Internet of vehicles security communication system and method based on quantum key

Abstract

The invention discloses an Internet of Vehicles secure communication system based on a quantum key. The system comprises a vehicle-mounted end, a roadside end and a cloud end. The vehicle-mounted end and the cloud end are matched and preset with multiple pairs of quantum keys and corresponding quantum key indexes; the invention further discloses an Internet of Vehicles secure communication method based on the quantum key, and the Internet of Vehicles secure communication method is realized based on the Internet of Vehicles secure communication system based on the quantum key. The invention discloses an Internet of Vehicles secure communication system and method based on quantum keys, a plurality of pairs of quantum keys and corresponding quantum key indexes are matched and preset at a vehicle-mounted end and a cloud end, and only the quantum key indexes instead of complete keys are transmitted through a lightweight index query protocol, so that the network load of the vehicle-mounted end can be reduced, and the security of the vehicle-mounted end is improved. The real-time performance of data transmission is greatly improved, and the vehicle is supported to maintain a stable safe communication rate during high-speed movement.

Description

Technical Field

[0001] The present invention relates to the technical fields of quantum communication and intelligent connected vehicles, and particularly relates to a vehicle-to-everything (V2X) security communication system and method based on quantum keys. Background Art

[0002] With the popularization of intelligent connected vehicles, vehicle-to-everything (V2X) technology has become the core support of intelligent transportation. V2X technology realizes the collection, storage, and transmission of vehicle working conditions, static, and dynamic information by installing in-vehicle terminal devices on vehicles, thus generating a large amount of sensitive data.

[0003] Data communication, encryption, desensitization, and identity authentication of intelligent connected vehicles are the key core technologies for national security, personal safe driving, and privacy protection. Traditional encryption algorithms (such as RSA algorithm, ECC algorithm) have serious security risks when facing quantum computing attacks. Quantum computers can break traditional encryption systems in polynomial time through the Shor algorithm. Therefore, traditional encryption algorithms can no longer meet the high security requirements of data services in V2X.

[0004] Quantum key distribution (QKD) is based on the basic principles of cryptography, information theory, and quantum mechanics, and has the characteristic of unconditional security. It is currently a hot topic in the field of quantum cryptography research. Quantum secure communication provides a shared random key that cannot be eavesdropped on both communication parties through QKD technology, and encrypts traditional communication based on the key, thus forming an existing encryption communication security solution.

[0005] Currently, the V2X technology combined with quantum secure communication is a challenge for the future key applications and demonstrations of quantum technology industries. The current preliminary exploration of generating and managing quantum keys at the vehicle end is difficult to achieve unified management of the entire life cycle of quantum keys; frequent key exchanges are required, occupying network bandwidth, and it is difficult to meet the requirements of V2X for data transmission reliability and key update real-time performance. Summary of the Invention

[0006] In order to solve the problem that the current V2X technology combined with quantum secure communication is difficult to meet the real-time performance of data transmission, the present invention provides a V2X security communication system and method based on quantum keys.

[0007] To achieve the above object, the technical solution adopted by the present invention is as follows:

[0008] A V2X security communication system based on quantum keys includes an in-vehicle terminal, a roadside terminal, and a cloud; wherein,

[0009] A plurality of pairs of quantum keys and corresponding quantum key indexes are pre-matched between the vehicle-mounted terminal and the cloud end;

[0010] The vehicle-mounted terminal is used to perform quantum information identity authentication with the cloud end, send a quantum communication request to the roadside terminal, and perform quantum encrypted communication with the roadside terminal;

[0011] The quantum communication request includes a vehicle-mounted device identifier and a quantum key index;

[0012] The roadside terminal is used to send a quantum key request to the cloud end according to the quantum communication request of the vehicle-mounted terminal; and perform quantum encrypted communication with the vehicle-mounted terminal by using the quantum key sent by the cloud end;

[0013] The quantum key request includes a vehicle-mounted device identifier, a roadside device identifier and a quantum key index;

[0014] The cloud end is used to perform quantum information identity authentication with the vehicle-mounted terminal, perform index query according to the quantum key request of the roadside terminal, and send the queried quantum key to the roadside terminal.

[0015] In the above solution, a plurality of pairs of quantum keys and corresponding quantum key indexes are pre-matched between the vehicle-mounted terminal and the cloud end. Through a lightweight index query protocol, only the quantum key index is transmitted instead of the complete key, which can reduce the network load of the vehicle-mounted terminal and greatly improve the real-time performance of data transmission, and support the vehicle to maintain a stable secure communication rate during high-speed movement.

[0016] Preferably, the cloud end is further used to monitor the validity period of the quantum key index and record the usage times of the quantum key index; when the quantum key index expires or the usage times exceed a preset threshold, the cloud end notifies the vehicle-mounted terminal to select a new quantum key index.

[0017] Preferably, the vehicle-mounted terminal is further used to select a new quantum key index according to the cloud end instruction and synchronize the new quantum key index to the cloud end.

[0018] Preferably, the vehicle-mounted terminal sequentially selects new quantum key indexes in the order of the numbers of the quantum key indexes.

[0019] Preferably, the vehicle-mounted terminal randomly selects a new quantum key index. The specific process is as follows:

[0020] Generate a 16-byte random number and perform a padding operation to obtain 32-byte data; perform a hash operation on the 32-byte data to obtain a hash value; sum every four bytes of the hash value as a group to obtain a sum result; calculate the remainder of the sum result and the total number of valid quantum keys, and select the quantum key index corresponding to the remainder as the new quantum key index.

[0021] Preferably, the vehicle-mounted device identifier and the roadside device identifier are respectively generated by a physical unclonable function.

[0022] Preferably, the quantum key index I is generated by the following formula:

[0023] I = HSM3(K hash ||DID||T expire ||T now )

[0024] where HSM3 represents the national cryptographic SM3 hash function, K hash represents the SM3 hash value of the quantum key shard, DID represents the vehicle-mounted device identifier, and T expire represents the quantum key expiration timestamp, and T now represents the current time when the quantum key is generated.

[0025] A vehicle-to-everything (V2X) security communication method based on quantum keys, implemented based on the described V2X security communication system based on quantum keys, includes the following steps:

[0026] S1: The vehicle-mounted side performs quantum information identity authentication with the cloud;

[0027] If the authentication is successful, then execute step S2;

[0028] If the authentication is not successful, then re-execute step S1;

[0029] S2: The vehicle-mounted side sends a quantum communication request to the roadside side;

[0030] The quantum communication request includes the vehicle-mounted device identifier and the quantum key index;

[0031] S3: The roadside side sends a quantum key request to the cloud according to the quantum communication request of the vehicle-mounted side;

[0032] The quantum key request includes the vehicle-mounted device identifier, the roadside device identifier, and the quantum key index;

[0033] S4: The cloud performs index query according to the quantum key request of the roadside side, and sends the queried quantum key to the roadside side;

[0034] S5: The vehicle-mounted side and the roadside side perform quantum encrypted communication using the quantum key.

[0035] Preferably, when the cloud monitors that the quantum key index has expired or the number of uses exceeds a preset threshold, the following steps are further included:

[0036] A1: The cloud notifies the vehicle-mounted side to select a new quantum key index;

[0037] A2: The vehicle-mounted terminal sequentially selects new quantum key indexes in the order of the numbers indexed by the quantum keys, and synchronizes the new quantum key indexes to the cloud.

[0038] Preferably, when the cloud monitors that the quantum key index has expired or the number of uses exceeds a preset threshold, the following steps are further included:

[0039] B1: The cloud notifies the vehicle-mounted terminal to select a new quantum key index;

[0040] B2: The vehicle-mounted terminal randomly selects a new quantum key index and synchronizes the new quantum key index to the cloud; wherein,

[0041] The specific process of randomly selecting a new quantum key index is as follows:

[0042] B2.1: Generate a 16-byte random number and perform a padding operation to obtain 32-byte data;

[0043] B2.2: Perform a hashing operation on the 32-byte data to obtain a hash value;

[0044] B2.3: Take every four bytes of the hash value as a group and perform a summation to obtain a summation result;

[0045] B2.4: Calculate the remainder of the summation result and the total number of valid quantum keys;

[0046] B2.5: Select the quantum key index corresponding to the remainder as the new quantum key index.

[0047] Advantageous technical effects of the present invention:

[0048] The present invention provides an Internet of Vehicles secure communication system and method based on quantum keys. By matching multiple pairs of preset quantum keys and corresponding quantum key indexes at the vehicle-mounted terminal and the cloud, and through a lightweight index query protocol, only the quantum key indexes are transmitted instead of the complete keys, which can reduce the network load of the vehicle-mounted terminal, greatly improve the real-time performance of data transmission, and support the vehicle to maintain a stable secure communication rate during high-speed movement. Description of the Drawings

[0049] Figure 1 is the overall structural block diagram of the present invention;

[0050] Figure 2 is the flowchart of the implementation steps of the technical solution of the present invention;

[0051] Figure 3 is the flowchart of randomly selecting a new quantum key index in the present invention. Detailed Embodiments

[0052] To make the objectives, technical solutions and advantages of the present invention more clearly understood, the present invention will be further described in detail below in conjunction with embodiments. However, the scope of protection required by the present invention is not limited to the specific embodiments below.

[0053] Embodiment 1

[0054] As Figure 1 shown, a vehicle-to-everything (V2X) security communication system based on quantum keys includes a vehicle-mounted terminal, a roadside terminal, and a cloud; wherein,

[0055] The vehicle-mounted terminal and the cloud are pre-matched with multiple pairs of quantum keys and corresponding quantum key indexes (each quantum key index corresponds to a unique set of quantum keys);

[0056] The vehicle-mounted terminal is used to perform quantum information identity authentication with the cloud, send a quantum communication request to the roadside terminal, and perform quantum encrypted communication with the roadside terminal;

[0057] The quantum communication request includes a vehicle-mounted device identifier and a quantum key index;

[0058] The roadside terminal is used to send a quantum key request to the cloud according to the quantum communication request of the vehicle-mounted terminal; and perform quantum encrypted communication with the vehicle-mounted terminal using the quantum key sent by the cloud;

[0059] The quantum key request includes a vehicle-mounted device identifier, a roadside device identifier, and a quantum key index;

[0060] The cloud is used to perform quantum information identity authentication with the vehicle-mounted terminal, perform index query according to the quantum key request of the roadside terminal, and send the queried quantum key to the roadside terminal.

[0061] In the specific implementation process, multiple pairs of quantum keys and corresponding quantum key indexes are pre-matched between the vehicle-mounted terminal and the cloud. Through a lightweight index query protocol, only the quantum key indexes are transmitted instead of the complete keys, which can reduce the network load of the vehicle-mounted terminal and greatly improve the real-time performance of data transmission, supporting the vehicle to maintain a stable security communication rate during high-speed movement.

[0062] Embodiment 2

[0063] A vehicle-to-everything (V2X) security communication system based on quantum keys includes a vehicle-mounted terminal, a roadside terminal, and a cloud; wherein,

[0064] The vehicle-mounted terminal and the cloud are pre-matched with multiple pairs of quantum keys and corresponding quantum key indexes (each quantum key index corresponds to a unique set of quantum keys);

[0065] The vehicle-mounted terminal is used to perform quantum information identity authentication with the cloud, send a quantum communication request to the roadside terminal, and perform quantum encrypted communication with the roadside terminal;

[0066] The quantum communication request includes an in-vehicle device identifier and a quantum key index;

[0067] The roadside terminal is configured to send a quantum key request to the cloud according to the quantum communication request of the in-vehicle terminal; and perform quantum encrypted communication with the in-vehicle terminal using the quantum key sent by the cloud;

[0068] The quantum key request includes an in-vehicle device identifier, a roadside device identifier, and a quantum key index;

[0069] The cloud is configured to perform quantum information identity authentication with the in-vehicle terminal, perform index query according to the quantum key request of the roadside terminal, and send the queried quantum key to the roadside terminal.

[0070] More specifically, the cloud is further configured to monitor the validity period of the quantum key index and record the usage times of the quantum key index; when the quantum key index expires or the usage times exceed a preset threshold, the cloud notifies the in-vehicle terminal to select a new quantum key index.

[0071] More specifically, the in-vehicle terminal is further configured to select a new quantum key index according to the cloud instruction and synchronize the new quantum key index to the cloud.

[0072] More specifically, the in-vehicle terminal sequentially selects new quantum key indexes in the order of the numbers of the quantum key indexes.

[0073] More specifically, the in-vehicle device identifier and the roadside device identifier are respectively generated by a physical unclonable function.

[0074] More specifically, the quantum key index I is generated by the following formula:

[0075] I = HSM3(K hash ||DID||T expire ||T now )

[0076] where HSM3 represents the national cryptographic SM3 hash function, K hash represents the SM3 hash value of the quantum key shard, DID represents the in-vehicle device identifier, T expire represents the quantum key expiration timestamp, and T now represents the current time when the quantum key is generated.

[0077] Embodiment 3

[0078] A vehicle networking secure communication system based on quantum keys is substantially the same as that in Embodiment 2, except that the method for the in-vehicle terminal to select a new quantum key index is different.

[0079] More specifically, the in-vehicle terminal randomly selects a new quantum key index, and the specific process is as follows:

[0080] Generate a 16 - byte random number and perform a padding operation to obtain 32 - byte data; perform a hash operation on the 32 - byte data to obtain a hash value; sum every four bytes in the hash value as a group to obtain a summation result; calculate the remainder of the summation result and the total number of valid quantum keys, and select the quantum key index corresponding to the remainder as the new quantum key index.

[0081] In the specific implementation process, the cloud uniformly monitors and manages the validity of the quantum key index, and timely notifies the in - vehicle terminal to update the invalid quantum key index, which can ensure the reliability and security of data transmission while reducing the load of the in - vehicle terminal.

[0082] Embodiment 4

[0083] As Figure 2 shown, a vehicle - to - everything (V2X) security communication method based on quantum keys, implemented based on the described vehicle - to - everything (V2X) security communication system based on quantum keys, includes the following steps:

[0084] S1: The in - vehicle terminal and the cloud perform quantum information identity authentication;

[0085] If the authentication is successful, then execute step S2;

[0086] If the authentication is not successful, then re - execute step S1;

[0087] S2: The in - vehicle terminal sends a quantum communication request to the roadside terminal;

[0088] The quantum communication request includes the in - vehicle device identifier and the quantum key index;

[0089] S3: The roadside terminal sends a quantum key request to the cloud according to the quantum communication request of the in - vehicle terminal;

[0090] The quantum key request includes the in - vehicle device identifier, the roadside device identifier, and the quantum key index;

[0091] S4: The cloud performs index query according to the quantum key request of the roadside terminal and sends the queried quantum key to the roadside terminal;

[0092] S5: The in - vehicle terminal and the roadside terminal perform quantum encrypted communication using the quantum key.

[0093] In the specific implementation process, the in - vehicle terminal and the cloud are pre - configured with a quantum device authentication key Ka. The specific process of the in - vehicle terminal and the cloud performing quantum information identity authentication in step S1 is as follows:

[0094] S1.1: The in-vehicle device initiates a quantum information identity authentication request to the cloud. The request carries a 16-byte random number R generated by the in-vehicle device and the in-vehicle device identifier DID. Then, perform a mac operation on the random number R and the in-vehicle device identifier DID using Ka to obtain a 16-byte mac calculation result, and take the first 8 bytes mac1 for integrity verification.

[0095] S1.2: After receiving R, DID, and mac1, the cloud first verifies the legitimacy of mac1 using Ka. When mac1 is legitimate, the cloud authenticates the in-vehicle device successfully, performs a mac operation on R using Ka, also takes the first 8 bytes mac2 for integrity verification, and returns it to the in-vehicle device.

[0096] S1.3: The in-vehicle device verifies the legitimacy of the returned result and mac2. When mac2 is also legitimate, the two-way quantum information identity authentication between the in-vehicle device and the cloud is completed.

[0097] In the specific implementation process, the two-way quantum information identity authentication between the in-vehicle device and the cloud realizes the security effects of data confidentiality, data integrity, non-forgeability, and non-repudiation.

[0098] More specifically, when the cloud monitors that the quantum key index has expired or the usage times exceed the preset threshold, the following steps are further included:

[0099] A1: The cloud notifies the in-vehicle device to select a new quantum key index.

[0100] A2: The in-vehicle device sequentially selects a new quantum key index according to the number sequence of the quantum key index and synchronizes the new quantum key index to the cloud.

[0101] Embodiment 5

[0102] A vehicle networking secure communication method based on quantum keys is basically the same as that in Embodiment 4, except that the method for the in-vehicle device to select a new quantum key index is different.

[0103] More specifically, when the cloud monitors that the quantum key index has expired or the usage times exceed the preset threshold, the following steps are further included:

[0104] B1: The cloud notifies the in-vehicle device to select a new quantum key index.

[0105] B2: The in-vehicle device randomly selects a new quantum key index and synchronizes the new quantum key index to the cloud; where,

[0106] As Figure 3 shown, the specific process of randomly selecting a new quantum key index is as follows:

[0107] B2.1: Generate a 16 - byte random number and perform a padding operation to obtain 32 - byte data;

[0108] B2.2: Perform a hash operation on the 32 - byte data to obtain a hash value;

[0109] B2.3: Take every four bytes of the hash value as a group and perform a summation to obtain a summation result;

[0110] B2.4: Calculate the remainder of the summation result and the total number of valid quantum keys;

[0111] B2.5: Select the quantum key index corresponding to the remainder as the new quantum key index.

[0112] Based on the disclosure and teachings of the above - mentioned specification, those skilled in the art to which the present invention pertains can also make changes and modifications to the above - mentioned embodiments. Therefore, the present invention is not limited to the specific embodiments disclosed and described above, and some modifications and changes to the invention should also fall within the protection scope of the claims of the present invention. In addition, although some specific terms are used in this specification, these terms are only for convenience of description and do not constitute any limitation to the present invention.

Claims

1. A quantum key-based secure communication system for Internet of Vehicles, characterized in that: Including vehicle-mounted end, roadside end and cloud end; among them, The vehicle-mounted terminal and the cloud-end match and preset multiple pairs of quantum keys and corresponding quantum key indexes; The vehicle-mounted terminal is used to perform quantum information identity authentication with the cloud, send quantum communication requests to the roadside terminal, and perform quantum encryption communication with the roadside terminal; The quantum communication request includes an on-board device identification and a quantum key index; The roadside terminal is used to send a quantum key request to the cloud according to the quantum communication request of the vehicle-mounted terminal; and use the quantum key sent by the cloud to perform quantum encryption communication with the vehicle-mounted terminal; The quantum key request includes an on-board device identification, a roadside device identification and a quantum key index; The cloud is used to perform quantum information identity authentication with the vehicle-mounted end, perform index query according to the quantum key request of the roadside end, and send the queried quantum key to the roadside end.

2. According to claim 1, a quantum key-based vehicle network security communication system is characterized in that: The cloud is also used to monitor the validity period of the quantum key index and record the number of times the quantum key index is used; when the quantum key index expires or the number of times it is used exceeds a preset threshold, the cloud notifies the vehicle-mounted terminal to select a new quantum key index.

3. A quantum key-based vehicle network security communication system according to claim 2, characterized in that: The vehicle-mounted terminal is also used to select a new quantum key index according to cloud instructions and synchronize the new quantum key index to the cloud.

4. A quantum key-based vehicle network security communication system according to claim 3, characterized in that: The vehicle-mounted terminal selects new quantum key indexes in sequence according to the numbering order of the quantum key indexes.

5. The vehicle network security communication system based on quantum key according to claim 3 is characterized in that: The vehicle-mounted terminal randomly selects a new quantum key index, and the specific process is as follows: Generate a 16-byte random number and perform a padding operation to obtain 32-byte data; perform a hash operation on the 32-byte data to obtain a hash value; sum each four bytes in the hash value as a group to obtain a sum result; calculate the remainder between the sum result and the total number of valid quantum keys, and select a quantum key index corresponding to the number and the remainder as a new quantum key index.

6. The vehicle network security communication system based on quantum key according to claim 1 is characterized in that: The vehicle-mounted device identifier and the roadside device identifier are respectively generated by physical unclonable functions.

7. The vehicle network security communication system based on quantum key according to claim 1 is characterized in that: The quantum key index I is generated by the following formula: I=HSM3(K hash ||DID||T expire ||T now ) Among them, HSM3 represents the national secret SM3 hash function, K hash represents the SM3 hash value of the quantum key shard, DID represents the vehicle device identifier, T expire Represents the quantum key expiration timestamp, T now Indicates the current time of quantum key generation.

8. A method for secure communication in an Internet of Vehicles based on quantum keys, characterized in that: The following steps are involved: S1: Quantum information identity authentication between the vehicle and the cloud; If the authentication is successful, execute step S2; If the authentication fails, step S1 is executed again; S2: The vehicle-mounted end sends a quantum communication request to the roadside end; The quantum communication request includes an on-board device identification and a quantum key index; S3: The roadside sends a quantum key request to the cloud based on the quantum communication request from the vehicle-mounted end; The quantum key request includes an on-board device identification, a roadside device identification and a quantum key index; S4: The cloud performs an index query based on the quantum key request from the roadside end, and sends the queried quantum key to the roadside end; S5: The vehicle-mounted end and the roadside end use quantum keys for quantum encryption communication.

9. A method for secure communication in an Internet of Vehicles based on quantum keys according to claim 8, characterized in that: When the cloud monitors that the quantum key index has expired or the number of times it has been used exceeds the preset threshold, the following steps are also included: A1: The cloud notifies the vehicle to select a new quantum key index; A2: The vehicle-mounted terminal selects new quantum key indexes in sequence according to the numbering order of the quantum key indexes, and synchronizes the new quantum key indexes to the cloud.

10. A method for secure communication in an Internet of Vehicles based on quantum keys according to claim 8, characterized in that: When the cloud monitors that the quantum key index has expired or the number of times it has been used exceeds the preset threshold, the following steps are also included: B1: The cloud notifies the vehicle to select a new quantum key index; B2: The vehicle-mounted terminal randomly selects a new quantum key index and synchronizes the new quantum key index to the cloud; The specific process of randomly selecting a new quantum key index is: B2.1: Generate a 16-byte random number and perform padding operations to obtain 32-byte data; B2.2: Perform hash operation on the 32-byte data to obtain a hash value; B2.3: Sum every four bytes in the hash value as a group to obtain the sum result; B2.4: Calculate the remainder between the sum and the total number of valid quantum keys; B2.5: Select the quantum key index corresponding to the number and the remainder as the new quantum key index.

Images