CN104702418A - Vehicle identity authentication method capable of evenly sharing RSU calculated amount - Google Patents

Abstract

The invention discloses a vehicle identity authentication method capable of evenly sharing the RSU calculated amount. The method comprises the following steps that a vehicle is marked and a message is sent, wherein the step comprises message processing level calculating, message signature generating and processing level signature generating; a region server coordinates RSU, wherein the step comprises a coordinating period and a working period; calculation replacing RSU assist delegation RSU to perform identity authentication on the vehicle message; the region server verifies a message processing level of the vehicle.

Description

A kind of vehicle identity authentication method of dividing equally RSU amount of calculation

Technical field

The present invention relates to car networking technology, be specifically related to a kind of vehicle identity authentication method of dividing equally RSU amount of calculation.

Background technology

Along with the universal of China's automobile and road traffic great-leap-forward development, automaker and communications service provider lay communications facility for the vehicle on road at vehicle and roadside, road and provide various service, to improve drive safety and driver and crew's comfort level, and optimize traffic.This equipment be laid on vehicle is called board units OBU (Onboard Units), the equipment being laid in roadside is called roadside unit RSU (Roadside Units), constructs vehicular ad hoc network VANET (Vehicle Ad Hoc Network).VANET comprises two kinds of communications: the communication V2V (Vehicle To Vehicle) between vehicle and vehicle and the V2I that communicates (Vehicle To Instruction) between vehicle with infrastructure.General, also can be connected by wired mode between roadside unit RSU, form network.

Because VANET is an open network, easily suffer various attack, as forged a signature, man-in-the-middle attack, message distorts.In-vehicle networking only just can play to improve in the reliable situation of message drives comfortable and safe property, improves the effect of traffic.The car lacking message authentication mechanisms is easy to victim at network and utilizes, and issues spoofing, causes very large threat, so it is very important to carry out certification to the message in network in VANET to traffic and traffic safety.But the dynamic of VANET, link the life-span short and network topology mechanism factor such as unstable causes making a big difference in the message authentication in network and legacy network.As: in VANET environment, a RSU can receive the message bag of a lot of vehicles transmissions of surrounding simultaneously, and system application requires that RSU can verify message at short notice, processes and transmit.Therefore, in VANET, it is very important that RSU carries out authentication to the message that vehicle sends.

In practical application, generally equidistantly lay RSU in road both sides, in intersection, the key area such as parking lot and expressway entrance and exit adds the amount of calculation that RSU shares testing vehicle register certification, to ensure the service quality when vehicle is intensive.But many times RSU still bears excessive amount of calculation, thus reduces service quality.Analyze its reason, mainly contain 2 points: the first, the distribution situation of vehicle has very large randomness, by the impact of when and where.The second, the distribution situation of vehicle is also subject to the impact of some accidents.Such as: the road congestion that traffic accident causes, traffic density is large.The vehicle fleet size that these reasons all can cause the vehicle fleet size around some RSU to exceed RSU serving.Therefore, traditional RSU carries out to vehicle in coverage that the method for authentication is busy can not guarantee service quality and system safe and reliable.

Summary of the invention

Goal of the invention: the object of the invention is to the deficiency that prior art exists, propose a kind of vehicle identity authentication method of dividing equally RSU amount of calculation, to improve testing vehicle register authentication efficiency, the stability of safeguards system and improving service quality.

Technical scheme: a kind of vehicle identity authentication method of dividing equally RSU amount of calculation of the present invention, comprises the following steps:

(1) vehicle V is installed on _iboard units OBU _icalculate and mark the Message Processing rank sending message, the then signature of generating messages and Message Processing rank, sends to neighbouring RSU; Board units OBU _iin store key, service class and type of message marking convention;

(2) region server LS coordinates the RSU in its region, specifies the processing locality rank of each RSU and forms RSU couple;

(3) each RSU entrusts RSU to comprising one _jrSU is calculated with generation _j, in generation, calculates RSU _jassist to entrust RSU _jrealize the authentication to vehicle.

Further, vehicle V in described step (1) _iproduce message M to be sent _i, board units OBU _ito mark and to send the detailed process of this message as follows:

(11) board units OBU _icalculate message M _iprocess rank P _mi, P _mi=T _mi| (C _mi* S _i), C _mifor type of message rank, S _ifor service class, T _mifor acknowledgement messaging type and T _mi∈ { 0,1}, even board units OBU _ithe message sent is without the need to response or return, then T _mivalue is 0, if desired replys or returns confirmation, then T _mivalue is 1;

(12) board units OBU _ito message M _iwith the process rank P of message _migenerate a digital digest H _mi=hash (M _i|| P _mi);

(13) board units OBU _igenerating messages M _iwith message M _iprocess rank P _misignature sigma _mi, σ _mi=E (PriK _i, H _mi), H _mifor the summary of message to be sent and Message Processing rank, private key PriK _ifor the private key of vehicle encryption;

(14) board units OBU _iperipherad RSU sends message { PID _i, M _i, P _mi, σ _mi, PID _ifor vehicle V _iassumed name, assigned by trust authority TA.

Further, in step (1):

Described board units OBU _ithe key stored comprises the key of a pair vehicle and the PKI of trust authority TA, and the key of vehicle comprises private key PriK _iwith PKI PubK _i; Described private key PriK _ikept secure is in security medium, not open to other members in network; PKI PubK _ipublish and leave on public server for the inquiry of other network memberses;

Described board units OBU _ithe service class S stored _iby vehicle, supervision department issues, and accepts the priority level of serving with marked vehicle in VANET, as: school bus service class is higher than the service class S of common vehicle _i∈ N ^*;

Described board units OBU _ithe message marking rule stored is used for marking its type of message rank C to sent vehicle message _mi, by vehicle, supervision department specifies, as: the type of message that vehicle safety is correlated with is superior to the relevant type of message rank of vehicle entertainment.

Further, in described step (2), region server LS coordinates the evaluation work of all RSU in its region, region server LS using one regular time section as an one work period T, a work period T comprises coordination phase and duty cycle, and the large I of work period T is determined according to the frequency of vehicle distribution situation change in region.Work period T and vehicle distribution situation change frequent degree and become positive correlation, and in the coordination phase, the detailed process of step (2) is:

(21) all RSU in region _i, i ∈ { 1,2,3,4,5 ... the calculating situation in a upper work period T is reported to region server LS, comprise RSU _ibe currently available for the amount of calculation E of vehicle message authentication _iwith the processing locality rank P in last work period T _rSUi;

(22) region server LS obtains each RSU in region _ireport message, calculate obtain each RSU _iprocessing locality rank in this work period T wherein α is a parameter distributing relevant with the process rank of message;

(23) region server LS assigns and entrusts RSU _jrSU is calculated with generation _k, successively decrease order to RSU all in region by the processing locality rank produced _i, i ∈ { 1,2,3,4,5 ... sequence generation deque, head of the queue and tail of the queue go out team simultaneously, and two the RSU groups simultaneously going out team are a RSU couple, and wherein head of the queue goes out the RSU of team for entrusting RSU _j, tail of the queue goes out the RSU of team for generation calculating RSU _k;

(24) region server LS is to all RSU _isend labeled message wherein { 0,1}, when this RSU is for entrusting RSU for B ∈ _jtime, B=0; For generation calculates RSU _ktime, B=1; for RSU _ithe identity of another member of place RSU centering.

Further, after the described coordination phase terminates, enter duty cycle, entrust RSU _jwhen receiving the message of Message Processing rank lower than processing locality rank, in the generation of each RSU centering, calculates RSU _kassist to entrust RSU _jcertification is carried out to the identity of vehicle, and returns results to trust RSU _juntil the duty cycle in this work period terminates or certain RSU initiates to coordinate request; Wherein, in generation, calculates RSU _kassist to entrust RSU _jthe detailed process of the identity of vehicle being carried out to certification is:

(31) RSU is entrusted _jreceive the message { PID that vehicle sends _i, M _i, P _mi, σ _mi, work as P _mi<P ' _rSUjtime, this entrusts RSU _jthe generation of pairing message is sent to calculate RSU _k, entrust its generation to calculate, message is { PID _i, M _i, P _mi, σ _mi, SN}, wherein SN is the mark of this message, by trust RSU _jgenerate;

(32) in generation, calculates RSU _kreceive message { PID _i, M _i, P _mi, σ _mi, after SN}, obtain vehicle V to region server application _iencrypted public key PubK _i, certification is carried out to the signature of message;

(33) in generation, calculates RSU _kverify message, checking equation is:

D (PubK _i, σ _i)=hash (M _i|| P _i), if equation is set up, then effective to the certification of the process rank of vehicle message and message, otherwise be invalid;

(34) in generation, calculates RSU _kauthentication result returns to entrusts RSU _j.

Road traffic sometimes can be subject to the impact of accident, and in duty cycle, some RSU is to assembling suddenly a large amount of vehicles around, and RSU cannot meet the needs that service calculates authentication.Now, RSU initiates to coordinate request to region server, after coordination server receives request, stops duty cycle, restarts to take turns the coordination phase, and RSU assigns the RSU that in region, processing locality rank is lower to form RSU couple for this reason.

Further, described region server LS also can verify the legitimacy of marking of cars Message Processing rank: in region server, enquiring vehicle V _ithe message M sent _iacknowledgement type T _miwith type of message rank C _mi, then to the service class S of vehicle supervision department enquiring vehicle _i, judge P _mi=T _mi| (C _mi* S _i) whether set up, detailed process is:

(41) region server LS extracts the message { PID by testing vehicle register certification _i, M _i, P _mi, σ _mi, according to message M _ijudge its acknowledgement messaging type T _miwith type of message rank C _mi;

(42) region server LS obtains the service class S of vehicle to vehicle supervision department server request _i;

(43) equation: P is verified _mi=T _mi| (C _mi* S _i) whether set up, as set up, then checking is effectively; Be false, then it is invalid to verify, vehicle exists the problem of empty mark Message Processing rank;

(44) the result is sent to vehicle supervision department by region server LS, and message is as { PID _i, J}.

Beneficial effect: compared with prior art, the present invention has the following advantages:

(1) RSU that the region server in the present invention is coordinated in region forms RSU couple, and the amount of calculation of the RSU in equalization region, is applicable to the situation that in region, RSU amount of calculation is unbalance; Region server presses the RSU co-ordination in cycle co-ordination region, enhances under emergency situations, around the reply service ability of RSU;

(2) the present invention can improve the service quality of RSU in heavy duty zone, and the generation being in idle condition in part messages trust zones is calculated RSU and carries out authentication by the RSU being in busy condition;

(3) message that the vehicle in the present invention produces is in local computing and labeled message process rank, be convenient to RSU receive message after point processed, the vehicle safety important messages of being correlated with call for help relevant emergency message of reporting to the police can priority treatment and response; The Message Processing rank of vehicle mark generates signature in this locality together with message, ensure that the Message Processing rank of the marking of cars can not be distorted by hostile network member, ensure that vehicle non-repudiation in the detection of mark legitimacy simultaneously.

(4) invention introduces marking of cars Message Processing rank legitimacy testing mechanism, region server can check vehicles the process rank of whether empty mark message.

Accompanying drawing explanation

Fig. 1 is the structural representation of hardware in embodiment;

Fig. 2 is general frame figure of the present invention;

Fig. 3 is schematic flow sheet of the present invention;

Fig. 4 is the flow chart that in the present invention, region server coordinates RSU;

Fig. 5 is the information flow direction figure of RSU cooperated computing in the present invention.

Embodiment

Below technical solution of the present invention is described in detail, but protection scope of the present invention is not limited to described embodiment.

Embodiment:

Step one: board units OBU calculates and marks the process rank of message to be sent and generate signature, sends to the RSU of surrounding.

Certain vehicle V _ion be mounted with board units OBU _i, produce a message M to be sent _i={ Location E119.27 N32.12}, content is the geographical position at vehicle reporting vehicle place.Board units OBU _iinquiry obtains this vehicle V _iservice class S _i=2, this message is without the need to response, therefore T _mi=0, the type of message rank C of this message _mi=3.By formula P _mi=T _mi| (C _mi* S _i) calculate the Message Processing rank P obtaining this message _mi=0.

Board units OBU _iby formula H _mi=hash (M _i|| P _mi) generating messages M _iwith the process rank P of message _mi256 bit digital summary be:

H _mi={ C458428D7668B56B848E51FBABD8EAB6C0641622B078C8BBC54D5E42 2217B733} board units OBU _iby formula σ _mi=E (PriK _i, H _mi) generating messages M _iwith message M _iprocess rank P _misignature be:

σ _mi=the 2ECB4AF061559B30B7CCA767458AC72BF4E201902A385E9023040CD3 399DDC6D} private key that wherein vehicle is encrypted is:

PriK _i＝{950A646605AD8674D2C2BC3CB287D91269712943E3CCB99A4715BC07CE71E6F1}

Board units OBU _iperipherad RSU sends message { PID _i, M _i, P _mi, σ _mi, PID _i={ GY9HG7GH} is vehicle V _iassumed name, assigned by trust authority TA, message content is:

$\left\{\begin{array}{c}\mathrm{GY}9\mathrm{HG}7\mathrm{GH},\\ \mathrm{Location\; E}119.27N32.12,\\ 0,\\ 2\mathrm{ECB}4\mathrm{AF}061559B30B7\mathrm{CCA}767458\mathrm{AC}72\mathrm{BF}4E201902A385E9023040\mathrm{CD}3399\mathrm{DDC}6D,\end{array}\right.$

The RSU that step 2: region server LS coordinates in region forms RSU couple, and assigns trust RSU _jrSU is calculated with generation _k.

RSU in region _ireport the calculating situation in a upper work period T to region server LS, comprise RSU _ibe currently available for the amount of calculation E of vehicle message authentication _iwith the processing locality rank P in last work period T _rSUi, the span of i is 1 ~ n

Region server LS obtains all RSU in region _i, i ∈ { 1,2,3,4,5 ... report message, calculate and obtain the processing locality rank of each RSU in this work period T wherein α is a parameter distributing relevant with the process rank of message;

Region server LS assigns and entrusts RSU _jrSU is calculated with generation _k, successively decrease order to RSU sequence generation deque in region by the processing locality rank produced, head of the queue and tail of the queue go out team simultaneously, and two the RSU groups simultaneously going out team are a RSU couple, and wherein head of the queue goes out the RSU of team for entrusting RSU _j, tail of the queue goes out the RSU of team for generation calculating RSU _k;

Region server LS is to all RSU _i, i ∈ { 1,2,3,4,5 ... send labeled message wherein { 0,1}, as this RSU for B ∈ _ifor entrusting RSU _jtime, B=0; For generation calculates RSU _ktime, B=1; for RSU _ithe identity of another member of place RSU centering.

Step 3: generation calculates RSU _kassist to entrust RSU _jcertification is carried out to the identity of vehicle.

Entrust RSU _jreceive the message { PID that vehicle sends _i, M _i, P _mi, σ _mi, work as P _i<P _rSUjtime, this entrusts RSU _jthe generation of pairing message is sent to calculate RSU _k, entrust its generation to calculate, message is { PID _i, M _i, P _mi, σ _mi, SN}, wherein SN=4564234 is the mark of this message;

In generation, calculates RSU _kreceive message { PID _i, M _i, P _mi, σ _mi, after SN}, obtain vehicle V to region server application _iencrypted public key, be:

PubK _i={ then 8EDC063E70A4D323F9BDE5B6FC9E10A809E86CAB007A1AB3E3197B2A 9E0C carries out certification to the signature of message;

In generation, calculates RSU _kverify message, checking equation is:

D (PubK _i, σ _i)=hash (M _i|| P _i), equation is set up, therefore effective to the certification of the process rank of vehicle message and message;

In generation, calculates RSU _kauthentication result returns to entrusts RSU _j, message is as { 4564234, valide}

Meanwhile, region server LS also can verify the legitimacy of marking of cars Message Processing rank, is checking vehicle V below _ito message M _ithe legitimate verification of annotated message process rank:

Region server LS reads the message { PID of testing vehicle register certification _i, M _i, P _mi, σ _mi, wherein P _mi=0, according to message M _ijudge its acknowledgement messaging type T _mi=0 and type of message rank C _mi=3

Region server LS obtains the service class S of vehicle to vehicle supervision department server request _i=2

Checking equation: P _mi=T _mi| (C _mi* S _i) set up, effectively, there is not the problem of empty mark Message Processing rank in vehicle in checking

The result is sent to vehicle supervision department by region server LS, and message is as { GY9HG7GH, valide}.

Claims (6)

1. divide equally a vehicle identity authentication method for RSU amount of calculation, it is characterized in that: comprise the following steps:

(1) vehicle V is installed on _iboard units OBU _icalculate and mark the Message Processing rank sending message, the then signature of generating messages and Message Processing rank, sends to neighbouring RSU; Board units OBU _iin store key, service class and type of message marking convention;

(2) region server LS coordinates the RSU in its region, specifies the processing locality rank of each RSU and forms RSU couple;

(3) each RSU entrusts RSU to comprising one _jrSU is calculated with generation _j, in generation, calculates RSU _jassist to entrust RSU _jrealize the authentication to vehicle.

2. vehicle identity authentication method of dividing equally RSU amount of calculation according to claim 1, is characterized in that: vehicle V in described step (1) _iproduce message M to be sent _i, board units OBU _ito mark and to send the detailed process of this message as follows:

(11) board units OBU _icalculate message M _iprocess rank P _mi, P _mi=T _mi| (C _mi* S _i), C _mifor type of message rank, S _ifor service class, T _mifor acknowledgement messaging type and T _mi∈ { 0,1}, even board units OBU _ithe message sent is without the need to response or return, then T _mivalue is 0, if desired replys or returns confirmation, then T _mivalue is 1;

(12) board units OBU _ito message M _iwith the process rank P of message _migenerate a digital digest H _mi=hash (M _i|| P _mi);

(13) board units OBU _igenerating messages M _iwith message M _iprocess rank P _misignature sigma _mi, σ _mi=E (PriK _i, H _mi), H _mifor the summary of message to be sent and Message Processing rank, private key PriK _ifor the private key of vehicle encryption;

(14) board units OBU _iperipherad RSU sends message { PID _i, M _i, P _mi, σ _mi, PID _ifor vehicle V _iassumed name, assigned by trust authority TA.

3. vehicle identity authentication method of dividing equally RSU amount of calculation according to claim 1, is characterized in that: in step (1):

Described board units OBU _ithe key stored comprises the key of a pair vehicle and the PKI of trust authority TA, and the key of vehicle comprises private key PriK _iwith PKI PubK _i; Described private key PriK _ikept secure is in security medium, not open to other members in network; PKI PubK _ipublish and leave on public server for the inquiry of other network memberses;

Described board units OBU _ithe service class S stored _iby vehicle, supervision department issues, and accepts the priority level of serving, S with marked vehicle in VANET _i∈ N ^*;

Described board units OBU _ithe message marking rule stored is used for marking its type of message rank C to sent vehicle message _mi, by vehicle, supervision department specifies.

4. vehicle identity authentication method of dividing equally RSU amount of calculation according to claim 1, it is characterized in that: in described step (2), region server LS using one regular time section as an one work period T, a work period T comprises coordination phase and duty cycle, and in the coordination phase, the detailed process of step (2) is:

(21) all RSU in region _i, i ∈ { 1,2,3,4,5 ... the calculating situation in a upper work period T is reported to region server LS, comprise RSU _ibe currently available for the amount of calculation E of vehicle message authentication _iwith the processing locality rank P in last work period T _rSUi;

(22) region server LS obtains each RSU in region _ireport message, calculate obtain each RSU _iprocessing locality rank in this work period T wherein α is a parameter distributing relevant with the process rank of message;

(23) region server LS assigns and entrusts RSU _jrSU is calculated with generation _k, successively decrease order to RSU all in region by the processing locality rank produced _i, i ∈ { 1,2,3,4,5 ... sequence generation deque, head of the queue and tail of the queue go out team simultaneously, and two the RSU groups simultaneously going out team are a RSU couple, and wherein head of the queue goes out the RSU of team for entrusting RSU _j, tail of the queue goes out the RSU of team for generation calculating RSU _k;

(24) region server LS is to all RSU _isend labeled message wherein { 0,1}, when this RSU is for entrusting RSU for B ∈ _jtime, B=0; For generation calculates RSU _ktime, B=1; for RSU _ithe identity of another member of place RSU centering.

5. vehicle identity authentication method of dividing equally RSU amount of calculation according to claim 4, is characterized in that: enter duty cycle after the described coordination phase terminates, and entrusts RSU _jwhen receiving the message of Message Processing rank lower than processing locality rank, in the generation of each RSU centering, calculates RSU _kassist to entrust RSU _jcertification is carried out to the identity of vehicle, and returns results to trust RSU _juntil the duty cycle in this work period terminates or certain RSU initiates to coordinate request; Wherein, in generation, calculates RSU _kassist to entrust RSU _jthe detailed process of the identity of vehicle being carried out to certification is:

(31) RSU is entrusted _jreceive the message { PID that vehicle sends _i, M _i, P _mi, σ _mi, work as P _mi<P ' _rSUjtime, this entrusts RSU _jthe generation of pairing message is sent to calculate RSU _k, entrust its generation to calculate, message is { PID _i, M _i, P _mi, σ _mi, SN}, wherein SN is the mark of this message, by trust RSU _jgenerate;

(32) in generation, calculates RSU _kreceive message { PID _i, M _i, P _mi, σ _mi, after SN}, obtain vehicle V to region server application _iencrypted public key PubK _i, certification is carried out to the signature of message;

(33) in generation, calculates RSU _kverify message, checking equation is:

D (PubK _i, σ _i)=hash (M _i|| P _i), if equation is set up, then effective to the certification of the process rank of vehicle message and message, otherwise be invalid;

(34) in generation, calculates RSU _kauthentication result returns to entrusts RSU _j.

6. vehicle identity authentication method of dividing equally RSU amount of calculation according to claim 1, is characterized in that: described region server LS also can verify the legitimacy of marking of cars Message Processing rank: in region server, enquiring vehicle V _ithe message M sent _iacknowledgement type T _miwith type of message rank C _mi, then to the service class S of vehicle supervision department enquiring vehicle _i, judge P _mi=T _mi| (C _mi* S _i) whether set up, detailed process is:

(41) region server LS extracts the message { PID by testing vehicle register certification _i, M _i, P _mi, σ _mi, according to message M _ijudge its acknowledgement messaging type T _miwith type of message rank C _mi;

(42) region server LS obtains the service class S of vehicle to vehicle supervision department server request _i;

(43) equation: P is verified _mi=T _mi| (C _mi* S _i) whether set up, as set up, then checking is effectively; Be false, then it is invalid to verify, vehicle exists the problem of empty mark Message Processing rank;

(44) the result is sent to vehicle supervision department by region server LS, and message is as { PID _i, J}.