CN111684760B - 用于管理数字证书的密码方法和系统 - Google Patents

用于管理数字证书的密码方法和系统 Download PDF

Info

Publication number
CN111684760B
CN111684760B CN201880075909.XA CN201880075909A CN111684760B CN 111684760 B CN111684760 B CN 111684760B CN 201880075909 A CN201880075909 A CN 201880075909A CN 111684760 B CN111684760 B CN 111684760B
Authority
CN
China
Prior art keywords
digital certificate
key
certificate
encryption
pca
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201880075909.XA
Other languages
English (en)
Chinese (zh)
Other versions
CN111684760A (zh
Inventor
小马科斯·A·西姆普利西
爱德华多·卢斯·科米尼特
哈什·库瓦德帕蒂尔
杰斐逊·E·里卡蒂尼费尔南德兹
马科斯·维尼修斯·M·西尔瓦
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Universidade de Sao Paulo USP
LG Electronics Inc
Original Assignee
Universidade de Sao Paulo USP
LG Electronics Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Universidade de Sao Paulo USP, LG Electronics Inc filed Critical Universidade de Sao Paulo USP
Publication of CN111684760A publication Critical patent/CN111684760A/zh
Application granted granted Critical
Publication of CN111684760B publication Critical patent/CN111684760B/zh
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
    • H04L9/3268Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823Network architectures or network communication protocols for network security for authentication of entities using certificates
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/64Protecting data integrity, e.g. using checksums, certificates or signatures
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/12Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/14Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/30Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/041Key generation or derivation
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06Authentication
    • H04W12/069Authentication using certificates or pre-shared keys
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/30Services specially adapted for particular environments, situations or purposes
    • H04W4/40Services specially adapted for particular environments, situations or purposes for vehicles, e.g. vehicle-to-pedestrians [V2P]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/42Anonymization, e.g. involving pseudonyms

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • General Health & Medical Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Bioethics (AREA)
  • General Physics & Mathematics (AREA)
  • Traffic Control Systems (AREA)
  • Storage Device Security (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
CN201880075909.XA 2017-10-22 2018-10-19 用于管理数字证书的密码方法和系统 Active CN111684760B (zh)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US201762575514P 2017-10-22 2017-10-22
US62/575,514 2017-10-22
PCT/US2018/056784 WO2019079770A1 (en) 2017-10-22 2018-10-19 METHODS AND CRYPTOGRAPHIC SYSTEMS FOR MANAGING DIGITAL CERTIFICATES

Publications (2)

Publication Number Publication Date
CN111684760A CN111684760A (zh) 2020-09-18
CN111684760B true CN111684760B (zh) 2024-03-08

Family

ID=66171261

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201880075909.XA Active CN111684760B (zh) 2017-10-22 2018-10-19 用于管理数字证书的密码方法和系统

Country Status (5)

Country Link
US (5) US10536279B2 (enExample)
EP (2) EP3701669B1 (enExample)
JP (2) JP7136903B2 (enExample)
CN (1) CN111684760B (enExample)
WO (1) WO2019079770A1 (enExample)

Families Citing this family (45)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11153077B2 (en) * 2018-12-14 2021-10-19 Westinghouse Air Brake Technologies Corporation Secure vehicle to vehicle communication
US10536279B2 (en) * 2017-10-22 2020-01-14 Lg Electronics, Inc. Cryptographic methods and systems for managing digital certificates
WO2019124953A1 (en) * 2017-12-20 2019-06-27 Lg Electronics Inc. Cryptographic methods and systems for authentication in connected vehicle systems and for other uses
WO2019152994A1 (en) * 2018-02-05 2019-08-08 Lg Electronics, Inc. Cryptographic methods and systems using blinded activation codes for digital certificate revocation
EP3841703A4 (en) * 2018-08-21 2022-05-18 LG Electronics Inc. SYSTEMS AND METHODS FOR A BUTTERFLY KEY EXCHANGE PROGRAM
DE102018215141A1 (de) * 2018-09-06 2020-03-12 Continental Teves Ag & Co. Ohg Verfahren zur Verbesserung des Nutzungsgrades einer Fahrzeug-zu-X Kommunikationsvorrichtung sowie Fahrzeug-zu-X Kommunikationsvorrichtung
US20200153926A1 (en) * 2018-11-09 2020-05-14 Toyota Motor North America, Inc. Scalable vehicle data compression systems and methods
US11032370B2 (en) * 2018-11-14 2021-06-08 Toyota Jidosha Kabushiki Kaisha Wireless communications in a vehicular macro cloud
US10661795B1 (en) * 2018-12-20 2020-05-26 Verizon Patent And Licensing Inc. Collision detection platform
US11323275B2 (en) 2019-03-25 2022-05-03 Micron Technology, Inc. Verification of identity using a secret key
US11361660B2 (en) * 2019-03-25 2022-06-14 Micron Technology, Inc. Verifying identity of an emergency vehicle during operation
US11233650B2 (en) 2019-03-25 2022-01-25 Micron Technology, Inc. Verifying identity of a vehicle entering a trust zone
US11218330B2 (en) 2019-03-25 2022-01-04 Micron Technology, Inc. Generating an identity for a computing device using a physical unclonable function
EP3994842B1 (en) 2019-04-11 2025-10-22 LG Electronics Inc. Systems and methods for countering co-existence attack
US11343106B2 (en) 2019-04-11 2022-05-24 Lg Electronics, Inc. Systems and methods for accelerated certificate provisioning
CN111917685B (zh) 2019-05-07 2022-05-31 华为云计算技术有限公司 一种申请数字证书的方法
WO2020229586A1 (en) * 2019-05-14 2020-11-19 Volkswagen Aktiengesellschaft Implementation of a butterfly key expansion scheme
CN110365486B (zh) * 2019-06-28 2022-08-16 东软集团股份有限公司 一种证书申请方法、装置及设备
CN114585876B (zh) * 2019-08-31 2024-10-22 上海丰豹商务咨询有限公司 一种自动驾驶车辆的分布式驾驶系统和方法
CN113079013B (zh) * 2019-12-18 2023-04-18 华为技术有限公司 通信方法、终端设备、路侧单元、服务器、系统及介质
CN111181729B (zh) * 2019-12-26 2022-11-01 晟安信息技术有限公司 显式证书密钥扩展方法和装置
KR20210087710A (ko) * 2020-01-03 2021-07-13 삼성전자주식회사 운송 장치, 통신 시스템 및 이를 이용한 통신 방법
WO2021146945A1 (en) * 2020-01-21 2021-07-29 Qualcomm Incorporated Methods for protecting sensitive information in cellular vehicle-to-everything (c-v2x) messages
WO2021153809A1 (ko) * 2020-01-29 2021-08-05 엘지전자 주식회사 무선 통신 시스템에서 v2x 통신을 보호하기 위한 방법
WO2021172611A1 (ko) * 2020-02-25 2021-09-02 엘지전자 주식회사 무선 통신 시스템에서 v2x 통신을 보호하기 위한 방법
CN111245619B (zh) * 2020-03-27 2023-03-24 上海汽车集团股份有限公司 车联网的密钥派生方法、装置及系统、车端、中间层
KR102281949B1 (ko) * 2020-10-29 2021-07-26 펜타시큐리티시스템 주식회사 익명 인증서 관리 방법 및 장치
CN112738761B (zh) * 2020-12-25 2023-03-14 高新兴智联科技有限公司 一种汽车电子标识与v2x认证结合方法
CN113038417B (zh) * 2021-02-01 2022-07-26 北京汽车研究总院有限公司 车联网中v2x匿名证书的管理方法与装置、存储介质、设备
CN113301523B (zh) * 2021-04-14 2022-09-16 江铃汽车股份有限公司 一种v2x车载终端数字证书的申请、更新方法及系统
CN113766452B (zh) * 2021-06-29 2023-10-27 国家计算机网络与信息安全管理中心 一种v2x通信系统、通信密钥分发方法与隐式认证方法
CN113221073B (zh) * 2021-07-08 2021-09-14 飞天诚信科技股份有限公司 一种增加piv应用支持证书数量的实现方法及装置
CN113852459B (zh) * 2021-08-13 2024-03-19 中央财经大学 密钥协商方法、设备及计算机可读存储介质
WO2023037552A1 (ja) * 2021-09-13 2023-03-16 日本電気株式会社 監視支援装置、システム及び方法、並びに、コンピュータ可読媒体
CN114679280A (zh) * 2022-03-15 2022-06-28 北京宏思电子技术有限责任公司 一种基于rsa的联合签名生成方法及装置
CN115190450B (zh) * 2022-06-28 2023-11-28 中汽数据(天津)有限公司 基于v2x证书建立tls通道的车联网通信方法和系统
EP4304221A1 (en) * 2022-07-07 2024-01-10 Thales Dis France Sas System and method for using a subscriber identity module as a pseudonym certficate authority (pca)
CN115567197B (zh) * 2022-08-29 2024-10-01 北京车网科技发展有限公司 数字证书申请方法、装置、设备及计算机存储介质
TWI859857B (zh) * 2023-05-15 2024-10-21 中華電信股份有限公司 基於金鑰擴展的安全憑證管理系統及其方法
CN116744288B (zh) * 2023-07-25 2025-08-19 杭州电子科技大学 一种用于智能网联汽车v2x通信系统的安全握手方法
US12418521B2 (en) * 2023-09-08 2025-09-16 Bank Of America Corporation Systems and methods for distributed agent-based monitoring of cryptographic key stores
US20250125950A1 (en) * 2023-10-12 2025-04-17 Digicert, Inc. Using a single AES key to encrypt PKCS #7 files
TWI883892B (zh) * 2024-04-02 2025-05-11 財團法人中華顧問工程司 車聯網批量驗章方法
CN119420488B (zh) * 2025-01-07 2025-03-18 贵州大学 一种基于物联网数据传输的多方密钥认证方法
CN120201426A (zh) * 2025-05-26 2025-06-24 中汽数据(天津)有限公司 一种安全证书签发方法、装置、设备、介质及产品

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101183938A (zh) * 2007-10-22 2008-05-21 华中科技大学 一种无线网络安全传输方法、系统及设备
CN106453330A (zh) * 2016-10-18 2017-02-22 深圳市金立通信设备有限公司 一种身份认证的方法和系统

Family Cites Families (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5432852A (en) 1993-09-29 1995-07-11 Leighton; Frank T. Large provably fast and secure digital signature schemes based on secure hash functions
IL145631A0 (en) * 1999-03-31 2002-06-30 British Telecomm Server computer for guaranteeing files integrity
JP2001052062A (ja) 1999-08-06 2001-02-23 Toshiba Corp 申請手続処理システム及び記憶媒体
US20020029248A1 (en) 2000-03-17 2002-03-07 Cook Jon L. Method and systems for providing a secure electronic mailbox
EP2276196B1 (en) 2000-06-09 2014-09-03 Certicom Corp. Method for the Application of Implicit Signature Schemes
US7240366B2 (en) * 2002-05-17 2007-07-03 Microsoft Corporation End-to-end authentication of session initiation protocol messages using certificates
JP2004206435A (ja) 2002-12-25 2004-07-22 Victor Co Of Japan Ltd ライセンス管理方法、およびライセンス管理システム
JP2008532389A (ja) * 2005-02-25 2008-08-14 クゥアルコム・インコーポレイテッド 認証のための小型の公開鍵を用いたデジタル署名
US7725614B2 (en) 2006-08-08 2010-05-25 Sandisk Corporation Portable mass storage device with virtual machine activation
WO2008085204A2 (en) 2006-12-29 2008-07-17 Prodea Systems, Inc. Demarcation between application service provider and user in multi-services gateway device at user premises
WO2009001317A1 (en) 2007-06-27 2008-12-31 Koninklijke Philips Electronics N.V. Secure authentication of electronic prescriptions
US8578338B2 (en) * 2008-06-02 2013-11-05 Igt Game production and regulatory approval systems
EP2369811B1 (en) 2008-11-04 2016-03-23 SecureKey Technologies Inc. System and methods for online authentication
US9137017B2 (en) * 2010-05-28 2015-09-15 Red Hat, Inc. Key recovery mechanism
US20120233457A1 (en) * 2011-03-08 2012-09-13 Certicom Corp. Issuing implicit certificates
US8756432B1 (en) * 2012-05-22 2014-06-17 Symantec Corporation Systems and methods for detecting malicious digitally-signed applications
US10025920B2 (en) * 2012-06-07 2018-07-17 Early Warning Services, Llc Enterprise triggered 2CHK association
DE102014204044A1 (de) 2014-03-05 2015-09-10 Robert Bosch Gmbh Verfahren zum Widerrufen einer Gruppe von Zertifikaten
JP6293716B2 (ja) 2015-11-10 2018-03-14 株式会社アメニディ 匿名通信システムおよび該通信システムに加入するための方法
US10595200B2 (en) 2015-12-17 2020-03-17 Onboard Security, Inc. Secure vehicle communication system
US11025607B2 (en) * 2016-12-15 2021-06-01 At&T Mobility Ii Llc V2X certificate management
US10536279B2 (en) * 2017-10-22 2020-01-14 Lg Electronics, Inc. Cryptographic methods and systems for managing digital certificates
US11361660B2 (en) * 2019-03-25 2022-06-14 Micron Technology, Inc. Verifying identity of an emergency vehicle during operation
EP3994842B1 (en) * 2019-04-11 2025-10-22 LG Electronics Inc. Systems and methods for countering co-existence attack

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101183938A (zh) * 2007-10-22 2008-05-21 华中科技大学 一种无线网络安全传输方法、系统及设备
CN106453330A (zh) * 2016-10-18 2017-02-22 深圳市金立通信设备有限公司 一种身份认证的方法和系统

Non-Patent Citations (4)

* Cited by examiner, † Cited by third party
Title
A security credential management system for V2V communications;William Whyte;《2013 IEEE Vehicular Networking Conference》;20140213;第10、13、16、26、29页 *
A security credential management system for V2V communications;William Whyte;《CAMP Vehicle Safety Communications》;20131231;摘要,正文第I-IV节,图1-3 *
William Whyte.A security credential management system for V2V communications.《2013 IEEE Vehicular Networking Conference》.2014,摘要,正文第I-IV节,图1-3. *
William Whyte.A security credential management system for V2V communications.《CAMP Vehicle Safety Communications》.2013,第10、13、16、26、29页. *

Also Published As

Publication number Publication date
US12375300B2 (en) 2025-07-29
EP4254248A3 (en) 2023-11-15
US20190123915A1 (en) 2019-04-25
US20200119930A1 (en) 2020-04-16
JP7136903B2 (ja) 2022-09-13
US20210250184A1 (en) 2021-08-12
US12143514B2 (en) 2024-11-12
JP2022125256A (ja) 2022-08-26
EP3701669B1 (en) 2023-09-06
JP2021500832A (ja) 2021-01-07
US10536279B2 (en) 2020-01-14
EP3701669A4 (en) 2021-07-28
US11930123B2 (en) 2024-03-12
EP3701669A1 (en) 2020-09-02
US20240250836A1 (en) 2024-07-25
JP7568678B2 (ja) 2024-10-16
WO2019079770A1 (en) 2019-04-25
US11018877B2 (en) 2021-05-25
CN111684760A (zh) 2020-09-18
EP4254248A2 (en) 2023-10-04
US20240283663A1 (en) 2024-08-22

Similar Documents

Publication Publication Date Title
CN111684760B (zh) 用于管理数字证书的密码方法和系统
CN111149324B (zh) 用于管理具有链接值的数字证书的密码学方法和系统
CN111684764B (zh) 使用盲激活码进行数字证书撤销的密码方法和系统
US11895250B2 (en) Cryptographic methods and systems using activation codes for digital certificate revocation
US12284293B2 (en) Balancing privacy and efficiency for revocation in vehicular public key infrastructures

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant