CN108600240B - Communication system and communication method thereof - Google Patents

Communication system and communication method thereof Download PDF

Info

Publication number
CN108600240B
CN108600240B CN201810408721.4A CN201810408721A CN108600240B CN 108600240 B CN108600240 B CN 108600240B CN 201810408721 A CN201810408721 A CN 201810408721A CN 108600240 B CN108600240 B CN 108600240B
Authority
CN
China
Prior art keywords
vehicle
fog node
digital certificate
key
service request
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201810408721.4A
Other languages
Chinese (zh)
Other versions
CN108600240A (en
Inventor
郝虹
段成德
于治楼
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Inspur Group Co Ltd
Original Assignee
Inspur Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Inspur Group Co Ltd filed Critical Inspur Group Co Ltd
Priority to CN201810408721.4A priority Critical patent/CN108600240B/en
Publication of CN108600240A publication Critical patent/CN108600240A/en
Application granted granted Critical
Publication of CN108600240B publication Critical patent/CN108600240B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0442—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The invention provides a communication system and a communication method thereof, comprising the following steps: at least one vehicle and at least one fog node; the vehicle is used for signing the first service request by using an asymmetric vehicle private key when receiving the first service request sent by a user, and sending the vehicle digital certificate and the signed first service request to the defogging node; receiving and verifying a fog node digital certificate and signed first receipt information sent by a fog node; when the verification is passed, acquiring the decrypted first receipt information; and the fog node is used for receiving and verifying the vehicle digital certificate sent by the vehicle and the signed first service request, generating first receipt information when the verification is passed, signing the first receipt information by using a pre-acquired asymmetric fog node private key, and sending the pre-acquired fog node digital certificate and the signed first receipt information to the vehicle. The scheme can improve the safety of the communication between the vehicle and the fog node.

Description

Communication system and communication method thereof
Technical Field
The invention relates to the field of fog computing and Internet of vehicles safety, in particular to a communication system and a communication method thereof
Background
The car networking provides the development direction for solving the urban traffic problem as a part of wisdom traffic. In recent years, with the explosive increase of the number of vehicles and the data of the internet of vehicles, the bandwidth resource of the cloud computing network is seriously insufficient, and the characteristics of mobility and low time delay of the internet of vehicles cannot be met. The appearance of the fog nodes greatly improves the situation.
At present, the fog nodes are deployed at the edge of a network and have the characteristics of location awareness and low time delay, so that the fog nodes can be better applied to the Internet of vehicles. However, the vehicle as a mobile node in the internet of vehicles can only communicate with the fog node through the wireless mobile network, and compared with the traditional network, the channel security is poorer and the attack is more prone to be caused. If the vehicle end receives malicious attack, the privacy of the vehicle end is easily revealed. After the fog node is attacked, other vehicles served by the fog node face the threat of information leakage, and even the upper cloud environment connected with the fog node is affected, so that the safety of communication between the vehicles and the fog node is low.
Disclosure of Invention
The embodiment of the invention provides a communication system and a communication method thereof, which can improve the safety of communication between a vehicle and a fog node.
In a first aspect, an embodiment of the present invention provides a communication system, including:
at least one vehicle and at least one fog node;
each vehicle is used for signing the first service request by using a pre-acquired asymmetric vehicle private key when receiving the first service request sent by a user, and sending a pre-acquired vehicle digital certificate and the signed first service request to a mist sending node; when a fog node digital certificate and signed first receipt information sent by the fog node are received, verifying the fog node digital certificate and the signed first receipt information; when the verification is passed, acquiring the decrypted first receipt information;
each fog node is used for verifying the vehicle digital certificate and the signed first service request when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, generating the first receipt information when the verification is passed, signing the first receipt information by using a pre-obtained asymmetric fog node private key, and sending the pre-obtained fog node digital certificate and the signed first receipt information to the vehicle.
Preferably, further comprising: a Certificate Authority (CA) center;
the vehicle is used for sending a vehicle certificate application carrying vehicle identity information to the CA in advance, and receiving a vehicle digital certificate and an asymmetric vehicle private key sent by the CA;
the fog node is used for sending a fog node certificate application carrying fog node identity information to the CA center in advance and receiving a fog node digital certificate and an asymmetric fog node private key sent by the CA center;
the CA center is used for generating the vehicle digital certificate and the asymmetric vehicle private key by using the vehicle identity information according to a preset encryption rule when receiving a vehicle certificate application carrying vehicle identity information sent by the vehicle, and sending the vehicle digital certificate and the asymmetric vehicle private key to the vehicle; and when a fog node certificate application carrying fog node identity information sent by the fog node is received, generating the fog node digital certificate and the asymmetric fog node private key by using the fog node identity information according to the encryption rule, and sending the fog node digital certificate and the asymmetric fog node private key to the fog node.
Preferably, the CA center is further configured to publish a pre-generated center public key;
the vehicle is used for determining whether the central public key can decrypt the fog node digital certificate, and if so, acquiring a fog node public key in the decrypted fog node digital certificate; decrypting the signed first receipt information by using the fog node public key;
the fog node is used for determining whether the central public key can decrypt the vehicle digital certificate, and if so, acquiring the vehicle public key in the decrypted vehicle digital certificate; decrypting the signed first service request using the vehicle public key.
Preferably, the vehicle is further configured to generate a symmetric root key according to a preset key rule when receiving a re-service request sent by the user; encrypting the symmetric root key and the re-service request by using the asymmetric vehicle private key to generate key negotiation information; sending the key negotiation information to the fog node; when encrypted receipt information sent by the fog node is received, decrypting the encrypted receipt information by using the symmetric root key to obtain the decrypted receipt information;
the fog node is further configured to decrypt the key agreement information by using the vehicle public key when receiving the key agreement information of the vehicle, and obtain the symmetric root key and the re-service request; generating re-receipt information corresponding to the re-service request; encrypting the receipt information again by using the symmetric root key; and sending the encrypted receipt information to the vehicle.
Preferably, the vehicle is further configured to determine whether the encrypted receipt information is received within a preset time limit, and if so, when a subsequent service request sent by the user is received, encrypt the subsequent service request by using the symmetric root key, generate new communication information, and send the new communication information to the cloud node; otherwise, when the subsequent service request is received, generating a new symmetric root key according to the key rule, encrypting the new symmetric root key and the subsequent service request by using the asymmetric vehicle private key to generate new communication information, and sending the new communication information to the fog node so that the fog node sends corresponding subsequent receipt information according to the new communication information.
Preferably, the cloud node is further configured to preset a service user list, and record the vehicle digital certificate, the vehicle public key, the last service time of the vehicle, the symmetric root key, and the time limit of the symmetric root key in the service user list; when the new communication information is received, performing:
s0: determining whether a symmetric root key corresponding to the vehicle exists in the service user list, if so, performing S1, otherwise, performing S3;
s1: determining whether the symmetric root key is valid according to the last service time and the time limit, if so, executing S2, otherwise, executing S3;
s2: decrypting the new communication information by using the symmetric root key, and updating the last service time in the service user list;
s3: and decrypting the new communication information by using the vehicle public key, and deleting the symmetric root key and the time limit of the symmetric root key in the service user list.
Preferably, the CA center is further configured to publish a certificate revocation list generated in advance;
the fog node is further configured to, when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, determine whether the vehicle digital certificate is on the certificate revocation list, and if so, cancel the communication this time, otherwise, execute the first service request after verifying the vehicle digital certificate and the signature.
In a second aspect, an embodiment of the present invention provides a communication method based on any one of the communication systems in the first aspect, including:
each vehicle in at least one vehicle signs the first service request by using a pre-acquired asymmetric vehicle private key when receiving the first service request sent by a user, and sends a pre-acquired vehicle digital certificate and the signed first service request to a mist giving node; when a fog node digital certificate and signed first receipt information sent by the fog node are received, verifying the fog node digital certificate and the signed first receipt information; when the verification is passed, acquiring the decrypted first receipt information;
each of the at least one fog node verifies the vehicle digital certificate and the signed first service request when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, generates the first receipt information when the verification is passed, signs the first receipt information by using a pre-obtained asymmetric fog node private key, and sends the pre-obtained fog node digital certificate and the signed first receipt information to the vehicle.
Preferably, before said signing the first service request with the pre-obtained asymmetric vehicle private key, further comprises:
the vehicle sends a vehicle certificate application carrying vehicle identity information to a CA center in advance, and receives a vehicle digital certificate and an asymmetric vehicle private key sent by the CA center;
before the signing the first receipt information by using the pre-acquired asymmetric fog node private key, further comprising:
the fog node sends a fog node certificate application carrying fog node identity information to the CA center in advance, and receives a fog node digital certificate and an asymmetric fog node private key sent by the CA center;
when the CA center receives a vehicle certificate application carrying vehicle identity information sent by the vehicle, the CA center generates the vehicle digital certificate and the asymmetric vehicle private key by using the vehicle identity information according to a preset encryption rule, and sends the vehicle digital certificate and the asymmetric vehicle private key to the vehicle; and when a fog node certificate application carrying fog node identity information sent by the fog node is received, generating the fog node digital certificate and the asymmetric fog node private key by using the fog node identity information according to the encryption rule, and sending the fog node digital certificate and the asymmetric fog node private key to the fog node.
Preferably, before the sending the vehicle digital certificate and the asymmetric vehicle private key to the vehicle, further comprises:
the CA center publishes a pre-generated certificate revocation list;
and when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, the fog node determines whether the vehicle digital certificate is in the certificate revocation list, if so, cancels the communication, and otherwise, executes the first service request after verifying the vehicle digital certificate and the signature.
In the embodiment of the invention, before the vehicle interacts with the fog node, two communication parties need to acquire respective digital certificates firstly, so that when the fog node interacts with the vehicle, whether the identity of the vehicle is legal or not is determined according to the vehicle digital certificate, and when the identity of the fog node is legal, the fog node digital certificate and corresponding first receipt information are sent to the vehicle, so that the vehicle determines whether the identity of the fog node is legal or not according to the fog node digital certificate, and when and only when the identity of the fog node is legal, the first receipt information sent by the fog node is acquired. In summary, the vehicle digital certificate is sent to the external fog node and the fog node digital certificate sent by the external fog node is received, so that the two communication parties can use the digital certificates as the proof of identity authentication of the two communication parties and determine the validity of the identities of the two communication parties, and the safety of communication between the vehicle and the fog node can be improved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to these drawings without creative efforts.
Fig. 1 is a schematic structural diagram of a communication system according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of another communication system according to an embodiment of the present invention;
fig. 3 is a schematic structural diagram of another communication system according to an embodiment of the present invention;
fig. 4 is a flowchart of a communication method of a communication system according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer and more complete, the technical solutions in the embodiments of the present invention will be described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention, and based on the embodiments of the present invention, all other embodiments obtained by a person of ordinary skill in the art without creative efforts belong to the scope of the present invention.
As shown in fig. 1, an embodiment of the present invention provides a communication system, including: at least one vehicle 101 and at least one fog node 102;
each vehicle 101 is configured to, when receiving a first service request sent by a user, sign the first service request by using a pre-acquired asymmetric vehicle private key, and send a pre-acquired vehicle digital certificate and the signed first service request to the mist node 102; when the fog node digital certificate and the signed first receipt information sent by the fog node 102 are received, verifying the fog node digital certificate and the signed first receipt information; when the verification is passed, acquiring the decrypted first receipt information;
each fog node 102 is configured to verify the vehicle digital certificate and the signed first service request when receiving the vehicle digital certificate and the signed first service request sent by the vehicle 101, generate the first receipt information when the verification passes, sign the first receipt information by using a pre-obtained asymmetric fog node private key, and send the pre-obtained fog node digital certificate and the signed first receipt information to the vehicle 101.
In the embodiment of the invention, before the vehicle interacts with the fog node, two communication parties need to acquire respective digital certificates firstly, so that when the fog node interacts with the vehicle, whether the identity of the vehicle is legal or not is determined according to the vehicle digital certificate, and when the identity of the fog node is legal, the fog node digital certificate and corresponding first receipt information are sent to the vehicle, so that the vehicle determines whether the identity of the fog node is legal or not according to the fog node digital certificate, and when and only when the identity of the fog node is legal, the first receipt information sent by the fog node is acquired. In summary, the vehicle digital certificate is sent to the external fog node and the fog node digital certificate sent by the external fog node is received, so that the two communication parties can use the digital certificates as the proof of identity authentication of the two communication parties and determine the validity of the identities of the two communication parties, and the safety of communication between the vehicle and the fog node can be improved.
Based on the communication system shown in fig. 1, as shown in fig. 2, in an embodiment of the present invention, the communication system further includes: certificate authority CA center 201;
the vehicle 101 is configured to send a vehicle certificate application carrying vehicle identity information to the CA center 201 in advance, and receive a vehicle digital certificate and an asymmetric vehicle private key sent by the CA center 201;
the fog node 102 is configured to send a fog node certificate application carrying fog node identity information to the CA center 201 in advance, and receive a fog node digital certificate and an asymmetric fog node private key sent by the CA center 201;
the CA center 201 is configured to, when receiving a vehicle certificate application carrying vehicle identity information sent by the vehicle 101, generate the vehicle digital certificate and the asymmetric vehicle private key by using the vehicle identity information according to a preset encryption rule, and send the vehicle digital certificate and the asymmetric vehicle private key to the vehicle 101; when a fog node certificate application carrying fog node identity information sent by the fog node 102 is received, the fog node digital certificate and the asymmetric fog node private key are generated by using the fog node identity information according to the encryption rule, and the fog node digital certificate and the asymmetric fog node private key are sent to the fog node 102.
In the embodiment of the invention, before the interaction between the vehicle and the fog node, the vehicle respectively applies for certificate application to a credible CA center, so that the CA center respectively issues respective digital certificates for the vehicle and the fog node, and both communication parties use the digital certificates as the proof of identity authentication of both communication parties, thereby realizing the purpose of improving the safety of the communication between the vehicle and the fog node.
In an embodiment of the present invention, the CA center is further configured to publish a pre-generated center public key;
the vehicle is used for determining whether the central public key can decrypt the fog node digital certificate, and if so, acquiring a fog node public key in the decrypted fog node digital certificate; decrypting the signed first receipt information by using the fog node public key;
the fog node is used for determining whether the central public key can decrypt the vehicle digital certificate, and if so, acquiring the vehicle public key in the decrypted vehicle digital certificate; decrypting the signed first service request using the vehicle public key.
In the embodiment of the invention, because the asymmetric vehicle private key is arranged at the vehicle, the asymmetric fog node private key is arranged at the fog node, and other people cannot acquire the asymmetric vehicle private key and the asymmetric fog node private key, when the vehicle interacts information with the fog node, the asymmetric vehicle private key is used for signing the interactive information, and when the fog node interacts information with the vehicle, the asymmetric fog node private key is used for signing the interactive information, so that other people cannot forge the signed interactive information, when two communication parties determine that the corresponding interactive information can be decrypted, the identity of the other party can be determined to be legal, and when the other party is determined to be legal, the interaction is carried out again, so that the information of the two communication parties can be prevented from being stolen, and the safety of the communication between the vehicle and the fog node can be improved.
In an embodiment of the present invention, the vehicle is further configured to generate a symmetric root key according to a preset key rule when receiving a re-service request sent by the user; encrypting the symmetric root key and the re-service request by using the asymmetric vehicle private key to generate key negotiation information; sending the key negotiation information to the fog node; when encrypted receipt information sent by the fog node is received, decrypting the encrypted receipt information by using the symmetric root key to obtain the decrypted receipt information;
the fog node is further configured to decrypt the key agreement information by using the vehicle public key when receiving the key agreement information of the vehicle, and obtain the symmetric root key and the re-service request; generating re-receipt information corresponding to the re-service request; encrypting the receipt information again by using the symmetric root key; and sending the encrypted receipt information to the vehicle.
In the embodiment of the invention, after the two communication parties carry out mutual authentication of the digital certificates, the vehicle needs to carry out key agreement with the fog node so as to encrypt the interactive information by using the agreed symmetric root key. And the symmetric root key is used for encrypting the interactive information, so that the safety of the communication between the vehicle and the fog node can be improved, and the speed of encrypting the interactive information can be improved.
In an embodiment of the present invention, the vehicle is further configured to determine whether the re-receipt information after encryption is received within a preset time limit, and if so, when a subsequent service request sent by the user is received, encrypt the subsequent service request by using the symmetric root key, generate new communication information, and send the new communication information to the cloud node; otherwise, when the subsequent service request is received, generating a new symmetric root key according to the key rule, encrypting the new symmetric root key and the subsequent service request by using the asymmetric vehicle private key to generate new communication information, and sending the new communication information to the fog node so that the fog node sends corresponding subsequent receipt information according to the new communication information.
In the embodiment of the invention, after the vehicle receives the encrypted receipt information sent by the fog node again, the vehicle needs to determine whether to use the symmetric root key for authentication within a preset time limit, and when the determination exceeds the time limit, the vehicle needs to renegotiate a new symmetric root key by using the public key of the fog node, so that the communication safety of the vehicle and the fog node is improved.
In an embodiment of the present invention, the cloud node is further configured to preset a service user list, and record the vehicle digital certificate, the vehicle public key, the last service time of the vehicle, the symmetric root key, and the time limit of the symmetric root key in the service user list; when the new communication information is received, performing:
s0: determining whether a symmetric root key corresponding to the vehicle exists in the service user list, if so, performing S1, otherwise, performing S3;
s1: determining whether the symmetric root key is valid according to the last service time and the time limit, if so, executing S2, otherwise, executing S3;
s2: decrypting the new communication information by using the symmetric root key, and updating the last service time in the service user list;
s3: and decrypting the new communication information by using the vehicle public key, and deleting the symmetric root key and the time limit of the symmetric root key in the service user list.
In the embodiment of the present invention, after determining that the identity of the vehicle is legal, the fog node needs to record the identity information of the vehicle, for example, the vehicle ID, the vehicle digital certificate, and the vehicle public key, into a preset service user list, so that when interacting with the vehicle again, the identity validity of the vehicle is determined again according to the information recorded in the service user list.
In an embodiment of the present invention, the CA center is further configured to publish a certificate revocation list generated in advance;
the fog node is further configured to, when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, determine whether the vehicle digital certificate is on the certificate revocation list, and if so, cancel the communication this time, otherwise, execute the first service request after verifying the vehicle digital certificate and the signature.
In the embodiment of the present invention, when determining that the vehicle digital certificate of the vehicle is valid, the cloud node further needs to determine whether the vehicle digital certificate is valid according to the certificate revocation list. When the identity of the vehicle is determined to be legal and effective, information interaction is carried out with the vehicle, the probability that the fog node is attacked can be reduced, and therefore the safety of communication between the fog node and the vehicle can be improved.
In order to more clearly illustrate the technical solutions and advantages of the present invention, a detailed description is made of a communication system provided by an embodiment of the present invention, as shown in fig. 3, including:
the vehicle 301 is configured to send a vehicle certificate application carrying vehicle identity information to the CA center 302 in advance, and receive a vehicle digital certificate and an asymmetric vehicle private key sent by the CA center 302 according to the vehicle certificate application.
Specifically, before the vehicle interacts with the fog node, the vehicle digital certificate needs to be applied to the CA center first, so that when the vehicle interacts with the fog node, the fog node can determine whether the identity of the vehicle is legal or not through the vehicle digital certificate, and when the identity of the fog node is legal, the fog node interacts with the fog node, and therefore the purpose of improving the safety of communication between the vehicle and the fog node is achieved.
The fog node 303 is configured to send a fog node certificate application carrying fog node identity information to the CA center 302 in advance, and receive a fog node digital certificate and an asymmetric fog node private key sent by the CA center 302 according to the fog node certificate application.
Specifically, before the fog node interacts with the vehicle, the fog node digital certificate needs to be applied to the CA center first, so that when the fog node digital certificate interacts with the vehicle, the vehicle can determine whether the identity of the fog node is legal or not through the fog node digital certificate, and when the identity of the vehicle is legal, the fog node digital certificate interacts with the vehicle, and therefore the safety of communication between the vehicle and the fog node can be improved.
The CA center 302 is used for publishing a pre-generated center public key, generating a vehicle digital certificate and an asymmetric vehicle private key by using vehicle identity information in a vehicle certificate application according to a preset encryption rule when receiving the vehicle certificate application sent by the vehicle 301, and sending the vehicle digital certificate and the asymmetric vehicle private key to the vehicle 301; when a fog node certificate application sent by the fog node 303 is received, a fog node digital certificate and an asymmetric fog node private key are generated by using the fog node identity information in the fog node certificate application according to an encryption rule, and the fog node digital certificate and the asymmetric fog node private key are sent to the fog node 303.
Specifically, the CA center sends the fog node digital certificate and the asymmetric fog node private key to the fog node, and sends the vehicle digital certificate and the asymmetric vehicle private key to the vehicle, so that the safety of communication is improved when two communication parties carry out information interaction, and the two communication parties can use the digital certificate as the proof of identity authentication of the two communication parties.
The vehicle 301 is configured to, when receiving a first service request sent by a user, encrypt the first service request with an asymmetric vehicle private key, and send the encrypted first service request and a vehicle digital certificate to the cloud node 303.
Specifically, the first service request is encrypted by using the asymmetric vehicle private key, so that the security in the process of transmitting the first service request can be improved, and the vehicle digital certificate is sent, so that the fog node can determine whether the identity of the vehicle is legal or not through the digital certificate.
The cloud node 303 is configured to determine whether the central public key can decrypt the vehicle digital certificate when receiving the encrypted first service request and the vehicle digital certificate sent by the vehicle 301, and if so, obtain the vehicle public key in the decrypted vehicle digital certificate; and determining whether the vehicle digital certificate is revoked according to a certificate revocation list published in advance by the CA center 302, if so, cancelling the communication, otherwise, decrypting the signed first service request by using a vehicle public key, generating first receipt information corresponding to the first service request, signing the first receipt information by using an asymmetric foggy node private key, and sending the signed first receipt information and the foggy node public key to the vehicle 301.
Specifically, after receiving the vehicle digital certificate, the fog node verifies the authenticity of the vehicle digital certificate, can determine whether the identity of the vehicle is legal, and interacts with the vehicle if and only if the identity of the vehicle is legal. And the fog node digital certificate is sent to the vehicle, so that the vehicle can verify whether the identity of the fog node is legal or not through the fog node digital certificate, and the purpose of improving the communication safety of the fog node and the vehicle is achieved.
The vehicle 301 is used for determining whether the central public key can decrypt the fog node digital certificate or not when receiving the signed first receipt information and the fog node digital certificate sent by the fog node 303, if so, obtaining the fog node public key in the decrypted fog node digital certificate, decrypting the signed first receipt information by using the fog node public key, obtaining the decrypted first receipt information, and executing the first receipt information; when a re-service request sent by a user is received, a symmetric root key is generated according to a preset key rule, the symmetric root key and the re-service request are encrypted by using an asymmetric vehicle private key to generate key negotiation information, and the key negotiation information is sent to the fog node 303.
Specifically, when the identity of the fog node is determined to be legal, the vehicle needs to generate a symmetric root key, and send the symmetric root key to the fog node, so that both communication parties complete key agreement, and the speed of encrypting the interactive information is increased on the basis of improving the communication security of the vehicle and the fog node.
The cloud node 303 is configured to decrypt the key agreement information by using the vehicle public key when receiving the key agreement information sent by the vehicle 301, and obtain a symmetric root key and a re-service request in the decrypted key agreement; the receipt re-issuing information corresponding to the re-service request is generated, the receipt re-issuing information is encrypted by the symmetric root key, and the encrypted receipt re-issuing information is transmitted to the vehicle 301.
Specifically, after the fog node completes key agreement with the vehicle, the symmetric root key obtained through the key agreement encrypts the receipt information again, so that the encryption speed is increased on the basis of improving the communication security with the vehicle.
The vehicle 301 is configured to, upon receiving the encrypted receipt information sent by the fog node 303, decrypt the encrypted receipt information with the symmetric root key, obtain the decrypted receipt information, execute the receipt information, and perform:
determining whether the encrypted receipt information is received within a preset time limit;
if so, when a subsequent service request sent by the user is received, encrypting the subsequent service request by using the symmetric root key, and sending the encrypted subsequent service request to the fog node 303;
otherwise, when a subsequent service request is made, a new symmetric root key is generated according to the key rule, the new symmetric root key and the subsequent service request are encrypted by using the asymmetric vehicle private key to generate communication information, and the communication information is sent to the fog node 303.
Specifically, after the vehicle completes the key agreement with the fog node, it needs to determine whether the vehicle uses the symmetric root key for authentication within a preset time limit, that is, the symmetric root key is used for decrypting the interactive information, if so, the vehicle continues to use the symmetric root key for interaction, otherwise, in order to avoid the symmetric root key being obtained by others, a new symmetric root key needs to be formed, and new key agreement is performed.
In summary, the identity process of the vehicle is authenticated by the fog node as follows:
a: and when the vehicle sends identity information to the fog node, wherein the identity information comprises a vehicle digital certificate or a symmetric root key.
B: the fog node, upon receiving the identity information, determines whether the vehicle is in a service user list, and if the vehicle is in the service user list:
determining whether symmetric root keys in a service user list are still valid
If so, authenticating the vehicle using the symmetric root key, and performing D.
And if the vehicle is invalid, authenticating the vehicle by using the vehicle public key in the service user list, and executing D.
C: if the vehicle is not on the service user list, the vehicle digital certificate is authenticated by the central public key.
D: and inquiring the certificate revocation list to determine the validity of the vehicle digital certificate.
E: and after the authentication is finished, the fog node updates the service user list.
As shown in fig. 4, an embodiment of the present invention provides a communication method of a communication system as described in any one of the above embodiments, where the method may include the following steps:
step 401: each vehicle in at least one vehicle signs the first service request by using a pre-acquired asymmetric vehicle private key when receiving the first service request sent by a user, and sends a pre-acquired vehicle digital certificate and the signed first service request to a mist giving node; when a fog node digital certificate and signed first receipt information sent by the fog node are received, verifying the fog node digital certificate and the signed first receipt information; when the verification is passed, acquiring the decrypted first receipt information;
step 402: each of the at least one fog node verifies the vehicle digital certificate and the signed first service request when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, generates the first receipt information when the verification is passed, signs the first receipt information by using a pre-obtained asymmetric fog node private key, and sends the pre-obtained fog node digital certificate and the signed first receipt information to the vehicle.
In the embodiment of the invention, before the vehicle interacts with the fog node, two communication parties need to acquire respective digital certificates firstly, so that when the fog node interacts with the vehicle, whether the identity of the vehicle is legal or not is determined according to the vehicle digital certificate, and when the identity of the fog node is legal, the fog node digital certificate and corresponding first receipt information are sent to the vehicle, so that the vehicle determines whether the identity of the fog node is legal or not according to the fog node digital certificate, and when and only when the identity of the fog node is legal, the first receipt information sent by the fog node is acquired. In summary, the vehicle digital certificate is sent to the external fog node and the fog node digital certificate sent by the external fog node is received, so that the two communication parties can use the digital certificates as the proof of identity authentication of the two communication parties and determine the validity of the identities of the two communication parties, and the safety of communication between the vehicle and the fog node can be improved.
In an embodiment of the present invention, before the signing the first service request with the pre-obtained asymmetric vehicle private key, the signing further includes:
the vehicle sends a vehicle certificate application carrying vehicle identity information to a CA center in advance, and receives a vehicle digital certificate and an asymmetric vehicle private key sent by the CA center;
before the signing the first receipt information by using the pre-acquired asymmetric fog node private key, further comprising:
the fog node sends a fog node certificate application carrying fog node identity information to the CA center in advance, and receives a fog node digital certificate and an asymmetric fog node private key sent by the CA center;
when the CA center receives a vehicle certificate application carrying vehicle identity information sent by the vehicle, the CA center generates the vehicle digital certificate and the asymmetric vehicle private key by using the vehicle identity information according to a preset encryption rule, and sends the vehicle digital certificate and the asymmetric vehicle private key to the vehicle; and when a fog node certificate application carrying fog node identity information sent by the fog node is received, generating the fog node digital certificate and the asymmetric fog node private key by using the fog node identity information according to the encryption rule, and sending the fog node digital certificate and the asymmetric fog node private key to the fog node.
In an embodiment of the present invention, before the sending the vehicle digital certificate and the asymmetric vehicle private key to the vehicle, further includes:
the CA center publishes a pre-generated certificate revocation list;
and when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, the fog node determines whether the vehicle digital certificate is in the certificate revocation list, if so, cancels the communication, and otherwise, executes the first service request after verifying the vehicle digital certificate and the signature.
The embodiments of the invention have at least the following beneficial effects:
1. in the first embodiment of the invention, before the vehicle interacts with the fog node, two communication parties need to acquire respective digital certificates first, so that when the fog node interacts with the vehicle, whether the identity of the vehicle is legal or not is determined according to the vehicle digital certificate, and when the identity of the fog node is legal, the fog node digital certificate and corresponding first receipt information are sent to the vehicle, so that the vehicle determines whether the identity of the fog node is legal or not according to the fog node digital certificate, and when and only when the identity of the fog node is legal, the first receipt information sent by the fog node is acquired. In summary, the vehicle digital certificate is sent to the external fog node and the fog node digital certificate sent by the external fog node is received, so that the two communication parties can use the digital certificates as the proof of identity authentication of the two communication parties and determine the validity of the identities of the two communication parties, and the safety of communication between the vehicle and the fog node can be improved.
2. In the first embodiment of the invention, before the interaction between the vehicle and the fog node, the vehicle respectively applies for certificate applications to the credible CA center, so that the CA center can respectively issue respective digital certificates for the vehicle and the fog node, and the two communication parties use the digital certificates as the proof of identity authentication of the two communication parties, thereby realizing the purpose of improving the security of the communication between the vehicle and the fog node.
3. In the first embodiment of the invention, as the asymmetric vehicle private key is arranged at the vehicle, the asymmetric fog node private key is arranged at the fog node, and other people cannot acquire the asymmetric vehicle private key and the asymmetric fog node private key, when the vehicle interacts information with the fog node, the asymmetric vehicle private key is used for signing the interactive information, and when the fog node interacts information with the vehicle, the asymmetric fog node private key is used for signing the interactive information, so that other people cannot forge the signed interactive information, when two communication parties determine that the corresponding interactive information can be decrypted, the identity of the other party can be determined to be legal, and when the other party is determined to be legal, the interaction is carried out again, so that the information of the two communication parties can be prevented from being stolen, and the safety of the communication between the vehicle and the fog node can be improved.
4. In an embodiment of the present invention, after the two communication parties perform mutual authentication of the digital certificates, the vehicle needs to perform key agreement with the cloud node, so that the agreed symmetric root key is used to encrypt the interaction information. And the symmetric root key is used for encrypting the interactive information, so that the safety of the communication between the vehicle and the fog node can be improved, and the speed of encrypting the interactive information can be improved.
5. In one embodiment of the invention, after the vehicle receives the encrypted receipt information sent by the fog node again, the vehicle needs to determine whether to use the symmetric root key for authentication within a preset time limit, and when the determination exceeds the time limit, the vehicle needs to renegotiate a new symmetric root key by using the public key of the fog node, so that the security of communication between the vehicle and the fog node is improved.
6. In one embodiment of the present invention, after determining that the identity of the vehicle is legal, the fog node needs to record the identity information of the vehicle, for example, the vehicle ID, the vehicle digital certificate, and the vehicle public key, into a preset service user list, so that when interacting with the vehicle again, the fog node determines the validity of the identity of the vehicle again according to the information recorded in the service user list.
7. In an embodiment of the present invention, when determining that the vehicle digital certificate of the vehicle is valid, the cloud node further needs to determine whether the vehicle digital certificate is valid according to the certificate revocation list. When the identity of the vehicle is determined to be legal and effective, information interaction is carried out with the vehicle, the probability that the fog node is attacked can be reduced, and therefore the safety of communication between the fog node and the vehicle can be improved.
It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising a" does not exclude the presence of other similar elements in a process, method, article, or apparatus that comprises the element.
Finally, it is to be noted that: the above description is only a preferred embodiment of the present invention, and is only used to illustrate the technical solutions of the present invention, and not to limit the protection scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention shall fall within the protection scope of the present invention.

Claims (7)

1. A communication system, comprising: at least one vehicle and at least one fog node;
each vehicle is used for signing the first service request by using a pre-acquired asymmetric vehicle private key when receiving the first service request sent by a user, and sending a pre-acquired vehicle digital certificate and the signed first service request to a mist sending node; when a fog node digital certificate and signed first receipt information sent by the fog node are received, verifying the fog node digital certificate and the signed first receipt information; when the verification is passed, acquiring the decrypted first receipt information;
each fog node is used for verifying the vehicle digital certificate and the signed first service request when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, generating the first receipt information when the verification is passed, signing the first receipt information by using a pre-obtained asymmetric fog node private key, and sending the pre-obtained fog node digital certificate and the signed first receipt information to the vehicle; further comprising: a Certificate Authority (CA) center;
the vehicle is used for sending a vehicle certificate application carrying vehicle identity information to the CA in advance, and receiving a vehicle digital certificate and an asymmetric vehicle private key sent by the CA;
the fog node is used for sending a fog node certificate application carrying fog node identity information to the CA center in advance and receiving a fog node digital certificate and an asymmetric fog node private key sent by the CA center;
the CA center is used for generating the vehicle digital certificate and the asymmetric vehicle private key by using the vehicle identity information according to a preset encryption rule when receiving a vehicle certificate application carrying vehicle identity information sent by the vehicle, and sending the vehicle digital certificate and the asymmetric vehicle private key to the vehicle; when a fog node certificate application carrying fog node identity information sent by the fog node is received, generating the fog node digital certificate and the asymmetric fog node private key by using the fog node identity information according to the encryption rule, and sending the fog node digital certificate and the asymmetric fog node private key to the fog node;
the CA center is further used for publishing a pre-generated center public key;
the vehicle is used for determining whether the central public key can decrypt the fog node digital certificate, and if so, acquiring a fog node public key in the decrypted fog node digital certificate; decrypting the signed first receipt information by using the fog node public key;
the fog node is used for determining whether the central public key can decrypt the vehicle digital certificate, and if so, acquiring the vehicle public key in the decrypted vehicle digital certificate; decrypting the signed first service request using the vehicle public key;
the vehicle is further used for generating a symmetric root key according to a preset key rule when receiving a re-service request sent by the user; encrypting the symmetric root key and the re-service request by using the asymmetric vehicle private key to generate key negotiation information; sending the key negotiation information to the fog node; when encrypted receipt information sent by the fog node is received, decrypting the encrypted receipt information by using the symmetric root key to obtain the decrypted receipt information;
the fog node is further configured to decrypt the key agreement information by using the vehicle public key when receiving the key agreement information of the vehicle, and obtain the symmetric root key and the re-service request; generating re-receipt information corresponding to the re-service request; encrypting the receipt information again by using the symmetric root key; and sending the encrypted receipt information to the vehicle.
2. The communication system of claim 1,
the vehicle is further used for determining whether the encrypted receipt information is received again within a preset time limit, if so, when a subsequent service request sent by the user is received, the subsequent service request is encrypted by using the symmetric root key, new communication information is generated, and the new communication information is sent to the fog node; otherwise, when the subsequent service request is received, generating a new symmetric root key according to the key rule, encrypting the new symmetric root key and the subsequent service request by using the asymmetric vehicle private key to generate new communication information, and sending the new communication information to the fog node so that the fog node sends corresponding subsequent receipt information according to the new communication information.
3. The communication system of claim 2,
the fog node is further configured to preset a service user list, and record the vehicle digital certificate, the vehicle public key, the last service time of the vehicle, the symmetric root key, and the time limit of the symmetric root key in the service user list; when the new communication information is received, performing:
s0: determining whether a symmetric root key corresponding to the vehicle exists in the service user list, if so, performing S1, otherwise, performing S3;
s1: determining whether the symmetric root key is valid according to the last service time and the time limit, if so, executing S2, otherwise, executing S3;
s2: decrypting the new communication information by using the symmetric root key, and updating the last service time in the service user list;
s3: and decrypting the new communication information by using the vehicle public key, and deleting the symmetric root key and the time limit of the symmetric root key in the service user list.
4. The communication system according to any of claims 2 to 3,
the CA center is further used for publishing a certificate revocation list generated in advance;
the fog node is further configured to, when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, determine whether the vehicle digital certificate is on the certificate revocation list, and if so, cancel the communication this time, otherwise, execute the first service request after verifying the vehicle digital certificate and the signature.
5. A communication method based on the communication system of any one of claims 1 to 4, comprising:
each vehicle in at least one vehicle signs the first service request by using a pre-acquired asymmetric vehicle private key when receiving the first service request sent by a user, and sends a pre-acquired vehicle digital certificate and the signed first service request to a mist giving node; when a fog node digital certificate and signed first receipt information sent by the fog node are received, verifying the fog node digital certificate and the signed first receipt information; when the verification is passed, acquiring the decrypted first receipt information;
each of the at least one fog node verifies the vehicle digital certificate and the signed first service request when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, generates the first receipt information when the verification is passed, signs the first receipt information by using a pre-obtained asymmetric fog node private key, and sends the pre-obtained fog node digital certificate and the signed first receipt information to the vehicle.
6. The communication system of claim 5,
prior to said signing said first service request with said pre-obtained asymmetric vehicle private key, further comprising:
the vehicle sends a vehicle certificate application carrying vehicle identity information to a CA center in advance, and receives a vehicle digital certificate and an asymmetric vehicle private key sent by the CA center;
before the signing the first receipt information by using the pre-acquired asymmetric fog node private key, further comprising:
the fog node sends a fog node certificate application carrying fog node identity information to the CA center in advance, and receives a fog node digital certificate and an asymmetric fog node private key sent by the CA center;
when the CA center receives a vehicle certificate application carrying vehicle identity information sent by the vehicle, the CA center generates the vehicle digital certificate and the asymmetric vehicle private key by using the vehicle identity information according to a preset encryption rule, and sends the vehicle digital certificate and the asymmetric vehicle private key to the vehicle; and when a fog node certificate application carrying fog node identity information sent by the fog node is received, generating the fog node digital certificate and the asymmetric fog node private key by using the fog node identity information according to the encryption rule, and sending the fog node digital certificate and the asymmetric fog node private key to the fog node.
7. The communication system of claim 6,
prior to said sending said vehicle digital certificate and said asymmetric vehicle private key to said vehicle, further comprising:
the CA center publishes a pre-generated certificate revocation list;
and when receiving the vehicle digital certificate and the signed first service request sent by the vehicle, the fog node determines whether the vehicle digital certificate is in the certificate revocation list, if so, cancels the communication, and otherwise, executes the first service request after verifying the vehicle digital certificate and the signature.
CN201810408721.4A 2018-05-02 2018-05-02 Communication system and communication method thereof Active CN108600240B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201810408721.4A CN108600240B (en) 2018-05-02 2018-05-02 Communication system and communication method thereof

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201810408721.4A CN108600240B (en) 2018-05-02 2018-05-02 Communication system and communication method thereof

Publications (2)

Publication Number Publication Date
CN108600240A CN108600240A (en) 2018-09-28
CN108600240B true CN108600240B (en) 2020-11-10

Family

ID=63619508

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201810408721.4A Active CN108600240B (en) 2018-05-02 2018-05-02 Communication system and communication method thereof

Country Status (1)

Country Link
CN (1) CN108600240B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10869190B2 (en) * 2018-07-13 2020-12-15 Micron Technology, Inc. Secure vehicular services communication
CN109474577A (en) * 2018-10-17 2019-03-15 太原市高远时代科技有限公司 A kind of Internet of Things network edge O&M equipment with safety permission function
CN110430063B (en) * 2019-07-26 2020-05-19 绍兴文理学院 Mist computing architecture-based anonymous identity authentication method for heterogeneous sensor network nodes

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102075522B (en) * 2010-12-22 2012-07-04 北京航空航天大学 Secure certification and transaction method with combination of digital certificate and one-time password
AU2013243768B2 (en) * 2012-04-01 2017-12-21 Payfone, Inc. Secure authentication in a multi-party system
CN103684768A (en) * 2012-09-10 2014-03-26 中国银联股份有限公司 POS system and method for bidirectional authentication in POS system
CN103312691A (en) * 2013-04-19 2013-09-18 无锡成电科大科技发展有限公司 Method and system for authenticating and accessing cloud platform
US10931456B2 (en) * 2014-06-26 2021-02-23 Comcast Cable Communications, Llc Secure router authentication
CN104811941B (en) * 2015-04-30 2018-09-11 福建星网锐捷网络有限公司 Offline secure virtual machine management method and device
US20170048308A1 (en) * 2015-08-13 2017-02-16 Saad Bin Qaisar System and Apparatus for Network Conscious Edge to Cloud Sensing, Analytics, Actuation and Virtualization
EP3291504B1 (en) * 2016-08-30 2020-03-11 Wacom Co., Ltd. Authentication and secure transmission of data between signature devices and host computers using transport layer security
CN107071033A (en) * 2017-04-20 2017-08-18 济南浪潮高新科技投资发展有限公司 A kind of car networking deployment system calculated based on mist
CN107679847B (en) * 2017-09-07 2021-05-11 广东工业大学 Mobile transaction privacy protection method based on near field communication bidirectional identity authentication

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
车载自组网Sybil攻击检测方案研究综述;李春彦，王良民;《计算机科学》;20141115;全文 *

Also Published As

Publication number Publication date
CN108600240A (en) 2018-09-28

Similar Documents

Publication Publication Date Title
CN107919956B (en) End-to-end safety guarantee method in cloud environment facing to Internet of things
CN109412816B (en) Anonymous communication system and method for vehicle-mounted network based on ring signature
CN109788482B (en) Method and system for anonymous authentication of messages between vehicles in Internet of vehicles environment
CN104683112B (en) A kind of car car safety communicating method that certification is assisted based on RSU
CN109005542B (en) 5G Internet of vehicles rapid message authentication method based on reputation system
CN109687976A (en) Fleet's establishment and management method and system based on block chain and PKI authentication mechanism
Priyadharshini et al. A secure hash message authentication code to avoid certificate revocation list checking in vehicular adhoc networks
CN113596778A (en) Vehicle networking node anonymous authentication method based on block chain
CN109362062B (en) ID-based group signature-based VANETs anonymous authentication system and method
WO2009079916A1 (en) A method for generating a key pair and transmitting a public key or a certificate application document securely
CN109561383A (en) A kind of location privacy protection method based on dynamic assumed name exchange area
CN112073964B (en) Unmanned aerial vehicle and base station communication identity authentication method based on elliptic curve encryption
CN108600240B (en) Communication system and communication method thereof
CN108683506B (en) Digital certificate application method, system, fog node and certificate authority
Ahamed et al. EMBA: An efficient anonymous mutual and batch authentication schemes for vanets
CN108933665B (en) Method for applying lightweight V2I group communication authentication protocol in VANETs
Amin et al. An enhanced anonymity resilience security protocol for vehicular ad-hoc network with scyther simulation
CN112437108A (en) Decentralized identity authentication device and method for privacy protection of Internet of vehicles
CN112243234A (en) Identity-based privacy security protection method for Internet of vehicles
CN111092732A (en) Anonymous authentication method based on certificateless group signature in Internet of vehicles
CN114726583B (en) Trusted hardware cross-chain transaction privacy protection system and method based on blockchain distributed identification
CN114884698A (en) Kerberos and IBC security domain cross-domain authentication method based on alliance chain
CN114302390B (en) Intra-group authentication key negotiation method in vehicle-mounted ad hoc network
CN117278330B (en) Lightweight networking and secure communication method for electric power Internet of things equipment network
Sun et al. Ridra: A rigorous decentralized randomized authentication in VANETs

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
TA01 Transfer of patent application right
TA01 Transfer of patent application right

Effective date of registration: 20201015

Address after: 250100 Ji'nan high tech Zone, Shandong, No. 1036 wave road

Applicant after: INSPUR GROUP Co.,Ltd.

Address before: 250100, Ji'nan province high tech Zone, Sun Village Branch Road, No. 2877, building, floor, building, on the first floor

Applicant before: JINAN INSPUR HI-TECH INVESTMENT AND DEVELOPMENT Co.,Ltd.

GR01 Patent grant
GR01 Patent grant