Method, device and system for replacing pseudonym certificate

Abstract

A method, apparatus and system for replacing a pseudonym certificate, the method comprising: a first device obtains first information, the first information being used for indicating the first device to replace a pseudonym certificate, the first information being associated with a first area where the first device is located and / or an operation state of the first device; and the first device controls replacement of the pseudonym certificate according to the first information. The method can be applied to intelligent driving equipment such as an intelligent vehicle and an electric vehicle, can prevent an attacker from continuously tracking the first equipment under the condition of mastering the replacement period, and is beneficial to improving the safety of the first equipment.

Description

Method, device and system for replacing pseudonymous certificate Technical Field

[0001] The present application relates to the field of Internet of Vehicles security, and more specifically, to a method, device, and system for replacing a pseudonym certificate. Background Art

[0002] With the development of intelligent driving technology, information can be exchanged with surrounding vehicles, base stations, roadside equipment (RSU) and other nodes through the vehicle-to-everything (V2X) communication network to assist driving. In V2X scenarios, vehicles continuously broadcast their driving parameters and location information to surrounding vehicles, base stations, RSU and other nodes, which may be obtained by attackers. Attackers can determine the vehicle's location based on the broadcast information, thereby further compromising the driver's privacy through the association between the vehicle and the driver. To prevent attackers from tracking the vehicle's location and thus infringing the driver's privacy, the current common method is to use pseudonymous certificate authentication to address the threat posed by attackers to vehicle security.

[0003] Vehicles can constantly change their pseudonym certificates, making it difficult for attackers to associate the pseudonym certificates with the vehicle's location, thereby increasing the complexity of location tracking. However, traditional pseudonym certificate rotation based on a fixed cycle still cannot prevent attackers from determining the vehicle's location based on the pseudonym certificate, and it is still easy to leak privacy information such as vehicle location.

[0004] In view of this, a solution for replacing pseudonymous certificates that can improve vehicle safety is in urgent need of development.

[0005] Summary of the Invention

[0006] The embodiments of the present application provide a method, device, and system for replacing a pseudonym certificate, which can reduce the probability of attackers continuously tracking smart driving devices and causing smart privacy leaks, thereby helping to improve the security of smart driving devices.

[0007] The method provided in this application can be applied to intelligent driving equipment, which can be a vehicle in a broad sense, and can be a means of transportation (such as commercial vehicles, passenger cars, trucks, motorcycles, airplanes, flying cars, trains, ships, etc.), industrial vehicles (such as forklifts, trailers, tractors, etc.), engineering vehicles (such as excavators, bulldozers, cranes, etc.), agricultural equipment (such as mowers, harvesters, etc.), amusement equipment, toy vehicles, etc. This application does not specifically limit the type of vehicle.

[0008] On the first aspect, a method for replacing a pseudonym certificate is provided. The method can be executed by an intelligent driving device; alternatively, the method can be executed by a chip or circuit used for an intelligent driving device, which is not limited in this application.

[0009] The method includes: a first device obtains first information, the first information is used to instruct the first device to replace the pseudonym certificate, the first information is associated with a first area where the first device is located and / or an operating status of the first device; the first device controls the replacement of the pseudonym certificate according to the first information.

[0010] In the above technical solution, when the first device is in a specific operating state and / or travels to a specific area, the replacement of the pseudonym certificate is controlled, which can prevent the attacker from continuously tracking the first device when the attacker knows the replacement cycle, thereby helping to improve the security of the first device.

[0011] For example, the first device may be an intelligent driving device, or the first device may be a processor disposed in the intelligent driving device. When the first device is a processor disposed in the intelligent driving device, the area where the first device is located is the area where the intelligent driving device is located, and the operating state of the first device is the operating state of the intelligent driving device.

[0012] For example, "the first information is associated with the first area in which the first device is located and / or the operating state of the first device" can be understood as: the first information is generated and / or acquired when the first device is located in the first area, and / or the first information is generated and / or acquired when the first device is in a certain operating state. The certain operating state may include at least one of a driving state, a powered-on parking state, and a newly started state.

[0013] Exemplarily, the first area may include at least one of the following areas: an area where pseudonymous certificates are used less frequently, an area where the first device frequently travels, and an area determined based on places of interest to the user of the first device.

[0014] In some possible implementations, the first information may be received from a roadside device; or, the first information may be obtained from other processors of the intelligent driving device.

[0015] In combination with the first aspect, in certain implementations of the first aspect, the first area includes a second area, which is an area associated with a place of interest to a user of the first device, and the first device obtains first information, including: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first device receives the first information from a first roadside device, which is the roadside device closest to the first device in the first area.

[0016] Exemplarily, the preset distance threshold may be 5 meters, or 3 meters, or other distances.

[0017] Exemplarily, “the second area is an area associated with a place of interest to the user of the first device” can be understood as: the second area is a cluster determined based on the place of interest to the user of the first device, or the second area is a place of interest to the user of the first device.

[0018] It should be noted that the first device may also obtain the first information from other devices, for example, from other intelligent driving devices.

[0019] In the above technical solution, an adaptive pseudonym certificate replacement scheme can be designed for the first device based on the user's locations of interest, which helps improve the user experience. In addition, after an attacker obtains information related to the user's locations of interest, the first device may be tracked in conjunction with the pseudonym certificate replacement cycle. When the first device travels to an area associated with the user's locations of interest, controlling the replacement of the pseudonym certificate can increase the difficulty for an attacker to break the relationship between the old and new pseudonym certificates of the vehicle, helping to reduce the attacker's chance of obtaining the privacy of the first device, and further improving the security of the first device.

[0020] In combination with the first aspect, in certain implementations of the first aspect, the first area includes a first traffic light intersection, and the first device controls the replacement of the pseudonym certificate according to the first information, including: when the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

[0021] In some possible implementations, the first traffic light intersection is a place of interest to the user, or a second area associated with the place of interest to the user. When the distance between the first device and the first traffic light intersection is less than or equal to a preset distance threshold, the first device receives the first information; further, when the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

[0022] In some possible implementations, the first device receives the first information when the traffic light at a first traffic light intersection turns red. Furthermore, when the first device's speed in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate. Exemplarily, the traffic light is a traffic light in the direction of travel of the first device. For example, if the first device needs to travel straight from south to north at the first traffic light intersection, the traffic light may be a traffic light indicating north-south straight travel at the first traffic light intersection.

[0023] Exemplarily, the preset speed threshold may be 3 km / h, or 0 km / h, or other speeds.

[0024] In the above technical solution, when the first device is driving and stops at an intersection, since the need for the first device to communicate with other devices is relatively small in this scenario, the replacement of the pseudonym certificate can be controlled, which can improve the security of the first device while ensuring that the communication of the first device is not affected.

[0025] In combination with the first aspect, in some implementations of the first aspect, the first device controls the replacement of the pseudonym certificate according to the first information, including: when the first device starts, the first device controls the replacement of the pseudonym certificate.

[0026] In some possible implementations, when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first device receives the first information and shuts down after receiving the first information. Because the first device does not need to communicate with other devices when it is shut down, there is no need to replace the pseudonym certificate. Furthermore, when the first device is started up in the second area, the first device controls the replacement of the pseudonym certificate.

[0027] In the above technical solution, before the first device is started, it may not replace the pseudonym certificate for a long time because it does not need to communicate with other devices. After the first device is started, directly using the previous pseudonym certificate is easier to be tracked by attackers. Therefore, replacing the pseudonym certificate when the first device is started helps to improve the security of the first device.

[0028] In combination with the first aspect, in certain implementations of the first aspect, the method further includes: the first device determines a replacement cycle of the pseudonym certificate, and the replacement cycle is associated with a real-time status parameter of the first device; and the first device controls the replacement of the pseudonym certificate when the replacement cycle arrives.

[0029] In the above technical solution, the replacement cycle of the pseudonym certificate can be determined based on the real-time status parameters of the first device. Since the pseudonym replacement cycle is variable, attackers cannot determine the replacement cycle of the pseudonym certificate of the first device, and thus cannot track the first device, which helps to improve the security of the first device.

[0030] In combination with the first aspect, in certain implementations of the first aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

[0031] In a second aspect, a method for replacing a pseudonym certificate is provided. This method can be executed by a cloud server, or by a chip or circuit used in the cloud server. In some possible implementations, this method can also be executed by roadside equipment, or by a chip or circuit used in roadside equipment, but this application does not limit this.

[0032] The method includes: a second device generates first information, the first information is used to instruct the first device to replace the pseudonym certificate, the first information is associated with the first area where the first device is located and / or the operating status of the first device; the second device sends the first information to the first device.

[0033] In the above technical solution, when the first device is in a specific operating state and / or travels to a specific area, a first message is sent to the first device to control the first device to replace the pseudonym certificate. This can prevent attackers from continuously tracking the first device when they know the replacement cycle, which helps to improve the security of the first device.

[0034] In combination with the second aspect, in certain implementations of the second aspect, the first area includes a second area, the second area is an area associated with places of interest to users of the first device, the second device is a roadside device in the first area that is closest to the first device, and the second device sends the first information to the first device, including: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the second device sends the first information to the first device.

[0035] In the above technical solution, instruction information instructing the first device to replace the pseudonym certificate is generated in a specific area and sent to the first device, so that the first device replaces the pseudonym certificate in the specific area according to the instruction information of the second device. This not only saves the computing overhead of the first device, but also further prevents the attacker from tracking the first device and causing the leakage of user privacy.

[0036] In combination with the second aspect, in certain implementations of the second aspect, the first area includes a first traffic light intersection, and the second device generates the first information, including: when the second device obtains information that the traffic light at the first traffic light intersection turns red, the second device generates the first information.

[0037] Exemplarily, the signal light is a signal light for the driving direction of the first device.

[0038] Exemplarily, the red turn of the traffic light at the first traffic light intersection may be detected by the second device, or may be indicated by other devices.

[0039] In the above technical solution, when the first device is driving and stops at an intersection, since the need for the first device to communicate with other devices is relatively small in this scenario, the first device can be instructed to replace the pseudonym certificate, which can improve the security of the first device while ensuring that the communication of the first device is not affected.

[0040] In combination with the second aspect, in some implementations of the second aspect, the second device sending the first information to the first device includes: the second device sending the first information to the first device via a third device.

[0041] Exemplarily, the second device is a cloud server, and the third device is a roadside device. For example, the third device may be a roadside device in an area where the first device is traveling.

[0042] In some possible implementations, if it is inconvenient for the second device to directly send information instructing the first device to replace the pseudonym certificate, the second device may send the information instructing the first device to replace the pseudonym certificate to the first device via a third device.

[0043] In combination with the second aspect, in some implementations of the second aspect, the method further includes: the second device obtaining information about the first area and / or information about the operating status of the first device.

[0044] Exemplarily, the second device may obtain information about the first area and / or information about the operating status of the first device from the first device; alternatively, the second device may detect the first area where the first device is located and / or the operating status of the first device by itself.

[0045] In combination with the second aspect, in certain implementations of the second aspect, the method also includes: the second device obtains the real-time status parameters of the first device; the second device determines the replacement cycle of the pseudonym certificate based on the real-time status parameters; and the second device sends information about the replacement cycle to the first device.

[0046] In the above technical solution, the second device can determine the replacement cycle of the pseudonym certificate based on the real-time status parameters of the first device. Since the pseudonym replacement cycle is variable, the attacker cannot determine the replacement cycle of the pseudonym certificate of the first device, and thus cannot track the first device, which helps to improve the security of the first device; in addition, the first device does not need to determine the replacement cycle by itself, which helps to save the computing overhead of the first device.

[0047] In combination with the second aspect, in certain implementations of the second aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

[0048] In a third aspect, a method for replacing a pseudonym certificate is provided, which may include: a first device determines a replacement cycle of the pseudonym certificate, where the replacement cycle is associated with a real-time status parameter of the first device; and when the replacement cycle arrives, the first device controls the replacement of the pseudonym certificate.

[0049] In combination with the third aspect, in certain implementations of the third aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

[0050] In combination with the third aspect, in certain implementations of the third aspect, the first device obtains first information, which is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with the first area where the first device is located and / or the operating status of the first device; the first device controls the replacement of the pseudonym certificate according to the first information.

[0051] In combination with the third aspect, in certain implementations of the third aspect, the first area includes a second area, the second area is an area associated with a place of interest to a user of the first device, and the first device obtains first information, including: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first device receives the first information from a first roadside device, and the first roadside device is the roadside device closest to the first device in the first area.

[0052] In combination with the third aspect, in certain implementations of the third aspect, the first area includes a first traffic light intersection, and the first device controls the replacement of the pseudonym certificate according to the first information, including: when the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

[0053] In combination with the third aspect, in certain implementations of the third aspect, the first device controls the replacement of the pseudonym certificate according to the first information, including: when the first device is started, the first device controls the replacement of the pseudonym certificate.

[0054] In a fourth aspect, a device for replacing a pseudonym certificate is provided, the device comprising an acquisition unit and a processing unit; wherein the acquisition unit is used to obtain first information, the first information being used to instruct a first device to replace the pseudonym certificate, the first information being associated with a first area in which the first device is located and / or an operating status of the first device; the processing unit being used to control the replacement of the pseudonym certificate according to the first information.

[0055] In combination with the fourth aspect, in certain implementations of the fourth aspect, the first area includes a second area, which is an area associated with a place of interest to a user of the first device, and the acquisition unit is used to: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, receive the first information from a first roadside device, which is the roadside device closest to the first device in the first area.

[0056] In combination with the fourth aspect, in certain implementations of the fourth aspect, the first area includes a first traffic light intersection, and the processing unit is used to control the replacement of the pseudonym certificate when the driving speed of the first device in the first area is less than or equal to a preset speed threshold.

[0057] In combination with the fourth aspect, in certain implementations of the fourth aspect, the processing unit is used to: when the first device is started, control the replacement of the pseudonym certificate.

[0058] In combination with the fourth aspect, in certain implementations of the fourth aspect, the device also includes a determination unit for: determining a replacement cycle of the pseudonym certificate, wherein the replacement cycle is associated with the real-time status parameters of the first device; the processing unit is also used for: controlling the replacement of the pseudonym certificate when the replacement cycle arrives.

[0059] In combination with the fourth aspect, in certain implementations of the fourth aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

[0060] In the fifth aspect, a device for replacing a pseudonym certificate is provided, which includes a generation unit and a transceiver unit; wherein the generation unit is used to: generate first information, the first information is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with the first area where the first device is located and / or the operating status of the first device; the transceiver unit is used to send the first information to the first device.

[0061] In combination with the fifth aspect, in certain implementations of the fifth aspect, the first area includes a second area, the second area is an area associated with places of interest to users of the first device, the second device is a roadside device in the first area that is closest to the first device, and the transceiver unit is used to send the first information to the first device when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold.

[0062] In combination with the fifth aspect, in certain implementations of the fifth aspect, the first area includes a first traffic light intersection, and the device further includes an acquisition unit, and the generation unit is used to generate the first information when the acquisition unit acquires information that the traffic light at the first traffic light intersection turns red.

[0063] In combination with the fifth aspect, in some implementations of the fifth aspect, the transceiver unit is used to: send the first information to the first device via a third device.

[0064] In combination with the fifth aspect, in some implementations of the fifth aspect, the apparatus further includes an acquisition unit configured to acquire information about the first area and / or information about an operating status of the first device.

[0065] In combination with the fifth aspect, in certain implementations of the fifth aspect, the device also includes an acquisition unit and a determination unit, the acquisition unit is used to: obtain the real-time status parameters of the first device; the determination unit is used to: determine the replacement cycle of the pseudonym certificate based on the real-time status parameters; the transceiver unit is also used to: send information about the replacement cycle to the first device.

[0066] In combination with the fifth aspect, in certain implementations of the fifth aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage degree of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

[0067] In the sixth aspect, a device for replacing a pseudonym certificate is provided, which includes a determination unit and a processing unit. The determination unit is used to: determine the replacement cycle of the pseudonym certificate, and the replacement cycle is associated with the real-time status parameters of the first device; the processing unit is also used to: control the replacement of the pseudonym certificate when the replacement cycle arrives.

[0068] In combination with the sixth aspect, in certain implementations of the sixth aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

[0069] In combination with the sixth aspect, in certain implementations of the sixth aspect, the device also includes an acquisition unit; the acquisition unit is used to obtain first information, the first information is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with the first area where the first device is located and / or the operating status of the first device; the processing unit is used to control the replacement of the pseudonym certificate according to the first information.

[0070] In combination with the sixth aspect, in certain implementations of the sixth aspect, the first area includes a second area, which is an area associated with a place of interest to a user of the first device, and the acquisition unit is used to: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, receive the first information from a first roadside device, which is the roadside device closest to the first device in the first area.

[0071] In combination with the sixth aspect, in certain implementations of the sixth aspect, the first area includes a first traffic light intersection, and the processing unit is used to control the replacement of the pseudonym certificate when the driving speed of the first device in the first area is less than or equal to a preset speed threshold.

[0072] In combination with the sixth aspect, in certain implementations of the sixth aspect, the processing unit is used to: control the replacement of the pseudonym certificate when the first device is started.

[0073] In the seventh aspect, a device for replacing a pseudonym certificate is provided, the device comprising: a memory for storing a computer program; a processor for executing the computer program stored in the memory, so that the device performs a method as in any possible implementation of the first aspect or the third aspect.

[0074] In an eighth aspect, a device for replacing a pseudonym certificate is provided, the device comprising: a memory for storing a computer program; and a processor for executing the computer program stored in the memory, so that the device performs a method as in any possible implementation of the second aspect.

[0075] In a ninth aspect, an intelligent driving device is provided, which includes an apparatus as in any possible implementation of the fourth aspect, the sixth aspect, or the seventh aspect.

[0076] In combination with the ninth aspect, in certain implementations of the ninth aspect, the intelligent driving device is a vehicle.

[0077] In a tenth aspect, a server is provided, comprising a device as in any possible implementation of the fifth aspect or the eighth aspect.

[0078] In combination with the tenth aspect, in certain implementations of the tenth aspect, the server is a cloud server, or a server set in a roadside device.

[0079] In the eleventh aspect, a computer program product is provided, comprising: a computer program code, which, when executed on a computer, enables the computer to execute the method in any one of the possible implementations of the first to third aspects.

[0080] It should be noted that the above-mentioned computer program code may be stored in whole or in part on a first storage medium, wherein the first storage medium may be packaged together with the processor or separately from the processor.

[0081] In the twelfth aspect, a computer-readable medium is provided, wherein the computer-readable medium stores instructions. When the instructions are executed by a processor, the processor implements the method in any possible implementation of the first to third aspects.

[0082] In a thirteenth aspect, a chip is provided, which includes a circuit for executing the method in any possible implementation of the first to third aspects above. BRIEF DESCRIPTION OF THE DRAWINGS

[0083] FIG1 is a schematic diagram of a system framework for replacing a pseudonym certificate provided in an embodiment of the present application;

[0084] FIG2 is a schematic flow chart of a method for replacing a pseudonym certificate provided in an embodiment of the present application;

[0085] FIG3 is another schematic flow chart of a method for replacing a pseudonym certificate provided in an embodiment of the present application;

[0086] FIG4 is another schematic flow chart of a method for replacing a pseudonym certificate provided in an embodiment of the present application;

[0087] FIG5 is another schematic flow chart of the method for replacing a pseudonym certificate provided in an embodiment of the present application;

[0088] FIG6 is another schematic flow chart of the method for replacing a pseudonym certificate provided in an embodiment of the present application;

[0089] FIG7 is a schematic block diagram of an apparatus for replacing a pseudonym certificate according to an embodiment of the present application;

[0090] FIG8 is another schematic block diagram of an apparatus for replacing a pseudonym certificate according to an embodiment of the present application;

[0091] FIG9 is another schematic block diagram of the apparatus for replacing a pseudonym certificate provided in an embodiment of the present application. DETAILED DESCRIPTION

[0092] In the description of the embodiments of the present application, unless otherwise specified, " / " means or, for example, A / B can mean A or B; "and / or" in this article is a kind of association relationship that describes associated objects, indicating that there can be three relationships, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In this application, "at least one" refers to one or more, and "more than one" refers to two or more. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0093] In the embodiments of this application, prefixes such as "first" and "second" are used only to distinguish different description objects and have no limiting effect on the position, order, priority, quantity, or content of the described objects. The use of prefixes such as ordinal numbers in the embodiments of this application to distinguish description objects does not constitute a limitation on the described objects. For a statement of the described objects, please refer to the description in the context of the claims or embodiments, and the use of such prefixes should not constitute an unnecessary limitation.

[0094] As mentioned above, in V2X scenarios, vehicles continuously broadcast information such as their driving parameters and location to surrounding vehicles, base stations, and RSUs. This information can be obtained by attackers, who can then determine the vehicle's location based on this broadcast information. Current technology allows vehicles to continuously change their pseudonym certificates, making it difficult for attackers to associate the pseudonym certificates with the corresponding vehicle location, thereby increasing the complexity of location tracking. However, traditional, periodic pseudonym certificate rotation still cannot prevent attackers from determining the vehicle's location based on the pseudonym certificates, and remains susceptible to privacy leaks such as vehicle location.

[0095] To address the issue of vehicle privacy leakage caused by the fixed cycle of pseudonym certificate replacement, two current methods are available: First, within a preset pseudonym cycle, the vehicle's privacy leakage is measured and the vehicle's privacy leakage degree is calculated based on the amount. When the privacy leakage degree reaches the privacy leakage threshold, the next pseudonym is selected from the vehicle pseudonym set for replacement and the next pseudonym cycle is entered. If the privacy leakage degree does not reach the privacy leakage threshold within the pseudonym cycle, the pseudonym is not replaced. Instead, the next pseudonym is selected from the vehicle pseudonym set for replacement and the next pseudonym cycle is automatically entered when the fixed cycle expires. Second, if the vehicle is in motion, it periodically broadcasts basic safety information and determines pseudonym replacement conditions based on the driving status of nearby vehicles. If the pseudonym replacement conditions are met, the pseudonym replacement is executed. Without the participation of the RSU, a legitimate pseudonym certificate is independently calculated through collaboration with surrounding vehicles. The former scheme considers the degree of privacy leakage and the predetermined pseudonym update cycle as the basis for determining pseudonym changes. Although when the privacy leakage is high, the timing of pseudonym certificate replacement breaks the fixed pseudonym certificate replacement cycle, when the privacy leakage is low, it is still difficult to prevent attackers from continuously tracking vehicles by knowing the interval between pseudonym changes. The latter scheme does not require the participation of the RSU. It independently calculates a valid pseudonym certificate through collaboration with surrounding vehicles. The vehicle initiating the pseudonym change requires significant communication and computing overhead, and it is difficult to ensure that enough vehicles participate in the pseudonym change cooperation.

[0096] In view of this, the embodiment of the present application provides a method for replacing a pseudonym certificate, which can determine the replacement cycle of the pseudonym certificate based on the real-time status parameters of the intelligent driving device. Because the pseudonym replacement cycle is variable, attackers cannot determine the pseudonym certificate replacement cycle of the intelligent driving device, and thus cannot track the intelligent driving device, which helps to improve the security of the intelligent driving device. Furthermore, when the intelligent driving device is in a specific operating state and / or driving to a specific area, controlling the replacement of the pseudonym certificate can prevent attackers from continuously tracking the intelligent driving device while knowing the replacement cycle, which helps to improve the security of the intelligent driving device.

[0097] The technical solutions in the embodiments of the present application will be described below with reference to the accompanying drawings.

[0098] FIG1 is an application scenario of a method for replacing a pseudonym certificate provided in an embodiment of the present application. In this application scenario, an intelligent driving device 100 , a cloud server 210 , and a roadside device 220 may be included.

[0099] The intelligent driving device 100 may include a perception system 140, a computing platform 150, and peripheral devices 160. The perception system 140 may include one or more sensors for sensing environmental information about the surroundings of the intelligent driving device 100 and the driving parameters of the intelligent driving device. For example, the perception system 140 may include a positioning system, which may be a global positioning system (GPS), a Beidou system or other positioning systems, or an inertial measurement unit (IMU). The perception system 140 may also include one or more of a laser radar, a millimeter-wave radar, an ultrasonic radar, and a camera device; the perception system 140 may also include a wheel speed sensor, a pedal position sensor, etc., for sensing the speed and / or acceleration of the intelligent driving device.

[0100] Some or all functions of the intelligent driving device 100 can be controlled by the computing platform 150. The computing platform 150 may include one or more processors, such as processors 151 to 15n (n is a positive integer). A processor is a circuit with signal processing capabilities. In one implementation, the processor can be a circuit with instruction reading and execution capabilities, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP). In another implementation, the processor can implement certain functions through the logical relationships of hardware circuits. The logical relationships of the hardware circuits are fixed or reconfigurable. For example, the processor is a hardware circuit implemented by an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as a field programmable gate array (FPGA). In a reconfigurable hardware circuit, the process of the processor loading a configuration file to implement the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc. In addition, the computing platform 150 can also include a memory for storing instructions. Some or all of the processors 151 to 15n can call the instructions in the memory and execute the instructions to achieve corresponding functions.

[0101] The intelligent driving device 100 interacts with the cloud server 210, external sensors, other intelligent driving devices, other computer systems, or users through the peripheral device 160. The peripheral device 160 may include a wireless communication system.

[0102] The cloud server 210 may include a computing platform 211 , and the computing platform 211 may include one or more processors. The specific forms and corresponding functions of the one or more processors may refer to the description in the above embodiments and will not be repeated here.

[0103] It should be understood that the above-mentioned devices and equipment are only examples. In actual applications, the above-mentioned devices and equipment may be added or deleted according to actual needs.

[0104] In an embodiment of the present application, the cloud server 210 can determine the replacement cycle of the pseudonym certificate based on the speed of the intelligent driving device 100, the traffic density near the intelligent driving device 100, the security level of the intelligent driving device (or privacy leakage level), and the user demand level, and send the replacement cycle to the intelligent driving device 100 so that the intelligent driving device 100 can replace the pseudonym certificate when the replacement cycle is reached. The cloud server 210 can also determine the replacement area of ​​the pseudonym certificate based on the location of interest to the user of the intelligent driving device 100, and then control the roadside device 220 in the area to send a pseudonym certificate replacement instruction to the intelligent driving device 100 so that the intelligent driving device 100 can replace the pseudonym certificate in the area. In addition, when the roadside device 220 is set at a signalized intersection, the roadside device 220 can also determine whether to send a pseudonym certificate replacement instruction to the intelligent driving device 100 based on the status of the signal light. For example, when the signal light turns red, a pseudonym certificate replacement instruction is sent to the surrounding intelligent driving devices so that the intelligent driving device 100 in the parked state replaces the pseudonym certificate. In addition to replacing the pseudonym certificate according to the replacement cycle and the replacement instruction from the roadside device 220, the intelligent driving device 100 can also replace the pseudonym certificate according to the driving scenario. For example, the intelligent driving device 100 can replace the pseudonym certificate when it is just started.

[0105] FIG2 shows a schematic flow chart of a method 200 for replacing a pseudonym certificate provided in an embodiment of the present application. The method 200 can be applied to the application scenario shown in FIG1 . For example, the method 200 can be executed by one or more processors in the computing platform 150 in FIG1 . The method 200 includes:

[0106] S201: A first device obtains first information, where the first information is used to instruct the first device to replace a pseudonym certificate. The first information is associated with a first area where the first device is located and / or an operating status of the first device.

[0107] In some possible implementations, the first device may be the intelligent driving device in the above embodiment, and the first information may be received from a roadside device.

[0108] Exemplarily, the first area may include an area where the intelligent driving device uses pseudonym certificates less frequently, such as a traffic light intersection; or, the first area may also include an area of ​​interest to users of the intelligent driving device.

[0109] Exemplarily, the operating state of the first device may include at least one of the following: a driving state, a parking state, and a just-started state (ie, a state from power-off to power-on).

[0110] In some possible implementations, the first device may be a processor within a computing platform of the intelligent driving device, and the first information may be sent to the first device by another processor within the computing platform of the intelligent driving device. In the above scenario, the first area where the first device is located may represent the first area where the intelligent driving device is located, and the operating status of the first device may represent the operating status of the intelligent driving device.

[0111] It should be noted that the first information is associated with the first area where the first device is located and / or the operating status of the first device. It can be understood that: the first information may be generated and / or obtained when it is detected that the first device has driven to a traffic light intersection and the traffic light has turned from green to red; or, the first information may be generated and / or obtained when it is detected that the first device has driven to an area of ​​interest to the user; or, the first information may be generated and / or obtained when it is detected that the first device has just been started. Among them, "the first device has just been started" can mean that the first device has just been started after parking in a parking lot, or it can also be the first device has just been started after maintenance, or it can also be other scenarios where the first device has just been started.

[0112] In some possible implementations, the first area includes a second area, the second area being an area associated with a location of interest to a user of the first device, and the first device obtaining the first information includes: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first device receives the first information from a first roadside device, the first roadside device being the roadside device closest to the first device in the first area. Alternatively, if the first device is a vehicle in a cooperative adaptive cruise control (CACC) vehicle queue, then when the distance between the first device and the center of the second area is less than or equal to the preset distance threshold, the first device receives the first information from other vehicles in the CACC vehicle queue.

[0113] Exemplarily, the preset distance threshold may be 5 meters, or 3 meters, or other distances.

[0114] Exemplarily, the second area may be a cluster determined based on places of interest to the user through a clustering algorithm, wherein the places of interest to the user may be places where the user frequently travels (for example, more than 3 times a week), or places that the user has collected or marked in an electronic map, or other places of interest to the user.

[0115] S202: The first device controls the replacement of the pseudonym certificate according to the first information.

[0116] In one example, when the first device receives the first information, it controls the replacement of the pseudonym certificate.

[0117] In another example, the first area includes a first traffic light intersection, and when the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

[0118] For example, the preset speed threshold may be 3 kilometers per hour (km / h), or 0 km / h, or other speeds.

[0119] In another example, when the first device is started, the first device controls the replacement of the pseudonym certificate.

[0120] In some possible implementations, the area of ​​interest to the user includes a first traffic light intersection. When the distance between the first device and the center of the cluster determined in the area of ​​interest to the user is less than or equal to a preset distance threshold, the first device receives the first information; further, when the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

[0121] In some possible implementations, when the first device is an intelligent driving device, the intelligent driving device may determine a pseudonym certificate replacement cycle based on real-time status parameters of the intelligent driving device. The real-time status parameters may include at least one of the following: the speed of the intelligent driving device, the traffic density around the intelligent driving device, the privacy disclosure level of the intelligent driving device, and a user demand level, wherein the user demand level indicates the user's demand for replacing the pseudonym certificate.

[0122] An embodiment of the present application provides a method for replacing a pseudonym certificate. When the intelligent driving device is in a specific operating state and / or traveling to a specific area, the method controls the replacement of the pseudonym certificate. This can prevent attackers from continuously tracking the intelligent driving device while knowing the replacement cycle, thereby helping to improve the security of the intelligent driving device.

[0123] FIG3 shows a schematic flow chart of a method 300 for replacing a pseudonym certificate according to an embodiment of the present application. This method 300 can be applied to the application scenario shown in FIG1 . For example, the method 300 can be executed by one or more processors in the computing platform 211 in FIG1 , or by the roadside device 220 shown in FIG1 . The method 300 includes:

[0124] S301: A second device generates first information, where the first information is used to instruct the first device to replace a pseudonym certificate. The first information is associated with a first area where the first device is located and / or an operating status of the first device.

[0125] In some possible implementations, the second device may be the roadside device in the above embodiment, or may be the cloud server in the above embodiment.

[0126] In some possible implementations, the second device may be a processor provided in a computing platform of the intelligent driving device.

[0127] Exemplarily, the second device generating the first information may include at least one of the following: when the second device obtains information that the first device drives to a traffic light intersection and the traffic light turns from green to red, the second device generates the first information; or, when the second device obtains information that the first device drives to an area of ​​interest to the user, the second device generates the first information; or, when the second device obtains information that the first device has just started, the second device generates the first information.

[0128] Exemplarily, the signal light is a signal light for the driving direction of the first device.

[0129] In some possible implementations, the information obtained by the second device may be the result of detection by the second device, or may be sent to the second device by other devices. This embodiment of the present application does not specifically limit this.

[0130] S302: The second device sends the first information to the first device.

[0131] In some possible implementations, the second device sends the first information to the first device via the third device. For example, the first device is an intelligent driving device, the second device is a cloud server, and the third device is a roadside device. In some scenarios, the second device sends the first information to the first device via the third device. For example, when the first device drives to a traffic light intersection and the second device obtains information that the traffic light turns from green to red, the second device sends the first information to the first device via the third device; or, when the first device drives to a second area and the second device obtains information that the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the second device sends the first information to the first device via the third device. The second area can be a cluster determined according to the places of interest to the user through a clustering algorithm.

[0132] An embodiment of the present application provides a method for replacing a pseudonym certificate. When an intelligent driving device is in a specific operating state and / or travels to a specific area, first information is generated to control the intelligent driving device to replace the pseudonym certificate. This method can prevent attackers from continuously tracking the intelligent driving device when they know the replacement cycle, thereby helping to improve the security of the intelligent driving device.

[0133] The following is a detailed description of a specific solution for replacing a pseudonym certificate provided in an embodiment of the present application, with reference to FIG4 to FIG6 :

[0134] FIG4 shows a schematic flow chart of a method 400 for replacing a pseudonym certificate provided in an embodiment of the present application. The method 400 can be applied to the application scenario shown in FIG1 . The method 400 can be understood as an extension of the method 200 and / or the method 300 . The method 400 includes:

[0135] S401, the cloud server determines the replacement cycle of the pseudonym certificate according to the real-time status parameters of the intelligent driving device.

[0136] Exemplarily, the cloud server may include the second device in the above embodiment, and the intelligent driving device may include the first device in the above embodiment.

[0137] For example, the real-time state parameter may include at least one of the following: the speed S of the intelligent driving device; i , the traffic density F around the intelligent driving device i , the privacy leakage degree P of the smart driving device i , and user demand level R i , wherein the user demand level is used to indicate the demand level of the user of the intelligent driving device to replace the pseudonym certificate.

[0138] Among them, the privacy leakage degree is determined based on the number of times the intelligent driving device sends information to other devices and the time interval between sending information.

[0139] For example, the privacy leakage Among them, “*” represents convolution calculation, P represents the privacy leakage threshold, T represents the replacement cycle of the pseudonym certificate, β represents the average interval time for sending information, Γ(α) is the Gamma function, and t represents time.

[0140] For example, a multiple linear regression model of the pseudonym replacement time interval of the intelligent driving device can be constructed. Further, the replacement period T of the pseudonym certificate can be determined by the least squares method using the following formula: i :

[0141]

[0142] Among them, ε∈N(0,σ 2 ), β1 to β4 are S determined for the intelligent driving device i i 、F i 、P i 、R i The weight it occupies.

[0143] S402: The cloud server sends information about the pseudonym certificate replacement cycle to the intelligent driving device.

[0144] In some possible implementations, the cloud server sends information about the pseudonym certificate replacement period to the intelligent driving device at fixed intervals. For example, the fixed interval may be 5 minutes, 10 minutes, or other intervals.

[0145] In some possible implementations, when the replacement cycle determined by the cloud server is different from the previously determined replacement cycle, information about the pseudonym certificate replacement cycle is sent to the intelligent driving device.

[0146] S403: The intelligent driving device replaces the pseudonym certificate according to the replacement cycle.

[0147] Exemplarily, when the replacement period arrives, the intelligent driving device replaces the pseudonym certificate.

[0148] S404: When the traffic light at the intersection turns red, the first RSU generates first instruction information for replacing the pseudonym certificate.

[0149] In some possible implementations, the first indication information may be one of the first information in the above-mentioned embodiments.

[0150] S405: The first RSU sends first instruction information for replacing the pseudonym certificate to the intelligent driving device.

[0151] S406: The intelligent driving device replaces the pseudonym certificate according to the first instruction information.

[0152] In some possible implementations, when the driving speed of the intelligent driving device is less than or equal to a preset speed threshold, the intelligent driving device replaces the pseudonym certificate.

[0153] S407 , the cloud server determines a replacement area for the pseudonym certificate based on the location of interest to the user of the intelligent driving device.

[0154] In some possible implementations, the cloud server uses a clustering algorithm to process a set of places of interest to the user based on the places of interest to the user, determines a cluster, and controls the smart driving device to replace the pseudonym certificate at the cluster.

[0155] S408, the cloud server sends area indication information to the second RSU, where the area indication information is used to instruct the second RSU in the replacement area to send indication information for replacing the pseudonym certificate to the intelligent driving device.

[0156] In some possible implementations, the second RSU and the first RSU are the same roadside equipment.

[0157] S409: The second RSU sends second instruction information for replacing the pseudonym certificate to the intelligent driving device.

[0158] In some possible implementations, the second indication information may be one of the first information in the above embodiment.

[0159] S410: The intelligent driving device replaces the pseudonym certificate according to the second instruction information.

[0160] It should be noted that S401 to S403, S404 to S406, and S407 to S410 can be executed simultaneously or sequentially. The embodiment of the present application does not limit the order of execution of S401 to S403, S404 to S406, and S407 to S410.

[0161] The present application provides a method for replacing a pseudonym certificate. The cloud server determines the replacement cycle of the pseudonym certificate based on the real-time status parameters of the intelligent driving device and indicates the replacement cycle to the intelligent driving device. On the one hand, the method can indicate the changed pseudonym certificate replacement cycle to the intelligent driving device, making it impossible for attackers to determine the pseudonym certificate replacement cycle of the intelligent driving device and thus unable to track the intelligent driving device, which helps to improve the security of the intelligent driving device. On the other hand, the intelligent driving device does not need to determine the replacement cycle itself, which helps to save the computing overhead of the intelligent driving device. In addition, when the intelligent driving device replaces the pseudonym certificate according to the replacement cycle, the pseudonym certificate can also be replaced in a specific area according to the indication information of the roadside device. This not only saves the computing overhead of the intelligent driving device, but also further prevents the problem of attackers tracking the intelligent driving device and causing user privacy leakage.

[0162] FIG5 shows a schematic flow chart of a method 500 for replacing a pseudonym certificate according to an embodiment of the present application. The method 500 can be performed by an intelligent driving device. The method 500 can be understood as an example of performing S401 to S403 and S404 to S406 simultaneously, or performing S401 to S403 and S407 to S410 simultaneously. The method 500 includes:

[0163] S501: Determine whether first information is received.

[0164] Exemplarily, the first information may be the first information in the above-mentioned method 200 and / or method 300, for example, may include the first indication information or the second indication information in the method 400.

[0165] Specifically, if the first information is received, execute S503; otherwise, execute S502.

[0166] S502: Determine whether the replacement period of the pseudonym certificate has arrived.

[0167] Exemplarily, the replacement cycle may be the replacement cycle in the above embodiment.

[0168] Specifically, when the replacement period of the pseudonym certificate arrives, S503 is executed; otherwise, S502 is continued to be executed (or, in some possible implementations, S501 is executed).

[0169] S503: put the old pseudonym certificate at the end of the pseudonym set, and take out a new pseudonym certificate from the head of the pseudonym set as the pseudonym certificate to be used for the next communication.

[0170] S504, determining the time for replacing the pseudonym certificate next time.

[0171] Exemplarily, the time for changing the pseudonym certificate next time is determined based on the current time and the change cycle. For example, if the change cycle is 30 minutes, the time for changing the pseudonym certificate next time is 30 minutes after the current time.

[0172] It should be understood that between the current moment and the moment 30 minutes later, if the intelligent driving device receives the first information, the pseudonym certificate will be replaced according to the first information.

[0173] It should be understood that the completion of S503 means that the pseudonym certificate replacement is complete. It can also be understood that before the intelligent driving device executes S501, a pseudonym set has been obtained, and the pseudonym set includes multiple pseudonym certificates.

[0174] FIG6 shows a schematic flow chart of a method 600 for replacing a pseudonym certificate provided in an embodiment of the present application. The method 600 may be executed by an intelligent driving device. The method 600 includes:

[0175] S601: Determine whether the intelligent driving device has just been started.

[0176] Specifically, if the intelligent driving device has just been started, execute S604; otherwise, execute S602.

[0177] For example, the intelligent driving device may be in a state of just starting up after being turned off for a long time. The intelligent driving device may be in a parking lot when the engine is turned off, or the intelligent driving device may be in a repair shop when the engine is turned off. This embodiment of the present application does not specifically limit this.

[0178] S602: When the intelligent driving device is in a driving state, determine whether the pseudonym certificate is expired.

[0179] Specifically, if the pseudonym certificate expires, execute S604; otherwise, execute S603.

[0180] Exemplarily, the driving state may include that the speed of the intelligent driving device is not zero; or, although the speed of the intelligent driving device is zero, it is in driving (drive, D) gear or neutral (neutral, N) gear, that is, the intelligent driving device is in a temporary parking state.

[0181] S603: Determine whether the replacement period of the pseudonym certificate has arrived.

[0182] Specifically, if the replacement period of the pseudonym certificate arrives, execute S604; otherwise, execute S603 (or in some possible implementations, execute S602).

[0183] S604: put the old pseudonym certificate at the end of the pseudonym set, and take out a new pseudonym certificate from the head of the pseudonym set as the pseudonym certificate to be used for the next communication.

[0184] S605: discard the old pseudonym certificate, and take out a new pseudonym certificate from the pseudonym set header as the pseudonym certificate to be used for the next communication.

[0185] S606, determining the time for replacing the pseudonym certificate next time.

[0186] Exemplarily, the time for changing the pseudonym certificate next time is determined based on the current time and the change cycle. For example, if the change cycle is 30 minutes, the time for changing the pseudonym certificate next time is 30 minutes after the current time.

[0187] It should be understood that between the current moment and the moment 30 minutes later, if the intelligent driving device determines that the pseudonym certificate has expired, the pseudonym certificate will be replaced.

[0188] An embodiment of the present application provides a method for replacing a pseudonym certificate. Before the intelligent driving device is started, the pseudonym certificate has not been replaced for a long time. Directly using the current pseudonym certificate for communication after the intelligent driving device is started may not be secure enough. Therefore, replacing the pseudonym certificate at the time of startup helps to improve the security of the intelligent driving device.

[0189] In the various embodiments of the present application, unless otherwise specified or there is a logical conflict, the terms and / or descriptions between the various embodiments are consistent and can be referenced by each other. The technical features in different embodiments can be combined to form new embodiments according to their inherent logical relationships.

[0190] The method provided in the embodiments of the present application is described in detail above with reference to Figures 1 to 6 . The apparatus provided in the embodiments of the present application will be described in detail below with reference to Figures 7 to 9 . It should be understood that the description of the apparatus embodiment corresponds to the description of the method embodiment. Therefore, for matters not described in detail, reference can be made to the method embodiment above, and for the sake of brevity, no further description will be given here.

[0191] FIG7 shows a schematic block diagram of an apparatus 700 for replacing a pseudonym certificate according to an embodiment of the present application. The apparatus 700 includes an acquiring unit 710 and a processing unit 720 .

[0192] The apparatus 700 may include units for executing the method in Figure 2, Figure 6 or Figure 7. Furthermore, each unit in the apparatus 700 and the above-mentioned other operations and / or functions are respectively for implementing the process of the corresponding method embodiment in Figure 2, Figure 6 or Figure 7.

[0193] When the device 700 is used to execute the method 200 in FIG. 2 , the acquiring unit 710 may be used to execute S201 in the method 200 , and the processing unit 720 may be used to execute S202 in the method 200 .

[0194] Specifically, the acquisition unit 710 is used to acquire first information, which is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with the first area where the first device is located and / or the operating status of the first device; the processing unit 720 is used to control the replacement of the pseudonym certificate according to the first information.

[0195] In some possible implementations, the first area includes a second area, which is an area associated with a place of interest to a user of the first device, and the acquisition unit 720 is used to: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, receive the first information from a first roadside device, which is the roadside device closest to the first device in the first area.

[0196] In some possible implementations, the first area includes a first signal light intersection, and the processing unit 720 is used to control the replacement of the pseudonym certificate when the driving speed of the first device in the first area is less than or equal to a preset speed threshold.

[0197] In some possible implementations, the processing unit 720 is configured to: control the replacement of the pseudonym certificate when the first device is started.

[0198] In some possible implementations, the apparatus further includes a determination unit for determining a replacement cycle of the pseudonym certificate, wherein the replacement cycle is associated with a real-time status parameter of the first device; the processing unit 720 is further configured to control the replacement of the pseudonym certificate when the replacement cycle arrives.

[0199] In some possible implementations, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

[0200] In a specific implementation process, the operations performed by the acquisition unit 710 and the processing unit 720 may be performed by the same processor, or may be performed by different processors, for example, respectively performed by multiple processors. For example, in a specific implementation process, the one or more processors may be processors provided in a vehicle computer, or may be processors provided in other vehicle-mounted terminals. In one example, the device 700 may be a chip provided in a vehicle computer or other vehicle-mounted terminal. In another example, the device 700 may be a computing platform 150 as shown in FIG1 provided in an intelligent driving device.

[0201] FIG8 shows a schematic block diagram of an apparatus 800 for replacing a pseudonym certificate according to an embodiment of the present application. The apparatus 800 includes a generating unit 810 and a transceiver unit 820 .

[0202] The apparatus 800 may include a unit for executing the method of FIG3 , or may further include a unit for executing the method executed by the cloud server or RSU in FIG4 . Furthermore, each unit in the apparatus 800 and the other operations and / or functions described above are respectively for implementing the process of the corresponding method embodiment in FIG3 or FIG4 .

[0203] When the device 800 is used to execute the method 300 in FIG. 3 , the generating unit 810 may be used to execute S301 in the method 300 , and the transceiver unit 820 may be used to execute S302 in the method 300 .

[0204] Specifically, the generation unit 810 is used to: generate first information, which is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with the first area where the first device is located and / or the operating status of the first device; the transceiver unit 820 is used to send the first information to the first device.

[0205] In some possible implementations, the first area includes a second area, which is an area associated with places of interest to the user of the first device, and the second device is a roadside device in the first area that is closest to the first device. The transceiver unit 820 is used to send the first information to the first device when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold.

[0206] In some possible implementations, the first area includes a first signal light intersection, the apparatus further includes an acquisition unit, and the generation unit 810 is configured to generate the first information when the acquisition unit acquires information that the signal light at the first signal light intersection turns red.

[0207] In some possible implementations, the transceiver unit 820 is configured to send the first information to the first device via a third device.

[0208] In some possible implementations, the apparatus further includes an acquisition unit configured to acquire information about the first area and / or information about an operating status of the first device.

[0209] In some possible implementations, the device also includes an acquisition unit and a determination unit, the acquisition unit is used to: obtain the real-time status parameters of the first device; the determination unit is used to: determine the replacement cycle of the pseudonym certificate based on the real-time status parameters; the transceiver unit 820 is also used to: send information about the replacement cycle to the first device.

[0210] In some possible implementations, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

[0211] In the specific implementation process, the various operations performed by the above-mentioned generation unit 810 and the transceiver unit 820 can be executed by the same processor, or can also be executed by different processors, for example, respectively executed by multiple processors. For example, in the specific implementation process, the above-mentioned one or more processors can be processors set in a cloud server or roadside equipment. In some possible implementations, the above-mentioned device 800 can also be a processor set in an intelligent driving device. In one example, the above-mentioned device 800 can be a chip set in a cloud server or roadside equipment. For example, the above-mentioned device 800 can be a computing platform 211 set in the cloud server 210 shown in Figure 1. In another example, the above-mentioned device 800 can be a chip set in an intelligent driving device. For example, the above-mentioned device 800 can be a computing platform 150 set as shown in Figure 1.

[0212] It should be understood that the division of the various units in the above device is merely a division of logical functions. In actual implementation, they may be fully or partially integrated into a single physical entity, or they may be physically separated. Furthermore, the units in the device may be implemented in the form of a processor calling software; for example, the device includes a processor connected to a memory storing instructions, and the processor calls the instructions stored in the memory to implement any of the above methods or the functions of the various units in the device. The processor may be a general-purpose processor, such as a CPU or a microprocessor, and the memory may be a memory within the device or external to the device. Alternatively, the units in the device may be implemented in the form of hardware circuits, and the functions of some or all of the units may be implemented through the design of the hardware circuits. The hardware circuits may be understood as one or more processors. For example, in one implementation, the hardware circuit is an ASIC, and the functions of some or all of the above units may be implemented through the design of the logical relationships between the components within the circuits. In another implementation, the hardware circuit may be implemented using a PLD, such as an FPGA, which may include a large number of logic gate circuits. The connections between the logic gate circuits are configured using a configuration file to implement the functions of some or all of the above units. All units of the above apparatus may be implemented entirely in the form of software called by a processor, or entirely in the form of hardware circuits, or partially in the form of software called by a processor and the rest in the form of hardware circuits.

[0213] Each unit in the above device can be one or more processors (or processing circuits) configured to implement the above method, such as: CPU, GPU, NPU, TPU, DPU, microprocessor, DSP, ASIC, FPGA, or a combination of at least two of these processor forms.

[0214] In addition, the various units in the above devices can be fully or partially integrated together, or can be implemented independently. In one implementation, these units are integrated together and implemented in the form of a system-on-a-chip (SOC). The SOC may include at least one processor for implementing any of the above methods or implementing the functions of the various units of the device. The type of the at least one processor can be different, for example, including a CPU and FPGA, a CPU and an artificial intelligence processor, a CPU and a GPU, etc.

[0215] Figure 9 is a schematic block diagram of an apparatus for replacing a pseudonym certificate according to an embodiment of the present application. The apparatus 900 for replacing a pseudonym certificate shown in Figure 9 may include a processor 910, a transceiver 920, and a memory 930. The processor 910, transceiver 920, and memory 930 are interconnected via an internal connection path. The memory 930 is configured to store instructions, and the processor 910 is configured to execute the instructions stored in the memory 930, thereby receiving and transmitting certain parameters via the transceiver 920. In some possible implementations, the memory 930 may be coupled to the processor 910 via an interface or may be integrated with the processor 910.

[0216] It should be noted that the transceiver 920 may include but is not limited to a transceiver device such as an input / output interface to implement communication between the device 900 and other devices or a communication network.

[0217] The memory 930 may be a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM).

[0218] The transceiver 920 uses a transceiver device such as, but not limited to, a transceiver to implement communication between the apparatus 900 and other devices or a communication network.

[0219] In some possible implementations, the device 900 may be provided in the computing platform 150 shown in FIG. 1 , or may be provided in the computing platform 211 shown in FIG. 1 , or may be provided in the roadside equipment 220 shown in FIG. 1 .

[0220] An embodiment of the present application further provides an intelligent driving device, which may include the above-mentioned device 700 or the above-mentioned device 900; in some possible implementations, the intelligent driving device may also include the above-mentioned device 800.

[0221] In some possible implementations, the smart device may be a vehicle.

[0222] An embodiment of the present application also provides a server, and the intelligent driving device may include the above-mentioned device 800 or the above-mentioned device 900.

[0223] In some possible implementations, the server is a cloud server, or a server installed in a roadside device.

[0224] An embodiment of the present application provides a system for replacing a pseudonym certificate, which may include the intelligent driving device and server in the above embodiment.

[0225] An embodiment of the present application further provides a computer program product, which includes computer program code. When the computer program code runs on a computer, the computer implements the method in the embodiment of the present application.

[0226] An embodiment of the present application further provides a computer-readable storage medium, which stores computer instructions. When the computer instructions are executed on a computer, the computer implements the method in the embodiment of the present application.

[0227] An embodiment of the present application also provides a chip, including a circuit, for executing the method in the embodiment of the present application.

[0228] During implementation, each step of the above method can be completed by an integrated logic circuit of the hardware in the processor or by instructions in the form of software. The method disclosed in conjunction with the embodiments of the present application can be directly embodied as being executed by a hardware processor, or can be executed by a combination of hardware and software modules in the processor. The software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or a power-on erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware. To avoid repetition, it will not be described in detail here.

[0229] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0230] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0231] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0232] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0233] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0234] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a ROM, a RAM, a magnetic disk, or an optical disk.

[0235] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A method for replacing a pseudonym certificate, characterized in that: include: The first device obtains first information, where the first information is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with a first area where the first device is located and / or an operating status of the first device; The first device controls the replacement of the pseudonym certificate according to the first information.

2. The method according to claim 1, wherein The first area includes a second area, where the second area is an area associated with a location of interest to a user of the first device, and the first device acquires first information, including: When the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first device receives the first information from a first roadside device, which is the roadside device closest to the first device in the first area.

3. The method according to claim 1 or 2, wherein: The first area includes a first traffic light intersection, and the first device controls the replacement of the pseudonym certificate according to the first information, including: When the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

4. The method according to claim 1 or 2, wherein: The first device controls the replacement of the pseudonym certificate according to the first information, including: When the first device is started, the first device controls the replacement of the pseudonym certificate.

5. The method according to any one of claims 1 to 4, characterized in that The method further comprises: The first device determines a replacement period for the pseudonym certificate, where the replacement period is associated with a real-time status parameter of the first device; When the replacement period arrives, the first device controls the replacement of the pseudonym certificate.

6. The method according to claim 5, wherein The real-time status parameters include at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to replace the pseudonym certificate.

7. A method for replacing a pseudonym certificate, characterized in that: include: The second device generates first information, where the first information is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with a first area where the first device is located and / or an operating status of the first device; The second device sends the first information to the first device.

8. The method according to claim 7, wherein The first area includes a second area, the second area is an area associated with a location of interest to a user of the first device, the second device is a roadside device closest to the first device in the first area, and the second device sends the first information to the first device, including: When the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the second device sends the first information to the first device.

9. The method according to claim 7 or 8, wherein The first area includes a first signal light intersection, and the second device generates first information including: When the second device obtains information that the traffic light at the first traffic light intersection turns red, the second device generates the first information.

10. The method according to any one of claims 7 to 9, characterized in that The second device sending the first information to the first device includes: The second device sends the first information to the first device via a third device.

11. The method according to any one of claims 7 to 10, characterized in that The method further comprises: The second device obtains information about the first area and / or information about the operating status of the first device.

12. The method according to any one of claims 7 to 11, characterized in that The method further comprises: The second device obtains real-time status parameters of the first device; The second device determines a replacement cycle of the pseudonym certificate according to the real-time status parameter; The second device sends the replacement cycle information to the first device.

13. The method according to claim 12, wherein: The real-time status parameters include at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to replace the pseudonym certificate.

14. A device for replacing a pseudonym certificate, characterized in that: including an acquisition unit and a processing unit; The acquiring unit is configured to acquire first information, where the first information is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with a first area where the first device is located and / or an operating status of the first device; The processing unit is used to control the replacement of the pseudonym certificate according to the first information.

15. The device according to claim 14, wherein The first area includes a second area, where the second area is an area associated with a location of interest to a user of the first device, and the acquiring unit is configured to: When the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first information is received from a first roadside device, which is a roadside device closest to the first device in the first area.

16. The device according to claim 14 or 15, characterized in that The first area includes a first signalized intersection, and the processing unit is configured to: When the driving speed of the first device in the first area is less than or equal to a preset speed threshold, control is performed to replace the pseudonym certificate.

17. The device according to claim 14 or 15, characterized in that The processing unit is used for: When the first device is started, the replacement of the pseudonym certificate is controlled.

18. The device according to any one of claims 14 to 17, characterized in that The apparatus further includes a determining unit configured to: determining a replacement period for the pseudonym certificate, wherein the replacement period is associated with a real-time status parameter of the first device; The processing unit is further configured to control the replacement of the pseudonym certificate when the replacement period arrives.

19. The device according to claim 18, wherein The real-time status parameters include at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to replace the pseudonym certificate.

20. A device for replacing a pseudonym certificate, characterized in that: including a generating unit and a transceiver unit; The generating unit is configured to: generate first information, where the first information is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with the first area where the first device is located and / or the operating status of the first device; The transceiver unit is configured to send the first information to the first device.

21. The device according to claim 20, characterized in that The first area includes a second area, where the second area is an area associated with a location of interest to a user of the first device, and the second device is a roadside device closest to the first device in the first area, and the transceiver unit is configured to: When the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first information is sent to the first device.

22. The device according to claim 20 or 21, characterized in that The first area includes a first signalized intersection, and the apparatus further includes an acquiring unit, wherein the generating unit is configured to: When the acquiring unit acquires information that the traffic light at the first traffic light intersection turns red, the first information is generated.

23. The device according to any one of claims 20 to 22, characterized in that The transceiver unit is used for: The first information is sent to the first device via a third device.

24. The device according to any one of claims 20 to 23, characterized in that The device further includes an acquisition unit, which is configured to: Acquire information about the first area and / or information about the operating status of the first device.

25. The device according to any one of claims 20 to 24, characterized in that The apparatus further includes an acquisition unit and a determination unit, wherein the acquisition unit is configured to: Obtaining real-time status parameters of the first device; The determining unit is used to: determine a replacement cycle of the pseudonym certificate according to the real-time status parameter; The transceiver unit is further configured to send information about the replacement cycle to the first device.

26. The device according to claim 25, characterized in that The real-time status parameters include at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to replace the pseudonym certificate.

27. A device for replacing a pseudonym certificate, characterized in that: include: memory for storing computer programs; A processor, configured to execute the computer program stored in the memory, so that the apparatus performs the method according to any one of claims 1 to 6, or performs the method according to any one of claims 7 to 13.

28. An intelligent driving device, characterized in that: Comprising the apparatus of any one of claims 14 to 19.

29. A server, characterized in that: Comprising the apparatus of any one of claims 20 to 26.

30. A computer-readable storage medium, characterized in that Instructions are stored thereon, and when the instructions are executed by a processor, the processor implements the method according to any one of claims 1 to 6, or executes the method according to any one of claims 7 to 13.

Images