Internet of vehicles communication security test method and system, medium and program product

Abstract

The invention relates to the technical field of intelligent network connection automobiles, in particular to an Internet of Vehicles communication security test method, an Internet of Vehicles communication security test system, a computer readable storage medium capable of realizing the method and a computer program product. The method comprises the following steps: simulating an Internet of Vehicles end-to-end communication link in a laboratory environment through safety detection equipment, including generating a wireless signal comprising an application layer protocol and a safety layer protocol, and simulating a global navigation satellite system signal to synchronize and communicate with at least one tested module; signing and issuing digital certificates for the security detection equipment and the tested module through the virtual certificate platform, and modifying certificate parameters in response to an instruction of the security test management platform; integrating and executing network security test cases for the tested module through the security test management platform; wherein the security test management platform carries out data interaction with the security detection equipment and the virtual certificate platform so as to collaboratively complete the test of the tested module on the system-level security layer.

Description

Technical Field

[0001] This application relates to the field of intelligent connected vehicle technology, and more specifically to a vehicle-to-everything (V2X) communication security testing method, a V2X communication security testing system, a computer-readable storage medium and a computer program product capable of implementing the above method. Background Technology

[0002] Intelligent connected vehicles, as an important evolutionary direction of the automotive industry ecosystem, are driving the deep transformation of transportation systems towards automation and intelligence. Among them, Cellular Vehicle-to-Everything (C-V2X) technology and related standards and protocols based on cellular networks are key enabling technologies for realizing the interconnection of vehicles with everything and supporting the implementation of high-level autonomous driving. They have now entered the pilot demonstration and commercialization stage.

[0003] C-V2X communication encompasses various scenarios, including vehicle-to-vehicle (V2V), vehicle-to-infrastructure (V2I), and vehicle-to-pedestrian (V2P). Its communication content directly impacts vehicle control decisions and road safety. However, the specific implementation of the C-V2X protocol stack, particularly its application and security layers, in actual devices has not undergone systematic network security analysis and testing. Because this technology's applications directly involve personal and property safety, the existence and malicious exploitation of security vulnerabilities such as identity spoofing, message tampering, and denial-of-service (DoS) attacks could lead to serious consequences.

[0004] It should be noted that the information disclosed in the background section above is only used to enhance the understanding of the background of this application, and therefore may include information that does not constitute prior art known to those skilled in the art. Summary of the Invention

[0005] To address or at least mitigate one or more of the above problems, a vehicle-to-everything (V2X) communication security testing method, a V2X communication security testing system, a computer-readable storage medium and a computer program product capable of implementing the above method are provided. By constructing a collaborative testing system that integrates environment simulation, certificate management and test execution, the method enables automated and holistic security testing of the system-level security layer of V2X communication modules in a laboratory environment.

[0006] According to a first aspect of this application, a method for testing vehicle-to-everything (V2X) communication security is provided, comprising the following steps: simulating an end-to-end V2X communication link in a laboratory environment using a security testing device, including generating a wireless signal containing application layer and security layer protocols, and simulating a Global Navigation Satellite System (GNSS) signal for synchronization and communication with at least one module under test; issuing digital certificates for the security testing device and the module under test through a virtual certificate platform, and modifying certificate parameters in response to instructions from a security testing management platform; integrating and executing network security test cases for the module under test through the security testing management platform; wherein the security testing management platform interacts with the security testing device and the virtual certificate platform to collaboratively complete the system-level security layer testing of the module under test.

[0007] As an alternative or supplement to the above solutions, in a method according to an embodiment of this application, the network security test cases include security layer consistency testing, security layer attack testing, and large-scale stress testing, wherein the security layer attack testing includes at least one of anti-Syrian attack, anti-replay attack, denial-of-service attack, anti-black hole attack, anti-wormhole attack, or anti-malicious message injection testing.

[0008] As an alternative or supplement to the above solutions, in a method according to an embodiment of this application, the step of simulating the Global Navigation Satellite System (GNSS) signal specifically includes: providing simulated latitude, longitude, altitude, steering angle, and speed information to the module under test through a GNSS simulator to activate the vehicle networking function of the module under test; synchronizing the time information of the module under test and the safety detection device so that the two communicate within the same simulation scenario.

[0009] As an alternative or supplement to the above solutions, in a method according to an embodiment of this application, the certificate authorities simulated by the virtual certificate platform include a registered certificate authority, a pseudonymous certificate authority, an application certificate authority, and an abnormal behavior management authority. The registered certificate authority is used to provide application and renewal services for registered certificates, the pseudonymous certificate authority is used to provide application and download services for pseudonymous certificates, the application certificate authority is used to provide application certificate download services for roadside units, and the abnormal behavior management authority is used to receive abnormal reports and generate a certificate revocation list.

[0010] As an alternative or supplement to the above solutions, the method according to an embodiment of this application further includes: the abnormal behavior management agency determines the certificates that need to be revoked based on the potential abnormal behaviors identified in the simulation test, and dynamically generates and updates the certificate revocation list.

[0011] As an alternative or supplement to the above solutions, in a method according to an embodiment of this application, the step of modifying certificate parameters includes: modifying the validity period of the pseudonym certificate according to the instructions issued by the security test management platform, or simulating a key event to trigger a change in the pseudonym certificate, so as to construct a specific security test scenario.

[0012] As an alternative or supplement to the above solutions, in a method according to an embodiment of this application, the module under test is an in-vehicle unit or a roadside unit; when the module under test is an in-vehicle unit, the digital certificate includes a registration certificate and a pseudonym certificate; when the module under test is a roadside unit, the digital certificate includes an application certificate.

[0013] According to a second aspect of this application, a vehicle-to-everything (V2X) communication security testing system is provided. The system includes: a security testing device for simulating an end-to-end V2X communication link in a laboratory environment, including generating wireless signals containing application layer and security layer protocols, and simulating Global Navigation Satellite System (GNSS) signals for synchronization and communication with at least one module under test; a virtual certificate platform for issuing digital certificates to the security testing device and the module under test, and capable of modifying certificate parameters in response to instructions; and a security testing management platform, data-connected to the security testing device and the virtual certificate platform, for integrating and executing network security test cases for the module under test to collaboratively complete system-level security layer testing of the module under test.

[0014] As an alternative or supplement to the above solutions, in a system according to an embodiment of this application, the safety detection device includes a message simulator and a global navigation satellite system simulator; the message simulator is used to send and receive vehicle network messages; the global navigation satellite system simulator is used to provide simulated latitude, longitude, altitude, steering angle and speed information to the module under test through a radio frequency connection, and synchronize time information.

[0015] As an alternative or supplement to the above solutions, in a system according to an embodiment of this application, the certificate authorities simulated by the virtual certificate platform include a registration certificate authority, a pseudonym certificate authority, an application certificate authority, and an abnormal behavior management authority; the abnormal behavior management authority is able to identify potential abnormal behaviors, determine certificates that need to be revoked, and generate a certificate revocation list.

[0016] As an alternative or supplement to the above solutions, the system according to an embodiment of this application further includes a certification authority, used to authenticate and authorize the certificate applicant during the device initialization phase, and issue a registration digital certificate for it, enabling it to securely interact with the certificate authority in the virtual certificate platform.

[0017] As an alternative or supplement to the above solutions, in a system according to an embodiment of this application, the security test management platform constructs a specific security test scenario by issuing instructions to the virtual certificate platform to modify the validity period of the pseudonym certificate or simulating a critical event to trigger a change in the pseudonym certificate.

[0018] As an alternative or supplement to the above solutions, in a system according to an embodiment of this application, the module under test is a vehicle-mounted unit or a roadside unit; when transmitting data, the vehicle-mounted unit and the roadside unit use the private key of the locally issued digital certificate to digitally sign the broadcast information, and when receiving data, they use the public key of the data sender's certificate to verify the received message.

[0019] As an alternative or supplement to the above solutions, in a system according to an embodiment of this application, multiple virtual certificate platforms achieve mutual recognition through a trusted root certificate list.

[0020] According to a third aspect of this application, a computer-readable storage medium is provided, the computer-readable storage medium including instructions that, when executed, perform any one of the methods described according to a first aspect of this application.

[0021] According to a fourth aspect of this application, a computer program product is provided, comprising a computer program that, when executed by a processor, implements any one of the methods described in the first aspect of this application.

[0022] The vehicle-to-everything (V2X) communication security testing scheme according to one or more embodiments of this application organically combines and coordinates data from security testing equipment, a virtual certificate platform, and a security testing management platform to construct a highly integrated testing environment. This scheme can completely simulate a real end-to-end V2X communication link under laboratory conditions and achieve automated testing of the module under test at the system-level security layer within this controllable environment. This scheme effectively solves the problem in existing technologies where it is difficult to conduct systematic and holistic security verification in a laboratory. It can complete a comprehensive assessment of the hardware and software security reliability of communication modules without relying on field vehicle testing, significantly improving testing efficiency and coverage, and providing a reliable and reproducible solution for verifying the security performance of V2X communication devices. Attached Figure Description

[0023] The above and / or other aspects and advantages of this application will become clearer and more readily understood from the following description taken in conjunction with the accompanying drawings, in which the same or similar elements are denoted by the same reference numerals. In the drawings: Figure 1 A schematic block diagram of a vehicle-to-everything (V2X) communication security testing system 10 according to one or more embodiments of this application; Figure 2A schematic flowchart illustrating a vehicle-to-everything (V2X) communication security testing method 20 according to one or more embodiments of this application; and Figure 3 This is a schematic block diagram of an electronic device 30 according to one or more embodiments of this application. Detailed Implementation

[0024] The following detailed description is merely exemplary in nature and is not intended to limit the disclosed technology or its application and use. Furthermore, it is not intended to be bound by any express or implied theory presented in the foregoing technical fields, background art, or the following detailed description.

[0025] In the following detailed description of the embodiments, numerous specific details are set forth in order to provide a more thorough understanding of the disclosed technology. However, it will be apparent to those skilled in the art that the disclosed technology can be practiced without these specific details. In other instances, well-known features have not been described in detail to avoid unnecessarily complicating the description.

[0026] Terms such as "comprising" and "including" indicate that, in addition to the units and steps directly and explicitly described in the specification, the technical solution of this application does not exclude the presence of other units and steps not directly or explicitly described. Terms such as "first" and "second" do not indicate the order of the units in terms of time, space, size, etc., but are merely used to distinguish the units. The technology of this application is generally used in electric vehicles, including but not limited to battery electric vehicles (BEVs), hybrid electric vehicles (HEVs), and fuel cell electric vehicles (FCEVs).

[0027] In the following, exemplary embodiments according to this application will be described in detail with reference to the accompanying drawings.

[0028] Please refer to the attached diagram below. Figure 1 This is a schematic block diagram of a vehicle-to-everything (V2X) communication security testing system 10 according to one or more embodiments of this application. Figure 1 As shown, the system 10 includes three core components: a security testing device 110, a virtual certificate platform 120, and a security testing management platform 130. These components are connected via a network and work together to build a complete laboratory testing environment.

[0029] The security testing equipment 110 serves as the hardware foundation of the system and is responsible for simulating a real C-V2X communication environment in a laboratory setting. This includes generating wireless signals containing application layer and security layer protocols, and simulating Global Navigation Satellite System (GNSS) signals to synchronize and communicate with at least one module under test.

[0030] In one or more embodiments, the security detection device 110 may include: a message simulator for sending and receiving vehicle-to-everything (V2X) messages; and / or a GNSS simulator. The message simulator may be a PC5 message simulator, capable of generating and sending radio frequency signals conforming to the C-V2X protocol stack requirements. These signals may contain complete application layer messages and security layer protocols (e.g., signature and encryption information).

[0031] In one or more embodiments, the GNSS simulator can provide simulated vehicle dynamics information to the module under test (DUT) via a radio frequency antenna, including but not limited to at least one of latitude, longitude, altitude, steering angle, speed, and precise time synchronization signal. This information can be used to activate the C-V2X communication function of the DUT and ensure that the DUT and the safety detection device 110 are in a simulation scenario with the same time reference, thereby achieving synchronization and a stable communication link between devices and providing underlying support for end-to-end service virtualization.

[0032] The virtual certificate platform 120 serves as the trust foundation of the system, simulating a complete Public Key Infrastructure (PKI) system. Specifically, the virtual certificate platform 120 is configured to issue digital certificates to the security testing device 110 and the module under test, and can respond to instructions to modify certificate parameters.

[0033] In one embodiment, the Certificate Authority (CA) simulated by the virtual certificate platform 120 may include: a Registered Certificate Authority (RCA) providing registration certificate application and renewal services for On-Board Units (OBUs), and / or a Pseudo-Certificate Authority (PCA) providing pseudonymous certificate application and download services. In another embodiment, the virtual certificate platform 120 may also include an Application Certificate Authority (ACA) providing application certificate download services for Roadside Units (RSUs). In yet another embodiment, the virtual certificate platform 120 may also integrate an anomaly management mechanism to receive and analyze anomaly reports from V2X devices, thereby determining certificates that need to be revoked and generating and distributing a certificate revocation list. Furthermore, the platform can dynamically modify parameters of various certificates (such as the validity period of pseudonymous certificates) or simulate "critical events" to trigger certificate changes, thereby flexibly constructing various test scenarios related to certificate security, based on instructions issued by the security test management platform 130.

[0034] The security test management platform 130 serves as the system's control and evaluation center, integrating a rich library of network security test cases. Specifically, the security test management platform 130 is data-connected to the security testing device 110 and the virtual certificate platform 120, used to integrate and execute network security test cases for the module under test, in order to collaboratively complete the testing of the module under test at the system-level security layer.

[0035] In one or more embodiments, these test cases cover security layer consistency testing, various types of security layer attack testing, and large-scale stress testing. Specific security layer attack testing scenarios include, but are not limited to, at least one of the following: protection against Sybil attacks, protection against replay attacks, denial-of-service attacks, protection against black hole attacks, protection against wormhole attacks, protection against malicious message injection, data stream injection protection, and protection against receiving unreliable messages. The security testing management platform 130 can centrally control and schedule the security testing device 110 and the virtual certificate platform 120 via the network, issuing test instructions and configuration parameters to them, and collecting various data during the testing process. This allows them to work together to complete a comprehensive and automated test and evaluation of the module under test at the system-level security layer, ultimately verifying the network security reliability of its hardware and software.

[0036] In one or more embodiments, the virtual certificate platform 120 further includes a Certificate Authority (CA). This CA plays a central role in the initialization phase of the connected vehicle device (i.e., the module under test). Specifically, the CA is responsible for strictly authenticating and controlling access permissions for the entity applying for the certificate (i.e., the certificate applicant). After authentication and authorization, the CA can issue initial security credentials to the applicant, such as a registered digital certificate. This process lays a foundation of trust for subsequent secure interactions with other certificate authorities within the virtual certificate platform 120 (such as registration certificate authorities, pseudonymous certificate authorities, etc.), ensuring the security of the entire certificate application and update process.

[0037] In one or more embodiments, the security behavior of the module under test, whether it is an On-Board Unit (OBU) or a Roadside Unit (RSU), is strictly defined during communication. When acting as a data sender, the OBU or RSU uses the private key corresponding to the digital certificate issued by the virtual certificate platform 120, stored locally, to digitally sign application layer messages (such as Basic Security Messages (BSM), traffic light status messages (SPaT), etc.) that need to be broadcast. Correspondingly, when acting as a data receiver, the OBU or RSU can first obtain the public key of the sender's certificate and then use that public key to verify the digital signature of the received message. This mechanism based on public-key cryptography effectively ensures the authenticity, integrity, and non-repudiation of information in vehicle-to-everything (V2X) communication.

[0038] In one or more embodiments, the system supports the deployment of multiple virtual certificate platforms 120 to simulate a complex multi-certificate domain management environment. These platforms may represent different vehicle manufacturers, different regions, or different operating entities. To achieve cross-domain mutual trust and recognition, these virtual certificate platforms 120 can establish a cross-domain trust chain by synchronizing and maintaining a shared Trusted Root Certificate List (TRCL). The root certificate of each platform is included in this list. Any device certificate issued by any platform, as long as its certificate chain ultimately points to a root certificate recognized in the TRCL, can be trusted and verified by connected vehicle devices in other platform domains, thereby enabling secure communication in a large-scale, distributed connected vehicle environment.

[0039] The following is a reference. Figure 2 , Figure 2 This is a schematic flowchart of a vehicle-to-everything (V2X) communication security testing method 20 according to one or more embodiments of this application.

[0040] In step 201, a vehicle-to-everything (V2X) communication link is simulated in a laboratory environment using safety testing equipment. In one or more embodiments, step 201 includes generating a wireless signal containing application layer and security layer protocols, and simulating a Global Navigation Satellite System (GNSS) signal for synchronization and communication with at least one module under test (DUT). In one or more embodiments, step 201 includes generating a C-V2X radio frequency signal containing complete application layer and security layer protocols using a PC5 message simulator, and simultaneously generating a simulated positioning signal containing latitude, longitude, altitude, steering angle, and speed information using a GNSS simulator to activate the V2X functionality of the DUT and achieve time synchronization. This simulated communication environment provides a reliable testing foundation for subsequent safety testing.

[0041] In step 203, digital certificates are issued to the security testing device and the module under test through a virtual certificate platform, and certificate parameters are modified in response to instructions from the security test management platform. In one or more embodiments, the virtual certificate platform simulates a complete certificate authority system, including a registration certificate authority, a pseudonym certificate authority, an application certificate authority, and an anomaly management authority. The certification authority authenticates and authorizes the certificate applicant during the device initialization phase. In one or more embodiments, the anomaly management authority dynamically generates and updates a certificate revocation list based on potential anomalies identified during testing. In another embodiment, multiple virtual certificate platforms achieve mutual recognition through a trusted root certificate list to support complex cross-domain testing scenarios.

[0042] In step 205, network security test cases for the module under test are integrated and executed through the security test management platform. In one or more embodiments, the test cases include security layer consistency testing, security layer attack testing, and large-scale stress testing. Specifically, the security layer attack testing includes at least one of the following: protection against Sybil attacks, replay attacks, denial-of-service attacks, black hole attacks, wormhole attacks, and malicious message injection. The security test management platform constructs a complete test scenario by coordinating and controlling security testing equipment and a virtual certificate platform.

[0043] In one or more embodiments, the module under test is an in-vehicle unit or a roadside unit. When the module under test is an in-vehicle unit, its acquired digital certificate includes a registration certificate and a pseudonym certificate; when the module under test is a roadside unit, its acquired digital certificate includes an application certificate. During communication, the in-vehicle unit and the roadside unit use the private key of their locally issued digital certificate to digitally sign the broadcast information when sending data, and use the public key of the data sender's certificate to verify the received message when receiving data.

[0044] In one or more embodiments, the step of modifying certificate parameters specifically includes modifying the validity period of the pseudonym certificate according to the instructions issued by the security test management platform, or simulating a critical event to trigger a change in the pseudonym certificate, thereby constructing a specific security test scenario and comprehensively examining the security behavior of the module under test under various abnormal certificate states.

[0045] Figure 3 This is a schematic block diagram of an electronic device 30 according to one or more embodiments of this application. The electronic device 30 includes a memory 310, a processor 320, and a computer program 330 stored in the memory 310 and executable on the processor 320, the execution of which causes the method 20 described above to be performed.

[0046] Furthermore, as described above, this application can also be implemented as a computer-readable storage medium storing a program for causing a computer to perform the methods described in any of the above embodiments. Here, various types of computer-readable storage media can be used, such as disks (e.g., magnetic disks, optical disks, etc.), cards (e.g., memory cards, optical cards, etc.), semiconductor memory (e.g., ROM, non-volatile memory, etc.), and tapes (e.g., magnetic tape, cassette tape, etc.).

[0047] This application can also be implemented as a computer program product, which includes a computer program that, when executed by a processor, implements the method described in any of the above embodiments.

[0048] Where applicable, the various embodiments provided in this application may be implemented using hardware, software, or a combination of hardware and software. Furthermore, where applicable, without departing from the scope of this application, the various hardware and / or software components described herein may be combined into composite components comprising software, hardware, and / or both. Where applicable, without departing from the scope of this application, the various hardware and / or software components described herein may be divided into sub-components comprising software, hardware, or both. Additionally, where applicable, it is contemplated that software components may be implemented as hardware components, and vice versa.

[0049] The software (such as program code and / or data) according to this application can be stored on one or more computer storage media. It is also contemplated that the software identified herein can be implemented using one or more networked and / or otherwise general-purpose or special-purpose computers and / or computer systems. Where applicable, the order of the various steps described herein can be changed, combined into compound steps, and / or divided into sub-steps to provide the features described herein.

[0050] The embodiments and examples presented herein are provided to best illustrate embodiments of this application and its particular applications, thereby enabling those skilled in the art to implement and use this application. However, those skilled in the art will understand that the above description and examples are provided for ease of illustration and example only. The descriptions presented are not intended to cover all aspects of this application or to limit this application to the precise forms disclosed.

Claims

1. A method for testing the security of vehicle-to-everything (V2X) communication, characterized in that, Includes the following steps: The end-to-end communication link of the vehicle network is simulated in a laboratory environment using safety testing equipment, including generating wireless signals containing application layer and security layer protocols, and simulating global navigation satellite system signals to synchronize and communicate with at least one module under test. Digital certificates are issued for the security testing equipment and the module under test through a virtual certificate platform, and the certificate parameters are modified in response to the instructions of the security test management platform. The security test management platform integrates and executes network security test cases for the module under test. The security testing management platform interacts with the security testing equipment and the virtual certificate platform to collaboratively complete the testing of the module under test at the system-level security layer.

2. The method according to claim 1, characterized in that, The network security test cases include security layer consistency testing, security layer attack testing, and large-scale stress testing. The security layer attack testing includes at least one of the following: protection against Sybil attacks, replay attacks, denial-of-service attacks, black hole attacks, wormhole attacks, or malicious message injection.

3. The method according to claim 1, characterized in that, The steps for simulating the signals of the Global Navigation Satellite System specifically include: The system provides simulated latitude, longitude, altitude, steering angle, and speed information to the module under test via a global navigation satellite system simulator in order to activate the vehicle networking function of the module under test. The time information of the module under test and the security detection device are synchronized so that they can communicate within the same simulation scenario.

4. The method according to claim 1, characterized in that, The virtual certificate platform simulates certificate authorities including a registered certificate authority, a pseudonymous certificate authority, an application certificate authority, and an abnormal behavior management authority. The registered certificate authority provides application and renewal services for registered certificates, the pseudonymous certificate authority provides application and download services for pseudonymous certificates, the application certificate authority provides application certificate download services for roadside units, and the abnormal behavior management authority receives abnormal reports and generates a certificate revocation list.

5. The method according to claim 4, characterized in that, The method further includes: The abnormal behavior management organization determines the certificates that need to be revoked based on the potential abnormal behaviors identified in the simulation test, and dynamically generates and updates the certificate revocation list.

6. The method according to claim 1, characterized in that, The steps for modifying certificate parameters include: modifying the validity period of the pseudonym certificate according to the instructions issued by the security test management platform, or simulating a critical event to trigger a change in the pseudonym certificate, in order to construct a specific security test scenario.

7. The method according to claim 1, characterized in that, The module under test is either an in-vehicle unit or a roadside unit; when the module under test is an in-vehicle unit, the digital certificate includes a registration certificate and a pseudonym certificate; when the module under test is a roadside unit, the digital certificate includes an application certificate.

8. A vehicle-to-everything (V2X) communication security testing system, characterized in that, The system includes: Safety testing equipment for simulating end-to-end communication links in a laboratory environment, including generating wireless signals containing application layer and security layer protocols, and simulating global navigation satellite system signals for synchronization and communication with at least one module under test; A virtual certificate platform is used to issue digital certificates for the security testing equipment and the module under test, and can respond to instructions to modify certificate parameters; The security testing management platform is connected to the security testing equipment and the virtual certificate platform for integrating and executing network security test cases for the module under test, so as to collaboratively complete the testing of the module under test at the system-level security layer.

9. The system according to claim 8, characterized in that, The safety testing equipment includes a message simulator and a global navigation satellite system simulator; the message simulator is used to send and receive vehicle network messages; the global navigation satellite system simulator is used to provide simulated latitude, longitude, altitude, steering angle and speed information to the module under test through radio frequency connection, and synchronize time information.

10. The system according to claim 8, characterized in that, The virtual certificate platform simulates certificate authorities including registration certificate authorities, pseudonymous certificate authorities, application certificate authorities, and abnormal behavior management authorities; the abnormal behavior management authorities can identify potential abnormal behaviors, determine certificates that need to be revoked, and generate a certificate revocation list.

11. The system according to claim 10, characterized in that, The system also includes a certification authority, which is used to authenticate and authorize the certificate applicant during the device initialization phase and issue a registered digital certificate to enable it to interact securely with the certificate authorities in the virtual certificate platform.

12. The system according to claim 8, characterized in that, The security testing management platform constructs specific security testing scenarios by issuing instructions to the virtual certificate platform to modify the validity period of the pseudonym certificate or simulating key events to trigger pseudonym certificate changes.

13. The system according to claim 8, characterized in that, The module under test is either a vehicle-mounted unit or a roadside unit. When transmitting data, the vehicle-mounted unit and the roadside unit use the private key of the locally issued digital certificate to digitally sign the transmitted information, and when receiving data, they use the public key of the data sender's certificate to verify the received message.

14. The system according to claim 8, characterized in that, The various virtual certificate platforms achieve mutual recognition through a trusted root certificate list.

15. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes instructions that, when executed, perform the method according to any one of claims 1-7.

16. A computer program product, characterized in that, Includes a computer program that, when executed by a processor, implements the method according to any one of claims 1-7.

Images