Blockchain and puf based vehicle authentication and disconnection recovery processing method and system

Abstract

The application discloses a processing method and system for vehicle authentication and disconnected recovery based on a blockchain and a PUF, and the method comprises the following steps: constructing a vehicle authentication and disconnected recovery system and initializing the system to obtain an initialized vehicle authentication and disconnected recovery system; based on the initialized vehicle authentication and disconnected recovery system, performing ciphertext interaction and signature verification update on a vehicle unit and a roadside unit to realize vehicle authentication; if the vehicle is disconnected, constructing a recovery message to generate a recovery credential for decryption verification and link recovery to realize vehicle disconnected recovery. The application can quickly and safely perform vehicle authentication and timely vehicle disconnected recovery, and improve the communication security of the Internet of Vehicles. The application can be widely applied to the technical field of the Internet of Vehicles.

Description

Technical Field

[0001] This invention relates to the field of vehicle networking technology, and in particular to a method and system for vehicle authentication and disconnection recovery based on blockchain and PUF. Background Technology

[0002] With the rapid development of Vehicle-to-Everything (VANET) technology, an increasing number of vehicles are exchanging information with surrounding infrastructure, other vehicles, and traffic management systems via wireless communication. VANET technology holds immense potential for improving traffic efficiency, enhancing driving safety, and supporting intelligent road networks. However, the widespread adoption of VANET also brings numerous security and privacy challenges, particularly regarding vehicle authentication and communication security. As wireless communication between vehicles and infrastructure becomes increasingly common, ensuring authentication and information security during communication has become a pressing issue.

[0003] Anonymity and privacy protection are critical issues in connected vehicles. Traditional authentication methods rely on static identifiers or keys, which can easily lead to the leakage of vehicle identities and increase the risk of forgery and abuse. In intelligent transportation systems and autonomous driving scenarios, frequent vehicle communication requires authentication to be not only reliable but also to protect vehicle privacy. However, in existing systems, the use of static keys and identifiers can lead to the leakage of personal vehicle information, increasing privacy risks.

[0004] Meanwhile, vehicles in the connected vehicle environment frequently lose connection due to signal interruptions, network coverage issues, or signal interference. Ensuring that vehicles can quickly reconnect and seamlessly resume communication after a disconnection poses a significant challenge to connected vehicle systems. Traditional authentication mechanisms often suffer from authentication latency and high computational overhead in high-traffic or dense environments, especially during reconnection after a disconnection, thus impacting system real-time performance and overall performance.

[0005] In the Internet of Vehicles (IoV), the management of temporary keys is crucial for ensuring secure communication. During vehicle communication, temporary keys are typically generated and exchanged to guarantee data confidentiality and integrity. Traditional key management methods suffer from problems such as untimely key updates and incomplete key revocation. For example, if a key is leaked or stolen, existing key revocation mechanisms may not be able to stop its use in time, leading to a decrease in system security. The efficiency and timeliness of key updates and revocations remain a major challenge in current IoV technologies.

[0006] With the widespread adoption of 5G technology, the Internet of Vehicles (IoV) has entered a new era of faster, higher-capacity, and lower-latency communication. While 5G networks offer enhanced communication capabilities, they also place higher demands on identity authentication and key management. Under 5G networks, the high-speed mobility of vehicles and frequent network switching can lead to frequent disconnections. Achieving fast and secure reconnection and authentication in this dynamic environment presents a new technological challenge.

[0007] Most existing vehicle-to-everything (V2X) identity authentication technologies rely on traditional public key infrastructure (PKI) and digital certificates. Although these solutions can provide security to a certain extent, they still have problems such as high computational overhead, key leakage, and identity forgery. Summary of the Invention

[0008] To address the aforementioned technical issues, the present invention aims to provide a method and system for vehicle authentication and disconnection recovery based on blockchain and PUF, which can quickly and securely perform vehicle authentication and timely vehicle disconnection recovery, thereby improving the communication security of the Internet of Vehicles.

[0009] The first technical solution adopted in this invention is: a method for vehicle authentication and disconnection recovery based on blockchain and PUF, comprising the following steps: Build and initialize the vehicle authentication and disconnection recovery system to obtain the initialized vehicle authentication and disconnection recovery system; Based on the initialized vehicle authentication and disconnection recovery system, encrypted communication and signature updates are performed between the vehicle unit and the roadside unit to achieve vehicle authentication. If a vehicle experiences a disconnection, a recovery message is constructed to generate a recovery certificate for decryption verification and link restoration, thereby restoring the vehicle's connection.

[0010] Furthermore, the step of constructing and initializing the vehicle authentication and disconnection recovery system to obtain the initialized vehicle authentication and disconnection recovery system specifically includes: A vehicle authentication and disconnection recovery system is constructed, which includes a trust institution, roadside units, vehicle units, and a blockchain network; Based on the trust mechanism, roadside unit, and vehicle unit in the vehicle authentication and disconnection recovery system, the trust mechanism, roadside unit, and vehicle unit are initialized to obtain the initialized vehicle authentication and disconnection recovery system.

[0011] Furthermore, the initialization steps of the trust mechanism, roadside unit, and vehicle unit specifically include: Determine the public parameters of the elliptic curve domain of the trust institution, randomly select a signing private key from a preset range and obtain the public key through elliptic scalar multiplication, combine the public parameters of the elliptic curve domain with the public key and upload them to the blockchain network to realize the initialization of the trust institution. The roadside unit randomly generates a private key based on the common parameters of the elliptic curve domain and obtains the signature public key by scalar multiplication. The signature public key is then combined with the roadside unit's identity number and submitted to a trusted institution for verification. The trusted institution generates a signature based on its own signing private key and the ECDSA algorithm, combining the signing public key with the roadside unit's identification number. The signature, signing public key, and roadside unit's identification number are then uploaded to the blockchain network to initialize the roadside unit. The vehicle unit generates a challenge value based on the offline security environment and generates a corresponding response through the PUF function, binds its own timestamp and hash digest, assembles the registration message and sends it to the trusted institution. The trusted institution assigns an identity identifier and signature data to the vehicle unit based on the registration message and uploads it to the blockchain network to initialize the vehicle unit.

[0012] Furthermore, the vehicle authentication and disconnection recovery system, based on the initialized system, performs encrypted communication and signature updates between the vehicle unit and the roadside unit to achieve vehicle authentication. This specifically includes: Based on the initialized vehicle authentication and disconnection recovery system, the vehicle unit initiates a message transmission request, generates authentication ciphertext, transmits it to the roadside unit for decryption, and retrieves the vehicle unit's registration information. The roadside unit sends a signed interactive message to the vehicle unit for signature verification based on the vehicle unit's registration information, and then encrypts and generates a session key to send back to the roadside unit. The roadside unit decrypts the session key using its own private key and updates the credential signature and registration message to achieve vehicle authentication.

[0013] Furthermore, the step of the vehicle unit initiating a message transmission request, generating authentication ciphertext, transmitting it to the roadside unit for decryption, and retrieving the vehicle unit's registration information based on the initialized vehicle authentication and disconnection recovery system specifically includes: Based on the initialized vehicle authentication and disconnection recovery system, the vehicle unit initiates a message transmission request to read the signature public key of the roadside unit from the blockchain; Based on the vehicle unit, the identity identifier and timestamp are encrypted using the elliptic curve public key encryption algorithm combined with the signature public key of the roadside unit, generating authentication ciphertext and sending it to the roadside unit. Based on the roadside unit, the authentication ciphertext is decrypted using its own private key to restore the vehicle unit's identity and timestamp, and the registration information of the vehicle unit is retrieved by performing a blockchain search based on the vehicle unit's identity.

[0014] Furthermore, the step of the roadside unit sending a signed interaction message to the vehicle unit for signature verification based on the vehicle unit's registration information, and then encrypting and generating a session key to send back to the roadside unit, specifically includes: Based on the vehicle unit's registration information, the roadside unit extracts the challenge value and timestamp information, constructs an interaction message, and uses its own private key to perform ECDSA signing on the interaction message to generate interaction signature information; The interactive signature information and interactive message are assembled into a message and sent to the vehicle unit; The vehicle unit calls the roadside unit's signature public key to sign and verify the message information, and then uses hash operation to generate a session key and send it back to the roadside unit.

[0015] Furthermore, the roadside unit decrypts the session key using its own private key and updates the credential signature and registration message to achieve vehicle authentication, which specifically includes: The roadside unit decrypts the session key using its own private key, extracts the hash digest credential of the vehicle hardware identity, and verifies it using the public key of the trusted institution to obtain the verified hash digest credential of the vehicle hardware identity. The roadside unit and the vehicle unit synchronize the session key, and generate the same session key using the same hash algorithm based on the hash digest credential of the verified vehicle hardware identity. The vehicle unit generates a new challenge value and a new timestamp credential based on the same session key. The roadside unit updates the signature based on the new timestamp credential and updates the registration message in the blockchain to achieve vehicle authentication.

[0016] Furthermore, the step of constructing a recovery message to generate a recovery certificate for decryption verification and link restoration if the vehicle experiences a disconnection, thereby achieving vehicle disconnection recovery, specifically includes: If a vehicle experiences a disconnection, messages reported by the vehicle during the disconnection period are determined to be illegal messages. The roadside unit retrieves pre-stored parameters from the blockchain and constructs a recovery message based on the current time. The roadside unit generates a digital signature for the recovery message using its own private key and combines the recovery message with the current time to generate an interactive message which is then sent to the vehicle unit. The vehicle unit verifies the signature of the interactive message based on the public key of the roadside unit. After verification, it retrieves the local registration time and vehicle identity, generates a recovery certificate through hash calculation, and sends it back to the roadside unit. The roadside unit performs decryption verification and link restoration based on the recovery certificate, thereby restoring the vehicle's connection.

[0017] Furthermore, the roadside unit performs decryption verification and link restoration based on the recovery certificate to realize the vehicle disconnection recovery step, which specifically includes: The roadside unit extracts the recovery credential based on its own private key, and verifies it by combining the public key of the trusted institution with the original signature of the vehicle unit to obtain the verified recovery credential. Based on the verified recovery certificate, the vehicle unit uses a session key to exchange messages with the roadside unit and generates a new recovery certificate to synchronously update the registration message in the blockchain, thereby realizing the vehicle disconnection recovery.

[0018] The second technical solution adopted in this invention is: a vehicle authentication and disconnection recovery processing system based on blockchain and PUF, comprising: The first module is used to build and initialize the vehicle authentication and disconnection recovery system, resulting in the initialized vehicle authentication and disconnection recovery system. The second module is used to perform encrypted communication and signature updates between the vehicle unit and the roadside unit based on the initialized vehicle authentication and disconnection recovery system, thereby realizing vehicle authentication. The third module is used to construct a recovery message, generate a recovery certificate, and perform decryption verification and link restoration if the vehicle is disconnected, thereby realizing vehicle disconnection recovery.

[0019] The beneficial effects of the method and system of this invention are as follows: This invention constructs and initializes a vehicle authentication and disconnection recovery system, obtaining an initialized vehicle authentication and disconnection recovery system. It uniformly pre-sets elliptic curve cryptography benchmark parameters and publishes them on the blockchain, providing a reliable benchmark for cryptographic interaction across the entire system. This standardizes the cryptographic system from the top level, avoiding parameter inconsistency vulnerabilities. Based on the initialized vehicle authentication and disconnection recovery system, it performs encrypted interaction and signature verification updates between vehicle units and roadside units, achieving vehicle authentication. After decrypting and extracting the vehicle identifier, it retrieves on-chain registration data. It relies on immutable on-chain data to complete initial identity screening, eliminating the need for redundant local storage of massive vehicle files. The RSU uses its private key to sign the interactive data, and vehicles can verify the message source using the public key, preventing unauthorized impersonation of the RSU from issuing fraudulent instructions. After successful signature verification, it combines PUF and multi-dimensional time factors to generate a session key. The key factors are distributed and bound to hardware and time sequence, improving key unpredictability. Receipt encryption avoids plaintext credential leakage. TA Public key verification of vehicle hardware credentials ensures identity authenticity, synchronously generates a consistent session key for secure communication, and synchronously updates on-chain authentication credentials to invalidate old credentials, preventing long-term credential reuse and leakage. Finally, if the vehicle experiences a disconnection, a recovery message is constructed to generate a recovery credential for decryption verification and link restoration, achieving vehicle disconnection recovery. After disconnection, existing cache is reused to complete state restoration and initiate rapid reconnection, eliminating the need for repeated offline registration and significantly reducing the time required to repair disconnected links. The RSU public key verification and signature recovery command intercepts forged recovery messages that could induce vehicles to disclose private parameters. PUF binds identity and time to generate de-identified recovery credentials, and encrypted transmission prevents the exposure of hardware features and private data. Once authoritative signature verification is successful, communication is restored and on-chain recovery credentials are rotated, quickly repairing disconnected links and mitigating the risk of historical credential theft through credential iteration. Attached Figure Description

[0020] Figure 1 This is a flowchart of the steps of the vehicle authentication and disconnection recovery method based on blockchain and PUF of the present invention. Figure 2 This is a structural block diagram of the vehicle authentication and disconnection recovery processing system based on blockchain and PUF of the present invention; Figure 3 This is a schematic diagram of vehicle authentication and disconnection recovery provided in a specific embodiment of the present invention. Detailed Implementation

[0021] The present invention will now be described in further detail with reference to the accompanying drawings and specific embodiments. The step numbers in the following embodiments are only for ease of explanation and do not limit the order of the steps. The execution order of each step in the embodiments can be adapted according to the understanding of those skilled in the art.

[0022] Reference Figure 1 and Figure 3 This invention provides a method for vehicle authentication and disconnection recovery based on blockchain and PUF, which includes the following steps: S100. Construct and initialize the vehicle authentication and disconnection recovery system to obtain the initialized vehicle authentication and disconnection recovery system. Specifically, a vehicle authentication and disconnection recovery system is constructed, which includes a trust institution, roadside units, vehicle units, and a blockchain network. Based on the trust institution, roadside units, and vehicle units in the vehicle authentication and disconnection recovery system, the trust institution, roadside units, and vehicle units are initialized to obtain the initialized vehicle authentication and disconnection recovery system.

[0023] S110. Determine the public parameters of the elliptic curve domain of the trust institution, randomly select the signature private key in the preset range and obtain the public key through elliptic scalar multiplication, combine the public parameters of the elliptic curve domain with the public key and upload them to the blockchain network to realize the initialization of the trust institution. In this embodiment, during TA initialization, the trusted organization TA selects a set of publicly available elliptic curve domain parameters, denoted as... : ; in It is a large prime number used to define a finite field. , It is a prime finite field; and It is the equation of an elliptic curve. The coefficients together determine the geometric and algebraic structure of the curve; It is a publicly designated base point on the curve, serving as a generator for cryptographic operations; It is the base point The order of is also a large prime number.

[0024] TA generates its signing private key STA, which is located in the range A large integer randomly selected from within, where Public base point for the selected elliptic curve The order. TA calculates its signature public key. ,in" " represents scalar multiplication on an elliptic curve, This is a public point on the curve. Finally, TA will... It will be published on the blockchain.

[0025] S120. The roadside unit randomly generates a private key based on the common parameters of the elliptic curve domain and obtains the signature public key by scalar multiplication. The signature public key is then combined with the roadside unit's identity number and submitted to a trusted institution for verification. S130. The trust institution generates a signature based on its own signing private key and the ECDSA algorithm, combining the signing public key with the roadside unit's identity number. The signature, signing public key, and roadside unit's identity number are then uploaded to the blockchain network to initialize the roadside unit. In this embodiment, the elliptic curve domain parameters published by TA are directly used during RSU initialization. In the interval Internally generate its own random signature private key And calculate the corresponding signature public key. Subsequently, RSU shared its public key. Its identity identifier Submit to TA for authentication, TA uses their private key to... Use standard ECDSA signature. With the signer's private key. information Perform a signature and generate a digital signature. The signature result, along with the RSU's public key information, is then published on the blockchain. This completes the trusted registration of the RSU and the public key disclosure.

[0026] S140. The vehicle unit generates a challenge value based on the offline security environment and generates a corresponding response through the PUF function. It binds its own timestamp and hash digest, assembles the registration message, and sends it to the trusted institution. S150: The trust institution assigns an identity identifier and signature data to the vehicle unit based on the registration message and uploads it to the blockchain network to initialize the vehicle unit.

[0027] In this embodiment, the vehicle initializes and registers with the TA while offline and securely, and the vehicle generates a challenge. and Generate based on the vehicle's physical non-cloning function (e.g., SRAM PUF). , And send a message ,in for Generation time, for Generation time.

[0028] After receiving the message, TA generates a vehicle identification number (CID) for the vehicle and performs the corresponding checks. and Perform digital signature, generate and .

[0029] Publish to the blockchain Vehicle local storage .

[0030] S200: Based on the initialized vehicle authentication and disconnection recovery system, encrypted communication and signature updates are performed between the vehicle unit and the roadside unit to achieve vehicle authentication. S210. Based on the initialized vehicle authentication and disconnection recovery system, the vehicle unit initiates a message transmission request, generates authentication ciphertext, transmits it to the roadside unit for decryption, and retrieves the vehicle unit's registration information. Specifically, based on the initialized vehicle authentication and disconnection recovery system, the vehicle unit initiates a message transmission request to read the signature public key of the roadside unit from the blockchain; based on the vehicle unit, it encrypts the identity identifier and timestamp using an elliptic curve public key encryption algorithm combined with the signature public key of the roadside unit, generates authentication ciphertext, and sends it to the roadside unit; based on the roadside unit, it decrypts the authentication ciphertext using its own private key to restore the vehicle unit's identity identifier and timestamp, and performs a blockchain retrieval based on the vehicle unit's identity identifier to retrieve the vehicle unit's registration information.

[0031] In this embodiment, when a vehicle requests to send a message (e.g., an accident message), it first obtains the elliptic curve public key of the local roadside unit (RSU) from the blockchain. Subsequently, an elliptic curve-based public-key encryption algorithm was used, employing the RSU public key to verify the vehicle's anonymous identifier (CID) against the original timestamp from that year. Encryption is performed to generate an encrypted authentication message. and send encrypted messages to the RSU. This ensures the confidentiality of vehicle identity and timing information during transmission.

[0032] After receiving the encrypted message from the vehicle, the RSU uses its own elliptic curve private key. The encrypted authentication message is decrypted to recover the vehicle's anonymous identifier and timestamp information, which are used for subsequent identity verification and message legitimacy determination. The RSU then searches for vehicle-related information on the blockchain based on the CID. Save locally.

[0033] S220: The roadside unit sends a signed interactive message to the vehicle unit for signature verification based on the vehicle unit's registration information, and then encrypts and generates a session key to send back to the roadside unit. Specifically, the roadside unit extracts the challenge value and timestamp information based on the vehicle unit's registration information, constructs an interaction message, and performs ECDSA signing on the interaction message using its own private key to generate interaction signature information; it assembles the interaction signature information and the interaction message into a message and sends it to the vehicle unit; the vehicle unit calls the roadside unit's signature public key to verify the message signature, and generates a session key through hash operation and sends it back to the roadside unit.

[0034] In this embodiment, the RSU sends the generated data to the vehicle. and using the private key Perform digital signature and send a message For vehicles, among which This is the current time.

[0035] After receiving the message, the vehicle first verifies its correctness using the RSU public key: ; If the comparison passes, the vehicle can be used. In ,generate and extract from local Generation time generate Then, a key is generated: ; in The current time is used. Finally, the encrypted message is generated using the generated RSU public key PRSU. and send .

[0036] S230: The roadside unit decrypts the session key using its own private key and updates the credential signature and registration message to achieve vehicle authentication.

[0037] Specifically, the roadside unit decrypts the session key using its own private key, extracts the hash digest credential of the vehicle hardware identity, and verifies it using the public key of the trusted institution to obtain the verified hash digest credential of the vehicle hardware identity. The roadside unit and the vehicle unit synchronize the session key and generate the same session key using the same hash algorithm based on the verified hash digest credential of the vehicle hardware identity. The vehicle unit generates a new challenge value and a new timestamp credential based on the same session key. The roadside unit updates the signature based on the new timestamp credential and updates the registration message in the blockchain to achieve vehicle authentication.

[0038] In this embodiment, after receiving the message, the RSU decrypts the message. Extract And verify using the TA public key. ,Right now Verification passed, key generation successful: ; This key is then used for communication, and the vehicle generates new authentication credentials. ,in for The generation time of the vehicle will right The replacement is then performed. The RSU then signs the message. and update the message on the blockchain to If the vehicle undergoes vehicle authentication and key generation again subsequently, it will use... Perform verification and key generation.

[0039] S300: If the vehicle is disconnected, construct a recovery message to generate a recovery certificate, perform decryption verification and link restoration to realize vehicle disconnection recovery.

[0040] Specifically, if a vehicle experiences a disconnection, messages reported by the vehicle during the disconnection period are determined to be illegal. The roadside unit retrieves pre-stored parameters from the blockchain and constructs a recovery message based on the current time. The roadside unit generates a digital signature for the recovery message using its own private key and generates an interaction message based on the recovery message and the current time, which is then sent to the vehicle unit. The vehicle unit verifies the interaction message using the roadside unit's signature public key. After verification, it retrieves the local registration time and vehicle identity, generates a recovery certificate through hash calculation, and sends it back to the roadside unit. The roadside unit decrypts and verifies the recovery certificate and restores the link, thus achieving vehicle disconnection recovery.

[0041] In this embodiment, vehicle disconnection is quickly restored: if a vehicle disconnection occurs (e.g., heartbeat packet inactivation), all messages sent by the vehicle during this period are considered illegitimate. To restore a secure connection, the RSU sends a disconnection recovery request to the vehicle and locally retrieves a pre-prepared request from the blockchain. Generate disconnection recovery message and digital signature. Finally, a message is sent to the vehicle. ,in This is the current time.

[0042] After receiving the message, the vehicle first verifies its correctness using the RSU public key: ; After passing, according to extract ,generate and propose from the local area Registration time ,generate, Finally, the information is encrypted using the RSU public key. and send a message .

[0043] RSU decrypts the message using its private key after receiving it. And based on the pre-stored vehicle information on the blockchain, it uses the pre-stored public key to verify. ,Right now If the verification passes, the connection restoration is complete, allowing the vehicle to send messages, and the connection is restored via the key. Messages are exchanged. The vehicle then generates a new disconnection recovery certificate. ,in for The generation time of the vehicle will replace The RSU then signs the message. and update the message on the blockchain to If the vehicle disconnects again, use Perform a connection recovery.

[0044] Reference Figure 2 A vehicle authentication and disconnection recovery system based on blockchain and PUF includes: The first module 201 is used to build and initialize the vehicle authentication and disconnection recovery system, and obtain the initialized vehicle authentication and disconnection recovery system. The second module 202 is used to perform encrypted communication and signature update between the vehicle unit and the roadside unit based on the initialized vehicle authentication and disconnection recovery system, so as to realize vehicle authentication. The third module 203 is used to construct a recovery message, generate a recovery certificate, and perform decryption verification and link restoration if the vehicle is disconnected, thereby realizing vehicle disconnection recovery.

[0045] The content of the above method embodiments is applicable to this system embodiment. The specific functions implemented in this system embodiment are the same as those in the above method embodiments, and the beneficial effects achieved are also the same as those achieved in the above method embodiments.

[0046] The preferred embodiments of the present application have been described above with reference to the accompanying drawings, but this is not intended to limit the scope of the embodiments of the present application. Any modifications, equivalent substitutions, and improvements made by those skilled in the art without departing from the scope and substance of the embodiments of the present application shall be within the scope of the embodiments of the present application.

Claims

1. A method for vehicle authentication and disconnection recovery based on blockchain and PUF, characterized in that, Includes the following steps: A vehicle authentication and disconnection recovery system is constructed and initialized to obtain the initialized vehicle authentication and disconnection recovery system, which includes a trust institution, roadside units, vehicle units and a blockchain network. The initialization of the trust mechanism, the roadside unit, and the vehicle unit are as follows: Determine the public parameters of the elliptic curve domain of the trust institution, randomly select a signing private key from a preset range and obtain the public key through elliptic scalar multiplication, combine the public parameters of the elliptic curve domain with the public key and upload them to the blockchain network to realize the initialization of the trust institution. The roadside unit randomly generates a private key based on the common parameters of the elliptic curve domain and obtains the signature public key by scalar multiplication. The signature public key is then combined with the roadside unit's identity number and submitted to a trusted institution for verification. The trusted institution generates a signature based on its own signing private key and the ECDSA algorithm, combining the signing public key with the roadside unit's identification number. The signature, signing public key, and roadside unit's identification number are then uploaded to the blockchain network to initialize the roadside unit. The vehicle unit generates a challenge value based on the offline security environment and generates a corresponding response through the PUF function, binds its own timestamp and hash digest, assembles the registration message and sends it to the trusted institution. The trusted institution assigns an identity identifier and signature data to the vehicle unit based on the registration information and uploads it to the blockchain network to initialize the vehicle unit; Based on the initialized vehicle authentication and disconnection recovery system, the vehicle unit initiates a message transmission request, generates authentication ciphertext, transmits it to the roadside unit for decryption, and retrieves the vehicle unit's registration information. The roadside unit sends a signed interactive message to the vehicle unit for signature verification based on the vehicle unit's registration information, and then encrypts and generates a session key to send back to the roadside unit. The roadside unit decrypts the session key using its own private key and updates the credential signature and registration message to achieve vehicle authentication; If a vehicle experiences a connection loss, messages reported by the vehicle during the loss period are deemed invalid. The roadside unit retrieves pre-stored parameters from the blockchain and constructs a recovery message based on the current time. These pre-stored blockchain parameters include vehicle identity information. Vehicle generation challenge Digital signatures generated by trusted institutions for authentication-related data Restoring Challenge Value Digital signatures generated by trusted institutions for data related to connection recovery. and the public key of the trusted institution ; The roadside unit generates a digital signature for the recovery message using its own private key, and assembles the recovery message, digital signature, and current time into an interactive message and sends it to the vehicle unit. The vehicle unit verifies the signature of the interaction message based on the signature public key of the roadside unit. After verification, it extracts the recovery challenge value, generates a recovery response corresponding to the recovery challenge value through the PUF function, performs a hash operation on the recovery response and the local registration time to generate a recovery certificate, and sends it back to the roadside unit. The roadside unit extracts the recovery credential based on its own private key, and verifies it by combining the public key of the trusted institution with the original signature of the vehicle unit to obtain the verified recovery credential. Based on the verified recovery certificate, the vehicle unit uses a session key to exchange messages with the roadside unit and generates a new recovery certificate to synchronously update the registration message in the blockchain, thereby realizing the vehicle disconnection recovery.

2. The method for vehicle authentication and connection recovery based on blockchain and PUF according to claim 1, characterized in that, The step of constructing and initializing the vehicle authentication and disconnection recovery system to obtain the initialized vehicle authentication and disconnection recovery system specifically includes: Build a vehicle authentication and disconnection recovery system; Based on the trust mechanism, roadside unit, and vehicle unit in the vehicle authentication and disconnection recovery system, the trust mechanism, roadside unit, and vehicle unit are initialized to obtain the initialized vehicle authentication and disconnection recovery system.

3. The method for vehicle authentication and connection recovery based on blockchain and PUF according to claim 2, characterized in that, The process described in the initialized vehicle authentication and disconnection recovery system, where the vehicle unit initiates a message transmission request, generates authentication ciphertext, transmits it to the roadside unit for decryption, and retrieves the vehicle unit's registration information, specifically includes: Based on the initialized vehicle authentication and disconnection recovery system, the vehicle unit initiates a message transmission request to read the signature public key of the roadside unit from the blockchain; Based on the vehicle unit, the identity identifier and timestamp are encrypted using the elliptic curve public key encryption algorithm combined with the signature public key of the roadside unit, generating authentication ciphertext and sending it to the roadside unit. Based on the roadside unit, the authentication ciphertext is decrypted using its own private key to restore the vehicle unit's identity and timestamp, and the registration information of the vehicle unit is retrieved by performing a blockchain search based on the vehicle unit's identity.

4. The method for vehicle authentication and connection recovery based on blockchain and PUF according to claim 3, characterized in that, The step of the roadside unit sending a signed interactive message to the vehicle unit for signature verification based on the vehicle unit's registration information, and then encrypting and generating a session key to send back to the roadside unit, specifically includes: Based on the vehicle unit's registration information, the roadside unit extracts the challenge value and timestamp information, constructs an interaction message, and uses its own private key to perform ECDSA signing on the interaction message to generate interaction signature information; The interactive signature information and interactive message are assembled into a message and sent to the vehicle unit; The vehicle unit calls the roadside unit's signature public key to sign and verify the message information, and then uses hash operation to generate a session key and send it back to the roadside unit.

5. The method for vehicle authentication and connection recovery based on blockchain and PUF according to claim 4, characterized in that, The roadside unit decrypts the session key using its own private key and updates the credential signature and registration message to complete the vehicle authentication step, which specifically includes: The roadside unit decrypts the session key using its own private key, extracts the hash digest credential of the vehicle hardware identity, and verifies it using the public key of the trusted institution to obtain the verified hash digest credential of the vehicle hardware identity. The roadside unit and the vehicle unit synchronize the session key, and generate the same session key using the same hash algorithm based on the hash digest credential of the verified vehicle hardware identity. The vehicle unit generates a new challenge value and a new timestamp credential based on the same session key. The roadside unit updates the signature based on the new timestamp credential and updates the registration message in the blockchain to achieve vehicle authentication.

6. A vehicle authentication and disconnection recovery processing system based on blockchain and PUF, characterized in that, Includes the following modules: The first module is used to construct and initialize the vehicle authentication and disconnection recovery system, resulting in the initialized vehicle authentication and disconnection recovery system, which includes a trust institution, roadside units, vehicle units, and a blockchain network. The initialization of the trust mechanism, the roadside unit, and the vehicle unit are as follows: Determine the public parameters of the elliptic curve domain of the trust institution, randomly select a signing private key from a preset range and obtain the public key through elliptic scalar multiplication, combine the public parameters of the elliptic curve domain with the public key and upload them to the blockchain network to realize the initialization of the trust institution. The roadside unit randomly generates a private key based on the common parameters of the elliptic curve domain and obtains the signature public key by scalar multiplication. The signature public key is then combined with the roadside unit's identity number and submitted to a trusted institution for verification. The trusted institution generates a signature based on its own signing private key and the ECDSA algorithm, combining the signing public key with the roadside unit's identification number. The signature, signing public key, and roadside unit's identification number are then uploaded to the blockchain network to initialize the roadside unit. The vehicle unit generates a challenge value based on the offline security environment and generates a corresponding response through the PUF function, binds its own timestamp and hash digest, assembles the registration message and sends it to the trusted institution. The trusted institution assigns an identity identifier and signature data to the vehicle unit based on the registration information and uploads it to the blockchain network to initialize the vehicle unit; The second module is used to initiate a message transmission request based on the initialized vehicle authentication and disconnection recovery system, generate authentication ciphertext, transmit it to the roadside unit for decryption, and retrieve the vehicle unit's registration information. The roadside unit sends a signed interactive message to the vehicle unit for signature verification based on the vehicle unit's registration information, and then encrypts and generates a session key to send back to the roadside unit. The roadside unit decrypts the session key using its own private key and updates the credential signature and registration message to achieve vehicle authentication; The third module is used when a vehicle experiences a disconnection, and the messages reported by the vehicle during the disconnection period are determined to be illegal. The roadside unit retrieves pre-stored parameters from the blockchain and constructs a recovery message based on the current time. The pre-stored parameters from the blockchain include vehicle identity information. Vehicle generation challenge Digital signatures generated by trusted institutions for authentication-related data Restoring Challenge Value Digital signatures generated by trusted institutions for data related to connection recovery. and the public key of the trusted institution ; The roadside unit generates a digital signature for the recovery message using its own private key, and assembles the recovery message, digital signature, and current time into an interactive message and sends it to the vehicle unit. The vehicle unit verifies the signature of the interaction message based on the signature public key of the roadside unit. After verification, it extracts the recovery challenge value, generates a recovery response corresponding to the recovery challenge value through the PUF function, performs a hash operation on the recovery response and the local registration time to generate a recovery certificate, and sends it back to the roadside unit. The roadside unit extracts the recovery credential based on its own private key, and verifies it by combining the public key of the trusted institution with the original signature of the vehicle unit to obtain the verified recovery credential. Based on the verified recovery certificate, the vehicle unit uses a session key to exchange messages with the roadside unit and generates a new recovery certificate to synchronously update the registration message in the blockchain, thereby realizing the vehicle disconnection recovery.

Images