WO2021143178A1

WO2021143178A1 - Vehicle-mounted sensor authentication method, apparatus, and system

Info

Publication number: WO2021143178A1
Application number: PCT/CN2020/115732
Authority: WO
Inventors: 皇甫仁杰
Original assignee: 华为技术有限公司
Priority date: 2020-01-14
Filing date: 2020-09-17
Publication date: 2021-07-22
Also published as: CN113193959B; CN113193959A

Abstract

Disclosed in the embodiments of the present application are a vehicle-mounted sensor authentication method, apparatus, and system for use in the technical field of automobiles, and used for increasing vehicle-mounted sensor authentication efficiency and accuracy, reducing authentication costs, and ensuring the safe driving of smart driving vehicles. The method comprises: when implementing vehicle-mounted sensor authentication, a vehicle-mounted controller first acquires public key information of a vehicle-mounted sensor to be authenticated from a vehicle cloud server and then receives a signature to be authenticated sent by the vehicle-mounted sensor to be authenticated; and the vehicle-mounted controller uses the acquired public key information to perform authentication of the signature to be authenticated on the basis of a BLS signature algorithm in order to acquire an authentication result.

Description

Authentication method, device and system for vehicle-mounted sensor

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on January 14, 2020, the application number is 202010037875.4, and the invention title is "A method, device and system for authenticating an on-board sensor", the entire content of which is incorporated by reference In this application.

Technical field

This application relates to the field of automobile technology, and in particular to an authentication method, device and system for vehicle-mounted sensors.

Background technique

With the development of intelligent driving technology, more and more vehicles are equipped with various types of perception sensors, such as cameras, millimeter wave radar, laser radar, ultrasonic radar, etc., to assist in realizing the intelligent driving function of the vehicle.

However, with the use of vehicles, various on-board sensors will produce varying degrees of damage and consumption, so it is inevitable that on-board sensors will be replaced. Moreover, as the inventory increases, in addition to regular suppliers, a large number of The "cottage" version of the sensor, because the on-board sensor usually relies on the controller area network (CAN) bus or Ethernet to connect to the on-board controller, and the on-board sensor and the on-board controller communicate in clear text. It is very easy to be cracked. In this case, if the "cottage" version of the sensor is installed in the vehicle to replace the damaged or consumed regular sensor, it will most likely lead to very serious consequences and even threaten the life of the user. . Therefore, whether the authenticity of each vehicle-mounted sensor device can be accurately authenticated becomes particularly important.

At present, there are usually two authentication methods for vehicle-mounted sensors: one is to use the electromagnetic security chip attached to the sensor device to authenticate the sensor device, but this method requires a special security chip, and the security chip needs to be matched with the controller. Setting, the hardware cost is too high, and it is not suitable for authenticating the increasing number of on-board sensors; another commonly used authentication method is the key-based authentication method, although this method can be true to the on-board equipment to a certain extent. Pseudo authentication, but this method usually relies on both parties sharing the same key. Therefore, this method is more suitable for mutual authentication between two devices. However, each vehicle needs to be authenticated with a large number of sensors, which is not suitable for communication with on-board controllers. Between each authentication, the response time is too long. It can be seen that the current two common authentication methods for vehicle-mounted sensors have low authentication efficiency and high cost, and neither can achieve rapid and accurate authentication of a large number of vehicle-mounted sensors on the vehicle at the same time, thereby failing to ensure the safe driving of intelligent driving vehicles.

Summary of the invention

The embodiments of the present application provide a method and device for authenticating a vehicle-mounted sensor, which are used to improve the authentication efficiency and accuracy of the vehicle-mounted sensor, reduce the authentication cost, and thereby ensure the safe driving of a smart-driving vehicle.

In the first aspect, this application provides a method for authenticating a vehicle-mounted sensor. The method includes: when performing vehicle-mounted sensor authentication, the vehicle-mounted controller (such as the vehicle-mounted controller 103 in FIG. 1) first obtains from the vehicle cloud server (as shown in FIG. The car cloud server 101 in 1) obtains the public key information of the on-board sensor to be authenticated (such as the on-board sensor to be authenticated 102 in Fig. 1), and then receives the information sent by the on-board sensor to be authenticated (the on-board sensor 102 to be authenticated in Fig. 1) The signature to be authenticated; and the on-board controller (such as the on-board controller 103 in FIG. 1) can use the acquired public key information to authenticate the signature to be authenticated according to the BLS signature algorithm to obtain the authentication result.

Compared with the traditional technology, the on-board controller in the embodiment of this application uses the public key obtained from the car cloud server to authenticate the signature to be authenticated according to the mature BLS signature algorithm, so as to accurately identify the authenticity of the on-board sensor to be authenticated. Therefore, compared with the current method of authenticating the sensor device with the electromagnetic security chip attached to the sensor device and the method of relying on the two communicating parties to share the same key for sensor authentication, the vehicle can be authenticated without adding any hardware. The rapid and accurate authentication of a large number of on-board sensors not only reduces the cost of authentication, but also improves the efficiency and accuracy of authentication, thereby ensuring the safe driving of intelligent driving vehicles.

In a possible implementation manner, obtaining the public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server includes: querying the public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server according to the to-be-signed information of the vehicle-mounted sensor to be authenticated.

In this way, if the on-board controller or the on-board sensor to be authenticated is an updated sensor, and the on-board controller does not store the public key information sent by the car cloud server in advance, it can use the information to be signed from the on-board sensor to be authenticated. The server queries the public key information associated with the information to be signed, thereby improving the authentication efficiency and accuracy.

In a possible implementation manner, the public key information is associated with the batch information of the sensor to be authenticated, so that the public key information can be subsequently used to authenticate the batch of sensors to be authenticated to improve the authentication accuracy rate.

In a possible implementation, the signature to be authenticated is generated by the sensor to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information of the sensor to be authenticated; where the private key information is generated by the car cloud server according to the BLS signature algorithm. So that the vehicle-mounted controller can use the public key information to perform the signature to be authenticated, and accurately determine the authenticity of the vehicle-mounted sensor device to be authenticated according to the authentication result.

In a possible implementation manner, receiving the signature to be certified sent by the vehicle-mounted sensor to be certified includes: receiving the signature to be certified sent by a plurality of vehicle-mounted sensors to be certified; according to the BLS signature algorithm, the public key information is used to perform the signature to be certified. Attestation, to obtain the authentication result, including: aggregating multiple signatures to be authenticated to obtain the aggregated signature result to be authenticated; according to the BLS signature algorithm, use public key information to authenticate the aggregated signature result to be authenticated to obtain the authentication result . In this way, it is possible to simultaneously perform aggregate authentication on multiple on-board sensors to be authenticated, which greatly improves authentication efficiency.

In a possible implementation manner, receiving the signature to be certified sent by the vehicle-mounted sensor to be certified includes: receiving the signature to be certified sent by a plurality of vehicle-mounted sensors to be certified; according to the BLS signature algorithm, the public key information is used to perform the signature to be certified. Attestation, to obtain the authentication result, including: aggregating all the signatures to be authenticated in the first group to obtain the first group of aggregated signature results to be authenticated; according to the BLS signature algorithm, the public key information is used to aggregate the first group of signatures. The signature result to be authenticated is authenticated, and the authentication result is obtained; wherein the number of signatures to be authenticated included in the first group is less than the total number of signatures to be authenticated sent by the received multiple on-vehicle sensors to be authenticated.

In this way, through the grouping and aggregation authentication method, each group of aggregated signature results to be authenticated can be simultaneously authenticated, and when the authentication fails, the faulty can be quickly and accurately located according to the type and label of the grouping. Sensor to be certified. Thereby, the authentication efficiency and accuracy of the vehicle-mounted sensor can be improved, the authentication cost can be reduced, and the safe driving of the intelligent driving vehicle can be ensured.

In the second aspect, the present application also provides a method for authenticating a vehicle-mounted sensor. The method includes: when the vehicle-mounted sensor is authenticated, the vehicle cloud server (such as the vehicle cloud server 101 in FIG. 1) first obtains the vehicle-mounted sensor to be authenticated ( The to-be-signed information of the vehicle-mounted sensor 102 to be authenticated in Figure 1 is then generated according to the BLS signature algorithm for the private key information and public key information of the vehicle-mounted sensor to be authenticated (such as the vehicle-mounted sensor 102 to be authenticated in Figure 1); The certified vehicle-mounted sensor (such as the to-be-certified vehicle-mounted sensor 102 in Figure 1) sends the acquired information to be signed and the produced private key information, so that the to-be-certified vehicle-mounted sensor (such as the to-be-certified vehicle-mounted sensor 102 in Figure 1) can be based on mature The BLS signature algorithm, the information to be signed, and the private key information generate the signature to be verified and send the signature to be verified to the vehicle controller (such as the vehicle controller 103 in Figure 1); at the same time, the vehicle cloud server (such as the vehicle cloud server in Figure 1) The server 101) can also send public key information to the vehicle controller (such as the vehicle controller 103 in Figure 1) so that the vehicle controller (such as the vehicle controller 103 in Figure 1) can be based on the mature BLS signature algorithm and public key. Information, the signature to be authenticated is authenticated, and the authentication result is obtained. In this way, through the mature BLS signature algorithm for authentication, the generated private key information can be directly preset in the vehicle-mounted sensor to be authenticated, and the generated public key information can be sent to the vehicle-mounted controller in advance, without worrying about the leakage of each link of the key. The problem is easy to manage, and the key management is carried out according to the batch information of the sensor, which reduces the cost.

In a possible implementation, the method further includes: opening the public key information query interface, so that the on-board controller can query the public key information of the on-board sensor to be authenticated from the car cloud server according to the on-board sensor to be authenticated. , Make public key information public for query, so that the on-board controller can directly query the public key information through the public key information query interface, which is not only convenient for query, but also does not require special processing after the device is updated.

In the third aspect, this application also provides a method for authenticating a vehicle-mounted sensor. The method includes: when the vehicle-mounted sensor is authenticated, the vehicle-mounted sensor to be authenticated (such as the vehicle-mounted sensor to be authenticated 102 in FIG. 1) first obtains the private key. Then, the signature to be verified can be generated according to the mature BLS signature algorithm, the information to be signed, and the private key information, and then the signature to be verified can be sent to the vehicle controller (such as the vehicle controller 103 in Fig. 1). So that the on-board controller (such as the on-board controller 103 in Fig. 1) can authenticate the signature to be authenticated according to the mature BLS signature algorithm to obtain the authentication result. In this way, compared with the current use of electromagnetic equipment attached to the sensor device As far as the security chip is used to authenticate the sensor device, the rapid and accurate authentication of a large number of on-board sensors on the vehicle can be achieved without adding any hardware, which not only reduces the authentication cost, but also improves the authentication efficiency and accuracy, thereby ensuring Safe driving of intelligent driving vehicles.

In a possible implementation manner, obtaining the private key information of the vehicle-mounted sensor to be authenticated includes: obtaining the private key information of the vehicle-mounted sensor to be authenticated sent by the vehicle cloud server, and the private key information is generated by the vehicle cloud server according to the BLS signature algorithm.

In a possible implementation, generating the signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information includes: generating a hash digest according to the information to be signed; generating the curve hash value of the hash digest according to the BLS signature algorithm; The signature to be verified is generated according to the curve hash value and the private key information. It is convenient for the vehicle-mounted controller to use the public key information to perform the signature to be authenticated, and accurately determine the authenticity of the vehicle-mounted sensor device to be authenticated according to the authentication result.

In a fourth aspect, the present application also provides a vehicle-mounted sensor authentication system, which includes: a vehicle cloud server, a vehicle-mounted sensor to be certified, and a vehicle-mounted controller; wherein the vehicle cloud server is used to obtain information to be signed; according to the BLS signature The algorithm generates the private key information and public key information of the vehicle-mounted sensor to be authenticated; sends the public key information to the vehicle-mounted controller to be authenticated; sends the information to be signed and the private key information to the vehicle-mounted sensor to be authenticated; the vehicle-mounted sensor to be authenticated is used according to the BLS The signature algorithm, the information to be signed, and the private key information generate the signature to be authenticated; send the signature to be authenticated to the on-board controller; the on-board controller is used to authenticate the signature to be authenticated by using the public key information according to the BLS signature algorithm to obtain the authentication result.

In a possible implementation, the car cloud server is also used to: open the public key information query interface, so that the on-board controller can query the public key information of the on-board sensor to be authenticated from the on-board sensor to be authenticated based on the signature information of the on-board sensor to be authenticated .

In a possible implementation, the vehicle-mounted sensor to be authenticated is specifically used to: generate a hash digest according to the information to be signed; generate the curve hash value of the hash digest according to the BLS signature algorithm; generate the curve hash value of the hash digest according to the curve hash value and private key information Certified signature.

In a possible implementation manner, the on-board controller is specifically configured to query the public key information of the on-board sensor to be authenticated from the on-vehicle cloud server according to the to-be-signed information of the on-board sensor to be authenticated.

In a possible implementation, the on-board controller is specifically used to: receive the respective signatures to be certified sent by multiple on-board sensors to be certified; aggregate the signatures to be certified to obtain the aggregated signature result to be certified; according to the BLS The signature algorithm uses public key information to authenticate the aggregated signature result to be authenticated to obtain the authentication result.

In a possible implementation, the on-board controller is specifically configured to: receive respective signatures to be certified sent by multiple on-board sensors to be certified; aggregate all signatures to be certified in the first group to obtain the first group of aggregated signatures Signature result to be authenticated; according to the BLS signature algorithm, the public key information is used to authenticate the first group of aggregated signature results to be authenticated to obtain the authentication result; among them, the number of signatures to be authenticated contained in the first group is less than the received The total number of signatures to be authenticated sent by multiple on-board sensors to be authenticated.

In a fifth aspect, this application also provides a vehicle-mounted sensor authentication system, which includes: a vehicle-mounted sensor to be certified and a vehicle-mounted controller; wherein the vehicle-mounted sensor to be certified is used to obtain private key information and information to be signed; according to the BLS The signature algorithm, the information to be signed, and the private key information generate the signature to be certified; the signature to be certified is sent to the on-board controller; the on-board controller is used to obtain the public key information of the on-board sensor to be certified; according to the BLS signature algorithm, the public key information is used, The signature to be authenticated is authenticated, and the authentication result is obtained.

In a possible implementation, the vehicle-mounted sensor to be authenticated is specifically used to: generate a hash digest according to the information to be signed; generate the curve hash value of the hash digest according to the BLS signature algorithm; according to the curve hash value and the private key information Generate a signature to be verified.

In a possible implementation, the on-board controller is specifically configured to: receive respective signatures to be certified sent by multiple on-board sensors to be certified; aggregate all signatures to be certified in the first group to obtain the first group of aggregated signatures Signature result to be authenticated; according to the BLS signature algorithm, the public key information is used to authenticate the first group of aggregated signature results to be authenticated to obtain the authentication result; among them, the number of signatures to be authenticated contained in the first group is less than the received The total number of signatures to be authenticated sent by the plurality of on-board sensors to be authenticated.

In a sixth aspect, the present application also provides an authentication device for a vehicle-mounted sensor. The device includes: an obtaining unit for obtaining public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server; and a receiving unit for receiving the vehicle-mounted sensor to be authenticated The sent signature to be authenticated; the authentication unit is used to authenticate the signature to be authenticated by using the public key information according to the BLS signature algorithm to obtain the authentication result.

In a possible implementation manner, the acquiring unit is specifically configured to query the public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server according to the information to be signed of the vehicle-mounted sensor to be authenticated.

In a possible implementation, the public key information is associated with the batch information of the sensor to be authenticated.

In a possible implementation, the signature to be authenticated is generated by the sensor to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information of the sensor to be authenticated; where the private key information is generated by the car cloud server according to the BLS signature algorithm.

In a possible implementation manner, the receiving unit is specifically configured to: receive respective signatures to be authenticated sent by a plurality of on-board sensors to be authenticated; the authentication unit includes: a first aggregation subunit, which is used to aggregate multiple signatures to be authenticated, Obtain the aggregated signature result to be authenticated; the first authentication subunit is used to authenticate the aggregated signature result to be authenticated by using the public key information according to the BLS signature algorithm to obtain the authentication result.

In a possible implementation, the receiving unit is specifically configured to: receive respective signatures to be authenticated sent by a plurality of on-board sensors to be authenticated; the authentication unit includes: a second aggregation subunit, which is used to combine all the to-be-authenticated signatures in the first group The signatures are aggregated to obtain the first group of aggregated signature results to be authenticated; the second authentication subunit is used to authenticate the first group of aggregated signature results to be authenticated by using public key information according to the BLS signature algorithm to obtain certification Result; where the number of signatures to be authenticated contained in the first group is less than the total number of signatures to be authenticated sent by the received multiple on-board sensors to be authenticated.

In a seventh aspect, the present application also provides an authentication device for a vehicle-mounted sensor. The device includes: an acquisition unit for acquiring information to be signed for the vehicle-mounted sensor to be authenticated; and a generating unit for generating the vehicle-mounted sensor to be authenticated according to the BLS signature algorithm The first sending unit is used to send the information to be signed and the private key information to the vehicle-mounted sensor to be authenticated, so that the vehicle-mounted sensor to be authenticated generates the information to be authenticated according to the BLS signature algorithm, the information to be signed and the private key information Sign and send the signature to be authenticated to the on-board controller; the second sending unit is used to send public key information to the on-board controller, so that the on-board controller authenticates the signature to be authenticated according to the BLS signature algorithm and the public key information, and obtains the authentication result.

In a possible implementation, the device further includes: an opening unit for opening the public key information query interface, so that the on-board controller can query the on-board sensor to be authenticated from the car cloud server based on the to-be-signed information of the on-board sensor to be authenticated. Public key information.

In an eighth aspect, the present application also provides an authentication device for a vehicle-mounted sensor. The device includes: an acquisition unit for acquiring the private key information and the information to be signed of the vehicle-mounted sensor to be authenticated; and a generating unit for obtaining the private key information and the information to be signed according to the BLS signature algorithm, The information to be signed and the private key information generate the signature to be authenticated; the sending unit is used to send the signature to be authenticated to the on-board controller so that the on-board controller authenticates the signature to be authenticated according to the BLS signature algorithm to obtain the authentication result.

In a possible implementation manner, the obtaining unit is specifically configured to obtain the private key information of the vehicle-mounted sensor to be authenticated sent by the car cloud server, where the private key information is generated by the car cloud server according to the BLS signature algorithm.

In a possible implementation manner, the generating unit includes: a first generating subunit for generating a hash digest according to the information to be signed; a second generating subunit for generating a curve hash value of the hash digest according to the BLS signature algorithm ; The third generation subunit is used to generate the signature to be authenticated according to the curve hash value and the private key information.

In a ninth aspect, the present application also provides a vehicle-mounted sensor authentication device, which includes a memory and a processor;

The memory is used to store instructions; the processor is used to execute the instructions in the memory and execute any one of the methods in the first aspect.

In a tenth aspect, the present application also provides a vehicle-mounted sensor authentication device, which includes a memory and a processor;

The memory is used to store instructions; the processor is used to execute the instructions in the memory and execute any one of the methods in the second aspect described above.

In an eleventh aspect, the present application also provides a vehicle-mounted sensor authentication device, which includes a memory and a processor;

The memory is used to store instructions; the processor is used to execute the instructions in the memory and execute any one of the methods in the third aspect.

In a twelfth aspect, this application also provides a computer-readable storage medium, including instructions, which when run on a computer, cause the computer to execute any of the above methods.

It can be seen from the above technical solutions that the embodiments of the present application have the following advantages:

In the embodiment of the present application, when the vehicle-mounted sensor is authenticated, the vehicle-mounted controller first obtains the public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server, and then receives the to-be-authenticated signature sent by the vehicle-mounted sensor to be authenticated; the vehicle-mounted controller can then sign according to the BLS The algorithm uses the obtained public key information to authenticate the signature to be authenticated to obtain the authentication result. It can be seen that, because the on-board controller in this application uses the public key obtained from the car cloud server to authenticate the signature to be authenticated according to the mature BLS signature algorithm, so as to accurately identify the authenticity of the on-board sensor to be authenticated. Therefore, compared with At present, the method of authenticating the sensor device using the electromagnetic security chip attached to the sensor device and the method of relying on the two communicating parties to share the same key for sensor authentication can realize the detection of a large number of on-board sensors on the vehicle without adding any hardware. Fast and accurate certification not only reduces certification costs, but also improves certification efficiency and accuracy, thereby ensuring the safe driving of intelligent driving vehicles.

Description of the drawings

In order to more clearly describe the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings needed in the description of the embodiments. Obviously, the drawings in the following description are only some of the implementations recorded in the present application. For example, for those of ordinary skill in the art, other drawings can be obtained based on these drawings.

FIG. 1 is a structural block diagram of an authentication system for a vehicle-mounted sensor according to an embodiment of the application;

FIG. 2 is a flowchart of a method for authenticating a vehicle-mounted sensor according to an embodiment of the application;

FIG. 3 is a schematic diagram of signature verification to be verified for a vehicle-mounted sensor to be verified according to an embodiment of the application;

FIG. 4 is a flowchart of another vehicle-mounted sensor authentication method provided by an embodiment of the application;

FIG. 5 is a flowchart of yet another vehicle-mounted sensor authentication method provided by an embodiment of the application;

FIG. 6 is a schematic diagram of generating a curve hash value provided by an embodiment of the application;

FIG. 7 is a schematic diagram of generating a signature to be authenticated according to an embodiment of the application;

FIG. 8 is an interaction flowchart of an authentication method for a vehicle-mounted sensor according to an embodiment of the application;

FIG. 9 is a structural block diagram of another vehicle-mounted sensor authentication system provided by an embodiment of the application;

FIG. 10 is a structural block diagram of an authentication device for a vehicle-mounted sensor according to an embodiment of the application;

11 is a structural block diagram of another vehicle-mounted sensor authentication device provided by an embodiment of the application;

FIG. 12 is a structural block diagram of yet another vehicle-mounted sensor authentication device provided by an embodiment of the application;

FIG. 13 is a schematic structural diagram of an authentication device for a vehicle-mounted sensor according to an embodiment of the application;

14 is a schematic structural diagram of another vehicle-mounted sensor authentication device provided by an embodiment of the application;

FIG. 15 is a schematic structural diagram of yet another vehicle-mounted sensor authentication device provided by an embodiment of the application.

Detailed ways

The embodiments of the present application provide an authentication method, device, and system for vehicle-mounted sensors, which are used to improve the authentication efficiency and accuracy of vehicle-mounted sensors, reduce authentication costs, and thereby ensure safe driving of intelligent driving vehicles.

The embodiments of the present application will be described below in conjunction with the drawings.

Referring to FIG. 1, it shows a structural block diagram of a vehicle-mounted sensor authentication system provided by an embodiment of the present application. The authentication system includes a vehicle cloud server 101, a vehicle-mounted sensor 102 to be authenticated, and a vehicle-mounted controller 103. The vehicle cloud server 101 is connected to the vehicle-mounted sensor 102 to be certified, the vehicle cloud server 101 is connected to the vehicle-mounted controller 103, and the vehicle-mounted sensor 102 to be certified is connected to the vehicle-mounted controller 103. The above-mentioned "connection" may be a direct connection or an indirect connection. Especially for the connection between the car cloud server 101 and the vehicle-mounted sensor 102 to be certified, there may be other provider servers between the vehicle cloud server 101 and the vehicle-mounted sensor 102 to be certified.

Among them, in terms of hardware implementation, the car cloud server 101 has storage functions and can communicate with the car controller 103 and can communicate with the car sensor 102 to be authenticated, and provides data support for the car sensor 102 to be authenticated and the car controller 103 Service equipment. The car cloud server 101 may be, for example, a simple, efficient, safe, reliable, and elastically scalable computing service. When the car factory actually deploys the car cloud server 101, it can use independent equipment or a cluster server to implement it.

The vehicle-mounted sensor 102 to be certified refers to various sensing sensors installed on the vehicle, such as an inertial measurement unit (IMU), a lidar sensor, a camera sensor, a millimeter wave radar sensor, and the like. The on-board controller 103 refers to a control device used to control the electrical system of the vehicle body, and may be, for example, an electronic control unit (ECU).

In the embodiment of the present application, the car cloud server 101 is first used to obtain vehicle information sent by a car factory or sensor batch information sent by a sensor supplier as the information to be signed, and then sign according to the mature BLS (Boneh-Lynn-Shacham) The algorithm generates the private key information and public key information of the vehicle-mounted sensor 102 to be authenticated, and sends the generated private key information and the information to be signed to the corresponding vehicle-mounted sensor 102 to be authenticated, and at the same time, sends the generated public key information to the vehicle controller 103. The vehicle-mounted sensor 102 to be authenticated is used to generate the signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information after receiving the private key information and the information to be signed sent by the car cloud server 101, and then the signature to be authenticated Send to the onboard controller 103. On this basis, the on-board controller 103 is used to authenticate the signature to be authenticated sent by the on-board sensor 102 to be authenticated by using the received public key information according to the mature BLS signature algorithm, so as to obtain the certification of the on-board sensor 102 to be authenticated. result.

It should be noted that the above application scenarios are only shown to facilitate the understanding of this application, and the implementation of this application is not limited in this respect. On the contrary, the embodiments of the present application can be applied to any applicable scenarios.

Based on the above application scenarios, an embodiment of the present application provides an authentication method for a vehicle-mounted sensor, which is introduced below.

S201: Obtain the public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server.

In the embodiment of the present application, in order to achieve accurate authentication of the vehicle-mounted sensor to be authenticated, the vehicle-mounted controller first needs to obtain the public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server, where the public key information is defined as pk. Among them, the public key information pk is associated with the batch information of the sensor to be authenticated. The batch information of the sensor to be authenticated refers to identification information that characterizes the uniqueness of the sensor to be authenticated. For example, it may include identity document (ID) information of the sensor to be authenticated or group information of the sensor to be authenticated.

Specifically, the public key information pk of the vehicle-mounted sensor to be authenticated obtained by the vehicle-mounted controller from the vehicle cloud server is pre-generated by the vehicle cloud server according to the BLS signature algorithm, and each public key information pk corresponds to a private key information (this The office defines the private key information as sk), and the two constitute a public-private key pair. The specific calculation formula is as follows:

pk=sk*G (1)

Among them, pk represents the public key information; G represents the generator in the bilinear curve map G’, and G’ is the prime r factorial group; sk represents the private key information, with a value range of [0, r-1].

On this basis, after the car cloud server receives the sensor batch information sent by the sensor supplier (which may also include the vehicle information sent by the car factory), it can use the sensor batch information as the information to be signed, here the information to be signed Defined as m. Use the pre-generated public key information pk and the corresponding private key information sk to establish an association relationship with the information to be signed, and send the private key information sk and the information to be signed m to the sensor to be authenticated. It should be noted that, The car cloud server can also first send the private key information sk and the information to be signed m to the sensor supplier server, and then through the sensor supplier, the private key information sk and the information to be signed m are burned in the same production line. In the batch of sensors to be certified.

At the same time, the car cloud server will also send the pre-generated public key information pk corresponding to the private key information sk to the vehicle controller. It should be noted that if the current on-board controller is a replaced on-board controller, for example, if the previous on-board controller is damaged and updated to a new on-board controller, at this time, the current on-board controller is not stored The public key information pk sent by the car cloud server in advance. In this case, the current on-board controller needs to receive the information to be signed m (such as sensor batch information) sent by the sensor to be authenticated, according to the information to be signed m , Query the public key information pk of the vehicle-mounted sensor to be authenticated from the car cloud server, that is, query the public key information pk associated with the to-be-signed information m.

Or, if the on-board sensor to be certified is a sensor that has been replaced, for example, if the previous on-board sensor is damaged, after updating to a new on-board sensor as the on-board sensor to be certified, the on-board controller does not store the on-board sensor to be certified. The public key information pk corresponding to the on-board sensor. In this case, the on-board controller needs to receive the to-be-signed information m (such as sensor batch information) sent by the to-be-certified sensor, according to the to-be-signed information m, from The car cloud server queries the public key information pk associated with the message m to be signed.

In a possible implementation of this embodiment, the on-board controller can establish a secure link channel with the car cloud server through a telematics box (TBOX) in advance, and then can link to the car cloud server through the secure link channel The query interface reserved by the server queries the public key information associated with the message m to be signed. Alternatively, the on-board controller can also query the public key information corresponding to the on-board sensor to be authenticated from the car cloud server through other secure channels, which will not be repeated in this embodiment of the application.

S202: Receive the to-be-verified signature sent by the to-be-verified on-board sensor.

In this embodiment of the application, in order to achieve accurate authentication of the vehicle-mounted sensor to be authenticated, the vehicle-mounted controller also needs to receive the to-be-authenticated signature sent by the vehicle-mounted sensor to be authenticated. Here, the to-be-authenticated signature is defined as S to perform the subsequent step S203. .

Among them, the signature S to be authenticated is generated by the sensor to be authenticated according to the BLS signature algorithm, the information to be signed m, and the private key information sk of the sensor to be authenticated. The specific calculation formula is as follows:

S=sk*H(m) (2)

Among them, S represents the signature to be authenticated generated by the sensor to be authenticated; sk represents the private key information of the sensor to be authenticated; H(m) represents the curve hash value generated according to the information m to be signed. For the specific generation process, please refer to the introduction of subsequent embodiments .

S203: According to the BLS signature algorithm, the public key information is used to authenticate the signature to be authenticated to obtain an authentication result.

In this embodiment of the application, after obtaining the public key information pk of the vehicle-mounted sensor to be authenticated through step S201, and receiving the signature S sent by the vehicle-mounted sensor to be authenticated through step S202, the obtained signature can be further used according to the BLS signature algorithm. The public key information pk of, authenticates the received signature S to be authenticated, and obtains the authentication result.

Specifically, because the BLS signature algorithm has a special pairing function, the two points P and Q on the bilinear curve can be mapped to a number n, that is, e(P,Q)→n, and the pairing function There is also a feature: for the unknown number x, substituting it into the pairing function, no matter which point it is multiplied by P and Q on the curve, the result is the same (mapped to the same number), that is, e (x×P, Q)=e(P, x×Q). Furthermore, based on this equation, it can also be ensured that the equation shown in the following equation (3) is established, and the specific calculation process is consistent with the existing method, and will not be repeated here.

e(a×P,b×Q)=e(P,a×b×Q)=e(a×b×P,Q)=e(P,Q)×(a,b) (3)

Therefore, in order to realize the authentication of the signature S to be authenticated for the vehicle-mounted sensor to be authenticated, the public key information pk and the curve hash value of the vehicle-mounted sensor to be authenticated can be used based on the above formulas (1), (2) and (3). H(m) and the signature S to be authenticated, determine whether the calculation results on both sides of the equal sign in the following formula (4) are equal:

e(pk,H(m))=e(sk×G,H(m))=e(G,sk×H(m))=e(G,S) (4)

If the calculation results on both sides of the equal sign in the above formula (4) are equal, it indicates that the number of points corresponding to the public key information pk on the bilinear curve and the point corresponding to the hash value of the curve is mapped to the curve generator on the bilinear curve. The number of points corresponding to G and the number of points corresponding to the signature S to be authenticated is the same number, as shown in Figure 3, where all arrows in the figure point to the same point. At this time, it indicates that the sensor to be authenticated has passed the authentication, and the on-board controller can communicate with the sensor normally.

If the calculation results on both sides of the equal sign in the above formula (4) are not equal, it indicates that the number of points corresponding to the public key information pk on the bilinear curve and the point corresponding to the curve hash value H(m) is the same as that of the bilinear curve. The number of points corresponding to the curve generator G on the curve and the point corresponding to the signature S to be authenticated are not the same number, that is, all the arrows in FIG. 3 point to the same point. At this time, it indicates that the authentication of the sensor to be authenticated has not passed, that is, the sensor to be authenticated may be malfunctioning, and the on-board controller cannot communicate with the sensor normally. Further, the malfunction of the authentication sensor can be reported to facilitate Troubleshoot them as soon as possible to ensure the safe driving of intelligent driving vehicles.

In a possible implementation of this embodiment, if in step S202, the on-board controller receives the signatures to be authenticated sent by multiple on-board sensors to be authenticated, the specific implementation process of step S203 may include the following steps A1-A2 :

Step A1: Aggregate multiple signatures to be authenticated to obtain an aggregated signature result to be authenticated.

In this implementation, if the on-board controller receives the signatures to be authenticated sent by multiple on-board sensors to be authenticated, in order to improve the authentication efficiency, the received signatures to be authenticated can be aggregated to obtain the aggregated signatures to be authenticated. Authentication signature result. For example, these signatures to be verified can be added first to obtain the added signature result to be verified, which is used to perform the subsequent step A2.

For example: suppose that the vehicle-mounted controller receives n signatures to be verified, namely S1, S2, ..., Sn, and the n signatures to be verified are the respective signatures to be verified sent by n vehicle-mounted sensors to be verified. At this time, the n signatures to be certified can be added to obtain the summed signature result S to be certified, namely S=S1+S2+...+Sn, which is used to perform the subsequent step A2 to realize the verification of the n vehicles to be certified Sensor certification.

Step A2: According to the BLS signature algorithm, the public key information is used to authenticate the aggregated signature result to be authenticated, and the authentication result is obtained.

In this implementation, after the aggregated signature result to be authenticated is obtained through step A1, the signature result can be substituted into the above formula (4) to determine whether the formula (4) is established. If it is established, it means that the plurality of signatures to be authenticated On-board sensor certification is passed, otherwise, it means that the certification is not passed.

Specifically, if the result of the signature to be verified after aggregation obtained through step A1 is S, and S=S1+S2+...+Sn, then according to the principle of aggregation authentication, S is substituted into the above formula (4), and based on the above formula (1 ), (2) and (3), the following calculation results can be obtained:

If the calculation result obtained by the calculation makes the above formula (5) valid, it indicates that the n on-board sensors to be authenticated have passed the certification, and the on-board controller can communicate with the n sensors normally. On the contrary, it indicates that the n vehicle-mounted sensors to be authenticated are not authenticated, and the vehicle-mounted controller cannot communicate with these n sensors normally, and it needs to troubleshoot them as soon as possible to ensure the safe driving of the intelligent driving vehicle.

In a possible implementation of this embodiment, if in step S202, the on-board controller receives the signatures to be authenticated sent by multiple on-board sensors to be authenticated, the specific implementation process of step S203 may also include the following steps B1- B2:

Step B1: Aggregate all signatures to be authenticated in the first group to obtain the signature result to be authenticated after aggregation of the first group.

In this implementation, if the on-board controller receives the signatures to be authenticated sent by multiple on-board sensors to be authenticated, in order to improve the authentication efficiency, the received signatures to be authenticated can be grouped first, and in order to identify the faulty signatures. For accurate positioning of sensor types, these signatures to be certified can be grouped according to their respective types of sensors to be certified, and each signature to be certified can be labeled. For example, all radar sensors to be certified can be grouped together, and The signatures to be certified generated by all the radar sensors to be certified in the group are labeled. For example, the 5 signatures to be certified generated by the 5 radar sensors to be certified in the group can be labeled as 1, 2, 3, 4, and 4, respectively. 5.

Further, all signatures to be verified in each group can be aggregated to obtain the result of signatures to be verified after aggregation of each group. The specific process is similar to step A1. For related content, please refer to step A1.

Among them, taking the first group in each group as an example, the number of signatures to be authenticated contained in the first group is less than the total number of signatures to be authenticated sent by multiple on-vehicle sensors to be authenticated. For example, if the received The total number of signatures to be verified sent by the plurality of on-board sensors to be verified is 10, and the number of signatures to be verified included in the first group is less than 10. By aggregating all the signatures to be verified in the first group, the result of the signatures to be verified after the aggregation of the first group can be obtained, which is used to execute the subsequent step B2.

Step B2: According to the BLS signature algorithm, the public key information is used to authenticate the first group of aggregated signature results to be authenticated to obtain the authentication result.

In this implementation, after the first group of aggregated signature results to be verified is obtained through step B1, the signature result can be substituted into the above formula (5) to determine whether the formula (5) is established. All on-board sensors to be certified in a group have passed the certification, otherwise, it indicates that the certification has not passed.

Specifically, if the first group of aggregated signature results to be authenticated is S ₍₁₎ obtained through step B1, and S ₍₁₎ = S ₁ + S ₂ +...+S _i , then according to the principle of aggregation authentication, S ₍₁₎ Substituting the above formula (5), the following calculation results can be obtained:

e(G,S ₍₁₎ )=e(pk ₁ ,H(m ₁ ))×e(pk ₂ ,H(m ₂ ))×...×e(pk _i ,H(m _i )) ( 6)

If the calculation result obtained by the calculation makes the above formula (6) true, it indicates that the i vehicle-mounted sensors to be authenticated in the first group are authenticated, and the vehicle-mounted controller can communicate with the i sensors normally. On the contrary, it indicates that the i vehicle-mounted sensors to be authenticated in the first group are not authenticated, and the vehicle-mounted controller cannot communicate with the i sensors normally, and it is necessary to troubleshoot them as soon as possible to ensure the safe driving of the intelligent driving vehicle.

In the same way, the vehicle-mounted sensors to be authenticated contained in other groups can be authenticated to obtain the authentication result. For example, if the second group of aggregated signature results to be authenticated is S ₍₂₎ through step B1, and S ₍₂₎ = S _i+1 +S _i+2 +…+S _j , according to the principle of aggregation authentication, _{substituting S (2)} into the above formula (5), the following calculation results can be obtained:

e(G,S ₍₂₎ )=e(pk _i+1 ,H(m _i+1 ))×e(pk _i+2 ,H(m _i+2 ))×...×e(pk _j ,H(m _j )) (7)

Similarly, if the calculation result obtained by calculation makes the above formula (7) true, it indicates that the j-i on-board sensors to be authenticated in the second group have passed the certification, and the on-board controller can communicate with these j-i sensors normally. On the contrary, it indicates that the j-i on-board sensors to be authenticated in the second group are not authenticated, and the on-board controller cannot communicate with these j-i sensors normally, and it is necessary to troubleshoot them as soon as possible to ensure the safe driving of the intelligent driving vehicle.

In this way, through the above group aggregation authentication method, each group of aggregated signature results to be authenticated can be simultaneously authenticated, and when the authentication fails, the fault can be quickly and accurately located according to the group type and label. The sensor to be certified. Thereby, the authentication efficiency and accuracy of the vehicle-mounted sensor can be improved, the authentication cost can be reduced, and the safe driving of the intelligent driving vehicle can be ensured.

In summary, in the method for authenticating a vehicle sensor provided in this embodiment, when performing vehicle sensor authentication, the vehicle controller first obtains the public key information of the vehicle sensor to be authenticated from the vehicle cloud server, and then receives the information sent by the vehicle sensor to be authenticated. Signature to be authenticated; in turn, the on-board controller can use the acquired public key information to authenticate the signature to be authenticated according to the BLS signature algorithm to obtain the authentication result. It can be seen that, because the on-board controller in this application uses the public key obtained from the car cloud server to authenticate the signature to be authenticated according to the mature BLS signature algorithm, so as to accurately identify the authenticity of the on-board sensor to be authenticated. Therefore, compared with At present, the method of authenticating the sensor device using the electromagnetic security chip attached to the sensor device and the method of relying on the two communicating parties to share the same key for sensor authentication can realize the detection of a large number of on-board sensors on the vehicle without adding any hardware. Fast and accurate certification not only reduces certification costs, but also improves certification efficiency and accuracy, thereby ensuring the safe driving of intelligent driving vehicles.

Refer to FIG. 4, which is a flowchart of another vehicle-mounted sensor authentication method provided by an embodiment of the application. The method is described below.

S401: Obtain information to be signed of the vehicle-mounted sensor to be authenticated.

In the embodiment of this application, in order to achieve accurate authentication of the vehicle-mounted sensor to be certified, the car cloud server first needs to obtain the sensor batch information from the sensor supplier as the information to be signed, and can also obtain the vehicle information from the car factory and base it on the vehicle information. To generate the information to be signed, for example, the vehicle information can be a vehicle identification number (VIN), and further, the result of adding a random number and the VIN can be used as the information to be signed.

S402: Generate private key information and public key information of the vehicle-mounted sensor to be authenticated according to the BLS signature algorithm.

In the embodiment of the present application, the implementation process of this step S402 is basically the same as the description content of the formula (1) in the above step S201, and will not be repeated here. For related content, please refer to the above step S201.

S403: Send the information to be signed and the private key information to the vehicle-mounted sensor to be authenticated.

In this embodiment of the application, after obtaining the signature information of the vehicle-mounted sensor to be authenticated through step S401, and generating the private key information of the vehicle-mounted sensor to be authenticated through step S402, the information to be signed and the private key can be further sent to the vehicle-mounted sensor to be authenticated Information, so that the vehicle-mounted sensor to be authenticated generates the signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information and sends the signature to be authenticated to the on-board controller. For the specific implementation process of generating the signature to be authenticated, please refer to the introduction of the subsequent embodiments.

S404: Send the public key information to the vehicle controller.

In the embodiment of the present application, after the public key information of the vehicle-mounted sensor to be authenticated is generated in step S402, the public key information may be further sent to the vehicle-mounted controller, so that the vehicle-mounted controller can be authenticated according to the BLS signature algorithm and public key information. Sign the authentication and get the authentication result. For the specific implementation process of the on-board controller generating the signature to be authenticated for authentication, please refer to the introduction of step S203 above, which will not be repeated here.

In a possible implementation of this embodiment, the car cloud server also needs to open the public key information query interface, so that the on-board controller can query the car cloud server for the on-board sensor to be authenticated according to the signature information of the on-board sensor to be authenticated. Public key information.

Specifically, in this implementation, if the current on-board controller is a replaced on-board controller, for example, if the previous on-board controller is damaged, it will be updated to a new on-board controller. At this time, the current on-board controller The device does not store the public key information sent by the car cloud server in advance. In this case, the current on-board controller needs to receive the information to be signed from the sensor to be authenticated, and then use the car cloud server according to the information to be signed. The public key information query interface opened in advance can query the public key information of the vehicle-mounted sensor to be authenticated from the car cloud server, that is, query the public key information associated with the information to be signed.

Or, if the on-board sensor to be certified is a sensor that has been replaced, for example, if the previous on-board sensor is damaged, after updating to a new on-board sensor as the on-board sensor to be certified, the on-board controller does not store the on-board sensor to be certified. The public key information corresponding to the vehicle-mounted sensor. In this case, the vehicle-mounted controller needs to query the public key information previously opened by the vehicle cloud server based on the information to be signed after receiving the information to be signed from the sensor to be authenticated. Interface to query the public key information associated with the information to be signed from the car cloud server.

Refer to FIG. 5, which is a flowchart of yet another method for authenticating a vehicle-mounted sensor according to an embodiment of the application. The method is described below.

S501: Acquire private key information and information to be signed of the vehicle-mounted sensor to be authenticated.

In this embodiment of the application, in order to achieve accurate authentication of the vehicle-mounted sensor to be authenticated, the vehicle-mounted sensor to be authenticated first needs to obtain the private key information and the information to be signed sent by the car cloud server, where the private key information is determined by the car cloud server according to the The BLS signature algorithm is generated. For the specific generation process, please refer to the introduction of step S402 above, which will not be repeated here.

S502: Generate a signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information.

In the embodiment of the present application, after obtaining the private key information and the information to be signed of the vehicle-mounted sensor to be authenticated in step S501, the signature to be authenticated can be generated according to the mature BLS signature algorithm, the information to be signed, and the private key information.

Specifically, in a possible implementation manner of this embodiment, the specific implementation process of this step S502 may include the following steps C1-C3:

Step C1: Generate a hash digest according to the information to be signed;

In this implementation, after obtaining the information m to be signed, the vehicle-mounted sensor to be authenticated can perform data processing on the information m to be signed to generate a hash digest corresponding to the information m to be signed. For example, the SHA256 algorithm can be used Data processing is performed on the signature information m to generate a hash digest.

Step C2: Generate the curve hash value of the hash digest according to the BLS signature algorithm.

In this implementation, after the hash digest is generated in step C1, the hash digest can be further used as the abscissa value of the point according to the BLS signature algorithm to query the corresponding point on the elliptic curve. Generally speaking, an elliptic curve contains 2 ²⁵⁶ points, and the value of the SHA256 algorithm used is also exactly 256 bits. But for a valid abscissa x, one positive and one negative two ordinates y will be correspondingly queried (that is, the coordinates of the two corresponding points are (x, y) and (x, -y)). Therefore, in the query process, there will be a 50% probability that two corresponding points will be found on the elliptic curve, and another 50% probability will not be queried for a single point. In this case, you need to add a random number after the abscissa x After counting, the query is performed again until two corresponding points are queried, and the point with the smaller ordinate y is selected as the final query result to determine the final curve hash value.

Example: As shown in Fig. 6, an elliptic curve y ² =x ³ +7 defined on a finite field modulo 23 is taken as an example. Only half of the abscissa x can find the corresponding point on the elliptic curve. When calculating the curve hash value of the hash digest, in order to ensure that the corresponding point can be found on the elliptic curve, a number (such as 0, 1, 2) can be appended to the hash digest. If the corresponding point is not found, replace it The value of the attachment and re-query. For example, if 0 is appended to the hash digest (hash(m||0) as shown by the arrow on the left in Figure 6) and no corresponding point is found, then continue to try to append 1 to the hash digest (that is, the right in Figure 6). The hash(m||1)) shown by the side arrow, and the addition of 2 (that is, the hash(m||2) shown by the middle arrow in Figure 6) after the hash digest, etc., until two corresponding points are queried , And select the point with the smaller ordinate y as the final query result to determine the final curve hash value, as indicated by H(m) in Figure 6.

Step C3: Generate a signature to be authenticated according to the curve hash value and the private key information.

In this implementation, after the curve hash value H(m) is generated in step C2, the vehicle-mounted sensor to be authenticated can generate the signature S to be authenticated according to the curve hash value H(m) and the private key information sk. The specific calculation formula is The above formula (2), that is, S=sk*H(m), the obtained signature S to be authenticated is still a point on the elliptic curve, as shown in FIG. 7.

S503: Send the signature to be authenticated to the on-board controller, so that the on-board controller authenticates the signature to be authenticated according to the BLS signature algorithm, and obtains the authentication result.

In the embodiment of the present application, after the signature to be certified is generated in step S502, the signature to be certified can be further sent to the on-board controller, so that the on-board controller can authenticate the signature to be certified according to the BLS signature algorithm and public key information, and obtain Authentication result. For the specific implementation process of the on-board controller generating the signature to be authenticated for authentication, please refer to the introduction of step S203 above, which will not be repeated here.

In order to facilitate the understanding of the on-board sensor authentication method provided by this application, refer to FIG. 8, which shows a schematic diagram of the interaction process of the on-board sensor authentication method provided in the embodiment of the present application, which may include the following steps:

S801: The car cloud server obtains the to-be-signed information of the on-board sensor to be authenticated.

S802: The car cloud server generates private key information and public key information of the vehicle-mounted sensor to be authenticated according to the BLS signature algorithm.

S803: The car cloud server sends the information to be signed and the private key information to the vehicle sensor to be authenticated.

S804: The car cloud server sends the public key information to the car controller.

It should be noted that steps S801-S804 are the same as the above steps S401-S404. For details, please refer to the above introduction of steps S401-S404, which will not be repeated here.

S805: The vehicle-mounted sensor to be authenticated generates a signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information.

S806: The on-board sensor to be authenticated sends the signature to be authenticated to the on-board controller.

It should be noted that steps S805-S806 are the same as steps S502-S503 above. For details, please refer to the introduction of steps S502-S503 above, which will not be repeated here.

S807: The on-board controller uses the public key information to authenticate the signature to be authenticated according to the BLS signature algorithm, and obtains the authentication result.

It should be noted that this step S807 is consistent with the above step S203, and for relevant details, please refer to the introduction of the above step S203, which will not be repeated here.

In this way, in the embodiment of the present application, when the vehicle-mounted sensor is authenticated, after the vehicle cloud server obtains the to-be-signed information of the vehicle-mounted sensor to be authenticated, it first generates the private key information and public key information of the vehicle-mounted sensor to be authenticated according to the BLS signature algorithm, and It will send the signature information and private key information to the on-board sensor to be authenticated, and the public key information to the on-board controller; then the on-board sensor to be authenticated can generate the signature to be authenticated according to the BLS signature algorithm, the information to be signed and the private key information, and Send the signature to be authenticated to the on-board controller; in turn, the on-board controller may use the acquired public key information to authenticate the signature to be authenticated according to the BLS signature algorithm to obtain the authentication result. It can be seen that in this application, the car cloud server first generates the private key and public key of the vehicle sensor to be certified and the signature to be certified based on the mature BLS signature algorithm, and then the vehicle controller uses the public key to be certified according to the BLS signature algorithm. The signature to be authenticated generated by the sensor is authenticated to accurately identify the authenticity of the vehicle-mounted sensor to be authenticated. Therefore, compared with the current method of authenticating the sensor device by using an electromagnetic security chip attached to the sensor device, and relying on the communication parties to share the same As far as the method of sensor authentication with the key is concerned, it is possible to achieve fast and accurate authentication of a large number of on-board sensors on the vehicle without adding any hardware, which not only reduces the authentication cost, but also improves the authentication efficiency and accuracy, thereby ensuring Safe driving of intelligent driving vehicles.

Next, an authentication system for a vehicle-mounted sensor provided by an embodiment of the present application will be introduced.

Referring to FIG. 1, the authentication system includes a car cloud server 101, a vehicle-mounted sensor 102 to be authenticated, and a vehicle-mounted controller 103. The vehicle cloud server 101 is connected to the vehicle-mounted sensor 102 to be certified, the vehicle cloud server 101 is connected to the vehicle-mounted controller 103, and the vehicle-mounted sensor 102 to be certified is connected to the vehicle-mounted controller 103. The above-mentioned "connection" may be a direct connection or an indirect connection. Especially for the connection between the car cloud server 101 and the vehicle-mounted sensor 102 to be certified, there may be other provider servers between the vehicle cloud server 101 and the vehicle-mounted sensor 102 to be certified.

Wherein, the car cloud server 101 is used to obtain the information to be signed; generate the private key information and public key information of the vehicle-mounted sensor to be authenticated according to the BLS signature algorithm; send the public key information to the vehicle-mounted controller to be authenticated; send the vehicle-mounted sensor to be authenticated The information to be signed and the private key information; for the specific implementation process, please refer to the introduction of steps S401-S404 above, which will not be repeated here.

The vehicle-mounted sensor 102 to be authenticated is used to generate the signature to be authenticated according to the BLS signature algorithm, the information to be signed and the private key information; send the signature to be authenticated to the on-board controller; please refer to the introduction of steps S501-S503 above for the specific implementation process. I won't repeat them here.

The on-board controller 103 is used to authenticate the signature to be authenticated by using the public key information according to the BLS signature algorithm to obtain the authentication result. For the specific implementation process, please refer to the introduction of steps S201-S203 above, which will not be repeated here.

In a possible implementation of this embodiment, the car cloud server 101 is also used to:

The public key information query interface is opened, so that the vehicle controller 103 can query the public key information of the vehicle sensor to be certified from the vehicle cloud server 101 according to the information to be signed by the vehicle sensor 102 to be certified.

In a possible implementation of this embodiment, the vehicle-mounted sensor 102 to be authenticated is specifically used for:

Generate a hash digest according to the information to be signed; generate a curve hash value of the hash digest according to the BLS signature algorithm; generate a signature to be authenticated according to the curve hash value and private key information.

In a possible implementation of this embodiment, the on-board controller 103 is specifically configured to:

According to the to-be-signed information of the vehicle-mounted sensor 102 to be authenticated, the public key information of the vehicle-mounted sensor to be authenticated is queried from the vehicle cloud server 101.

Receive respective signatures to be certified sent by multiple on-board sensors to be certified; aggregate multiple signatures to be certified to obtain the result of the signature to be certified after aggregation; according to the BLS signature algorithm, use public key information to aggregate the signature to be certified The result is certified, and the certification result is obtained.

Receive the respective signatures to be certified sent by multiple on-board sensors to be certified; aggregate all signatures to be certified in the first group to obtain the signature result of the first group after aggregation; use the public key information according to the BLS signature algorithm, Perform authentication on the first group of aggregated signature results to be authenticated, and obtain authentication results;

Wherein, the number of signatures to be authenticated included in the first group is less than the total number of signatures to be authenticated sent by the received multiple on-board sensors to be authenticated.

The embodiment of the present application also provides another vehicle-mounted sensor authentication system. As shown in FIG. 9, the authentication system includes the vehicle-mounted sensor to be authenticated 901 and the vehicle-mounted controller 902, which can be directly connected or indirectly connected. connect.

Among them, the vehicle-mounted sensor 901 to be authenticated is used to obtain private key information and information to be signed; generate a signature to be authenticated according to the BLS signature algorithm, information to be signed, and private key information; send the signature to be authenticated to the on-board controller 902; specific implementation For the process, please refer to the introduction of steps S501-S503 above, which will not be repeated here. Among them, the private key information and the information to be signed can also be obtained from other cloud servers. The specific obtaining process will not be repeated here.

The on-board controller 902 is used to obtain the public key information of the on-board sensor to be authenticated; according to the BLS signature algorithm, the public key information is used to authenticate the signature to be authenticated to obtain the authentication result. For the specific implementation process, please refer to the introduction of steps S201-S203 above, which will not be repeated here. Among them, the public key information of the vehicle-mounted sensor to be authenticated can also be obtained from other cloud servers, and the specific obtaining process will not be repeated here.

In a possible implementation of this embodiment, the on-board controller 902 is specifically configured to:

According to the information to be signed of the vehicle-mounted sensor to be authenticated 901, the public key information of the vehicle-mounted sensor to be authenticated is queried from the vehicle cloud server.

In a possible implementation of this embodiment, the vehicle-mounted sensor 901 to be authenticated is specifically used for:

In order to facilitate better implementation of the foregoing solutions of the embodiments of the present application, a related device for implementing the foregoing solutions is also provided below. Please refer to FIG. 10, an authentication device 1000 for a vehicle-mounted sensor provided in an embodiment of the present application. The device 1000 may include: an obtaining unit 1001, a receiving unit 1002, and an authentication unit 1003. Wherein, the acquiring unit 1001 is configured to execute S201 in the embodiment shown in FIG. 2. The receiving unit 1002 is configured to execute S202 in the embodiment shown in FIG. 2. The authentication unit 1003 is used to execute S203 in the embodiment shown in FIG. 2. specific,

The obtaining unit 1001 is configured to obtain the public key information of the vehicle-mounted sensor to be authenticated from the car cloud server;

The receiving unit 1002 is configured to receive the signature to be authenticated sent by the vehicle-mounted sensor to be authenticated;

The authentication unit 1003 is used to authenticate the signature to be authenticated by using public key information according to the BLS signature algorithm to obtain an authentication result.

In an implementation of this embodiment, the acquiring unit 1001 is specifically configured to query the public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server according to the to-be-signed information of the vehicle-mounted sensor to be authenticated.

In an implementation of this embodiment, the public key information is associated with the batch information of the sensor to be authenticated.

In an implementation of this embodiment, the signature to be authenticated is generated by the sensor to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information of the sensor to be authenticated; where the private key information is generated by the car cloud server according to the BLS signature algorithm .

In an implementation of this embodiment, the receiving unit 1002 is specifically configured to: receive respective signatures to be authenticated sent by a plurality of on-board sensors to be authenticated; the authentication unit 1003 includes:

The first aggregation subunit is used to aggregate a plurality of signatures to be verified to obtain an aggregated signature result to be verified;

The first authentication subunit is used to authenticate the aggregated signature result to be authenticated by using the public key information according to the BLS signature algorithm to obtain the authentication result.

The second aggregation subunit is used to aggregate all signatures to be authenticated in the first group to obtain the signature result to be authenticated after aggregation of the first group;

The second authentication subunit is used to authenticate the first group of aggregated signature results to be authenticated by using the public key information according to the BLS signature algorithm to obtain the authentication result;

In summary, in the authentication device for a vehicle-mounted sensor provided in this embodiment, when the vehicle-mounted sensor is authenticated, the vehicle-mounted controller first obtains the public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server, and then receives the information sent by the vehicle-mounted sensor to be authenticated. Signature to be authenticated; in turn, the on-board controller can use the acquired public key information to authenticate the signature to be authenticated according to the BLS signature algorithm to obtain the authentication result. It can be seen that, because the on-board controller in this application uses the public key obtained from the car cloud server to authenticate the signature to be authenticated according to the mature BLS signature algorithm, so as to accurately identify the authenticity of the on-board sensor to be authenticated. Therefore, compared with At present, the method of authenticating the sensor device using the electromagnetic security chip attached to the sensor device and the method of relying on the two communicating parties to share the same key for sensor authentication can realize the detection of a large number of on-board sensors on the vehicle without adding any hardware. Fast and accurate certification not only reduces certification costs, but also improves certification efficiency and accuracy, thereby ensuring the safe driving of intelligent driving vehicles.

In order to facilitate better implementation of the foregoing solutions of the embodiments of the present application, another related device for implementing the foregoing solutions is also provided below. Please refer to FIG. 11, another vehicle-mounted sensor authentication device 1100 provided in an embodiment of the present application. The apparatus 1100 may include: an acquiring unit 1101, a generating unit 1102, a first sending unit 1103, and a second sending unit 1104. The acquiring unit 1101 is configured to execute S401 in the embodiment shown in FIG. 4. The generating unit 1102 is configured to execute S402 in the embodiment shown in FIG. 4. The first sending unit 1103 is configured to execute S403 in the embodiment shown in FIG. 4. The second sending unit 1104 is configured to execute S404 in the embodiment shown in FIG. 4. specific,

The obtaining unit 1101 is configured to obtain the to-be-signed information of the vehicle-mounted sensor to be authenticated;

The generating unit 1102 is configured to generate the private key information and public key information of the vehicle-mounted sensor to be authenticated according to the BLS signature algorithm;

The first sending unit 1103 is used to send the information to be signed and the private key information to the vehicle-mounted sensor to be authenticated, so that the vehicle-mounted sensor to be authenticated generates the signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information and sends it to the vehicle-mounted controller. Certified signature

The second sending unit 1104 is configured to send the public key information to the on-board controller, so that the on-board controller authenticates the signature to be authenticated according to the BLS signature algorithm and the public key information, and obtains the authentication result.

In an implementation of this embodiment, the device further includes: an opening unit configured to open the public key information query interface, so that the on-board controller can query the vehicle cloud server to be authenticated according to the to-be-signed information of the on-board sensor to be authenticated Public key information of on-board sensors.

In order to facilitate better implementation of the foregoing solutions of the embodiments of the present application, another related device for implementing the foregoing solutions is also provided below. Please refer to FIG. 12, which is yet another vehicle-mounted sensor authentication device 1200 provided by an embodiment of the present application. The apparatus 1200 may include: an obtaining unit 1201, a generating unit 1202, and a sending unit 1203. Wherein, the acquiring unit 1201 is configured to execute S501 in the embodiment shown in FIG. 5. The generating unit 1202 is configured to execute S502 in the embodiment shown in FIG. 5. The sending unit 1203 is configured to execute S503 in the embodiment shown in FIG. 5. specific,

The obtaining unit 1201 is configured to obtain the private key information of the vehicle-mounted sensor to be authenticated and the information to be signed;

The generating unit 1202 is configured to generate the signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information;

The sending unit 1203 is configured to send the signature to be authenticated to the on-board controller, so that the on-board controller authenticates the signature to be authenticated according to the BLS signature algorithm, and obtains the authentication result.

In an implementation of this embodiment, the obtaining unit 1201 is specifically configured to obtain the private key information of the vehicle-mounted sensor to be authenticated sent by the car cloud server, where the private key information is generated by the car cloud server according to the BLS signature algorithm.

In an implementation manner of this embodiment, the generating unit 1202 includes:

The first generating subunit is used to generate a hash digest according to the information to be signed;

The second generating subunit is used to generate the curve hash value of the hash digest according to the BLS signature algorithm;

The third generation subunit is used to generate the signature to be authenticated according to the curve hash value and the private key information.

Referring to FIG. 13, an embodiment of the present application provides a vehicle-mounted sensor authentication device 1300. The device includes a memory 1301, a processor 1302, and a communication interface 1303.

The memory 1301 is used to store instructions;

The processor 1302 is configured to execute instructions in the memory 1301, and execute the above-mentioned authentication method applied to the vehicle-mounted sensor in the embodiment shown in FIG. 2;

The communication interface 1303 is used for communication.

The memory 1301, the processor 1302, and the communication interface 1303 are connected to each other through a bus 1304; the bus 1304 can be a peripheral component interconnect standard (PCI) bus or an extended industry standard architecture (EISA) bus Wait. The bus can be divided into address bus, data bus, control bus and so on. For ease of presentation, only one thick line is used in FIG. 13, but it does not mean that there is only one bus or one type of bus.

In a specific embodiment, the processor 1302 is configured to perform the authentication of the vehicle-mounted sensor, the vehicle-mounted controller first obtains the public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server, and then receives the to-be-authenticated signature sent by the vehicle-mounted sensor to be authenticated; The vehicle-mounted controller may use the obtained public key information to authenticate the signature to be authenticated according to the BLS signature algorithm to obtain the authentication result. For the detailed processing process of the processor 1302, please refer to the detailed description of S201, S202, and S203 in the embodiment shown in FIG. 2, which will not be repeated here.

Referring to FIG. 14, an embodiment of the present application provides another vehicle-mounted sensor authentication device 1400. The device includes a memory 1401, a processor 1402, and a communication interface 1403.

The memory 1401 is used to store instructions;

The processor 1402 is configured to execute instructions in the memory 1401, and execute the above-mentioned authentication method applied to the vehicle-mounted sensor in the embodiment shown in FIG. 4;

The communication interface 1403 is used for communication.

The memory 1401, the processor 1402, and the communication interface 1403 are connected to each other through a bus 1404; the bus 1404 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus Wait. The bus can be divided into address bus, data bus, control bus and so on. For ease of representation, only one thick line is used in FIG. 14, but it does not mean that there is only one bus or one type of bus.

In a specific embodiment, the processor 1402 is configured to perform the authentication of the vehicle-mounted sensor, the vehicle cloud server first obtains the information to be signed for the vehicle-mounted sensor to be authenticated, and then generates the private key information and the public key of the vehicle-mounted sensor to be authenticated according to the BLS signature algorithm Information, and then can send to the vehicle-mounted sensor to be authenticated the information to be signed and the private key information, so that the vehicle-mounted sensor to be authenticated generates the signature to be authenticated according to the BLS signature algorithm, the information to be signed and the private key information and sends the signature to be authenticated to the on-board controller ; At the same time, the car cloud server can also send public key information to the on-board controller, so that the on-board controller can authenticate the signature to be authenticated according to the BLS signature algorithm and the public key information, and obtain the authentication result. For the detailed processing process of the processor 1402, please refer to the detailed description of S401, S402, S403, and S204 in the embodiment shown in FIG. 4, which will not be repeated here.

Referring to FIG. 15, an embodiment of the present application provides yet another vehicle-mounted sensor authentication device 1500. The device includes a memory 1501, a processor 1502, and a communication interface 1503.

The memory 1501 is used to store instructions;

The processor 1502 is configured to execute instructions in the memory 1501, and execute the above-mentioned authentication method applied to the vehicle-mounted sensor in the embodiment shown in FIG. 5;

The communication interface 1503 is used for communication.

The memory 1501, the processor 1502, and the communication interface 1503 are connected to each other through a bus 1504; the bus 1504 can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus Wait. The bus can be divided into address bus, data bus, control bus and so on. For ease of representation, only one thick line is used in FIG. 15 to represent it, but it does not mean that there is only one bus or one type of bus.

In a specific embodiment, the processor 1502 is configured to perform the authentication of the on-board sensor, the on-board sensor to be authenticated first obtains the private key information and the information to be signed, and then generates the signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information. Then, the signature to be authenticated can be sent to the on-board controller, so that the on-board controller can authenticate the signature to be authenticated according to the BLS signature algorithm to obtain the authentication result. For the detailed processing process of the processor 1502, please refer to the detailed description of S501, S502, and S503 in the embodiment shown in FIG. 5, which will not be repeated here.

The foregoing memory 1301, memory 1401, and memory 1501 may be random-access memory (RAM), flash memory (flash), read only memory (ROM), erasable programmable read-only memory (erasable). programmable read only memory (EPROM), electrically erasable programmable read-only memory (electrically erasable programmable read only memory, EEPROM), register (register), hard disk, mobile hard disk, CD-ROM or any other known to those skilled in the art Form of storage media.

The aforementioned processor 1302, processor 1402, and processor 1502 may be, for example, a central processing unit (CPU), a general-purpose processor, a digital signal processor (digital signal processor, DSP), and an application-specific integrated circuit (application-specific integrated circuit). circuit, ASIC), field programmable gate array (field programmable gate array, FPGA) or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. It can implement or execute various exemplary logical blocks, modules, and circuits described in conjunction with the disclosure of this application. The processor may also be a combination of computing functions, for example, a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and so on.

The aforementioned communication interface 1303, communication interface 1403, and communication interface 1503 may be, for example, an interface card, etc., and may be an ethernet interface or an asynchronous transfer mode (ATM) interface.

The embodiment of the present application also provides a computer-readable storage medium, including instructions, which when run on a computer, cause the computer to execute the above-mentioned vehicle-mounted sensor authentication method.

The terms "first", "second", "third", "fourth", etc. (if any) in the description and claims of this application and the above-mentioned drawings are used to distinguish similar objects, without having to use To describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances so that the embodiments described herein can be implemented in a sequence other than the content illustrated or described herein. In addition, the terms "including" and "having" and any variations of them are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or device that includes a series of steps or units is not necessarily limited to those clearly listed. Those steps or units may include other steps or units that are not clearly listed or are inherent to these processes, methods, products, or equipment.

Those skilled in the art can clearly understand that, for the convenience and conciseness of the description, the specific working process of the above-described system, device, and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed system, device, and method can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division, and there may be other divisions in actual implementation, for example, multiple units or components may be combined or It can be integrated into another system, or some features can be ignored or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.

In addition, the functional units in the various embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or software functional unit.

If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium. , Including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disks or optical disks and other media that can store program codes. .

Those skilled in the art should be aware that, in one or more of the above examples, the functions described in the present invention can be implemented by hardware, software, firmware, or any combination thereof. When implemented by software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or codes on the computer-readable medium. The computer-readable medium includes a computer storage medium and a communication medium, where the communication medium includes any medium that facilitates the transfer of a computer program from one place to another. The storage medium may be any available medium that can be accessed by a general-purpose or special-purpose computer.

The specific embodiments described above further describe the objectives, technical solutions and beneficial effects of the present invention in further detail. It should be understood that the above descriptions are only specific embodiments of the present invention.

As mentioned above, the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: The technical solutions recorded in the embodiments are modified, or some of the technical features are equivalently replaced; these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

An authentication method for vehicle-mounted sensors, characterized in that the method includes:

Obtain the public key information of the vehicle-mounted sensor to be authenticated from the car cloud server;

Receiving the to-be-verified signature sent by the to-be-verified on-board sensor;

According to the BLS signature algorithm, the public key information is used to authenticate the signature to be authenticated, and the authentication result is obtained.
The method according to claim 1, wherein the obtaining the public key information of the vehicle-mounted sensor to be authenticated from the vehicle cloud server comprises:

According to the to-be-signed information of the vehicle-mounted sensor to be authenticated, the public key information of the vehicle-mounted sensor to be authenticated is queried from the vehicle cloud server.
The method according to claim 1, wherein the public key information is associated with batch information of the sensor to be authenticated.
The method according to claim 1, wherein the signature to be authenticated is generated by the sensor to be authenticated according to the BLS signature algorithm, information to be signed, and private key information of the sensor to be authenticated; the private key The information is generated by the car cloud server according to the BLS signature algorithm.
The method according to claim 1, wherein the receiving the signature to be authenticated sent by the on-board sensor to be authenticated comprises: receiving respective signatures to be authenticated sent by a plurality of the on-board sensors to be authenticated;

The step of using the public key information to authenticate the signature to be authenticated according to the BLS signature algorithm to obtain an authentication result includes:

Aggregating the multiple signatures to be verified to obtain an aggregated signature result to be verified;

According to the BLS signature algorithm, the public key information is used to authenticate the aggregated signature result to be authenticated, and the authentication result is obtained.
The method according to claim 1, wherein the receiving the signature to be authenticated sent by the on-board sensor to be authenticated comprises: receiving respective signatures to be authenticated sent by a plurality of the on-board sensors to be authenticated;

The step of using the public key information to authenticate the signature to be authenticated according to the BLS signature algorithm to obtain an authentication result includes:

Aggregate all signatures to be verified in the first group to obtain a signature result to be verified after aggregation of the first group;

According to the BLS signature algorithm, the public key information is used to authenticate the first group of aggregated signature results to be authenticated to obtain an authentication result;

Wherein, the number of signatures to be authenticated included in the first group is less than the total number of signatures to be authenticated sent by the received plurality of vehicle-mounted sensors to be authenticated.
An authentication method for vehicle-mounted sensors, characterized in that the method includes:

Obtain the information to be signed of the vehicle-mounted sensor to be authenticated;

Generating the private key information and public key information of the vehicle-mounted sensor to be authenticated according to the BLS signature algorithm;

Send the information to be signed and the private key information to the vehicle-mounted sensor to be authenticated, so that the vehicle-mounted sensor to be authenticated generates a signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information. Sending the signature to be authenticated to the on-board controller;

The public key information is sent to the on-board controller, so that the on-board controller authenticates the signature to be authenticated according to the BLS signature algorithm and the public key information, and obtains an authentication result.
The method according to claim 7, wherein the method further comprises:

The public key information query interface is opened, so that the on-board controller can query the public key information of the on-board sensor to be authenticated from the car cloud server based on the on-board sensor to be authenticated.
An authentication method for vehicle-mounted sensors, characterized in that the method includes:

Obtain the private key information of the vehicle-mounted sensor to be authenticated and the information to be signed;

Generating a signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information;

Send the signature to be authenticated to the on-board controller, so that the on-board controller authenticates the signature to be authenticated according to the BLS signature algorithm to obtain an authentication result.
The method according to claim 9, wherein the obtaining the private key information of the vehicle-mounted sensor to be authenticated comprises:

Acquire the private key information of the vehicle-mounted sensor to be authenticated sent by the vehicle cloud server, where the private key information is generated by the vehicle cloud server according to the BLS signature algorithm.
The method according to claim 9, wherein the generating the signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information comprises:

Generating a hash digest according to the information to be signed;

Generating the curve hash value of the hash digest according to the BLS signature algorithm;

Generate a signature to be authenticated according to the curve hash value and the private key information.
A vehicle-mounted sensor authentication system, characterized in that the system includes: a vehicle cloud server, a vehicle-mounted sensor to be certified, and a vehicle-mounted controller;

The vehicle cloud server is configured to obtain information to be signed; generate private key information and public key information of the vehicle-mounted sensor to be authenticated according to the BLS signature algorithm; send the public key information to the vehicle-mounted controller to be verified; The vehicle-mounted sensor to be authenticated sends the information to be signed and the private key information;

The vehicle-mounted sensor to be verified is configured to generate a signature to be verified according to the BLS signature algorithm, the information to be signed, and the private key information; send the signature to be verified to the vehicle controller;

The vehicle-mounted controller is configured to authenticate the signature to be authenticated by using the public key information according to the BLS signature algorithm, and obtain an authentication result.
The system according to claim 12, wherein the car cloud server is further used for:

The public key information query interface is opened, so that the on-board controller can query the public key information of the on-board sensor to be authenticated from the car cloud server based on the on-board sensor to be authenticated.
The system according to claim 12, wherein the vehicle-mounted sensor to be authenticated is specifically used for:

Generate a hash digest according to the information to be signed; generate a curve hash value of the hash digest according to the BLS signature algorithm; generate a signature to be authenticated according to the curve hash value and the private key information.
The system according to claim 12, wherein the on-board controller is specifically used for:

According to the to-be-signed information of the vehicle-mounted sensor to be authenticated, the public key information of the vehicle-mounted sensor to be authenticated is queried from the vehicle cloud server.
The system according to claim 12, wherein the on-board controller is specifically used for:

Receive the respective signatures to be certified sent by the plurality of on-board sensors to be certified; aggregate the signatures to be certified to obtain the aggregated signature result to be certified; use the public key information according to the BLS signature algorithm , To authenticate the aggregated signature result to be authenticated, and obtain an authentication result.
The system according to claim 12, wherein the on-board controller is specifically used for:

Receive the respective signatures to be certified sent by the plurality of on-board sensors to be certified; aggregate all signatures to be certified in the first group to obtain the signature result to be certified after the aggregation of the first group; according to the BLS signature algorithm , Using the public key information to authenticate the first group of aggregated signature results to be authenticated to obtain an authentication result;

Wherein, the number of signatures to be authenticated included in the first group is less than the total number of signatures to be authenticated sent by the received plurality of vehicle-mounted sensors to be authenticated.
A vehicle-mounted sensor authentication system, characterized in that the system includes: a vehicle-mounted sensor to be authenticated and a vehicle-mounted controller;

The vehicle-mounted sensor to be authenticated is used to obtain private key information and information to be signed; generate a signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information; and send the to-be-authenticated controller to the vehicle controller sign;

The on-board controller is used to obtain the public key information of the on-board sensor to be authenticated; according to the BLS signature algorithm, the public key information is used to authenticate the signature to be authenticated, and the authentication result is obtained.
The system according to claim 18, wherein the on-board controller is specifically used for:

According to the information to be signed of the vehicle-mounted sensor to be authenticated, the public key information of the vehicle-mounted sensor to be authenticated is queried from the vehicle cloud server.
The system according to claim 18, wherein the vehicle-mounted sensor to be authenticated is specifically used for:

Generate a hash digest according to the information to be signed; generate a curve hash value of the hash digest according to a BLS signature algorithm; generate a signature to be authenticated according to the curve hash value and the private key information.
The system according to claim 18, wherein the on-board controller is specifically used for:

Receive the respective signatures to be certified sent by the plurality of on-board sensors to be certified; aggregate the signatures to be certified to obtain the aggregated signature result to be certified; use the public key information according to the BLS signature algorithm , To authenticate the aggregated signature result to be authenticated, and obtain an authentication result.
The system according to claim 18, wherein the on-board controller is specifically used for:

Receive the respective signatures to be certified sent by the plurality of on-board sensors to be certified; aggregate all signatures to be certified in the first group to obtain the signature result to be certified after the aggregation of the first group; according to the BLS signature algorithm , Using the public key information to authenticate the first group of aggregated signature results to be authenticated to obtain an authentication result;

Wherein, the number of signatures to be authenticated included in the first group is less than the total number of signatures to be authenticated sent by the received plurality of vehicle-mounted sensors to be authenticated.
A vehicle-mounted sensor authentication device, characterized in that the device includes:

The obtaining unit is used to obtain the public key information of the vehicle-mounted sensor to be authenticated from the car cloud server;

A receiving unit, configured to receive a signature to be authenticated sent by the vehicle-mounted sensor to be authenticated;

The authentication unit is configured to authenticate the signature to be authenticated by using the public key information according to the BLS signature algorithm to obtain an authentication result.
The device according to claim 23, wherein the acquiring unit is specifically configured to:

According to the to-be-signed information of the vehicle-mounted sensor to be authenticated, the public key information of the vehicle-mounted sensor to be authenticated is queried from the vehicle cloud server.
The device according to claim 23, wherein the public key information is associated with batch information of the sensor to be authenticated.
The device according to claim 23, wherein the signature to be authenticated is generated by the sensor to be authenticated according to the BLS signature algorithm, information to be signed, and private key information of the sensor to be authenticated; the private key The information is generated by the car cloud server according to the BLS signature algorithm.
The device according to claim 23, wherein the receiving unit is specifically configured to: receive respective signatures to be authenticated sent by a plurality of on-board sensors to be authenticated; the authentication unit comprises:

The first aggregation subunit is used to aggregate the multiple signatures to be authenticated to obtain an aggregated signature result to be authenticated;

The first authentication subunit is configured to use the public key information to authenticate the aggregated signature result to be authenticated according to the BLS signature algorithm to obtain the authentication result.
The device according to claim 23, wherein the receiving unit is specifically configured to: receive respective signatures to be authenticated sent by a plurality of on-board sensors to be authenticated; the authentication unit comprises:

The second aggregation subunit is used to aggregate all signatures to be authenticated in the first group to obtain the signature result to be authenticated after aggregation of the first group;

The second authentication subunit is configured to authenticate the first group of aggregated signature results to be authenticated by using the public key information according to the BLS signature algorithm to obtain an authentication result;

Wherein, the number of signatures to be authenticated included in the first group is less than the total number of signatures to be authenticated sent by the received plurality of vehicle-mounted sensors to be authenticated.
A vehicle-mounted sensor authentication device, characterized in that the device includes:

The obtaining unit is used to obtain the to-be-signed information of the vehicle-mounted sensor to be authenticated;

A generating unit, configured to generate private key information and public key information of the vehicle-mounted sensor to be authenticated according to the BLS signature algorithm;

The first sending unit is configured to send the information to be signed and the private key information to the on-board sensor to be authenticated, so that the on-board sensor to be authenticated is based on the BLS signature algorithm, the information to be signed, and the private key. Key information to generate a signature to be verified and send the signature to be verified to the vehicle controller;

The second sending unit is configured to send the public key information to the on-board controller, so that the on-board controller authenticates the signature to be authenticated according to the BLS signature algorithm and the public key information, and obtains authentication result.
The device according to claim 29, wherein the device further comprises:

The opening unit is configured to open the public key information query interface, so that the on-board controller can query the public key information of the on-board sensor to be authenticated from the car cloud server according to the on-board sensor to be authenticated information to be signed.
A vehicle-mounted sensor authentication device, characterized in that the device includes:

The obtaining unit is used to obtain the private key information of the vehicle-mounted sensor to be authenticated and the information to be signed;

A generating unit, configured to generate a signature to be authenticated according to the BLS signature algorithm, the information to be signed, and the private key information;

The sending unit is configured to send the signature to be authenticated to the onboard controller, so that the onboard controller authenticates the signature to be authenticated according to the BLS signature algorithm to obtain the authentication result.
The device according to claim 31, wherein the acquiring unit is specifically configured to:

Acquire the private key information of the vehicle-mounted sensor to be authenticated sent by the vehicle cloud server, where the private key information is generated by the vehicle cloud server according to the BLS signature algorithm.
The device according to claim 31, wherein the generating unit comprises:

The first generating subunit is configured to generate a hash digest according to the information to be signed;

The second generating subunit is configured to generate the curve hash value of the hash digest according to the BLS signature algorithm;

The third generation subunit is used to generate a signature to be authenticated according to the curve hash value and the private key information.
An authentication device for vehicle-mounted sensors, characterized in that the device includes a memory and a processor;

The memory is used to store instructions;

The processor is configured to execute the instructions in the memory, and execute the method according to any one of claims 1-6.
An authentication device for vehicle-mounted sensors, characterized in that the device includes a memory and a processor;

The memory is used to store instructions;

The processor is configured to execute the instructions in the memory, and execute the method according to any one of claims 7-8.
An authentication device for vehicle-mounted sensors, characterized in that the device includes a memory and a processor;

The memory is used to store instructions;

The processor is configured to execute the instructions in the memory, and execute the method according to any one of claims 9-11.
A computer-readable storage medium, including instructions, which when run on a computer, cause the computer to execute the method according to any one of claims 1-11.