KR20170134804A - Method of secure communications in vehicular cloud - Google Patents

Abstract

Disclosed is a method for distributing a group key to form a vehicle cloud. The method for distributing the group key comprises: a step of enabling a server to receive a signature for a vehicle cloud request message from a vehicle cloud requesting vehicle among a plurality of registered vehicles; a step of enabling the server to determine vehicles constituting the vehicle cloud based on mobility information and resource information of each of the vehicles; a step of enabling the server to generate a group public key, a group secret key, and a group personal key of each of the vehicles constituting the vehicle cloud; a step of enabling the server to encode information for the vehicles constituting the vehicle cloud as a public key of the vehicle cloud requesting vehicle, and to transmit first encoded vehicle information to the vehicle cloud requesting vehicle; a step of enabling the server to encode the group public key, the group secret key, and the group personal key of the vehicle cloud requesting vehicle as the public key of the vehicle cloud requesting vehicle, and to transmit the same to the vehicle cloud requesting vehicle; and a step of enabling the server to encode the group public key, the group secrete key, and the group personal key of each of the plurality of vehicles constituting the vehicle cloud as the public key of each of the vehicles constituting the vehicle cloud, and to transmit the same to each of the vehicles constituting the vehicle cloud. The present invention can reduce a time required for vehicle authentication.

Description

{METHOD OF SECURE COMMUNICATIONS IN VEHICULAR CLOUD}

The embodiment of the present invention relates to a method of distributing a group key for forming a vehicle cloud, in particular, a distribution of a group key used for vehicle authentication or the like is performed in a server, thereby improving the efficiency of an authentication procedure and eliminating a security threat To a group key distribution method for forming a vehicle cloud.

Today's automobiles are not just about driving, they also offer convenience to drivers by leveraging a variety of information and communication technologies, such as telematics systems. In addition, due to the development of information and communication technologies, the development of connected cars supporting various types of communication-based services is rapidly progressing. These connected cars can be used for communication between vehicles and vehicles (V2V) or communication between vehicles and roadside units (V2V) via communication technologies such as cellular (eg 4G / LTE) and wireless access in vehicle environment (WAVE) RSU (Vehicle to Infrastructure: V2I).

On the other hand, in urban areas, a large number of vehicles are often densely populated for the same reasons as traffic congestion. In such a situation, it is possible to use rich computing and communication resources of other vehicles through cooperative communication between vehicles, and this technique is called Vehicular Cloud. In other words, a vehicle cloud is a technology that performs a common job or service by grouping vehicles having high computing ability and communication function into a cloud form.

However, since vehicles have a high mobility change and basically use broadcasting based wireless communication, there is a need for a security technique for forming a vehicle cloud and for secure communication between vehicles.

In the conventional distributed vehicle cloud structure, the vehicle certificate is transmitted to the message to be transmitted every time the vehicle is authenticated. Since the certificate of the vehicle must be transmitted each time, the size of the data to be transmitted becomes large, and therefore, it takes much time to authenticate the vehicle. In addition, in order to encrypt messages transmitted and received in the vehicle cloud, vehicles in the vehicle cloud are subject to generate secret keys and distribute them to vehicles in the vehicle cloud. However, in order to securely distribute the secret key to the vehicles in the vehicle cloud, it is necessary to encrypt and transmit the secret key with the public key of each vehicle. Therefore, in order to distribute the secret key, it is necessary to have the public key of all the vehicles. If the members of the vehicle in the vehicle cloud are changed, there is a considerable difficulty in generating and managing secret keys since the secret keys must be regenerated and distributed.

In the existing distributed vehicle cloud structure, a public key infrastructure (PKI) is used to secure communication between vehicles. The public key infrastructure assumes a trusted Certificate Authority (CA) and is responsible for issuing a certificate of the vehicle. The following process is a process in which the vehicle A in the vehicle cloud transmits a message to the vehicle B in the public key infrastructure. The vehicle receives a certificate from the certification authority, and carries out the vehicle certification by transmitting the certificate. And it satisfies the integrity of the message transmitted and received between vehicles through digital signature. The process will be described in detail as follows.

1) The vehicle A receives the certificate of the vehicle A and the private key of the vehicle A from the certification authority. The certificate of the vehicle A includes the certificate ID, the public key of the vehicle A, the validity period, and the digital signature of the certification authority.

2) Vehicle A generates a digital signature of the message to be transmitted using the private key of vehicle A. Then, the vehicle A transmits a message, a digital signature, and the certificate of the vehicle A to the vehicle B.

3) The vehicle B verifies the digital signature of the certification authority stored in the certificate of the vehicle A using the public key of the certification authority. The validity of the certificate of the vehicle A can be verified and the digital signature of the vehicle A is verified by using the public key of the vehicle A acquired from the certificate of the vehicle A. [

Therefore, the vehicle B can verify whether the received message is transmitted from the vehicle A (vehicle authentication), and verify whether the received message is falsified / altered (satisfies message integrity).

On the other hand, in order to satisfy the message confidentiality between vehicle A and vehicle B in the vehicle cloud, encryption of the message is required. For this, a symmetric key encryption algorithm such as AES (Advanced Encryption Standard) is used. The secret key used in the symmetric key encryption algorithm is encrypted by the public key encryption algorithm and transmitted to the vehicle in advance. However, in the distributed vehicle cloud structure, the vehicle in the vehicle cloud is the subject and is responsible for generating and distributing the vehicle cloud group secret key. In order to distribute the secret key, the public key of the vehicles in the vehicle cloud must be possessed, and encrypted with the public key of each vehicle must be transmitted. Therefore, there is considerable difficulty in the secret key distribution and management.

Accordingly, the present invention proposes a centralized vehicle cloud structure. The centralized vehicle cloud architecture has a centralized vehicle cloud controller, vehicle cloud controller enables vehicle cloud formation even from physically separated vehicles, and provides a secure communication method between vehicles. Specifically, the vehicle cloud controller distributes a group digital signature key for vehicle authentication in the vehicle cloud and distributes a group secret key for message encryption. Also, a pseudonym can be issued to ensure the anonymity of the vehicles. Through this, the vehicles in the vehicle cloud can perform the vehicle authentication through the group digital signature without the certificate transfer process for the vehicle authentication, and the time required for the vehicle authentication is reduced. Also, since the vehicle cloud controller is the main body and generates and distributes the group secret key for message encryption, the key management can be performed more efficiently than the existing distributed vehicle cloud structure. In other words, through the centralized vehicle cloud structure, the anonymity of the vehicle in the vehicle cloud can be guaranteed and the integrity and confidentiality of messages transmitted and received can be satisfied.

Korean Patent No. 1532024 Korean Patent No. 1400275

The technical problem to be solved by the present invention is to solve the security problems of the conventional distributed vehicle cloud structure, and the problems of the conventional cloud structure are as follows.

1) In a distributed vehicle cloud structure, a certificate must be transmitted to each message to be transmitted for vehicle authentication in the vehicle cloud. Therefore, it takes a lot of time to authenticate the vehicle. There is also a security threat in the process of delivering the certificate each time.

Accordingly, in the centralized vehicle cloud structure proposed by the present invention, the vehicle cloud controller is used to distribute the vehicle cloud group public key and the vehicle cloud private key. Thus, vehicles in the vehicle cloud can perform vehicle authentication through group digital signature techniques. Specifically, the vehicle to which the message is to be transmitted can transmit the message by digitally signing with the vehicle private key of the vehicle. The vehicle receiving the message can verify the digital signature with the vehicle cloud group public key to perform vehicle authentication. In addition, integrity of a message transmitted and received through digital signature can be satisfied.

2) In a distributed vehicle cloud structure, a certificate is transmitted for vehicle authentication in the vehicle cloud, which can not guarantee the anonymity of the vehicle. In the centralized vehicle cloud structure proposed by the present invention, the vehicle cloud controller issues a pseudonym to the vehicle and updates it periodically to ensure the anonymity of the vehicle.

3) In the distributed vehicle cloud structure, the vehicle becomes the subject and generates the vehicle cloud group secret key and distributes it to the vehicles in the vehicle cloud in order to encrypt the messages transmitted and received in the vehicle cloud. To this end, the secret key distribution vehicle must have all the public keys of the vehicles in the vehicle cloud, and must encrypt and transmit the public keys of each vehicle. If the secret key distribution vehicle leaves the vehicle cloud, other vehicles in the vehicle cloud must be responsible for key distribution. In such a distributed vehicle cloud structure, it is difficult to distribute and manage secret keys.

Accordingly, in the centralized vehicle cloud structure proposed by the present invention, the vehicle cloud controller becomes the main body to generate the secret key and distribute it to the vehicles in the vehicle cloud. The vehicle cloud controller has the public keys of the vehicles in the vehicle cloud and can efficiently perform the key distribution even in the high mobility of the vehicles in the vehicle cloud.

Thus, in the present invention, a centralized vehicle cloud structure is assumed, and a central vehicle cloud controller can form a vehicle cloud even with a remote vehicle. Further, it is possible to reduce the time taken to authenticate between vehicles in the vehicle cloud, and efficiently distribute the secret key required for message encryption.

A group key distribution method for forming a vehicle cloud according to an exemplary embodiment of the present invention includes receiving a signature for a vehicle cloud request message from a vehicle cloud requesting vehicle among a plurality of registered vehicles, Determining a vehicle to configure the vehicle cloud based on the mobility information and the resource information of each of the vehicles, the server generating a group public key, a group secret key, and a group private key of each vehicle constituting the vehicle cloud Encrypting the information about the vehicles that the server will configure the vehicle cloud with the public key of the vehicle cloud requesting vehicle and transmitting the encrypted first vehicle information to the vehicle cloud requesting vehicle, Public key, the group secret key, and the group private key of the vehicle cloud request vehicle Encrypting the group public key, the group secret key, and the group private key of each of the vehicles constituting the vehicle cloud with the public key of the vehicle requesting cloud, to the vehicle cloud request vehicle, Encrypting the public key of each of the vehicles constituting the cloud, and transmitting the encryption to each of the vehicles constituting the vehicle cloud.

According to the group key distribution method for forming the vehicle cloud according to the embodiment of the present invention, the vehicle cloud controller distributes the group public key and the group private key, thereby reducing the time required for the vehicle authentication. It is possible to eliminate a security threat that may occur in the Internet.

In addition, according to the group key distribution method for forming the vehicle cloud according to the embodiment of the present invention, anonymity of the vehicle can be guaranteed by giving a nickname to each vehicle and updating it periodically or non-periodically.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS In order to more fully understand the drawings recited in the detailed description of the present invention, a detailed description of each drawing is provided.
1 illustrates a vehicle cloud system in accordance with an embodiment of the present invention.
FIG. 2 is a flowchart illustrating a process in which one of the plurality of vehicles shown in FIG. 1 is issued a certificate.
3 is a flowchart illustrating a vehicle registration process of registering any one of the plurality of vehicles shown in FIG. 1 in a server.
FIG. 4 is a flowchart illustrating a process of distributing a group private key, a group public key, and a group private key among vehicles constituting a vehicle cloud among a plurality of vehicles shown in FIG.

It is to be understood that the specific structural or functional description of embodiments of the present invention disclosed herein is for illustrative purposes only and is not intended to limit the scope of the inventive concept But may be embodied in many different forms and is not limited to the embodiments set forth herein.

The embodiments according to the concept of the present invention can make various changes and can take various forms, so that the embodiments are illustrated in the drawings and described in detail herein. It is not intended to be exhaustive or to limit the invention to the particular forms disclosed, but on the contrary, is intended to cover all modifications, equivalents, or alternatives falling within the spirit and scope of the invention.

The terms first, second, etc. may be used to describe various elements, but the elements should not be limited by the terms. The terms may be named for the purpose of distinguishing one element from another, for example, without departing from the scope of the right according to the concept of the present invention, the first element may be referred to as a second element, The component may also be referred to as a first component.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between. Other expressions that describe the relationship between components, such as "between" and "between" or "neighboring to" and "directly adjacent to" should be interpreted as well.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In this specification, the terms "comprises" or "having" and the like are used to specify that there are features, numbers, steps, operations, elements, parts or combinations thereof described herein, But do not preclude the presence or addition of one or more other features, integers, steps, operations, components, parts, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the meaning of the context in the relevant art and, unless explicitly defined herein, are to be interpreted as ideal or overly formal Do not.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings attached hereto.

1 illustrates a vehicle cloud system in accordance with an embodiment of the present invention.

1, the vehicle cloud system 10 includes a plurality of vehicles V1 to V5, a plurality of road side units (RSUs), a server 100, and an authentication server 300. [

The authentication server 300 issues a certificate to each of the plurality of vehicles V1 to V5 as a server operated by a trusted organization.

The server 100, which may be referred to as a vehicle cloud controller, a vehicle cloud server, or the like, performs vehicle registration, key generation and distribution, and vehicle cloud formation / management. In addition, the server 100 maintains mobility information and resource information of a plurality of vehicles V1 to V5 for vehicle cloud formation.

Each of the plurality of RSUs RSU 1 and RSU 2 mediates communication between the server 100 and at least a part of a plurality of vehicles V 1 to V 5 located within respective transmission ranges (RSU Coverage). That is, each of the plurality of vehicles V1 to V5 and the server 100 can communicate via any one of the plurality of roadside apparatuses RSU 1 and RSU 2. At this time, the RSU may be referred to as various names such as an access point, a base station, an access node, and the like.

Each of the plurality of vehicles V1 to V5 is capable of V2V (Vehicle to Vehicle) communication and / or V2I (Vehicle to Infrastructure) communication. Each of the plurality of vehicles V1 to V5 utilizes GPS information and map information to determine the position of the roadside apparatus, thereby enabling efficient V2I communication. In addition, each of the plurality of vehicles V1 to V5 may transmit the mobility information and the resource information of the vehicle to the server 100 periodically or aperiodically.

1) a process of each of a plurality of vehicles V1 to V5 issuing a certificate from an authentication server 300; 2) a process of receiving each of a plurality of vehicles V1 to V5 through a server 100 ), And 3) a group key distribution process of the vehicle cloud. Hereinafter, a detailed process will be described with reference to the drawings.

FIG. 2 is a flowchart illustrating a process in which one of the plurality of vehicles shown in FIG. 1 is issued a certificate.

1 and 2, the vehicle V transmits a certificate request message to the authentication server 300 (S210). At this time, the vehicle V may transmit the certificate request message to the authentication server 300 via the RSU network, that is, the RSU 1 and the server 100, but the present invention is not limited thereto no. In addition, the certificate request message may include unique identification information that is information for identifying the vehicle V, for example, a vehicle number of the vehicle V or a registration number of the vehicle V. [

)와 차량(V)의 개인키(

)를 생성한다(S230). 인증서(

)에는 인증서 ID(

), 차량(V)의 공개키(

), 인증 기관, 즉 인증 서버(300)의 디지털 서명(

), 인증서 유효기간(

), 및 타임 스탬프(

)가 포함되어 있다.Upon receiving the certificate request message, the authentication server 300 transmits the certificate (V) of the vehicle V

) And the private key of the vehicle V

(S230). certification(

) Contains the certificate ID (

), The public key of the vehicle V (

), The digital signature of the certification authority, i.e., the authentication server 300

), Certificate validity period (

), And a time stamp (

).

)와 차량(V)의 개인키(

)를 차량(V)으로 송신한다(S250). 이때, 인증 서버(300)는 RSU 네트워크를 통해, 즉 노변 장치(RSU 1)와 서버(100)를 경유하여 인증서(

)와 차량(V)의 개인키(

)를 차량(V)으로 송신할 수 있다. Then, the authentication server 300 transmits a certificate (

) And the private key of the vehicle V

To the vehicle V (S250). At this time, the authentication server 300 transmits the certificate (RSU 1) and the server 100 via the RSU network, that is, the RSU 1 and the server 100

) And the private key of the vehicle V

) To the vehicle (V).

Through the repetitive execution of the above-described process, the certificate issuing process for each of the plurality of vehicles that can construct the vehicle cloud can be completed.

3 is a flowchart illustrating a vehicle registration process of registering any one of the plurality of vehicles shown in FIG. 1 in a server.

Vehicles that have been issued certificates in the vehicle cloud structure must complete vehicle registration with the server 100 to participate in the vehicle cloud. Hereinafter, the vehicle registration process will be described in detail with reference to FIG. 1 to FIG.

)를 이용하여 디지털 서명한 등록 요청 메시지(Register Request)와 차량(V)의 인증서(

)를 RSU 네트워크를 통해 서버(100)로 송신한다(S310). 즉, 차량(V)은 상기 등록 요청 메시지와 인증서(

)를 노변 장치(RSU 1)를 경유하여 서버(100)로 송신할 수 있다.First, the vehicle V is a private key

) And a certificate (V) of the vehicle (V)

) To the server 100 via the RSU network (S310). That is, the vehicle V transmits the registration request message and the certificate

) To the server 100 via the RSU 1.

)의 유효성을 검증하기 위해 인증 서버(300)에게 인증 서버(300)의 공개키(

)를 요청한다(S321). 인증 서버(300)는 서버(100)의 공개키 요청에 응답하여, 인증 서버(300)의 공개키(

)를 서버(100)로 송신한다(S323).Then, the server 100 transmits the certificate (V) of the vehicle V

To the authentication server 300 in order to verify the validity of the public key of the authentication server 300

(S321). In response to the public key request of the server 100, the authentication server 300 transmits the public key of the authentication server 300

To the server 100 (S323).

)를 수신한 서버(100)는 공개키(

)를 이용하여 차량(V)의 인증서(

)의 유효성을 검증한다(S330). 이때, 서버(100)는 인증서(

)에 포함되어 있는 차량(V)의 공개키(

)를 이용하여 상기 등록 요청 메시지의 디지털 서명을 검증할 수 있다. 이와 같은 과정을 통하여 서버(100)는 차량(V)에 대한 인증을 완료할 수 있다.Public key (

The server 100 receives the public key

) Of the vehicle (V) using the certificate

Is validated (S330). At this time, the server 100 transmits a certificate (

The public key of the vehicle V

) May be used to verify the digital signature of the registration request message. Through this process, the server 100 can complete the authentication for the vehicle V. [

)을 생성한다(S341). 생성된 가명(

)은 서버(100)에 의해 차량(V)의 공개키(

)로 암호화되고, 암호화된 가명은 차량(V)으로 전송된다(S343). 서버(100)에 의한 가명의 생성과 암호화된 가명의 전송은 주기적으로 또는 비주기적으로 수행될 수 있다. 즉, 서버(100)는 차량(V)의 가명을 주기적으로 또는 비주기적으로 갱신할 수 있다.Next, the server 100 searches for a pseudonym of the vehicle V to ensure the anonymity of the vehicle V,

(S341). The generated pseudonym (

Is transmitted by the server 100 to the public key of the vehicle V

), And the encrypted pseudonym is transmitted to the vehicle V (S343). The creation of a pseudonym by the server 100 and the transmission of the encrypted pseudonym may be performed periodically or aperiodically. That is, the server 100 may update the alias of the vehicle V periodically or non-periodically.

)로 디지털 서명하고, 생성된 디지털 서명(

)과 차량(V)의 가명(

)을 서버(100)로 송신한다(S350). 상기 차량 정보는 차량의 이동성 정보와 차량의 자원 정보를 포함할 수 있고, 상기 이동성 정보는 출발지, 목적지, 현재 위치(GPS 위치), 이동 방향, 이동 속도에 관한 정보 중 하나 이상을 포함할 수 있고, 상기 자원 정보는 차량(V)의 컴퓨팅 능력, 메모리 크기(용량), 저장 공간 크기 중 하나 이상을 포함할 수 있다.Next, the vehicle V transmits a vehicle information message including vehicle information for forming the vehicle cloud to the private key of the vehicle V

), And the generated digital signature (

) And the pseudonym of the vehicle (V)

To the server 100 (S350). The vehicle information may include mobility information of the vehicle and resource information of the vehicle, and the mobility information may include at least one of information about a starting point, a destination, a current position (GPS position), a moving direction, , The resource information may include at least one of a computing capability of the vehicle V, a memory size (capacity), and a storage space size.

Step S350 may be repeated periodically or non-periodically. This allows the server 100 to maintain the vehicle information of each of the vehicles constituting the vehicle cloud.

FIG. 4 is a flowchart illustrating a process of distributing a group private key, a group public key, and a group private key among vehicles constituting a vehicle cloud among a plurality of vehicles shown in FIG.

In order to form a vehicle cloud, and to satisfy vehicle authentication and message integrity in the vehicle cloud, the group key (group private key and group public key) of the vehicle cloud must be distributed. To satisfy the confidentiality of the message, The secret key should be distributed. Hereinafter, the group key distribution process and the group secret key distribution process will be described in detail with reference to FIG. 1 to FIG.

)를 이용하여 필요로 하는 자원에 관한 정보(

)를 포함하는 차량 클라우드 요청 메시지(Service Provisioning Request)에 대한 디지털 서명(

)을 생성한다. 생성된 디지털 서명(

)은 차량(RR)의 가명(

)과 함께 차량(RR)에 의해 서버(100)로 송신된다(S410). 이때, 차량(RR)은 노변 장치(RSU 1)를 경유하여 디지털 서명(

)과 가명(

)을 서버(100)로 송신할 수 있다.First, the vehicle cloud formation request vehicle RR transmits the private key of the vehicle RR

) To get information about the resources you need (

A digital signature for a Service Provisioning Request (Service Provisioning Request)

). The generated digital signature (

) Is the pseudonym of the vehicle (RR)

To the server 100 by the vehicle RR (S410). At this time, the vehicle RR sends a digital signature (RSU 1)

) And a pseudonym

Can be transmitted to the server 100.

)과 자원 크기(

)를 결정한다(S420). 이때, 자원 제공 차량들(

)은 차량 클라우드 요청 차량(RR)을 포함하는 개념으로 이해될 수도 있다.Next, the server 100 searches for optimal resource providing vehicles (hereinafter, referred to as " vehicles ") for forming a vehicle cloud based on the mobility information and resource information of each registered vehicle

) And resource size (

(S420). At this time, the resource providing vehicles (

) May be understood as a concept involving a vehicle cloud request vehicle (RR).

), 그룹 개인키(

), 및 그룹 비밀키(

)를 생성한다(S430). 그룹 공개키(

)와 그룹 개인키(

)는 차량 클라우드 내 차량을 인증하는 과정에서 사용될 수 있고, 그룹 비밀키(

)는 차량 클라우드 내 구성원들(차량들) 간의 메시지를 암호화하는 과정에서 사용될 수 있다. 또한, 그룹 개인키(

)는 차량 클라우드를 구성하는 구성원(차량)의 수만큼 생성된다. 즉, 그룹 개인키(

)의 개수는 차량 클라우드를 구성하는 차량들의 개수와 동일할 수 있다.Next, the server 100 transmits the group public key (

), Group private key (

), And a group secret key (

(S430). Group public key (

) And group private key (

) Can be used in the process of authenticating the vehicle in the vehicle cloud, and the group secret key

May be used in the process of encrypting messages between members (vehicles) in the vehicle cloud. Also, the group private key (

Are generated as many as the number of members (vehicles) constituting the vehicle cloud. That is, the group private key (

) May be equal to the number of vehicles constituting the vehicle cloud.

Next, the server 100 encrypts the vehicle cloud information including the information about the optimal resource providing vehicles for forming the vehicle cloud and the resource size with the public key of the vehicle cloud requesting vehicle (RR), encrypts the encrypted vehicle cloud information To the vehicle cloud requesting vehicle RR (S440).

), 그룹 개인키(

), 그룹 비밀키(

)를 차량 클라우드 요청 차량(RR)의 공개키로 암호화하여 차량 클라우드 요청 차량(RR)으로 송신한다(S450).In addition, the server 100 may provide a group public key ("

), Group private key (

), Group secret key (

) With the public key of the vehicle requesting vehicle RR and transmits it to the vehicle cloud requesting vehicle RR (S450).

), 그룹 개인키(

), 그룹 비밀키(

)를 자원 제공 차량(RP)의 공개키로 암호화하여 자원 제공 차량(RP)으로 송신한다(S460).Next, the server 100 transmits the group public key of the vehicle cloud (

), Group private key (

), Group secret key (

) With the public key of the resource providing vehicle RP and transmits it to the resource providing vehicle RP (S460).

)를 이용하여 디지털 서명을 생성하고, 차량 클라우드의 그룹 비밀키(

)로 상기 메시지를 암호화한다. 디지털 서명과 암호화된 메시지는 차량 클라우드 요청 차량(RR)에 의해 자원 제공 차량(RP)으로 송신될 수 있다(S470).When the vehicle cloud requesting vehicle RR wants to send a message to the resource providing vehicle RP, the vehicle cloud requesting vehicle RR sends the group private key (RR) of the vehicle cloud requesting vehicle RR

) And generates a digital signature using the group secret key (

To encrypt the message. The digital signature and the encrypted message may be transmitted to the resource providing vehicle RP by the vehicle cloud requesting vehicle (RR) (S470).

)를 이용하여 수신된 디지털 서명을 검증함으로써 메시지 송신 차량이 차량 클라우드 내 구성원임을 인증할 수 있다(S481). 이와 같은 절차를 통하여 메시지의 무결성 또한 만족될 수 있다.Upon receiving the encrypted message, the resource providing vehicle (RP) sends the group public key of the vehicle cloud

(Step S481) by verifying the received digital signature using the received digital signature. Through this procedure, the integrity of the message can also be satisfied.

)를 이용하여 암호화된 메시지를 복호화할 수 있다(S483). 즉, 메시지의 기밀성이 만족된다.In addition, the resource providing vehicle RP, which has received the encrypted message,

) To decrypt the encrypted message (S483). That is, the confidentiality of the message is satisfied.

)를 이용하여 디지털 서명을 생성하고, 그룹 비밀키(

)를 이용하여 상기 메시지를 암호화한다. 상기 디지털 서명과 암호화된 메시지는 자원 제공 차량(RP)에 의해 차량 클라우드 요청 차량(RR)으로 송신될 수 있다(S490). 이 경우 그룹 개인키(

)는 자원 제공 차량(RP)의 그룹 개인키이다. 또한, 자원 제공 차량(RP)으로부터 암호화된 메시지를 수신한 차량 클라우드 요청 차량(RR)은 단계 S481과 단계 S483과 같은 동작을 수행함으로써 자원 제공차량(RP)을 인증하고 암호화된 메시지를 복호화할 수 있다.When the resource providing vehicle RP wants to transmit a message to the vehicle cloud requesting vehicle RR, the group private key of the resource providing vehicle RP

) To generate a digital signature, and a group secret key (

) To encrypt the message. The digital signature and the encrypted message may be transmitted to the vehicle cloud requesting vehicle (RR) by the resource providing vehicle (RP) (S490). In this case, the group private key (

Is the group private key of the resource providing vehicle RP. In addition, the vehicle cloud request vehicle RR having received the encrypted message from the resource providing vehicle RP can authenticate the resource providing vehicle RP and decrypt the encrypted message by performing operations such as steps S481 and S483 have.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is evident that many alternatives, modifications and variations will be apparent to those skilled in the art. Accordingly, the true scope of the present invention should be determined by the technical idea of the appended claims.

10: Vehicle cloud system
100: Server
300: authentication server

Claims (7)

A group key distribution method for vehicle cloud formation,
Receiving a signature for a vehicle cloud request message from a vehicle cloud request vehicle among a plurality of registered vehicles;
Determining, by the server, vehicles to configure the vehicle cloud based on mobility information and resource information of each of the plurality of vehicles;
The server generating a group public key, a group private key, and a group private key of each of the vehicles constituting the vehicle cloud;
Encrypting the information about the vehicles constituting the vehicle cloud with the public key of the vehicle cloud requesting vehicle and transmitting the encrypted first vehicle information to the vehicle cloud requesting vehicle;
Encrypting the group public key, the group secret key, and the group private key of the vehicle cloud request vehicle with the public key of the vehicle cloud request vehicle, and transmitting the group private key to the vehicle cloud request vehicle; And
The server encrypts the group public key, the group secret key, and the group private key of each of the vehicles constituting the vehicle cloud with the public key of each of the vehicles constituting the vehicle cloud, thereby generating the vehicle cloud To the group key.
The method according to claim 1,
Wherein the vehicle cloud request message includes information about a resource required by the vehicle cloud request vehicle,
The vehicle cloud request message is signed using the private key of the vehicle requesting cloud service vehicle,
Wherein receiving the signature for the vehicle cloud request message comprises receiving a pseudonym of the vehicle cloud request vehicle,
Group key distribution method.
The method according to claim 1,
Communication between the vehicle cloud requesting vehicle and the server is performed via a road side unit (RSU) corresponding to the vehicle cloud request vehicle,
Wherein communication between each of the vehicles constituting the vehicle cloud and the server is performed via a roadside apparatus corresponding to each of the vehicles constituting the vehicle cloud,
Group key distribution method.
The method according to claim 1,
The group key distribution method includes:
The vehicle cloud request vehicle transmits a digital signature generated using the group private key of the vehicle cloud request vehicle and a message encrypted using the group secret key to at least one of the vehicles constituting the vehicle cloud step; And
The at least one vehicle verifying the digital signature using the group public key, and decrypting the encrypted message using the group secret key.
The method according to claim 1,
The group key distribution method includes:
Wherein any one of the vehicles constituting the vehicle cloud transmits a digital signature generated using the group private key of any one of the vehicles and an encrypted message using the group secret key to the vehicle cloud request vehicle step; And
Wherein the vehicle cloud request vehicle verifies the digital signature using the group public key, and decrypting the encrypted message using the group secret key.
The method according to claim 4 or 5,
Wherein communication between said vehicle cloud requesting vehicle and said at least one vehicle or between said one vehicle and said vehicle cloud requesting vehicle is performed by Vehicle to Vehicle (V2V) communication or Vehicle to Infrastructure (V2I)
Group key distribution method.
The method according to claim 1,
Wherein the mobility information includes at least one of information about a source, information about a destination, information about a current location, information about a direction, and information about a speed,
Wherein the resource information comprises at least one of information about a computing capability, information about a memory size, and information about a size of a storage space.
Group key distribution method.

Images