KR20130139725A - Method and apparatus for distributing certificate revocation list for vehicle communication - Google Patents

Abstract

The present invention relates to a certificate cancellation list distribution method for car communication using a location based service in a network for the car communication. The present invention is different from the existing method which distributes certificate cancellation list from all authentication agencies when a certificate cancellation list is occurred. The present invention confirms a current location using an LBS server when a distribution request for the certificate cancellation list distribution is received, distributes the certificate cancellation list through a neighboring road device controlling a specific car based on the confirmed location information, and effectively control the occurrence of unnecessary loads in the authentication agencies. [Reference numerals] (302) CRL interface block;(304) Vehicle location query block;(306) Neighboring device searching block;(308) CRL transmission block;(AA) 202/1 or 202/2

Description

Method and device for distributing certificate revocation list for vehicle communication {METHOD AND APPARATUS FOR DISTRIBUTING CERTIFICATE REVOCATION LIST FOR VEHICLE COMMUNICATION}

The present invention relates to a technique for distributing a certificate revocation list (CRL) for vehicle communication, and more particularly, to revoke a certificate using a location based service (LBS) provided by a network for vehicle communication. A method and apparatus for distributing a certificate revocation list for vehicle communication suitable for distributing a list.

As is well known, in current vehicle communication technology, it is common practice to distribute CRLs to all Certificate Authorities (CAs) in light of vehicle movements when vehicle certificates are revoked.

FIG. 1 is a system diagram of a distribution system for explaining a process of distributing a CRL for vehicle communication according to a conventional method, and as an example, illustrates how a CRL is distributed when a certificate of a vehicle 1 (101/1) is revoked.

First, when the certificate of the vehicle 1 101/1 is revoked, the local certification authority 1 (CA1) 103/1 recognizes this, generates an associated CRL 105, and transmits it to the root certification authority 104. do.

Accordingly, the root certification authority 104 sends a CRL to all the local certification authorities (CA1, CA2, CA3, ,,,) (103/1, 103/2, 103/3, ,,,) connected to its subordinates. Distribute.

All regional certification bodies receiving this CRL will be issued to all vehicles in their jurisdiction via Road Side Unit (RSU) 102/1, 102/2, ... Distribute

As a result, all the vehicles that received the CRL (101/1, 102/2, ,,,) interpreted the distributed certificate revocation list 105, indicating that the certificate of the vehicle 1 (101/1) was revoked. When all the surrounding vehicles are required to be secured, the vehicle 1 101/1 may be excluded from the communication, thereby enhancing the security of the vehicle communication.

Republic of Korea Patent Publication No. 2009-0025550 (published: 2009. 03. 11)

In the conventional CRL distribution method, since the certification authorities have a hierarchical structure, the structure of the CRL is complicated and is distributed in a large area.

Therefore, in the conventional CRL distribution method, when the number of certificate revocations of vehicles increases, the number of CRLs to be distributed increases exponentially, causing problems in scalability, and it is very inefficient because all local certification authorities must distribute CRLs. there is a problem.

This adds to the computational load that all certification authorities have to deal with, and this fundamental reason is that the vehicle must move not just in the jurisdiction of the initially registered certification authority, so the network must distribute CRLs to all regional certification authorities. Because.

According to an aspect of the present invention, there is provided a process of querying an LBS server for a current location of a specific vehicle when a distribution request for a certificate revocation list (CRL) of a specific vehicle is received, and from the LBS server. And extracting a road peripheral device for jurising the specific vehicle based on the current location information received when the location information is received, and distributing the certificate revocation list to the extracted road peripheral device. Provides a method for distributing certificate revocation lists.

According to another aspect, the present invention provides a CRL interface block for receiving a distribution request for a certificate revocation list (CRL) of a specific vehicle, a vehicle location query block for querying an LBS server for a current location of the specific vehicle, and the LBS. When the current location information of the specific vehicle is received from the server, a peripheral device search block for extracting a road peripheral device for jurising the specific vehicle based on the received current location information, and revokes the certificate with the extracted road peripheral device. Provided is a certificate revocation list distribution device for vehicle communication including a CRL transmission block for delivering the list.

According to the present invention, when a distribution request for a certificate revocation list of a specific vehicle is received, the current position of the specific vehicle is queried through the LBS server to confirm the current position, and based on the confirmed position information, the vicinity of a road that controls a specific vehicle By distributing certificate revocation lists through devices only, it is possible to provide scalability for CRL distribution and effectively suppress unnecessary loads on certification authorities due to CRL distribution at all certification authorities.

1 is a schematic diagram of a CRL distribution system for explaining a process of distributing a certificate revocation list for vehicle communication according to a conventional method;
2 is a schematic diagram of a CRL distribution system for explaining a process of distributing a certificate revocation list by using a location-based service of a vehicle communication network according to an embodiment of the present invention;
3 is a block diagram of a certificate revocation list distribution device for vehicle communication according to the present invention;
4 is a flowchart illustrating a main process of distributing a certificate revocation list by using a location-based service of a vehicle communication network according to an embodiment of the present invention;
5 is a schematic diagram of a CRL distribution system for explaining a process of distributing a certificate revocation list by using a location-based service provided by various networks according to another embodiment of the present invention;
6 is a block diagram of the LBS system shown in FIG.

The technical gist of the present invention is that, unlike the above-described conventional method of distributing certificate revocation lists by all certification authorities when a certificate revocation list is generated, an LBS server is received when a distribution request for a certificate revocation list of a specific vehicle is received. By querying the current location of a specific vehicle to confirm the current location, and to distribute the certificate revocation list only through the road peripherals jurisdiction of the specific vehicle based on the confirmed location information, the present invention through the technical means Problems in the scheme can be effectively improved.

Here, the current location of the specific vehicle is, for example, location-based services of the vehicle communication network, location-based services of the Wi-Fi network, location-based services of the WiBro network, location-based services of the mobile communication network, location-based services of the RFID / USN sensor network It may be collected through at least one of the location-based services.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

In the following description of the present invention, detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may be changed according to intention or custom of a user, an operator, or the like. Therefore, the definition should be based on the technical idea described throughout this specification.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

2 is a schematic diagram of a CRL distribution system for explaining a process of distributing a certificate revocation list using a location-based service of a vehicle communication network according to an embodiment of the present invention.

Referring to FIG. 2, the CRL distribution system includes a plurality of CAs 202/1 and 202/2, a root CA 208, a CRL distribution device 210, and an LBS server 212. ), A Gateway Vehicle Location Center (GVLC) 214, a Serving Vehicle Location Center (SVLC) 216/1, 216/2, and the like.

In Fig. 2, as an example, two regional certification authorities 202/1, 202/2 and two serving vehicle location centers 216/1, 216/2 are shown, which is intended to enhance the convenience and understanding of the description. However, the present invention is not limited thereto, but the local certification authority and the serving vehicle location center may each include, for example, tens or hundreds.

First, the certificate of the vehicle 1 206, which was in the area 204/1 under the jurisdiction of the regional certification authority 1 (202/1), is revoked for convenience of explanation and the understanding, and then the vehicle 1 206 is Assume that it is a case where the certification authority 2 (202/2) has moved to the area 204/2 having jurisdiction.

That is, when the certificate of the vehicle 1 206 is revoked, the regional certification authority 1 202/1 generates the relevant certificate revocation list CRL which records that the certificate of the vehicle 1 206 has been revoked, thereby generating a higher root certificate authority ( 208) to distribute the CRL. In addition, in this case, each regional certification authority, each of the area that the jurisdiction through the road peripheral device (for example, the base station, etc.) when the certificate revocation list (CRL) is transmitted from the CRL distribution device 210 through the process described below It can provide functions such as distributing CRLs to all vehicles in the vehicle.

In addition, the root certification authority 208 may provide a function for receiving a request for CRL distribution from all the lower regional certification authorities under its control and delivering it to the CRL distribution device 210. When the CRL distribution is requested from 202/1), the CRL is delivered to the CRL distribution device 210 to request distribution of the CRL.

Next, the CRL distribution device 210 means a certificate revocation list distribution device for vehicle communication according to the present invention, and when a CRL distribution is requested from the root certification authority 208, the CRL distribution device 210 distributes the CRL. The service is provided. More specific functions will be described in detail with reference to FIG. In FIG. 2, reference numeral 210a is a function for showing that the CRL distribution device 210 searches for a road peripheral device located in the closest position from the vehicle whose certificate is revoked through a geo-coding algorithm. It is a semantic representation of a block.

3 is a block diagram of a certificate revocation list distribution device for vehicle communication according to the present invention, which includes a CRL interface block 302, a vehicle location query block 304, a peripheral device search block 306, a CRL transmission block 308, and the like. It may include.

Referring to FIG. 3, the CRL interface block 302 may provide a function such as receiving a CRL distribution request from the root authority 208 and forwarding it to the vehicle location query block 304.

Next, the vehicle position query block 304 queries the current position of the vehicle whose certificate has been revoked, and more specifically, the current position information of the vehicle required to extract the road peripherals that govern the area to which the vehicle belongs. A query message may be generated and transmitted to the LBS server 212 of FIG. 2.

Referring again to FIG. 2, the LBS server 212 refers to a location based service system having, for example, an LBS platform and a database (DB) for location based services, and includes a gateway vehicle location center (GVLC) 214 and the like. Vehicle location analysis module for analyzing the vehicle location information collected through the vehicle location information database for storing the location information of each analyzed vehicle as a coordinate value, query message from the vehicle location query block 304 in the CRL distribution device 210 ( When a message for querying the current location of a specific vehicle is received, the vehicle location information database is searched to extract current location information of the corresponding vehicle, and the extracted current location information is searched for the peripheral device search block (in the CRL distribution device 210). A vehicle location extraction block or the like that provides functionality such as delivery to 306.

To this end, each serving vehicle location center (SVLC) 216/1, 216/2 is provided for each preset area 204/1, 204/2, and each of these serving vehicle location centers 216 /. 1, 216/2 provides a function of continuously collecting locations of vehicles in an area under its control at a predetermined period and transmitting them to the gateway vehicle location center 214.

In this case, each vehicle must be equipped with a communication module and an LBS client function of a related network supported by the vehicle in order to apply the LBS, and the LBS client is provided with a base station area (or cell) provided by the network side. Area), and the vehicle itself can be determined using the GPS mounted on the device.

Referring back to FIG. 3, when the peripheral device search block 306 receives the current location information (coordinate value information) of the vehicle from the LBS server 212, the road that manages the vehicle based on the received current location information. A peripheral device may be extracted, for example, a geo-coding algorithm may be used to extract a road peripheral device located closest to the vehicle.

The CRL sending block 308 may search for a local certification authority (CA ID) that manages the road peripherals extracted through the mapping table (not shown), and transmit a CRL to the found local certification authority. Can be provided. For example, when vehicle 1 206 whose certificate has been revoked has moved from area 204/1 to area 204/2, the CRL sending block 308 is responsible for CRL 2 202/2 to CRL. Will be selected as the transfer destination.

Therefore, Local Authority 2 (202/2) will distribute CRLs to vehicles in the area 204/2 through all road peripherals (e.g., base stations, etc.) under their jurisdiction. All vehicles in the area 204/2 will know through the interpretation of the received CRL that the certificate of vehicle 1 206 has been revoked.

Next, a detailed description will be given of a series of processes for distributing a related CRL using a location-based service when a certificate of any vehicle is revoked using the certificate revocation list distribution device of the present embodiment having the above-described configuration. do.

4 is a flowchart illustrating a main process of distributing a certificate revocation list by using a location-based service of a vehicle communication network according to an embodiment of the present invention.

First, the certificate of the vehicle 1 206 in the area 204/1 under the jurisdiction of the regional certification authority 1 (202/1) is revoked for the convenience of explanation and the understanding, and then the vehicle 1 206 is Assume that it is the case that the local certification authority 2 (202/2) has moved to the area 204/2 having jurisdiction.

Referring to FIG. 4, when a certificate revocation occurs for the vehicle 1 206 (step 402), the local certification authority 1 (202/1) records the relevant certificate revocation list that records that the certificate of the vehicle 1 206 has been revoked ( Create a CRL and request distribution of the CRL to the upper root certification authority 208 (step 404).

In response, the root certification authority 208 forwards the CRL requested for distribution from the regional certification authority 1 (202/1) to the CRL distribution device 210 and requests distribution of the CRL (step 406).

Next, the vehicle location query block 304 in the CRL distribution device 210 queries the LBSL server 212 for the current position of the vehicle 1 206 whose certificate has been revoked, that is, the area to which the vehicle 1 206 currently belongs. Query the current location information of vehicle 1 206 required to extract road peripherals governing 204/2 (step 408).

In response, the LBS server 212 extracts current location information (coordinate value information) of the vehicle 1 206 through a search of a location information database (not shown), and uses the extracted current location information as a CRL distribution device ( The current location information is collected and analyzed through a plurality of serving vehicle location centers (SVLCs) and gateway vehicle location centers (GVLCs) interlocked with each other, and stored in a vehicle location information database. Information.

The peripheral device search block 306 in the CRL distribution device 210 controls the vehicle 1 206 based on the current position information (coordinate value information) of the vehicle 1 206 received from the LBS server 212. A road peripheral device is extracted, eg, a geo-coding algorithm, to extract the road peripheral device at the nearest position from vehicle 1 206 (step 410).

Subsequently, the CRL transmission block 308 searches for the local certification authority 2 (202/2) that manages the road peripherals extracted through the mapping table, and transmits the CRL to the discovered regional certification authority 2 (202/2). (Step 412).

As a result, Local Authority 2 (202/2) distributes the CRL to vehicles in the area 204/2 through all road peripherals (e.g., base stations, etc.) under its control (step 414).

5 is a schematic diagram of a CRL distribution system for explaining a process of distributing a certificate revocation list by using a location-based service provided by various networks according to another embodiment of the present invention.

Referring to FIG. 5, unlike the CRL distribution system illustrated in FIG. 2, in which the CRL distribution system collects vehicle location information in real time through the vehicle communication network, the CRL distribution system, a Wi-Fi network, Collecting real-time location information of vehicles through at least one of WiBro (Wibro or WiMax) network, mobile communication network (e.g., 2G, 2.5G, 3G, 4G, etc.), RFID / USN sensor network in real time Difference in points

As in the present embodiment, when all the location-based services provided by the various networks are utilized, even if the communication methods supported by the vehicles are different from each other, vehicle location information collection is easy.

For example, one vehicle may collect location information of the vehicle using only location-based services provided by the vehicle communication network, whereas another vehicle may use location-based services of the vehicle communication network and location-based services of the mobile communication network. It can be used at the same time to collect the location information of each vehicle through both networks.

In this case, even though the collected two pieces of location information are different in the vehicle's location expression method (dimension), range, error, etc., combining the two pieces of location information may find a more accurate current location of the vehicle. That is, according to the actual communication environment provided by the vehicle, when the location-based services provided by various networks are used in combination, the location of the vehicle can be collected more accurately.

Referring to FIG. 5, the local certification authority 1 502 is the local certification authority 202/1 or 202/2 of FIG. 2, the root certification authority 508 is the root certification authority 208 of FIG. 2, and the CRL. The distribution device 510 is the CRL distribution device 210 of FIG. 2, the gateway vehicle location center 514 is the gateway vehicle location center 214 of FIG. 2, and the serving vehicle location center 516 is the service vehicle of FIG. 2. Since the members perform substantially the same functions respectively corresponding to the location centers 216/1 or 216/2, the description of these components is omitted here in order to avoid unnecessary overlapping materials for the sake of brevity of the specification. do.

Here, the vehicle 506 is a Wi-Fi communication module 522/1, a WiBro communication module 522/2, a mobile communication communication module 522/3, and an RFID / USN sensor communication module 522/4 as an LBS client. At least one or more of these can be mounted.

To this end, the CRL distribution system is a Wi-Fi network (520/1) and gateway terminal location center (GMLC) 518/1, WiBro network (520/2) and gateway terminal location center (GMLC) that can correspond to each communication module (518/2), mobile communication network (520/3) and gateway terminal location center (GMLC) 518/3, RFID / USN sensor network (520/4) and gateway terminal location center (GMLC) (518/4) ) May be included.

For example, when the vehicle uses the location-based service provided by the vehicle communication network, the vehicle's location information is collected at predetermined intervals through interworking between the serving vehicle location center 516 and the gateway vehicle location center 514. Is transmitted to the LBS system 512, and when the vehicle uses the location-based service provided by the Wi-Fi network, the location information of the vehicle is transmitted through the Wi-Fi network 520/1 and the gateway terminal location center 518/1. The vehicle is collected at predetermined intervals and transferred to the LBS system 512. When the vehicle uses location-based services provided by the WiBro network, the vehicle location information is transmitted to the WiBro network 520/2 and the gateway terminal location center 518. / 2) is collected in a predetermined period and delivered to the LBS system 512, the vehicle is provided by the mobile communication network When the location-based service is used, the vehicle's location information is collected at predetermined intervals through the mobile communication network (520/3) and the gateway terminal location center (518/3) and transmitted to the LBS system 512, When the vehicle uses location-based services provided by the RFID / USN sensor network, the vehicle's location information is set at predetermined intervals through the RFID / USN sensor network 520/4 and the gateway terminal location center 518/4. Will be collected and delivered to the LBS system 512.

That is, the LBS system 512 collects current location information of each vehicle through at least one of the gateway vehicle location center 514 and the four gateway terminal location centers (GMLC) 518/1 to 518/4. For example, the LBS system 512 may have a configuration as shown in FIG. 6.

FIG. 6 is a block diagram of the LBS system shown in FIG. 5, wherein the location communication server 602/1 for vehicle communication, the location data server 604/1 for vehicle communication, the location server 602/2 for Wi-Fi, and location for Wi-Fi are shown in FIG. Data server 604/2, WiBro location server 602/3, WiBro location data server 604/3, vehicle location information collection and analysis block 606, vehicle location information database (DB) 608 And a vehicle location extraction block 610. Of course, although not shown in FIG. 6, the LBS system may further include a location server and location data server for mobile communication, a location server for RFID / USB and a location data server.

Referring to FIG. 6, each location server 602/1 to 602/3 acquires a location from a GMLC installed at an edge of each network and responds to a location information request, for example, location information management, individual or collective location. It can perform location-oriented processing functions corresponding to location-based functions such as information processing, movement route tracking, etc., and each location data server 604/1 to 604/3 is responsible for efficient location information processing of a moving vehicle. It may provide a function such as continuously tracking the location of the moving or moving vehicle at a predetermined predetermined period.

Here, the reason for having a location server and a location data server separately for each network is that the LBS platform structure of each network is the same or similar to each other, but the location expression method (dimension), range, error, etc. of the vehicle is different for each network. This is because the processing procedure is different.

Next, the vehicle location information collection and analysis block 606 may provide functions such as periodically collecting and analyzing the location of the vehicle from each network, storing the analyzed location information in the vehicle location information database 608, and the like. For this purpose, a precise analysis algorithm capable of combining (mapping) and accurately analyzing location information of vehicles collected from a plurality of networks may be installed.

Then, the vehicle location extraction block 610 searches the vehicle location information database 608 to receive the current location of the vehicle 1 506 when a message is received from the CRL distribution device 510 to query the current location of the vehicle 1 506. The location information may be extracted, and the extracted current location information may be delivered to the CRL distribution device 510.

Therefore, the CRL distribution system having the above-described configuration, for example, assumes that the certificate of the vehicle 1 506 is revoked and does not leave the area 504 after it is revoked. 502 and CRL distribution device 510 is requested to distribute the CRL through the route via the root authority 508, the CRL distribution device 510 to the LBS system 512, the current position of vehicle 1 (506) Query

In response, the LBS system 512 extracts the current position information (coordinate value information) of the vehicle 1 506 through the search of the vehicle position information database, and transfers the extracted current position information to the CRL distribution device 510. The current location information may be, for example, information collected through at least one or more of a vehicle communication network, a Wi-Fi network, a WiBro network, a mobile communication network, and an RFID / USN sensor network and stored in the vehicle location information database.

Accordingly, the CRL distribution device 510 extracts, for example, a road peripheral device that governs vehicle 1 206 based on the current position information (coordinate value information) of vehicle 1 506 received from LBS system 512. Geo-Coding algorithm extracts the road peripheral device located closest to vehicle 1 506 and maps the local certification authority 1 502 that governs the extracted road peripheral device through mapping with the mapping table. After searching, the CRL is transmitted to the local certification authority 1 (502).

As a result, regional certification authority 1 (502) will distribute CRLs to vehicles in the area 504 through all road peripherals (e.g., base stations, etc.) under its control, thereby providing the area 504. All vehicles in c) will know that the certificate of vehicle 1 506 has been revoked through interpretation of the received CRL.

In the above description, the present invention has been described with reference to preferred embodiments, but the present invention is not necessarily limited thereto, and a person having ordinary skill in the art to which the present invention pertains can make various changes without departing from the technical spirit of the present invention. It will be readily appreciated that branch substitutions, modifications and variations are possible.

202/1, 202/2, 502: local certification body
208, 508: Root Certification Authorities
210, 510: CRL Distribution Device
212: LBS Server
214, 514: Gateway Vehicle Location Center
216, 516: Serving Vehicle Location Center
302: CRL interface block
304: vehicle position query block
306: Peripheral device navigation block
308: CRL sending block

Claims (13)

Querying the LBS server for the current location of the particular vehicle when a distribution request for a certificate revocation list (CRL) of the specific vehicle is received;
Extracting a road peripheral device that controls the specific vehicle based on the current location information received when the current location information of the specific vehicle is received from the LBS server;
Distributing the certificate revocation list to the extracted road peripherals
Vehicle communication certificate revocation list distribution method comprising a.
The method of claim 1,
The certificate revocation list,
Collected through a local certification authority that has jurisdiction over the specific vehicle and requested to be distributed through a root certification authority
How to distribute certificate revocation lists for vehicle communications.
The method of claim 1,
The current location information,
Coordinate value of the specific vehicle
How to distribute certificate revocation lists for vehicle communications.
The method of claim 1,
The extraction process,
Geo-Coding algorithm searches for roadside devices located closest to the specific vehicle.
How to distribute certificate revocation lists for vehicle communications.
The method of claim 1,
The current location of the specific vehicle,
Collected via one or more of a vehicle communication network, a Wi-Fi network, a WiBro network, a mobile communication network, and an RFID / USN sensor network.
How to distribute certificate revocation lists for vehicle communications.
The method of claim 5, wherein
The current location of the specific vehicle,
Collected through a plurality of serving vehicle location centers (SVLCs) and gateway vehicle location centers (GVLCs) linked to each other.
How to distribute certificate revocation lists for vehicle communications.
The method of claim 1,
The certificate revocation list,
Is transmitted to the extracted road peripheral device through a local certification authority for jurisdiction of the extracted road peripheral device
How to distribute certificate revocation lists for vehicle communications.
A CRL interface block that receives a distribution request for a certificate revocation list (CRL) for a particular vehicle;
A vehicle location query block for querying an LBS server for a current location of the specific vehicle;
A peripheral device search block for extracting a road peripheral device for jurising the specific vehicle based on the received current location information, when the current location information of the specific vehicle is received from the LBS server;
CRL transmission block for delivering the certificate revocation list to the extracted road peripherals
Vehicle communication certificate revocation list distribution device comprising a.
The method of claim 8,
The CRL interface block,
Receiving a request for distribution of the certificate revocation list from a root certification authority that collects the certificate revocation list from a local certification authority for jurisdiction of the specific vehicle.
Certificate revocation list distribution device for vehicle communication.
The method of claim 8,
The peripheral device search block,
Geo-Coding algorithm searches for roadside devices located closest to the specific vehicle.
Certificate revocation list distribution device for vehicle communication.
The method of claim 8,
The current location of the specific vehicle,
Collected via one or more of a vehicle communication network, a Wi-Fi network, a WiBro network, a mobile communication network, and an RFID / USN sensor network.
Certificate revocation list distribution device for vehicle communication.
The method of claim 11,
The current location of the specific vehicle,
Collected through a plurality of serving vehicle location centers (SVLCs) and gateway vehicle location centers (GVLCs) linked to each other.
Certificate revocation list distribution device for vehicle communication.
The method of claim 8,
The certificate revocation list,
Is transmitted to the extracted road peripheral device through a local certification authority for jurisdiction of the extracted road peripheral device
Certificate revocation list distribution device for vehicle communication.

Images