ITS Station Certificate Validation for Reduced Processing Load
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The use of Certificate Revocation Lists (CRLs) in Intelligent Transportation Systems (ITS) to manage misbehaving ITS stations is inefficient, particularly in high-traffic areas where processing and storage burdens are significant due to the need to check and store a large number of certificates for each message.
Innovation Solution
Implementing a method where ITS stations use short-lived certificates and OCSP staples to reduce the need for CRL checks, with dual-mode stations capable of sending messages with either short-lived or long-lived certificates based on availability, and OCSP staples indicating recent validity, thereby minimizing processing and storage requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If CRL checks are performed for every message to ensure security and detect misbehaving ITS stations, then message authenticity and security are improved, but processing burden and computational load on ITS stations increase significantly
Solution Approach 1:
The patent applies preliminary action by having the sending ITS station perform CRL checks in advance before transmitting messages. The station checks its certificate against the CRL prior to message sending, and only transmits if the certificate is valid. This eliminates the need for receiving stations to perform CRL checks on incoming messages, thereby maintaining security while significantly reducing processing burden on the network.
2Reliability
If CRLs are maintained to manage misbehaving ITS stations, then security management capability is improved, but storage requirements and memory resources increase
Solution Approach 1:
The patent extracts the CRL checking function from the receiving ITS stations and relocates it to the sending ITS station. By taking out the certificate validation responsibility from multiple receiving stations and concentrating it at the sending station, the system maintains comprehensive security management capability while significantly reducing the storage burden on individual ITS stations, particularly on receiving stations that would otherwise need to maintain local CRL copies.
3Reliability
If all ITS stations perform CRL checks on incoming messages to identify misbehaving stations, then detection capability of misbehavior is improved, but energy consumption and processing time increase
Solution Approach 1:
The patent implements self-service by requiring the sending ITS station to self-validate its certificate against the CRL before message transmission. The sending station serves its own certificate validation needs by performing the check locally and only sending messages with valid certificates. This self-service approach maintains misbehavior detection capability while eliminating the need for energy-consuming CRL checks at receiving stations.
Data Source
AI summary
A method at a computing device within an Intelligent Transportation System, the method comprising: determining, at the computing device, whether a short-term certificate is available to sign a message; if the short-term certificate is available, signing the message with a private key associated with the short-term certificate; if the short-term certificate is not available, signing the message with a private key associated with a long-term certificate; and sending the message to a recipient.