How to improve the security of communications between infrastructure and vehicles

Abstract

The present invention relates to a method for improving communication security between infrastructure, particularly infrastructure-side systems of parking lots, especially AVP systems, and vehicle-side systems of automobiles, especially AVP systems. The two systems coordinate a common secret, which is then used to protect communication between the two systems. The present invention relates to infrastructure systems, other methods for improving communication security between infrastructure-side systems and automobile-side systems, automobile systems, automobiles, computer programs, and machine-readable storage media.

Claims

1. A method for improving communication security between an infrastructure-side system (401) of an infrastructure (601) and an automobile-side system (300) of an automobile (301), The infrastructure-side system (401) includes the step (101) of matching a common secret with the vehicle-side system (300), If the infrastructure-side system (401) is the sender of the valid data to the vehicle-side system (300) as the recipient of the valid data, the method is: The infrastructure-side system (401) performs the step (103) of calculating a checksum using the valid data and the common secret, The infrastructure-side system (401) includes the step (105) of transmitting the valid data and the checksum to the automobile-side system (300), If the infrastructure-side system (401) is the recipient of valid data from the vehicle-side system (300) as the sender of valid data to the infrastructure-side system (401), then the method is: Step (107) of the infrastructure-side system (401) receiving the valid data and checksum from the automobile-side system (300), The infrastructure-side system (401) calculates a checksum through the valid data and the common secret in order to calculate another checksum (109), The infrastructure-side system (401) determines, based on the checksum and the other checksum, whether the valid data may be used on the infrastructure side (111), A method that includes this.

2. The method according to claim 1, wherein the matching of the common secret includes encrypted transmission of the common secret by the infrastructure-side system (401) to the vehicle-side system (300), or encrypted reception of the common secret from the vehicle-side system (300) by the infrastructure-side system (401).

3. The method according to claim 2, wherein the infrastructure-side system (401) generates a random number as the common secret, and the infrastructure-side system (401) encrypts and transmits the random number to the vehicle-side system (300).

4. The method according to claim 1, wherein the common secret is matched using a key exchange method so that the common secret becomes a common encryption key.

5. The method according to claim 4, wherein the common encryption key is matched using the Diffie-Hellman (DH) method or the elliptic curve Diffie-Hellman (ECDH) method.

6. The method according to any one of claims 1 to 5, wherein the valid data includes one or more valid data from a confirmation document such as a driver's license, current time, time synchronization request, time synchronization response, vehicle characteristics, in particular dimensions, interface version, etc.

7. The method according to any one of claims 1 to 6, wherein the aforementioned common secret is matched using broadcast communication methods, particularly the V2X protocol.

8. The method according to any one of claims 1 to 7, wherein the calculation of the checksum includes cyclic redundancy check (CRC checksum) or the calculation of an encrypted hash value.

9. A system (401) for infrastructure (601) configured to perform all steps of the method according to any one of claims 1 to 8.

10. A method for improving communication security between an infrastructure-side system (401) of an infrastructure (601) and an automobile-side system (300) of an automobile (301), The vehicle-side system (300) includes a step (201) of matching a common secret with the infrastructure-side system (401), If the vehicle-side system (300) is the sender of the valid data to the infrastructure-side system (401) as the recipient of the valid data, the method is: The vehicle-side system (300) performs the step (203) of calculating a checksum using the valid data and the common secret, The vehicle-side system (300) includes the step (205) of transmitting the valid data and the checksum to the infrastructure-side system (401), If the vehicle-side system (300) is the recipient of the valid data from the infrastructure-side system (401) as the sender of the valid data to the vehicle-side system (300), then the method is: The vehicle-side system (300) receives the valid data and checksum from the infrastructure-side system (401) in step (207), The vehicle-side system (300) calculates a checksum through the valid data and the common secret in order to calculate another checksum (20), The vehicle-side system (300) takes the step (211) of determining whether the valid data may be used on the vehicle side based on the checksum and the other checksum, Methods that include...

11. A system (300) for an automobile (301) configured to perform all steps of the method according to claim 10.

12. An automobile (301) comprising the system (300) described in claim 11.

13. A computer program (503) that includes an instruction causing the computer to perform the method described in any one of claims 1 to 8 and 10 when the computer program (503) is executed by the computer.

14. A machine-readable storage medium (501) storing the computer program (503) described in claim 13.

Images