on the symmetric key to obtain an encrypted terminal identification code; receive a proxy public key transmitted by a proxy node; encrypt the symmetric key by using the proxy public key to obtain an encrypted symmetric key; generate a client public key and a client private key, and sign the terminal identification code based on the client private key to obtain a terminal identification signature; transmit the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature to the proxy node so that the proxy node generates a terminal identification resolution result, and receive the terminal identification resolution result generated by the proxy node.

[0014] A road traffic terminal identification method, applied to a proxy node, comprising: Generate a proxy public key and a proxy private key, and transmit the proxy public key to the client, receive the client public key, encrypted terminal identification code, encrypted symmetric key and terminal identification signature transmitted by the client; verify the terminal identification signature based on the client public key to obtain a signature verification result; decrypt the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain a terminal identification code; verify the terminal identification code to obtain a terminal identification code verification result; determine the authentication information of the terminal identification code, and obtain resolution request information based on the authentication information, the terminal identification code verification result, the terminal identification code, and the terminal identification signature; format convert the resolution request information to obtain adapted resolution request information; transmit the adapted resolution request information to an identity resolution system; receive a terminal identification resolution result transmitted by the identity resolution system, and transmit the terminal identification resolution result to the client; wherein the terminal identification resolution result is obtained by the identity resolution system parsing the adapted resolution request information. The present disclosure effectively reduces the computing and storage pressure on terminal devices, while achieving efficient execution of identity management tasks, significantly improving the overall security of the system, and greatly improving the efficiency and real-time performance of identity resolution. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the technical solutions in the present disclosure or related technologies, the drawings required for use in the embodiments or related technical descriptions are briefly introduced below. Obviously, the drawings described below are only embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0016] Figure 1A schematic diagram of an application scenario of a road traffic terminal identification method provided by an exemplary embodiment of the present disclosure; Figure 2 A schematic diagram of a process of applying a road traffic terminal identification method provided by an exemplary embodiment of the present disclosure to a client; Figure 3 A schematic diagram of a system architecture of a road traffic terminal identification method provided by an exemplary embodiment of the present disclosure; Figure 4 A schematic diagram of a process of applying a road traffic terminal identification method provided by an exemplary embodiment of the present disclosure to a proxy node; Figure 5 A schematic diagram of a structure of a road traffic terminal identification device provided by an exemplary embodiment of the present disclosure applied to a client; Figure 6 A schematic diagram of a structure of a road traffic terminal identification device provided by an exemplary embodiment of the present disclosure applied to a proxy node; Figure 7 A schematic diagram of the hardware structure of an electronic device provided for an exemplary embodiment of the present disclosure. DETAILED DESCRIPTION

[0017] It is understandable that before using the technical solutions disclosed in the embodiments of this application, the type, scope of use, usage scenarios, etc. of the personal information involved in this application should be informed to the user and the user's authorization should be obtained in an appropriate manner in accordance with relevant laws and regulations.

[0018] For example, in response to receiving an active request from a user, a prompt message is sent to the user to clearly prompt the user that the operation requested to be performed will require obtaining and using the user's personal information. Thus, the user can autonomously choose whether to provide personal information to software or hardware such as an electronic device, application, server, or storage medium that performs the operation of the technical solution of the present application according to the prompt message.

[0019] As an optional but non-limiting implementation, in response to receiving an active request from the user, the prompt information may be sent to the user in the form of a pop-up window, in which the prompt information may be presented in text form. In addition, the pop-up window may also carry a selection control for the user to choose "agree" or "disagree" to provide personal information to the electronic device.

[0020] It is understandable that the above notification and the process of obtaining user authorization are merely illustrative and do not constitute a limitation on the implementation method of the present application. Other methods that meet relevant laws and regulations may also be applied to the implementation method of the present application.

[0021] It is understandable that the data involved in this technical solution (including but not limited to the data itself, the acquisition or use of the data) shall comply with the requirements of relevant laws, regulations and relevant provisions.

[0022] In order to make the purpose, technical solutions and advantages of the present disclosure more clear, the principles and spirit of the present disclosure will be described with reference to several exemplary embodiments. It should be understood that these embodiments are provided only to enable those skilled in the art to better understand and implement the present disclosure, and are not intended to limit the scope of the present disclosure in any way. On the contrary, these embodiments are provided to make the present disclosure more thorough and complete, and to fully convey the scope of the present disclosure to those skilled in the art.

[0023] It should be understood herein that any number of elements in the drawings is for illustration rather than limitation, and any naming is only for distinction rather than having any limiting meaning.

[0024] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present disclosure should be understood by people with ordinary skills in the field to which the present disclosure belongs. The "first", "second" and similar words used in the embodiments of the present disclosure do not represent any order, quantity or importance, but are only used to distinguish different components. "Including" or "comprising" and similar words mean that the elements or objects appearing in front of the word cover the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connecting" or "connected" and similar words are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the described object changes, the relative positional relationship may also change accordingly. The article "one" or "a" before an element does not exclude the existence of multiple such elements.

[0025] The principle and spirit of the present disclosure are explained in detail below with reference to several representative embodiments of the present disclosure.

[0026] As described in the background technology, in the related art, terminal devices are difficult to support complex identification generation, registration and resolution operations due to limited resources. At the same time, the identification resolution system also has obvious deficiencies in security, resolution efficiency and real-time performance. Specifically, the existing identification resolution system faces many challenges and limitations in practical applications, especially for road traffic terminal devices. First of all, these systems usually require terminal devices to have certain software and hardware capabilities to support the generation, registration and resolution functions of identification. This means that the terminal equipment needs to be transformed or upgraded accordingly, such as increasing storage capacity, improving processor performance or optimizing communication modules. However, in road traffic scenarios, there are many types of terminal devices, including traffic lights, electronic police, vehicle-mounted terminals, sensor nodes, etc. These devices often have limited resources and are difficult to meet the high requirements of the identification resolution system for computing and storage capabilities. For example, many old traffic light devices may only have basic signal control functions and lack sufficient storage space and processing power to support complex identification management tasks.

[0027] In road traffic scenarios, terminal devices not only have to process massive amounts of data, but also have to face the problems of high concurrent access and coexistence of multiple protocols. This complex working environment places higher demands on the identity resolution system. Existing identity resolution systems often require terminal devices to have high computing and storage capabilities to meet these challenges. However, many terminal devices have low hardware configurations and are unable to support complex identity management functions. For example, some small sensor nodes may only be equipped with low-power processors and limited memory, and cannot efficiently handle the complex algorithms and data storage tasks required for identity generation, registration, and resolution. This dependence on the terminal's hardware and software structure makes the existing identity resolution system face high costs and complexity in actual deployment. The transformation or upgrade of terminal equipment not only requires a large amount of capital, but also requires a lot of time and manpower for system integration and debugging.

[0028] In addition, the existing identity resolution system lacks an efficient proxy mechanism for identity registration, resolution, and business interaction. Typically, terminal devices need to interact directly with the identity resolution system, which may cause performance bottlenecks on resource-constrained terminal devices. For example, terminal devices may need to frequently communicate with the identity resolution server to complete identity registration and resolution operations, which not only increases the burden on terminal devices, but may also cause network delays and data transmission errors. Many terminal devices are unable to complete these operations efficiently due to limited resources or poor network conditions, which affects the operating efficiency of the entire system.

[0029] Finally, the existing identification resolution system has limitations in cross-system data sharing. In road traffic scenarios, terminal devices often belong to different systems, such as the traffic management department's signal light system, the vehicle manufacturer's on-board terminal system, etc. Seamless data interaction is required between these systems to support applications such as traffic flow monitoring and vehicle scheduling. However, the existing identification resolution system makes it difficult to achieve seamless data interaction between different systems. In terms of identification registration, resolution, and business interaction, the efficiency is low and it is difficult to meet the actual needs of road traffic terminals. For example, when an on-board terminal needs to interact with a roadside unit for data, the existing identification resolution system may not be able to quickly and accurately complete the identification resolution, thereby affecting the real-time navigation of the vehicle and the dynamic adjustment of traffic signals.

[0030] In order to solve the above problems, the present disclosure provides a road traffic terminal identification method and related device solutions, which specifically include: A road traffic terminal identification method, applied to a client, comprising: Collect information from road traffic terminal equipment to obtain hardware information and timestamp; generate a symmetric key, and obtain a terminal identification code based on the hardware information and timestamp; encrypt the terminal identification code based on the symmetric key to obtain an encrypted terminal identification code; receive a proxy public key transmitted by a proxy node; encrypt the symmetric key by using the proxy public key to obtain an encrypted symmetric key; generate a client public key and a client private key, and sign the terminal identification code based on the client private key to obtain a terminal identification signature; transmit the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature to the proxy node so that the proxy node generates a terminal identification resolution result, and receive the terminal identification resolution result generated by the proxy node.

[0031] A road traffic terminal identification method, applied to a proxy node, comprising: Generate a proxy public key and a proxy private key, and transmit the proxy public key to the client, receive the client public key, encrypted terminal identification code, encrypted symmetric key and terminal identification signature transmitted by the client; verify the terminal identification signature based on the client public key to obtain a signature verification result; decrypt the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain a terminal identification code; verify the terminal identification code to obtain a terminal identification code verification result; determine the authentication information of the terminal identification code, and obtain resolution request information based on the authentication information, the terminal identification code verification result, the terminal identification code, and the terminal identification signature; format convert the resolution request information to obtain adapted resolution request information; transmit the adapted resolution request information to an identity resolution system; receive a terminal identification resolution result transmitted by the identity resolution system, and transmit the terminal identification resolution result to the client; wherein the terminal identification resolution result is obtained by the identity resolution system parsing the adapted resolution request information. The present disclosure adds a client security module and obtains and generates a terminal identification based on a protocol parsing mechanism, without the need to modify or upgrade the software and hardware structure of the terminal device. This method significantly reduces the computing and storage burden of the terminal device, and can efficiently complete the identification management task without increasing hardware costs.

[0032] The present disclosure also ensures the security of terminal devices during the process of identity generation, registration and resolution through lightweight security protocols and encryption mechanisms. At the same time, based on the proxy mechanism, terminal devices do not need to interact directly with the identity resolution system, further reducing security risks. This design effectively prevents security threats such as forged identities and data tampering, and improves the overall security of the system.

[0033] Finally, the present invention discloses an identification registration, resolution and business interaction method based on a proxy mechanism. Through the efficient processing capability of the proxy node, the terminal device does not need to directly participate in complex identification management operations, thereby significantly improving the efficiency and real-time performance of identification resolution.

[0034] After introducing the basic principles of the present disclosure, various non-limiting embodiments of the present disclosure are described in detail below.

[0035] refer to Figure 1 , which is a schematic diagram of an application scenario of the road traffic terminal identification method provided by an exemplary embodiment of the present disclosure.

[0036] This application scenario includes a client 101, a proxy node 102, and an identity resolution system 103. The client 101, the proxy node 102, and the identity resolution system 103 may be connected via a wired or wireless communication network to achieve data interaction.

[0037] The client 101 may be an electronic device with data transmission and multimedia input / output functions close to the user side, including but not limited to a desktop computer, a mobile phone, a mobile computer, a tablet computer, a media player, a smart wearable device, a personal digital assistant (PDA) or other electronic devices capable of implementing the above functions. The electronic device may include a processor and a display screen with a touch input function, the display screen is used to present a graphical user interface, the graphical user interface can display an application interface, and the processor is used to process application data, generate a graphical user interface, and control the display of the graphical user interface on the display screen.

[0038] The proxy node 102 and the identity resolution system 103 can both be independent physical servers, or a server cluster or distributed system composed of multiple physical servers. They can also be cloud servers that provide basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), as well as big data and artificial intelligence platforms.

[0039] In some exemplary embodiments, the road traffic terminal identification method may be run on the client 101 or the proxy node 102 .

[0040] When the road traffic terminal identification method is run on the proxy node 102, the proxy node 102 is used to provide a road traffic terminal identification service to the user of the client 101. The client 101 collects information about the road traffic terminal device to obtain hardware information and a timestamp; the client 101 generates a symmetric key, and the client 101 obtains a terminal identification code based on the hardware information and the timestamp; the client 101 encrypts the terminal identification code based on the symmetric key to obtain an encrypted terminal identification code; The client 101 receives the proxy public key transmitted by the proxy node 102; the client 101 encrypts the symmetric key by using the proxy public key to obtain the encrypted symmetric key; The client 101 generates a client public key and a client private key, and the client 101 signs the terminal identification code based on the client private key to obtain a terminal identification signature; The client 101 transmits the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature to the proxy node 102, so that the proxy node 102 generates a terminal identification resolution result, and the client 101 receives the terminal identification resolution result generated by the proxy node 102; The proxy node 102 generates a proxy public key and a proxy private key, and transmits the proxy public key to the client 101. The proxy node 102 receives the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature transmitted by the client 101; the proxy node 102 verifies the terminal identification signature based on the public key of the client 101 to obtain a signature verification result; The proxy node 102 decrypts the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain the terminal identification code; The proxy node 102 verifies the terminal identification code and obtains a terminal identification code verification result; The proxy node 102 determines the authentication information of the terminal identification code, and the proxy node 102 obtains the resolution request information based on the authentication information, the terminal identification code verification result, the terminal identification code, and the terminal identification signature; The proxy node 102 converts the format of the resolution request information to obtain the adapted resolution request information; the proxy node 102 transmits the adapted resolution request information to the identity resolution system 103; the proxy node 102 receives the terminal identity resolution result transmitted by the identity resolution system 103, and the proxy node 102 transmits the terminal identity resolution result to the client 101; wherein, the terminal identity resolution result is obtained by the identity resolution system 103 parsing the adapted resolution request information.

[0041] It should be noted that the above application scenarios are only shown to facilitate understanding of the spirit and principle of the present disclosure, and the embodiments of the present disclosure are not limited in this respect. On the contrary, the embodiments of the present disclosure can be applied to any applicable scenario.

[0042] refer to Figure 2 , a road traffic terminal identification method, applied to a client, the method comprising the following steps: Step S210: collect information on road traffic terminal equipment to obtain hardware information and timestamp; generate a symmetric key, and obtain a terminal identification code based on the hardware information and timestamp; encrypt the terminal identification code based on the symmetric key to obtain an encrypted terminal identification code.

[0043] In specific implementation, the information of road traffic terminal equipment is collected to obtain hardware information and timestamps: refer to Figure 3In order to collect necessary data from road traffic terminal equipment, the road traffic terminal identification system builds a perception layer. The perception layer can collect data on the vehicle side and the road side. The active identification carrier on the vehicle side can actively send identification information to communicate with other devices. For example, the OBU (on-board unit) active identification body can actively broadcast the vehicle ID, current location and other information through communication technologies such as Wi-Fi and Bluetooth. The T-BOX (on-board telematics platform) active identification body integrates a variety of communication and positioning functions, and can connect to external systems through mobile networks. By monitoring the status of the vehicle, the vehicle data is transmitted to the cloud platform or roadside equipment. Various active identification carriers on the road side actively send signals based on their own perception capabilities for other devices to identify. For example, the RSU (roadside unit) active identification body actively exchanges information with the vehicle-mounted equipment through wireless communication protocols, and the traffic light controller and traffic signal system actively send traffic management information through sensors and communication equipment, and transmit relevant information to other devices through sensors. The perception layer contains a large number of heterogeneous road traffic equipment, which actively transmit equipment information through their own software.

[0044] The upper layer of the perception layer is the platform layer, which includes the client, proxy node and identity resolution platform, in which the client contains the client security module. Under the premise of ensuring the security and lightweight of road traffic equipment data, the client security module collects the equipment information obtained from the perception layer and generates a unique identification of the equipment locally and encrypts it and sends it to the proxy node. The proxy node forwards the identification registration request to the identity resolution system for identification registration through the proxy mechanism. The identity resolution system adopts the Handle identity resolution system. After receiving the identification registration request, the identity resolution platform performs identification registration and returns the registration confirmation. Similarly, when performing identity resolution, the client security module initiates a resolution request and forwards the resolution request to the identity resolution platform through the proxy node, and the platform returns the resolution result.

[0045] Among them, the perception layer will collect vehicle information and road-side information through active identification carriers, obtain device-related information and then obtain hardware information and timestamp .

[0046] In the above exemplary embodiment, a method of obtaining hardware information and a timestamp is introduced. The following describes a method of obtaining a terminal identification code: In this exemplary embodiment, obtaining a terminal identification code based on the hardware information and the timestamp includes: Concatenating the hardware information and the timestamp to obtain original identification data; The original identification data is calculated based on a hash algorithm to obtain the terminal identification code.

[0047] In a specific implementation, the hardware information and the timestamp are concatenated to obtain the original identification data; the original identification data is calculated based on a hash algorithm to obtain the terminal identification code: refer to Figure 3 The client security module will store the unique hardware information of the device and timestamp The original identification data is spliced ​​together, and then the hash algorithm SHA-256 is used to calculate and generate a unique identification That is, the terminal identification code.

[0048] .

[0049] In the above exemplary embodiment, a method for obtaining a terminal identification code is introduced. The following describes a method for obtaining an encrypted terminal identification code: In this exemplary embodiment, encrypting the terminal identification code based on the symmetric key to obtain the encrypted terminal identification code includes: Encrypting the symmetric key based on an asymmetric encryption algorithm to obtain a symmetric encryption key; The terminal identification code is encrypted using the symmetric encryption key to obtain the encrypted terminal identification code.

[0050] In a specific implementation, the symmetric key is encrypted based on an asymmetric encryption algorithm to obtain a symmetric encryption key; the terminal identification code is encrypted by the symmetric encryption key to obtain the encrypted terminal identification code: refer to Figure 3 , the client generates a symmetric key, where Used to represent the symmetric key generated for the client, and then encrypt the symmetric key, where Used to represent the symmetric encryption key used by the client. To ensure the security and integrity of the generated identification during transmission, the client security module uses the AES symmetric encryption algorithm to encrypt the data and uses an asymmetric encryption algorithm (such as RSA) to protect the key.

[0051]

[0052] in, Used to represent the encrypted terminal identification code.

[0053] Step S220: Receive the proxy public key transmitted by the proxy node; encrypt the symmetric key using the proxy public key to obtain an encrypted symmetric key.

[0054] In specific implementation, the method of receiving the proxy public key transmitted by the proxy node is: refer to Figure 3 , the client receives the proxy public key generated by the proxy node and transmitted by the proxy node, where Used to represent the proxy public key, In a specific implementation, the symmetric key is encrypted by the proxy public key to obtain the encrypted symmetric key: refer to Figure 3 ,When the client and the proxy node communicate with each other, the RSA asymmetric encryption algorithm is used to exchange encryption keys.

[0055]

[0056] in, Used to represent the encrypted symmetric key.

[0057] The client encrypts the asymmetric key using RSA and sends it to the proxy node, which decrypts it using its private key and obtains the symmetric key. The two parties can then use the symmetric key for secure communication.

[0058] Step S230: Generate a client public key and a client private key, and sign the terminal identification code based on the client private key to obtain a terminal identification signature.

[0059] In a specific implementation, a client public key and a client private key are generated, and the terminal identification code is signed based on the client private key to obtain a terminal identification signature: refer to Figure 3 ,To ensure the integrity of the data and the authenticity of the source, the client security module uses a digital signature to authenticate the sent identification information.,The digital signature is signed by the client private key and the receiving end verifies it by the public key.,The client security module signs the generated identification by the client private,key.

[0060]

[0061] in, Used to indicate the terminal identification signature. Used to represent the client private key.

[0062] Step S240: transmit the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature to the proxy node, so that the proxy node generates a terminal identification resolution result, and receive the terminal identification resolution result generated by the proxy node.

[0063] In a specific implementation, the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature are transmitted to the proxy node so that the proxy node generates a terminal identification resolution result, and the terminal identification resolution result generated by the proxy node is received in the following manner: refer to Figure 3 The client transmits the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature to the proxy node, so that the proxy node generates a terminal identification resolution result. Finally, the client receives the terminal identification resolution result sent by the proxy node.

[0064] refer to Figure 4 , a road traffic terminal identification method, applied to a proxy node, the method comprising the following steps: Step S410, generate a proxy public key and a proxy private key, and transmit the proxy public key to the client, receive the client public key, encrypted terminal identification code, encrypted symmetric key and terminal identification signature transmitted by the client; verify the terminal identification signature based on the client public key to obtain a signature verification result.

[0065] In the specific implementation, a proxy public key and a proxy private key are generated, and the proxy public key is transmitted to the client, and the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature transmitted by the client are received: refer to Figure 3 When the proxy node interacts with the client, the proxy node will first generate a proxy public key and a paired proxy private key. The proxy node will then transmit the proxy public key to the client for encrypting the client's symmetric key, retain the proxy private key, and then receive the client public key, encrypted terminal identification code, encrypted symmetric key and terminal identification signature transmitted by the client.

[0066] In a specific implementation, the terminal identification signature is verified based on the client public key to obtain the signature verification result: The receiving end, i.e. the proxy node, uses the client's public key to perform signature verification to ensure that the identification data has not been tampered with.

[0067] .

[0068] in, Used to indicate the signature verification result. Only when the signature verification result passes can the proxy node perform subsequent operations.

[0069] Step S420: decrypt the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain a terminal identification code.

[0070] In this exemplary embodiment, decrypting the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain the terminal identification code includes: Decrypting the encrypted symmetric key based on the signature verification result and the proxy private key to obtain a symmetric key; The encrypted terminal identification code is decrypted based on the symmetric key to obtain the terminal identification code.

[0071] In a specific implementation, the encrypted symmetric key is decrypted based on the signature verification result and the proxy private key to obtain the symmetric key; the encrypted terminal identification code is decrypted based on the symmetric key to obtain the terminal identification code: refer to Figure 3 , the proxy node receives the identity registration request sent by the client Afterwards, since the registration request contains encrypted identification data, device information, and digital signature, the request data is decrypted using the client's public key.

[0072]

[0073] in The plaintext data obtained after the proxy node decrypts contains the original information during the encrypted transmission process, including the terminal identification code ; Used to represent the proxy private key.

[0074] Step S430: verify the terminal identification code to obtain a terminal identification code verification result.

[0075] In a specific implementation, the terminal identification code is verified to obtain the terminal identification code verification result: refer to Figure 3 ,The proxy node verifies the digital signature generated by the client private key to ensure the integrity and legitimacy of the data. If the verification is successful, the subsequent operations are carried out.

[0076]

[0077] in, It is a status identifier used to indicate whether data, requests or identification are legal, valid or verified, that is, the terminal identification code verification result.

[0078] Step S440: Determine the authentication information of the terminal identification code, and obtain resolution request information based on the authentication information, the terminal identification code verification result, the terminal identification code, and the terminal identification signature.

[0079] refer to Figure 3 After the proxy node verifies the request, it will forward the registration request to the identity resolution platform for identity registration. The proxy node is ready to decrypt other necessary authentication information. Forward them together to the identity resolution platform.

[0080]

[0081] in Used to represent parsing request information.

[0082] The proxy node prepares this information and passes it to the resolution platform through appropriate protocols according to the requirements of the identity resolution platform.

[0083] Step S450, convert the format of the resolution request information to obtain adapted resolution request information; transmit the adapted resolution request information to the identity resolution system; receive the terminal identity resolution result transmitted by the identity resolution system, and transmit the terminal identity resolution result to the client; wherein the terminal identity resolution result is obtained by the identity resolution system parsing the adapted resolution request information.

[0084] In this exemplary embodiment, the format of the resolution request information is converted to obtain the adapted resolution request information, including: The format of the resolution request information is converted based on the protocol adaptation function to obtain the adapted resolution request information.

[0085] In a specific implementation, the format of the resolution request information is converted based on the protocol adaptation function to obtain the adapted resolution request information: refer to Figure 3 After receiving the resolution request from the client, the proxy node performs protocol adaptation and forwarding operations. The proxy node forwards the resolution request to the identity resolution platform.

[0086]

[0087] in is the decrypted identity resolution request. It is a protocol adapter function that converts the resolution request into a format supported by the identity resolution platform. Used to indicate the adapted parsing request information.

[0088] In a specific implementation, a terminal identification resolution result transmitted by the identification resolution system is received, and the terminal identification resolution result is transmitted to a client; wherein the terminal identification resolution result is obtained by the identification resolution system parsing the adapted resolution request information.

[0089] refer to Figure 3After the identity resolution system completes the resolution of the adapted resolution request information, it will generate a terminal identity resolution result; it will return the terminal identity resolution result to the proxy node, and finally the proxy node will return the terminal identity resolution result to the client.

[0090] It should be noted that the method of the embodiment of the present disclosure can be performed by a single device, such as a computer or a server. The method of the present embodiment can also be applied in a distributed scenario and completed by multiple devices cooperating with each other. In the case of such a distributed scenario, one of the multiple devices can only perform one or more steps in the method of the embodiment of the present disclosure, and the multiple devices will interact with each other to complete the described method.

[0091] It should be noted that the above describes some embodiments of the present disclosure. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the above embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0092] Based on the same inventive concept, corresponding to any of the above-mentioned embodiment methods, the present disclosure also provides a road traffic terminal active identification device.

[0093] refer to Figure 5 The road traffic terminal active identification device is applied to the client and includes: The encrypted identification code determination module 510 is configured to collect information from the road traffic terminal device to obtain hardware information and a timestamp; generate a symmetric key, and obtain a terminal identification code based on the hardware information and the timestamp; encrypt the terminal identification code based on the symmetric key to obtain an encrypted terminal identification code; The encryption key determination module 520 is configured to receive a proxy public key transmitted by the proxy node; encrypt the symmetric key by using the proxy public key to obtain an encrypted symmetric key; The identification signature determination module 530 is configured to generate a client public key and a client private key, and sign the terminal identification code based on the client private key to obtain a terminal identification signature; The resolution result receiving module 540 is configured to transmit the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature to the proxy node so that the proxy node generates a terminal identification resolution result, and receive the terminal identification resolution result generated by the proxy node.

[0094] In this exemplary embodiment, the encryption identification code determination module 510 is specifically configured as follows: Collect information from road traffic terminal equipment to obtain hardware information and timestamp; generate a symmetric key, concatenate the hardware information and the timestamp to obtain original identification data; calculate the original identification data based on a hash algorithm to obtain the terminal identification code; encrypt the symmetric key based on an asymmetric encryption algorithm to obtain a symmetric encryption key; encrypt the terminal identification code using the symmetric encryption key to obtain the encrypted terminal identification code.

[0095] In this exemplary embodiment, the encryption key determination module 520 is specifically configured as follows: Receive the proxy public key transmitted by the proxy node; encrypt the symmetric key by using the proxy public key to obtain the encrypted symmetric key.

[0096] In this exemplary embodiment, the identification signature determination module 530 is specifically configured as follows: Generate a client public key and a client private key, and sign the terminal identification code based on the client private key to obtain a terminal identification signature.

[0097] In this exemplary embodiment, the parsing result receiving module 540 is specifically configured to: The client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature are transmitted to the proxy node so that the proxy node generates a terminal identification resolution result, and the terminal identification resolution result generated by the proxy node is received.

[0098] refer to Figure 6 The road traffic terminal active identification device is applied to the proxy node and includes: The signature verification result determination module 610 is configured to generate a proxy public key and a proxy private key, and transmit the proxy public key to the client, receive the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature transmitted by the client; verify the terminal identification signature based on the client public key to obtain a signature verification result; The terminal identification code determination module 620 is configured to decrypt the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain the terminal identification code; The identification code verification result determination module 630 is configured to verify the terminal identification code and obtain a terminal identification code verification result; The request information determination module 640 is configured to determine the authentication information of the terminal identification code, and obtain the resolution request information based on the authentication information, the terminal identification code verification result, the terminal identification code, and the terminal identification signature; The resolution result transmission module 650 is configured to perform format conversion on the resolution request information to obtain adapted resolution request information; transmit the adapted resolution request information to the identity resolution system; receive the terminal identity resolution result transmitted by the identity resolution system, wherein the terminal identity resolution result is obtained by the identity resolution system parsing the adapted resolution request information.

[0099] In this exemplary embodiment, the signature verification result determination module 610 is specifically configured to: Generate a proxy public key and a proxy private key, and transmit the proxy public key to the client, receive the client public key, encrypted terminal identification code, encrypted symmetric key and terminal identification signature transmitted by the client; verify the terminal identification signature based on the client public key to obtain a signature verification result. In this exemplary embodiment, the terminal identification code determination module 620 is specifically configured as follows: The encrypted symmetric key is decrypted based on the signature verification result and the proxy private key to obtain the symmetric key; and the encrypted terminal identification code is decrypted based on the symmetric key to obtain the terminal identification code.

[0100] In this exemplary embodiment, the identification code verification result determination module 630 is specifically configured as follows: The terminal identification code is verified to obtain a terminal identification code verification result.

[0101] In this exemplary embodiment, the request information determination module 640 is specifically configured to: Authentication information of the terminal identification code is determined, and resolution request information is obtained based on the authentication information, the terminal identification code verification result, the terminal identification code, and the terminal identification signature.

[0102] In this exemplary embodiment, the parsing result transmission module 650 is specifically configured as follows: The format of the resolution request information is converted based on a protocol adaptation function to obtain the adapted resolution request information; the adapted resolution request information is transmitted to an identity resolution system; a terminal identity resolution result transmitted by the identity resolution system is received, and the terminal identity resolution result is transmitted to a client; wherein the terminal identity resolution result is obtained by the identity resolution system parsing the adapted resolution request information.

[0103] For the convenience of description, the above device is described by dividing it into various modules according to its functions. Of course, when implementing the present disclosure, the functions of each module can be implemented in the same or multiple software and / or hardware.

[0104] The device of the above embodiment is used to implement the corresponding road traffic terminal identification method in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be repeated here.

[0105] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments, the present disclosure also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the road traffic terminal identification method described in any of the above embodiments is implemented.

[0106] Figure 7 A more specific schematic diagram of the hardware structure of an electronic device provided in this embodiment is shown, and the device may include: a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. The processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040 are connected to each other through the bus 1050 in the device.

[0107] The processor 1010 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.

[0108] The memory 1020 may be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 1020 may store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program codes are stored in the memory 1020 and are called and executed by the processor 1010.

[0109] The input / output interface 1030 is used to connect the input / output module to realize information input and output. The input / output module can be configured in the device as a component (not shown in the figure), or it can be externally connected to the device to provide corresponding functions. The input device may include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output device may include a display, a speaker, a vibrator, an indicator light, etc.

[0110] The communication interface 1040 is used to connect a communication module (not shown) to realize communication interaction between the device and other devices. The communication module can realize communication through wired means (such as USB, network cable, etc.) or wireless means (such as mobile network, WIFI, Bluetooth, etc.).

[0111] The bus 1050 includes a path that transmits information between the various components of the device (eg, the processor 1010 , the memory 1020 , the input / output interface 1030 , and the communication interface 1040 ).

[0112] It should be noted that, although the above device only shows the processor 1010, the memory 1020, the input / output interface 1030, the communication interface 1040 and the bus 1050, in the specific implementation process, the device may also include other components necessary for normal operation. In addition, it can be understood by those skilled in the art that the above device may also only include the components necessary for implementing the embodiments of the present specification, and does not necessarily include all the components shown in the figure.

[0113] The electronic device of the above embodiment is used to implement the corresponding road traffic terminal identification method in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be repeated here.

[0114] Based on the same inventive concept, corresponding to any of the above-mentioned embodiment methods, the present disclosure also provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the road traffic terminal identification method described in any of the above embodiments.

[0115] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0116] The above-mentioned non-transitory computer-readable storage medium can be any available medium or data storage device that can be accessed by a computer, including but not limited to magnetic storage (such as floppy disks, hard disks, magnetic tapes, magneto-optical disks (MO), etc.), optical storage (such as CD, DVD, BD, HVD, etc.), and semiconductor storage (such as ROM, EPROM, EEPROM, non-volatile memory (NAND FLASH), solid-state drive (SSD)), etc.

[0117] The computer instructions stored in the storage medium of the above embodiment are used to enable the computer to execute the road traffic terminal identification method described in any embodiment in the above exemplary method part, and have the beneficial effects of the corresponding method embodiment, which will not be repeated here.

[0118] Based on the same inventive concept, corresponding to the road traffic terminal identification method described in any of the above embodiments, the present disclosure also provides a computer program product, which includes computer program instructions. In some embodiments, the computer program instructions can be executed by one or more processors of a computer so that the computer and / or the processor executes the road traffic terminal identification method. Corresponding to the execution subject corresponding to each step in each embodiment of the road traffic terminal identification method, the processor that executes the corresponding step can belong to the corresponding execution subject.

[0119] The computer program product of the above embodiment is used to enable the computer and / or the processor to execute the road traffic terminal identification method described in any of the above embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0120] Those skilled in the art will appreciate that the embodiments of the present disclosure may be implemented as a system, method, or computer program product. Therefore, the present disclosure may be specifically implemented in the following forms, namely: complete hardware, complete software (including firmware, resident software, microcode, etc.), or a combination of hardware and software, generally referred to herein as a "circuit," "module," or "system." In addition, in some embodiments, the present disclosure may also be implemented in the form of a computer program product in one or more computer-readable media, which contains computer-readable program code.

[0121] Any combination of one or more computer-readable media may be used. A computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. A computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination thereof. More specific examples (non-exhaustive examples) of computer-readable storage media may include, for example: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this document, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, device, or device.

[0122] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, which carry computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0123] The program code embodied on the computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0124] Computer program code for performing the operations of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0125] It should be understood that each box in the flowchart and / or block diagram and the combination of boxes in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer or other programmable data processing device to produce a machine, and these computer program instructions are executed by a computer or other programmable data processing device to produce a device that implements the functions / operations specified in the boxes in the flowchart and / or block diagram.

[0126] These computer program instructions may also be stored in a computer-readable medium that enables a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable medium produce a product that includes an instruction device that implements the functions / operations specified in the blocks in the flowchart and / or block diagram.

[0127] Computer program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device so that a series of operational steps are performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby enabling the instructions executed on the computer or other programmable device to provide a process for implementing the functions / operations specified in the blocks in the flowchart and / or block diagram.

[0128] In addition, although the operations of the disclosed method are described in a particular order in the accompanying drawings, this does not require or imply that the operations must be performed in this particular order, or that all the operations shown must be performed to achieve the desired results. On the contrary, the steps depicted in the flow chart can be performed in a different order. Additionally or alternatively, some steps can be omitted, multiple steps can be combined into one step, and / or one step can be decomposed into multiple steps.

[0129] The flowchart and block diagram in the accompanying drawings illustrate the possible architecture, functions and operations of the system, method and computer program product according to various embodiments of the present application. Wherein, each box in the flowchart or block diagram can represent a module, a program segment, or a part of the code, and the above-mentioned module, program segment, or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of boxes in the block diagram or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0130] It should be noted that, although several modules or units of the equipment for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present application, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into being embodied by multiple modules or units.

[0131] A person skilled in the art should understand that the discussion of any of the above embodiments is merely illustrative and is not intended to imply that the scope of the present application (including the claims) is limited to these examples. In line with the concept of the present application, the technical features in the above embodiments or different embodiments may be combined, the steps may be implemented in any order, and there are many other variations of the different aspects of the embodiments of the present application as described above, which are not provided in detail for the sake of simplicity.

[0132] In addition, to simplify the description and discussion, and in order not to make the embodiments of the present application difficult to understand, the known power / ground connections to the integrated circuit (IC) chip and other components may or may not be shown in the provided drawings. In addition, the device may be shown in the form of a block diagram to avoid making the embodiments of the present application difficult to understand, and this also takes into account the fact that the details of the implementation of these block diagram devices are highly dependent on the platform on which the embodiments of the present application are to be implemented (that is, these details should be fully within the scope of understanding of those skilled in the art). Where specific details (e.g., circuits) are set forth to describe exemplary embodiments of the present application, it is obvious to those skilled in the art that the embodiments of the present application can be implemented without these specific details or with changes in these specific details. Therefore, these descriptions should be considered illustrative rather than restrictive.

[0133] Although the present application has been described in conjunction with specific embodiments of the present application, many alternatives, modifications and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may use the discussed embodiments.

[0134] The embodiments of the present application are intended to cover all such substitutions, modifications and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present application should be included in the scope of protection of the present application.

[0135] Although the spirit and principle of the present disclosure have been described with reference to several specific embodiments, it should be understood that the present disclosure is not limited to the disclosed specific embodiments, and the division of various aspects does not mean that the features in these aspects cannot be combined to benefit, and such division is only for the convenience of expression. The present disclosure is intended to cover various modifications and equivalent arrangements included in the spirit and scope of the attached claims. The scope of the attached claims conforms to the broadest interpretation, thereby including all such modifications and equivalent structures and functions.

Claims

1. A road traffic terminal identification method, characterized in that: Applied to the client, including: Collecting information from road traffic terminal equipment to obtain hardware information and a timestamp; generating a symmetric key to obtain a terminal identification code based on the hardware information and the timestamp; encrypting the terminal identification code based on the symmetric key to obtain an encrypted terminal identification code; Receiving a proxy public key transmitted by a proxy node; encrypting the symmetric key by using the proxy public key to obtain an encrypted symmetric key; Generate a client public key and a client private key, and sign the terminal identification code based on the client private key to obtain a terminal identification signature; The client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature are transmitted to the proxy node so that the proxy node generates a terminal identification resolution result, and the terminal identification resolution result generated by the proxy node is received.

2. The method according to claim 1, characterized in that The obtaining of the terminal identification code based on the hardware information and the timestamp includes: Concatenating the hardware information and the timestamp to obtain original identification data; The original identification data is calculated based on a hash algorithm to obtain the terminal identification code.

3. The method according to claim 1, characterized in that The step of encrypting the terminal identification code based on the symmetric key to obtain the encrypted terminal identification code includes: Encrypting the symmetric key based on an asymmetric encryption algorithm to obtain a symmetric encryption key; The terminal identification code is encrypted using the symmetric encryption key to obtain the encrypted terminal identification code.

4. A road traffic terminal identification method, characterized in that: Applicable to proxy nodes, including: Generate a proxy public key and a proxy private key, and transmit the proxy public key to the client, receive the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature transmitted by the client; verify the terminal identification signature based on the client public key to obtain a signature verification result; Decrypting the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain the terminal identification code; Verifying the terminal identification code to obtain a terminal identification code verification result; Determine authentication information of the terminal identification code, and obtain resolution request information based on the authentication information, the terminal identification code verification result, the terminal identification code, and the terminal identification signature; The format of the resolution request information is converted to obtain adapted resolution request information; the adapted resolution request information is transmitted to the identity resolution system; the terminal identity resolution result transmitted by the identity resolution system is received, and the terminal identity resolution result is transmitted to the client; wherein the terminal identity resolution result is obtained by the identity resolution system parsing the adapted resolution request information.

5. The method according to claim 4, characterized in that The decrypting the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain the terminal identification code includes: Decrypting the encrypted symmetric key based on the signature verification result and the proxy private key to obtain a symmetric key; The encrypted terminal identification code is decrypted based on the symmetric key to obtain the terminal identification code.

6. The method according to claim 4, characterized in that The format conversion of the resolution request information to obtain adapted resolution request information includes: The format of the resolution request information is converted based on the protocol adaptation function to obtain the adapted resolution request information.

7. A road traffic terminal active identification device, characterized in that: Applied to the client, including: The encryption identification code determination module is configured to collect information from the road traffic terminal equipment to obtain hardware information and a timestamp; generate a symmetric key to obtain a terminal identification code based on the hardware information and the timestamp; encrypt the terminal identification code based on the symmetric key to obtain an encrypted terminal identification code; The encryption key determination module is configured to receive the proxy public key transmitted by the proxy node; encrypt the symmetric key by the proxy public key to obtain the encrypted symmetric key; An identification signature determination module is configured to generate a client public key and a client private key, and sign the terminal identification code based on the client private key to obtain a terminal identification signature; The resolution result receiving module is configured to transmit the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature to the proxy node so that the proxy node generates a terminal identification resolution result, and receive the terminal identification resolution result generated by the proxy node.

8. A road traffic terminal active identification device, characterized in that: Applicable to proxy nodes, including: The signature verification result determination module is configured to generate a proxy public key and a proxy private key, transmit the proxy public key to the client, receive the client public key, the encrypted terminal identification code, the encrypted symmetric key and the terminal identification signature transmitted by the client; verify the terminal identification signature based on the client public key to obtain a signature verification result; a terminal identification code determination module, configured to decrypt the encrypted terminal identification code based on the proxy private key, the signature verification result and the encrypted symmetric key to obtain the terminal identification code; an identification code verification result determination module, configured to verify the terminal identification code to obtain a terminal identification code verification result; a request information determination module configured to determine authentication information of the terminal identification code, and obtain resolution request information based on the authentication information, the terminal identification code verification result, the terminal identification code, and the terminal identification signature; The resolution result transmission module is configured to perform format conversion on the resolution request information to obtain adapted resolution request information; transmit the adapted resolution request information to the identity resolution system; and receive the terminal identity resolution result transmitted by the identity resolution system, wherein the terminal identity resolution result is obtained by the identity resolution system parsing the adapted resolution request information.

9. An electronic device, characterized in that: The method comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the method according to any one of claims 1 to 6 is implemented.

10. A non-transitory computer-readable storage medium, characterized in that: The non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to cause a computer to execute the method according to any one of claims 1 to 6.

Images