CRL updating method and system based on geographic area

Abstract

The invention provides a certificate revocation list (CRL) updating method and system for a vehicle, and the method comprises the steps: determining a geographic region where the vehicle is located in response to a CRL downloading request; downloading a region CRL corresponding to the geographic region where the vehicle is located, wherein the region CRL is divided based on the geographic region; and updating a local CRL of the vehicle based on the downloaded regional CRL. In addition, the invention also provides a vehicle supporting a certificate revocation list (CRL) updating function.

Description

Technical Field

[0001] The present invention relates to the field of vehicle networking, and more specifically, to a CRL updating method and system based on a geographical area. Background Art

[0002] At present, with the rapid development of autonomous driving, V2X communication will play an increasingly important role. Autonomous vehicles can realize various autonomous driving functions based on V2X information. Therefore, the security requirements of V2X communication are obvious. Attackers using fake messages may cause vehicles to misjudge, thus affecting the vehicle's autonomous driving function, which will pose a serious threat to the safety of the vehicle.

[0003] Currently, in order to ensure the security of V2X communications, it is necessary to monitor abnormal behaviors, for example, to identify faulty and attacked vehicles or the process of these vehicles transmitting erroneous data. Once abnormal behaviors are identified, corresponding measures need to be taken to limit their ability to cause further harm. Measures may include, for example, triggering the revocation of certificates in the security authentication system, that is, adding the corresponding certificates of vehicles determined to be abnormal to the certificate revocation list (CRL) to revoke the credentials of the vehicle to participate in V2X communications. Other vehicles can download the CRL in real time to determine whether the communication certificate of the other vehicle has been revoked in subsequent V2X communications, and verify the communication certificate and message signature when it is determined that the communication certificate has not been revoked.

[0004] However, the CRL currently maintained in the PKI backend is a global list (i.e., covering all domestic regions), with a file size of approximately 3MB and containing approximately 1 million certificates. This list will also increase as the number of V2X vehicles continues to increase. Therefore, when, for example, a V2X message is to be received from a peer vehicle, it is necessary to first check whether the certificate of the peer vehicle has been revoked among approximately 1 million certificates, which will cost more resources for calculation and increase the waiting time for downloading and checking.

[0005] Therefore, in order to reduce the download volume and save computing resources and further improve the security of V2X communication, it is expected to provide a CRL update solution based on geographical areas. Summary of the invention

[0006] This Summary is provided to introduce some concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used as an aid in determining the scope of the claimed subject matter.

[0007] According to a first aspect of the present invention, a method for updating a certificate revocation list (CRL) for a vehicle is provided, the method comprising: determining a geographical area where a vehicle is located in response to a CRL download request; downloading a regional CRL corresponding to the geographical area where the vehicle is located, wherein the regional CRL is divided based on the geographical area; and updating a local CRL of the vehicle based on the downloaded regional CRL.

[0008] Therefore, in the technical solution of the embodiment of the present invention, by dividing the certificate revocation list based on geographical areas, the vehicle only downloads the certificate revocation list of the area where it is located, which significantly reduces the download amount and saves computing resources.

[0009] According to an embodiment of the present invention, the method further comprises: determining a destination area where the vehicle is located when detecting that the vehicle crosses areas; and downloading and updating the local CRL of the vehicle to a regional CRL corresponding to the destination area.

[0010] According to a further embodiment of the present invention, the local CRL of the vehicle is updated periodically according to an update policy, or is updated in real time in response to changes in the regional CRL.

[0011] According to a further embodiment of the present invention, updating the local CRL of the vehicle based on the downloaded regional CRL further includes: verifying the signature validity and content integrity of the downloaded regional CRL; and determining whether to update the local CRL of the vehicle based on the comparison between the regional CRL and the local CRL.

[0012] According to a further embodiment of the present invention, the method further includes: detecting whether there is abnormal behavior in the V2X message received from the opposite vehicle; forming an abnormal behavior report based on the detected abnormal behavior; and sending the abnormal behavior report and the geographical area where the vehicle is located to an abnormal behavior management agency for decision-making on whether to place the certificate of the opposite vehicle in the regional CRL corresponding to the geographical area where the vehicle is located.

[0013] Therefore, in the technical solution of the embodiment of the present invention, when the vehicle finds that the received message is abnormal (for example, a false message is received), the abnormal behavior can be reported for further detection and identification and the regional CRL of the area can be updated accordingly, thereby further saving computing resources while ensuring the vehicle's V2X secure communication.

[0014] According to a further embodiment of the present invention, the method further includes: when deciding to place the certificate of the opposite vehicle in a regional CRL corresponding to the geographical area where the vehicle is located, determining whether the certificate of the opposite vehicle has been placed in another regional CRL; and if determined, deleting the certificate information about the opposite vehicle in the other regional CRL.

[0015] According to a further embodiment of the present invention, the method further includes: when deciding to place the certificate of the opposite vehicle in the regional CRL corresponding to the geographical area where the vehicle is located, the certificate of the opposite vehicle is simultaneously placed in the regional CRL corresponding to the geographical area where the registration place of the opposite vehicle is located.

[0016] According to a further embodiment of the present invention, detecting whether a V2X message received from a peer vehicle has abnormal behavior further includes: performing a rationality check and a consistency check on the V2X message to determine whether there is abnormal behavior.

[0017] According to a second aspect of the present invention, a certificate revocation list (CRL) updating system for a vehicle is provided, the system comprising: a vehicle positioning module, for determining the geographical area where the vehicle is located in response to a CRL download request; a CRL download and update module, for the following operations: downloading a regional CRL corresponding to the geographical area where the vehicle is located, wherein the regional CRL is divided based on the geographical area; and updating the local CRL of the vehicle based on the downloaded regional CRL.

[0018] According to one embodiment of the present invention, the vehicle positioning module is further used to determine the destination area where the vehicle is located when it is detected that the vehicle crosses the area; and the CRL downloading and updating module is further used to download and update the local CRL of the vehicle to the regional CRL corresponding to the destination area.

[0019] According to a further embodiment of the present invention, the local CRL of the vehicle is updated periodically according to an update policy, or is updated in real time in response to changes in the regional CRL.

[0020] According to a further embodiment of the present invention, the system further includes: an abnormal behavior detection module, used to detect whether there is abnormal behavior in the V2X message received from the opposite vehicle; an abnormal behavior reporting module, used to: form an abnormal behavior report based on the detected abnormal behavior; send the abnormal behavior report and the geographical area where the vehicle is located to an abnormal behavior management agency for decision-making on whether to place the certificate of the opposite vehicle in the regional CRL corresponding to the geographical area where the vehicle is located.

[0021] According to a further embodiment of the present invention, the abnormal behavior detection module is further configured to: perform rationality detection and consistency detection on the V2X message to determine whether abnormal behavior exists.

[0022] According to a third aspect of the present invention, a vehicle supporting certificate revocation list CRL update is provided, the vehicle comprising: a positioning system, the positioning system being configured to provide positioning data about the current location of the vehicle; an on-board unit, the on-board unit being configured for V2X communication; and a certificate revocation list CRL update system as in any of the preceding aspects.

[0023] According to a fourth aspect of the present invention, there is provided a computer-readable storage medium storing instructions, which, when executed, cause a vehicle to perform the method as described in any one of the above aspects.

[0024] These and other features and advantages will become apparent by reading the following detailed description and by reference to the associated drawings.It is to be understood that the foregoing general description and the following detailed description are illustrative only and are not restrictive of the aspects of what is claimed. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to understand the manner in which the above features of the present invention are used in detail, the above briefly summarized contents can be described in more detail with reference to various embodiments, some of which are shown in the accompanying drawings. However, it should be noted that the accompanying drawings only show some typical aspects of the present invention and should not be considered to limit its scope, because the description may allow for other equally effective aspects.

[0026] Figure 1 A schematic diagram of the architecture of a geographic region-based CRL update system on a vehicle-mounted side according to an embodiment of the present invention and a schematic diagram of its interaction with a PKI backend are shown.

[0027] Figure 2 A schematic flow chart of a vehicle abnormal behavior detection and identification process according to an embodiment of the present invention is shown.

[0028] Figure 3 A schematic flow chart of a CRL updating method according to an embodiment of the present invention is shown.

[0029] Figure 4 A schematic flow chart of another CRL updating method according to an embodiment of the present invention is shown.

[0030] Figure 5 An exemplary vehicle supporting geographic area based CRL updates according to one embodiment of the present invention is shown.

[0031] Figure 6A schematic diagram of the architecture of a CRL updating system based on geographical areas according to an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0032] The present invention is described in detail below in conjunction with the accompanying drawings, and the features of the present invention will be further apparent in the following specific description. The term "vehicle" used throughout the specification refers to any type of automobile, including but not limited to cars, vans, trucks, buses, etc. For simplicity, the present invention is described with respect to "automobile". The term "A or B" used in the specification means "A and B" and "A or B", and does not mean that A and B are exclusive, unless otherwise specified.

[0033] At present, in view of the importance of V2X security, digital certificates provided by PKI-based security systems and digital signature technology are usually used to prevent illegal vehicles from sending false and forged messages. However, for abnormal behaviors of vehicles with legal identities sending false BSM information and false warning messages, security protection measures based on PKI systems cannot prevent such abnormal behaviors at the data semantic level. Therefore, it is necessary to deploy a mechanism in the V2X security system that can detect abnormal behavior terminals in the network, which is very important for ensuring the reliability of V2X functions. At present, after identifying abnormal behavior vehicles, one measure is to add them to the certificate revocation list (CRL) to prevent their further negative impact. However, the currently maintained CRL is a global list with a size of about 3MB, which results in each V2X communication with the opposite vehicle. It is necessary to check whether the V2X certificate used by the opposite vehicle has been revoked in a large number of V2X certificate revocation lists, which will cost more resources for calculation and increase the waiting time for downloading and checking.

[0034] In order to solve the above problems, this application proposes a CRL list update solution based on geographical area division, such as Figure 1 As shown, Figure 1 A schematic diagram of the architecture of a geographical area-based CRL updating system 100 on a vehicle side according to an embodiment of the present invention and a schematic diagram of its interaction with a PKI backend 110 are shown.

[0035] The CRL updating system 100 may include at least a vehicle positioning module 102 and a CRL downloading and updating module 104 .

[0036] The vehicle location module 102 may determine the geographic area where the vehicle is located in response to the CRL download request.

[0037] Furthermore, the vehicle positioning module 102 may also determine the destination area where the vehicle is located when detecting that the vehicle crosses areas.

[0038] The CRL download and update module 104 may download a regional CRL corresponding to a geographic region where the vehicle is located, wherein the regional CRL may be divided based on the geographic region, and may update the local CRL of the vehicle based on the downloaded regional CRL.

[0039] By downloading only the CRL issued for the abnormal behavior vehicles in the area, the waste of computing resources and unnecessary waiting time caused by reading unnecessary CRLs (eg, CRLs issued for the abnormal behavior vehicles in other areas) can be avoided.

[0040] In the case where the vehicle crosses regions, the CRL download and update module 104 may download and update the vehicle's local CRL to a regional CRL corresponding to the destination region.

[0041] In one embodiment, the local CRL of the vehicle may be updated periodically according to an update policy, or may be updated in real time in response to changes in the regional CRL of the corresponding area.

[0042] In one embodiment, the CRL download and update module 104 may verify the signature validity and content integrity of the downloaded regional CRL, and may determine whether to update the vehicle's local CRL based on a comparison of the regional CRL with the local CRL (ie, update only when the regional CRL changes).

[0043] Furthermore, the CRL updating system 100 may also include an abnormal behavior detection module 106 and an abnormal behavior reporting module 108 .

[0044] The abnormal behavior detection module 106 can detect whether the V2X message received from the opposite vehicle has abnormal behavior.

[0045] Abnormal behavior may refer to the corresponding operations that the nodes participating in the communication do not perform according to the predefined rules, which may include active abnormal behavior (for example, the distribution of erroneous information) and passive abnormal behavior (illegal collection of personal information). In V2X direct communication, abnormal behavior refers to the behavior of the V2X terminal participating in the direct communication sending information containing false or erroneous content to the outside due to intentional or unintentional reasons, thereby affecting the business judgment of other V2X terminals in the V2X direct communication network, including V2X abnormal behavior caused by malicious attackers. The existence of V2X abnormal behavior can have a more serious impact on the operating efficiency and security of the overall V2X direct communication network.

[0046] First, abnormal behavior detection on the vehicle side may involve rationality and consistency detection of received V2X messages. In one example, the vehicle may perform semantic-level judgment on messages received from other vehicles to determine their rationality, including basic rationality checks on vehicle movement data (position, speed, orientation, etc.). In addition, the vehicle may also perform rationality checks on continuous messages received from another vehicle to determine whether changes in relevant field data between continuous messages are reasonable. In addition, the vehicle may also determine whether a message is valid based on the received message and the perception results of the local sensor.

[0047] In another example, the vehicle may perform consistency checks on received messages to determine whether key fields in the message comply with relevant standard requirements.

[0048] Of course, it is understandable that any other reasonable technology known to those skilled in the art may also be used to perform abnormal behavior detection.

[0049] Subsequently, the abnormal behavior reporting module 108 may form an abnormal behavior report based on the detected abnormal behavior, and send the abnormal behavior report and the geographical area where the vehicle is located to the abnormal behavior management agency (MA) for decision-making on whether to place the certificate of the other vehicle in the regional CRL corresponding to the geographical area where the vehicle is located.

[0050] Go to Figure 2 , Figure 2 FIG. 2 is a schematic flow chart of a vehicle abnormal behavior detection and identification process 200 according to an embodiment of the present invention. Figure 2 As shown, abnormal behavior detection requires the support of a central entity MA for centrally evaluating abnormal behavior reports, reliably identifying abnormal behavior vehicles, and subsequently excluding them from the V2X network.

[0051] exist Figure 2 In the V2X communication, abnormal vehicle A and normal vehicle B use digital signatures to ensure the sender's authentication and authorization as well as the integrity of the message. Vehicle B detects potential abnormal behavior of vehicle A based on the consistency and rationality check of mobility data. When potential abnormal behavior is detected, vehicle B reports the abnormal behavior to the abnormal behavior management agency MA to further identify the attacker. The identification of abnormal behavior vehicles by MA also requires the participation of relevant entities in PKI to identify the root cause of the abnormal behavior. After identifying the abnormal behavior vehicle A, PKI should revoke the certificate of abnormal behavior vehicle A and reject its subsequent certificate update requests to prevent vehicle A with abnormal behavior from continuing to interfere with the normal communication of other vehicles. In addition, during the abnormal behavior reporting and identification process, it should be ensured that the attacker (here is vehicle A) cannot use forged abnormal behavior reports to disrupt the normal communication of other legitimate vehicles.

[0052] The above only describes the general process of abnormal behavior detection and reporting. Figure 1 ,MA is mainly responsible for receiving the reported abnormal behavior reports, and then using global abnormal behavior detection GMBD to identify and determine abnormal behavior. Vehicle-side abnormal behavior detection is usually limited by vehicle-side resources, and the information is limited to a small range of time and space, which may not be enough to reliably identify attackers, so the above-mentioned global abnormal behavior detection is needed.

[0053] After determining that abnormal behavior does exist, the region where the abnormal behavior vehicle is located is confirmed, and the regional CRL of the region where the vehicle is located is updated using a regional CRL adapter, that is, the certificate information of the abnormal behavior vehicle is added to the corresponding regional CRL. The updated regional CRL ( Figure 1 The R-CRL in the PKI can be stored in the PKI backend for other vehicles in the area to download and update. When the regional CRL is updated to the vehicle, the message sent by the vehicle with the revoked certificate will no longer be accepted, thus forming a closed-loop management of end-to-end identity management and abnormal behavior detection.

[0054] In one embodiment, when deciding to place the certificate of the opposite vehicle in the regional CRL corresponding to the geographical area where the vehicle is located, it can be determined whether the certificate of the opposite vehicle has been placed in another regional CRL. If so, the certificate information about the opposite vehicle is deleted in the other regional CRL to avoid unnecessary reading.

[0055] In another embodiment, when deciding to place the certificate of the counterpart vehicle in a regional CRL corresponding to the geographic area where the vehicle is located, the certificate of the counterpart vehicle is also placed in a regional CRL corresponding to the geographic area where the counterpart vehicle is registered.

[0056] Those skilled in the art will appreciate that the CRL updating system of the present invention may be implemented in the form of hardware or software, and the modules may be merged or combined in any appropriate manner.

[0057] Figure 3 FIG. 4 is a schematic flow chart of a CRL updating method 300 according to an embodiment of the present invention.

[0058] The method 300 begins at step 302 , where the vehicle location module 102 may determine a geographic region where the vehicle is located in response to a CRL download request.

[0059] In step 304 , the CRL download and update module 104 may download a regional CRL corresponding to the geographic region where the vehicle is located, wherein the regional CRL may be divided based on the geographic region.

[0060] At step 306 , the CRL download and update module 104 may update the local CRL of the vehicle based on the downloaded regional CRL.

[0061] In one embodiment, the vehicle positioning module 102 can determine the destination area (e.g., area 2) of the vehicle when detecting that the vehicle crosses areas (e.g., from area 1 to area 2), and the CRL download and update module 104 can download and update the local CRL of the vehicle to the regional CRL corresponding to the destination area.

[0062] In one embodiment, the local CRL of the vehicle may be updated periodically according to an update policy, or may be updated in real time in response to changes in the regional CRL.

[0063] In one embodiment, when updating the local CRL, the signature validity and content integrity of the downloaded regional CRL may be verified, and a determination may be made whether to update the local CRL of the vehicle based on a comparison between the regional CRL and the local CRL.

[0064] Therefore, by updating the CRL based on geographic area division, the vehicle can download only the CRL of the area it is in and avoid reading useless CRLs in other areas, thereby significantly reducing the download volume, saving computing resources and reducing waiting time, thereby further improving the security and user experience of vehicle V2X communications.

[0065] Figure 4 FIG. 4 is a schematic flow chart of another CRL updating method 400 according to an embodiment of the present invention.

[0066] The method 400 begins at step 402 , where the abnormal behavior detection module 106 may detect whether a V2X message received from an opposite vehicle has abnormal behavior.

[0067] As described above, abnormal behavior may include, for example, intentional or unintentional abnormal behavior messages sent by a terminal with a legitimate identity, or abnormal behavior messages sent by an illegal terminal, including, for example, malicious forged messages, replayed messages, malicious occupation of channels, etc.

[0068] In one embodiment, the detection of abnormal behavior may be achieved by performing rationality detection and consistency detection on the received V2X information.

[0069] In another embodiment, a machine learning approach may be used to detect abnormal behaviors.

[0070] In step 404 , the abnormal behavior reporting module 108 may generate an abnormal behavior report based on the detected abnormal behavior.

[0071] In step 406 , the abnormal behavior reporting module 108 may send the abnormal behavior report and the geographic region where the vehicle is located to the abnormal behavior management agency (MA) for decision-making on whether to place the certificate of the peer vehicle in the regional CRL corresponding to the geographic region where the vehicle is located.

[0072] In one embodiment, when deciding to place the certificate of the opposite vehicle in the regional CRL corresponding to the geographical area where the vehicle is located, it can be determined whether the certificate of the opposite vehicle has been placed in another regional CRL, and if so, the certificate information about the opposite vehicle is deleted in the other regional CRL to avoid information redundancy.

[0073] In one embodiment, when deciding to place the certificate of the counterpart vehicle in the regional CRL corresponding to the geographical area where the vehicle is located, the certificate of the counterpart vehicle can also be placed in the regional CRL corresponding to the geographical area where the counterpart vehicle is registered.

[0074] Therefore, by detecting and reporting the potential abnormal behavior of other vehicles, and by having the MA analyze and determine the abnormal behavior vehicles, and revoking the pseudonym certificates of these abnormal behavior vehicles with greater negative impacts, the CRL of the corresponding area can be updated for other vehicles to download and use. This not only saves computing resources, but also improves the security of the vehicle's V2X communication function.

[0075] Figure 5 An exemplary vehicle 500 is shown that supports geographic region based CRL updates according to one embodiment of the present invention.

[0076] The vehicle 500 may include a positioning system 502, which may be configured to provide positioning data about the current location of the vehicle 500, which may be used to determine the area where the vehicle 500 is located for subsequent CRL area division. In one embodiment, the positioning system 502 may be implemented as a vehicle-mounted GPS.

[0077] Additionally, the vehicle 500 may also include an on-board unit (OBU) 504 , which may be configured for V2X communications, such as receiving V2X messages from other V2X vehicles.

[0078] In addition, the OBU 504 may also be in communication with the backend PKI and download a zone CRL (corresponding to the zone where the vehicle 500 is located) from the backend PKI.

[0079] In addition, the vehicle 500 may also include the above-mentioned CRL update system 100, which may support various functions described in this document, including: determining the geographical area where the vehicle is located in response to a CRL download request; downloading a regional CRL corresponding to the geographical area where the vehicle is located, wherein the regional CRL is divided based on the geographical area; updating the local CRL of the vehicle based on the downloaded regional CRL; detecting whether there is abnormal behavior in the V2X message received from the opposite vehicle; forming an abnormal behavior report based on the detected abnormal behavior; and sending the abnormal behavior report and the geographical area where the vehicle is located to an abnormal behavior management agency for decision-making on whether to place the certificate of the opposite vehicle in the regional CRL corresponding to the geographical area where the vehicle is located.

[0080] Figure 6 A schematic diagram of the architecture of a geographical area-based CRL updating system 600 according to an embodiment of the present invention is shown.

[0081] like Figure 6 As shown in , the system 600 may include a memory 602 and at least one processor 604. The memory 602 may include RAM, ROM, or a combination thereof. The memory 602 may store computer executable instructions, which, when executed by at least one processor 604, cause the at least one processor 604 to perform various functions described herein, including: determining the geographic region where the vehicle is located in response to a CRL download request; downloading a regional CRL corresponding to the geographic region where the vehicle is located, wherein the regional CRL is divided based on the geographic region; updating the local CRL of the vehicle based on the downloaded regional CRL; detecting whether there is abnormal behavior in the V2X message received from the opposite vehicle; forming an abnormal behavior report based on the detected abnormal behavior; and sending the abnormal behavior report and the geographic region where the vehicle is located to the abnormal behavior management agency for decision whether to place the certificate of the opposite vehicle in the regional CRL corresponding to the geographic region where the vehicle is located.

[0082] In some cases, memory 602 may include, among other things, a BIOS that may control basic hardware or software operations, such as interaction with peripheral components or devices. Processor 604 may include an intelligent hardware device (e.g., a general purpose processor, a DSP, a CPU, a microcontroller, an ASIC, an FPGA, a programmable logic device, discrete gate or transistor logic components, discrete hardware components, or any combination thereof).

[0083] The functions described herein may be implemented in hardware, software executed by a processor, firmware, or any combination thereof. If implemented in software executed by a processor, the functions may be stored on or transmitted by a computer-readable medium as one or more instructions or codes. Other examples and implementations fall within the scope of the present disclosure and the appended claims. For example, due to the nature of software, the functions described herein may be implemented using software executed by a processor, hardware, firmware, hardwiring, or any combination thereof. Features that implement the functions may also be physically located in various locations, including being distributed so that parts of the functions are implemented at different physical locations.

[0084] What has been described above includes examples of various aspects of the claimed subject matter. Of course, it is not possible to describe every conceivable combination of components or methods for the purpose of describing the claimed subject matter, but one of ordinary skill in the art will recognize that many further combinations and permutations of the claimed subject matter are possible. Thus, the disclosed subject matter is intended to encompass all such alterations, modifications, and variations that fall within the spirit and scope of the appended claims.

Claims

1. A method for updating a certificate revocation list (CRL) for a vehicle, the method include: In response to the CRL download request, determining a geographic region where the vehicle is located; Downloading a regional CRL corresponding to the geographical area where the vehicle is located, wherein the regional CRL is divided based on the geographical area; as well as The vehicle's local CRL is updated based on the downloaded regional CRL.

2. The method according to claim 1, It is characterized in that The method further comprises: When it is detected that the vehicle crosses an area, determining a destination area where the vehicle is located; and The local CRL of the vehicle is downloaded and updated to a regional CRL corresponding to the destination area.

3. The method according to claim 1, It is characterized in that The local CRL of the vehicle is updated periodically according to an update policy, or updated in real time in response to changes in the regional CRL.

4. The method according to claim 1, It is characterized in that Updating the vehicle's local CRL based on the downloaded regional CRL further comprises: Verify the signature validity and content integrity of the downloaded zone CRL; and A determination is made whether to update the local CRL of the vehicle based on a comparison of the regional CRL with the local CRL.

5. The method according to claim 1, It is characterized in that The method further comprises: Detect whether there is abnormal behavior in the V2X message received from the other vehicle; generating an abnormal behavior report based on the detected abnormal behavior; and The abnormal behavior report and the geographical area where the vehicle is located are sent to an abnormal behavior management agency for decision-making on whether to place the certificate of the peer vehicle in the regional CRL corresponding to the geographical area where the vehicle is located.

6. The method according to claim 5, It is characterized in that The method further comprises: When deciding to place the certificate of the counterpart vehicle in a regional CRL corresponding to the geographical area where the vehicle is located, determining whether the certificate of the counterpart vehicle has been placed in another regional CRL; and If confirmed, the certificate information about the opposite vehicle is deleted from the other regional CRL.

7. The method according to claim 5, It is characterized in that The method further comprises: When deciding to place the certificate of the counterpart vehicle in the regional CRL corresponding to the geographical area where the vehicle is located, the certificate of the counterpart vehicle is also placed in the regional CRL corresponding to the geographical area where the registration place of the counterpart vehicle is located.

8. The method according to claim 5, It is characterized in that Detecting whether the V2X message received from the other vehicle has abnormal behavior further includes: The V2X message is subjected to rationality check and consistency check to determine whether there is abnormal behavior.

9. A certificate revocation list (CRL) updating system for a vehicle, the system include: A vehicle positioning module, for determining a geographic area where a vehicle is located in response to a CRL download request; CRL download and update module, used to: downloading a regional CRL corresponding to the geographical area where the vehicle is located, wherein the regional CRL is divided based on the geographical area; and The vehicle's local CRL is updated based on the downloaded regional CRL.

10. The system of claim 9, It is characterized in that The vehicle positioning module is further used to determine the destination area where the vehicle is located when detecting that the vehicle crosses the area; and The CRL downloading and updating module is further used to download and update the local CRL of the vehicle to a regional CRL corresponding to the destination area.

11. The system of claim 9, It is characterized in that The local CRL of the vehicle is updated periodically according to an update policy, or updated in real time in response to changes in the regional CRL.

12. The system of claim 9, It is characterized in that The system further comprises: An abnormal behavior detection module is used to detect whether the V2X message received from the other vehicle has abnormal behavior; Abnormal behavior reporting module, used for: forming an abnormal behavior report based on the detected abnormal behavior; The abnormal behavior report and the geographical area where the vehicle is located are sent to an abnormal behavior management agency for decision-making on whether to place the certificate of the peer vehicle in the regional CRL corresponding to the geographical area where the vehicle is located.

13. The system of claim 12, wherein the abnormal behavior detection module is further configured to: The V2X message is subjected to rationality check and consistency check to determine whether there is abnormal behavior.

14. A vehicle supporting certificate revocation list (CRL) update, the vehicle include: a positioning system configured to provide positioning data regarding a current location of the vehicle; an on-board unit configured for V2X communication; as well as A certificate revocation list (CRL) updating system as claimed in any one of claims 9 to 13.

15. A computer-readable storage medium storing instructions, which, when executed, cause a vehicle to perform the method according to any one of claims 1 to 8.

Images