The invention provides a fine-grained PKI (
Public Key Infrastructure)
system and a fine-grained PKI method for vehicle-mounted ECUs (Electronic Control Units), a
server-gateway-terminal three-layer collaborative PKI
system is constructed, the fact that each ECU has high-cost hardware security capability is not forcedly solved, T-Box is used as a centralized security proxy
base station, and the PKI
system and the PKI method are integrated. The strong security capability of the cloud is radiated to each common ECU node in the vehicle, so that each ECU can sign, issue and update the digital
certificate. According to the method, the security
chip at the T-Box end can be used as a trust
anchor point of the whole vehicle, and a unique cryptographic digital
certificate is allocated to each key ECU through an agent and forwarding mechanism on the premise of not increasing the hardware cost of the ECU, so that the low-cost landing of one
machine and one
certificate is realized, and the safety of the whole vehicle is improved. The ECU can perform subsequent identity
authentication and
secure communication by using its unique digital certificate. Therefore, the method can solve the contradiction between'refined identity control 'and'whole vehicle hardware cost / resource limitation', and a centralized hardware trust root-based PKI system is constructed.