KR102385994B1 - Apparatus and method for managing vehicle in attention-area - Google Patents

Abstract

A caution zone vehicle management apparatus and method are disclosed. A caution zone vehicle management apparatus according to an embodiment of the present invention includes one or more processors and an execution memory storing at least one or more programs executed by the one or more processors, wherein the at least one or more programs are stored in a preset caution zone. A security conformity test is requested from an entering vehicle, and if the security conformance test is successful, a vehicle certificate and a vehicle operation policy related to vehicle operation in the caution zone are issued to the vehicle, and the vehicle operates according to the vehicle operation policy Drive in the above caution area.

Description

Apparatus and method for managing vehicles in caution areas {APPARATUS AND METHOD FOR MANAGING VEHICLE IN ATTENTION-AREA}

The present invention relates to vehicle management technology, and more particularly, to vehicle communication message security processing technology.

The vehicle transportation system is an intelligent transportation system that scientifically and automates the operation and management of the transportation system and improves the efficiency and safety of transportation by developing/utilizing advanced electronic, control and communication technology and transportation information in transportation facilities. It is evolving in the form of an Information Transportation System (ITS). In particular, by using vehicle communication technology (communication between vehicles and communication between vehicles and roadside devices), the effect of improving vehicle driving safety, providing convenient services to drivers, and ultimately reducing traffic accidents and increasing traffic efficiency progress towards obtaining it. In particular, traffic efficiency improvement and accident prevention using vehicle-to-vehicle communication are mentioned.

The vehicle communication described above is a vehicle and a vehicle (V2V, Vehicle-to-Vehicle), a vehicle and an infrastructure (V2I, Vehicle-to-Infrastructure), a vehicle and a pedestrian (V2P, Vehicle-to-Pedestrian), a vehicle and a smartphone device ( V2D, Vehicle-to-Device), etc. This can be collectively referred to as V2X. By using this V2X communication technology, the vehicle receives information about road conditions, and research and commercialization of traffic efficiency improvement and traffic accident prevention using this are actively in progress. In particular, as an element of autonomous driving technology, research is being actively conducted on a technology for autonomously driving a vehicle without a driver's manipulation by using information acquired using vehicle communication technology.

Conventionally, a method of determining information of a vehicle sensor for autonomous driving technology, and the like are provided, and a communication security processing method between vehicles and the like are provided. However, there is a disadvantage in that the vehicle control and authentication method using the vehicle-to-vehicle communication message in the traffic caution zone (eg, the child protection area in front of the school) is not provided.

On the other hand, Korean Patent Application Laid-Open No. 10-2019-0048085 “A device and method for controlling an autonomous driving vehicle using inter-vehicle communication” propagates state information to nearby vehicles when the vehicle becomes uncontrollable while driving, and Disclosed are a device and method for controlling an autonomous driving vehicle using inter-vehicle communication, in which a vehicle receiving out-of-control status information from a vehicle warns a driver of the risk of an accident.

An object of the present invention is to provide an authentication method for a vehicle entering a traffic caution zone and a driving restriction requirement to be applied to a vehicle in the traffic caution zone.

Another object of the present invention is to increase the reliability of vehicles passing through a caution zone when communicating between vehicles.

A caution zone vehicle management apparatus according to an embodiment of the present invention for achieving the above object includes one or more processors and an execution memory for storing at least one or more programs executed by the one or more processors, the at least one or more The program requests a security conformance test from a vehicle entering a preset caution zone, and if the security compliance test is successful, issues a vehicle certificate and a vehicle operation policy for vehicle operation in the caution zone to the vehicle, and the vehicle may drive in the caution zone according to the vehicle operation policy.

In this case, the security suitability check may check at least one of whether the secure booting of the vehicle is normal, whether the vehicle firewall is driven, and whether the software of the electronic control devices of the vehicle is the latest version.

In this case, the at least one program registers the vehicle ID of the vehicle in the database when the result of the security conformance test is successful, and deletes the vehicle ID from the database when the vehicle leaves the caution zone. can

In this case, the at least one program may request the issuance of the vehicle certificate from an external certification authority and, when the vehicle leaves the caution zone, may request the external certification authority to cancel the vehicle certificate.

In this case, when the result of the security conformity test is a failure, the at least one program transmits an entry prohibition message for the caution zone to the vehicle, and the vehicle outputs an entry prohibition message for the caution zone to the driver can do.

In addition, in the caution zone vehicle management method according to an embodiment of the present invention for achieving the above object, in the caution zone vehicle management method of the caution zone vehicle management device, a security suitability test is performed on a vehicle entering the preset caution zone. requesting; If the security conformance test is successful, issuing a vehicle certificate and a vehicle operation policy related to vehicle operation in the caution area to the vehicle, and the vehicle operating the caution area according to the vehicle operation policy. .

In this case, the security suitability check may check at least one of whether the secure booting of the vehicle is normal, whether the vehicle firewall is driven, and whether the software of the electronic control devices of the vehicle is the latest version.

In this case, the requesting of the security conformity test may include registering the vehicle ID of the vehicle in a database when the result of the security conformance test is successful, and the driving of the caution area may include causing the vehicle to leave the caution area. In this case, the vehicle ID may be deleted from the database.

In this case, the step of issuing the vehicle operation policy requests the issuance of the vehicle certificate from an external certification authority, and the step of driving the caution zone is when the vehicle leaves the caution zone, the external certification authority is You can request the revocation of the vehicle certificate.

In this case, in the step of requesting the security conformity test, if the result of the security conformance test is a failure, the entry prohibition message for the caution area is transmitted to the vehicle, and the vehicle receives an entry prohibition message for the caution area It can be printed to the driver.

The present invention can provide authentication for vehicles entering the caution zone and driving restriction requirements and policies to be applied to vehicles in the caution zone.

In addition, the present invention can increase the reliability of the communicating vehicles when the vehicles passing through the caution zone perform vehicle-to-vehicle communication.

1 is a diagram illustrating an environment in which a vehicle travels according to an embodiment of the present invention.
2 is a block diagram illustrating an apparatus for managing vehicles in a caution zone according to an embodiment of the present invention.
3 is a view showing a caution zone vehicle certificate according to an embodiment of the present invention.
4 is a sequence diagram illustrating a method for managing vehicles in a caution zone according to an embodiment of the present invention.
FIG. 5 is a detailed operation flowchart illustrating an example of the security conformance test step shown in FIG. 4 .
6 is a diagram illustrating a computer system according to an embodiment of the present invention.

The present invention will be described in detail with reference to the accompanying drawings as follows. Here, repeated descriptions, well-known functions that may unnecessarily obscure the gist of the present invention, and detailed descriptions of configurations will be omitted. The embodiments of the present invention are provided in order to more completely explain the present invention to those of ordinary skill in the art. Accordingly, the shapes and sizes of elements in the drawings may be exaggerated for clearer description.

Throughout the specification, when a part "includes" a certain element, it means that other elements may be further included, rather than excluding other elements, unless otherwise stated.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating an environment in which a vehicle travels according to an embodiment of the present invention.

Referring to FIG. 1 , it can be seen that an environment in which a vehicle travels according to an embodiment of the present invention is divided into a caution zone and a general zone. A general area means an area where vehicles can drive arbitrarily within the statutory speed limit (one-way: 60Km/h, two-lane or more: 80Km/h, etc.) and there are no special restrictions on parking/stopping. . The caution zone may mean a zone in which a specific driving restriction condition is set. For example, a caution zone may include a child protection zone in front of a school, a no parking zone, a speed limit zone, and the like. That is, the caution zone may mean an area to which driving restrictions such as the maximum vehicle speed limit in the child protection zone in front of the school and the prohibition of parking/stop in the traffic congestion area are applied. In addition, a specific zone is arbitrarily designated by policy in the caution zone, and only authorized vehicles are allowed to enter the specific zone.

2 is a block diagram illustrating an apparatus for managing vehicles in a caution zone according to an embodiment of the present invention.

Referring to FIG. 2 , the caution zone vehicle management apparatus 100 according to an embodiment of the present invention includes a communication unit 110 , a control unit 120 , a caution zone vehicle management unit 130 , and a caution zone vehicle operation policy management unit 140 . and a display unit 150 .

The communication unit 110 may receive a warning zone entry and exit message from the vehicle, transmit a security conformity verification request message to the vehicle, and transmit a warning zone vehicle operation policy.

The control unit 120 transmits the information received from the communication unit 110 to the caution area vehicle management unit 130, the caution area vehicle operation policy management unit 140 and the display unit 150, and the caution area vehicle management unit 130 and the caution Information received from the regional vehicle operation policy management unit 140 may be transmitted through the communication unit 110 .

In this case, the controller 120 may control the operations of the communication unit 110 , the caution zone vehicle management unit 130 , the caution zone vehicle operation policy management unit 140 , and the display unit 150 .

The caution zone vehicle management unit 130 may store and manage a list of vehicles passing in the caution zone.

The caution zone vehicle operation policy management unit 140 may store and manage the vehicle operation policy designated in the caution zone.

The control unit 120 may request security conformity verification from the vehicle requesting entry into the caution zone.

In this case, when the security conformity result is normal, the controller 120 may register the vehicle ID of the vehicle in the caution zone vehicle DB.

In this case, the controller 120 may request a certificate authority (CA) server 20 to generate a vehicle certificate for the vehicle.

In this case, the certification authority (Certificate Authority, CA) may correspond to the vehicle certificate issuing authority.

The controller 120 may transmit the received caution zone driving vehicle certificate and caution zone vehicle operation policy in the corresponding caution zone to the vehicle terminal device 10 (S290).

The control unit 120 may request the certification authority server 20 to discard the caution area operation vehicle certificate in order to discard the caution area operation vehicle certificate of the vehicle leaving the caution area.

In this case, the controller 120 may delete the vehicle ID of the vehicle from the caution zone DB.

The display unit 150 may display information received from the control unit 120 .

3 is a view showing a caution zone vehicle certificate according to an embodiment of the present invention.

Referring to FIG. 3 , a vehicle certificate for driving in a cautionary area according to an embodiment of the present invention may include a vehicle ID, a public key of the vehicle, a valid period of the certificate, information for approval of driving in a cautionary area, and a signature of a CA.

The caution zone vehicle management device according to an embodiment of the present invention can issue a caution zone operation vehicle certificate including caution zone operation approval information only to vehicles that can operate according to the security suitability verification result for vehicles operating in the caution zone. there is.

Accordingly, only vehicles that have passed the security conformity check can pass through the caution zone, and the caution zone vehicle management device can control access to vehicles entering the caution zone.

4 is a sequence diagram illustrating a method for managing vehicles in a caution zone according to an embodiment of the present invention. FIG. 5 is a detailed operation flowchart illustrating an example of the security conformance test step shown in FIG. 4 .

Referring to FIG. 4 , the vehicle terminal device 10 installed in the vehicle may notify the caution zone vehicle management device 100 that the vehicle enters the caution zone ( S210 ).

The caution zone vehicle management apparatus 100 may request security conformity verification from the vehicle requesting entry into the caution zone (S220).

The vehicle terminal device 10 may perform a security compatibility test according to a preset security compatibility verification procedure (S230).

Referring to FIG. 5 , in step S230 , the vehicle terminal device 10 may check a secure boot log ( S231 ).

That is, in step S231, secure booting may be performed when the vehicle is initially started.

In this case, in step S231, the vehicle can be started only when the pre-stored integrity verification result value is compared with the integrity verification result value at the time of booting.

In this case, the secure boot log may correspond to data recorded during secure booting.

At this time, in step S231, when the vehicle to enter the caution zone is started, it may be checked whether the vehicle is booted in a safe state.

In this case, in step S231, if the secure booting procedure is normal, it may be determined that the security suitability check is successful (S235).

In this case, in step S231, if the secure booting procedure is abnormal, it may be determined that the security suitability check has failed (S235).

In addition, in step S230, it may be checked whether the vehicle firewall is driven (S232).

That is, in step S232, it is possible to check whether the vehicle firewall is installed and driven in the vehicle intended to enter the caution zone.

At this time, in step S231, if the vehicle firewall is installed or in operation, it may be determined that the security conformity check is successful (S235).

In this case, in step S232 , if the vehicle firewall is not installed or is not being driven, it may be determined that the security suitability check has failed ( S235 ).

In addition, in step S230, the vehicle software update version may be checked (S233).

That is, in step S233, it may be checked whether ECUs (Electronic Control Units, Electronic Control Units) installed in the vehicle intended to enter the caution zone are loaded with the latest version of software.

In this case, step S233 detects forgery of the ECU, and it can be confirmed whether the vehicle is equipped with an ECU that is not forged.

At this time, in step S233, if the vehicle software is the latest version, it may be determined that the security conformity check is successful (S234).

At this time, in step S233, if the vehicle software is not the latest version, it may be determined that the security conformity check has failed (S235).

Referring back to FIG. 4 , the vehicle terminal device 10 may transmit the security suitability verification result to the caution area vehicle management device 100 ( S240 ).

At this time, when the security conformity result is normal, the caution zone vehicle management apparatus 100 may register the vehicle ID of the vehicle in the caution zone vehicle DB ( S250 ).

At this time, in step S250 , when the security suitability result is abnormal, the caution zone vehicle management apparatus 100 may transmit a caution zone entry prohibition message to the vehicle terminal device 10 .

In this case, in step S250 , when the vehicle terminal device 10 receives the caution zone entry prohibition message, it may notify the driver that the vehicle cannot enter the caution zone.

In this case, in step S250 , when the vehicle is an autonomous vehicle, the vehicle terminal device 10 may operate the vehicle's braking system when the vehicle attempts to enter the caution zone.

At this time, the caution zone vehicle management apparatus 100 may request a certificate authority (CA) server 20 to generate a vehicle certificate for the vehicle ( S260 ).

In this case, the certification authority (Certificate Authority, CA) may correspond to the vehicle certificate issuing authority.

The certification authority server 20 may calculate the CA's signature for the vehicle and generate a caution zone driving vehicle certificate for the vehicle (S270).

At this time, the certification authority server 20 may issue a caution zone operation vehicle certificate to the caution zone vehicle management device 100 (S280).

The caution zone vehicle management device 100 may transmit the received caution zone operation vehicle certificate and caution zone vehicle operation policy in the caution zone to the vehicle terminal device 10 (S290).

The vehicle terminal device 10 may store the driving vehicle certificate in the caution zone in a safe storage space from external hacking, and operate the vehicle according to the caution zone vehicle operation policy (S300).

When the vehicle leaves the caution zone, the vehicle terminal device 10 may notify the caution zone vehicle management apparatus 100 of the departure from the caution zone (S310).

In this case, the vehicle terminal device 10 may delete the caution zone operation vehicle certificate from the vehicle's storage space and operate the vehicle without applying the caution zone vehicle operation policy in the general zone (S320).

The caution zone vehicle management apparatus 100 may request the certification authority server 20 to discard the caution zone operation vehicle certificate in order to discard the caution zone operation vehicle certificate of the vehicle leaving the caution zone (S330).

At this time, the caution zone vehicle management apparatus 100 may delete the vehicle ID of the vehicle from the caution zone DB ( S340 ).

The certification authority server 20 may discard the caution zone driving vehicle certificate for the vehicle that has departed from the caution zone (S350).

6 is a diagram illustrating a computer system according to an embodiment of the present invention.

Referring to FIG. 6 , the caution zone vehicle management apparatus 100 according to an embodiment of the present invention may be implemented in a computer system 1100 such as a computer-readable recording medium. As shown in FIG. 6 , the computer system 1100 includes one or more processors 1110 , a memory 1130 , a user interface input device 1140 , and a user interface output device 1150 that communicate with each other via a bus 1120 . and storage 1160 . In addition, the computer system 1100 may further include a network interface 1170 coupled to the network 1180 . The processor 1110 may be a central processing unit or a semiconductor device that executes processing instructions stored in the memory 1130 or the storage 1160 . The memory 1130 and the storage 1160 may be various types of volatile or non-volatile storage media. For example, the memory may include a ROM 1131 or a RAM 1132 .

A caution zone vehicle management apparatus according to an embodiment of the present invention includes one or more processors 1110; and an execution memory 1130 for storing at least one or more programs executed by the one or more processors 1110, wherein the at least one program requests a security conformity test from a vehicle entering a preset caution zone, If the security conformance test is successful, a vehicle certificate and a vehicle operation policy related to vehicle operation in the caution area may be issued to the vehicle, and the vehicle may drive the caution area according to the vehicle operation policy.

In this case, the security suitability check may check at least one of whether the secure booting of the vehicle is normal, whether the vehicle firewall is driven, and whether the software of the electronic control devices of the vehicle is the latest version.

In this case, the at least one program registers the vehicle ID of the vehicle in the database when the result of the security conformance test is successful, and deletes the vehicle ID from the database when the vehicle leaves the caution zone. can

In this case, the at least one program may request the issuance of the vehicle certificate from an external certification authority and, when the vehicle leaves the caution zone, may request the external certification authority to cancel the vehicle certificate.

In this case, when the result of the security conformity test is a failure, the at least one program transmits an entry prohibition message for the caution zone to the vehicle, and the vehicle outputs an entry prohibition message for the caution zone to the driver can do.

As described above, in the apparatus and method for managing a vehicle in a caution zone according to an embodiment of the present invention, the configuration and method of the embodiments described above are not limitedly applicable, but various modifications may be made to the embodiments. All or part of each embodiment may be selectively combined and configured.

100: attention zone vehicle management device
110: communication unit 120: control unit
130: caution area vehicle management unit 140: caution area vehicle operation policy management unit
150: display unit
1100: computer system 1110: processor
1120: bus 1130: memory
1131: rom 1132: ram
1140: user interface input device
1150: user interface output device
1160: storage 1170: network interface
1180: network

Claims (10)

one or more processors; and
an execution memory for storing at least one or more programs executed by the one or more processors;
including,
the at least one program
Requesting a security conformity test for vehicles entering the pre-set caution zone;
If the security conformity test is successful, issue a vehicle certificate issued by an external certification authority to the vehicle and a vehicle operation policy related to vehicle operation in the caution area;
The vehicle operates the caution zone according to the vehicle operation policy,
If the result of the security conformance test is successful, registering the vehicle ID of the vehicle in a database,
When the vehicle leaves the caution zone, the vehicle ID is deleted from the database, and the external certification authority is requested to revoke the vehicle certificate;
The vehicle certificate
Includes vehicle ID, vehicle public key, certificate validity period, caution area operation approval information, and the signature of the external certification authority,
The vehicle management device for a caution zone, characterized in that the vehicle certificate is verified by the external certification authority verifying the signature of the external certification authority. The method according to claim 1,
The security conformance test is
A caution zone vehicle management apparatus, characterized in that it is checked whether the secure booting of the vehicle is normal, whether the vehicle firewall is driven, and whether the software of the electronic control devices of the vehicle is the latest version. delete delete 3. The method according to claim 2,
the at least one program
When the result of the security conformity test is a failure, a caution area vehicle management, characterized in that the vehicle transmits an entry prohibition message for the caution area to the vehicle, and the vehicle outputs an entry prohibition message for the caution area to the driver Device. In the caution area vehicle management method of the caution area vehicle management device,
requesting a security conformance test to a vehicle entering a preset caution zone;
if the security conformance test is successful, issuing a vehicle certificate issued from an external certification authority and a vehicle operation policy for vehicle operation in the caution zone to the vehicle; and
driving the vehicle in the caution zone according to the vehicle operation policy;
including,
The step of requesting the security conformance test is
If the result of the security conformance test is successful, registering the vehicle ID of the vehicle in a database,
The steps of driving the above caution area are
When the vehicle leaves the caution zone, the vehicle ID is deleted from the database, and an external certification authority is requested to revoke the vehicle certificate;
The vehicle certificate
Includes vehicle ID, vehicle public key, certificate validity period, caution area operation approval information, and the signature of the external certification authority,
A caution zone vehicle management method, characterized in that the vehicle certificate is verified by the external certification authority verifying the signature of the external certification authority. 7. The method of claim 6,
The security conformance test is
A method for managing a vehicle in a caution zone, characterized in that it checks at least one of whether the secure booting of the vehicle is normal, whether the vehicle firewall is driven, and whether the software of the electronic control devices of the vehicle is the latest version. delete delete 8. The method of claim 7,
The step of requesting the security conformance test is
When the result of the security conformity test is a failure, a caution area vehicle management, characterized in that the vehicle transmits an entry prohibition message for the caution area to the vehicle, and the vehicle outputs an entry prohibition message for the caution area to the driver Way.

Images