WO2022206107A1

WO2022206107A1 - V2x signature verification method and apparatus, electronic device, and readable storage medium

Info

Publication number: WO2022206107A1
Application number: PCT/CN2022/071406
Authority: WO
Inventors: 林云龙; 游奕航
Original assignee: 荣耀终端有限公司
Priority date: 2021-03-29
Filing date: 2022-01-11
Publication date: 2022-10-06
Also published as: CN113795008A; CN113795008B

Abstract

The present application is applicable to the technical field of terminal, and provides a V2X signature verification method and apparatus, an electronic device, and a readable storage medium. The V2X signature verification method comprises: obtaining the signature verification load state of a security chip; and when the signature verification load state is high load, sending to the security chip a subsequently received first V2X message that complies with a preset filtering rule and performing signature verification. After filtering V2X messages, the number of V2X messages that must undergo signature verification by the security chip is reduced, which reduces the pressure of signature verification on the security chip and improves the processing efficiency of V2X messages.

Description

V2X signature verification method, device, electronic device and readable storage medium

This application claims the priority of the Chinese patent application filed with the State Intellectual Property Office on March 29, 2021, the application number is 202110338299.1, and the application name is "V2X signature verification method, device, electronic equipment and readable storage medium", all of which are The contents are incorporated herein by reference.

technical field

The present application relates to the field of terminals, and in particular, to a V2X signature verification method, apparatus, electronic device, and readable storage medium.

Background technique

Vehicle-to-Everything (V2X) is an in-vehicle application that interconnects vehicles with the outside world. When V2X communication is directly performed between two V2X devices, the communication can be performed based on the PC5 communication interface, and the PC5 communication interface realizes communication based on a broadcast device-to-device (Device-to-Device, D2D) message. In this communication system, information security assurance is realized by means of digital certificate authority (Certification Authority, CA) certificate signature.

In the prior art, the security chip performs certificate verification on all received V2X messages, and only the V2X messages that pass the signature verification can continue to be processed.

However, when the V2X message received in a short period of time is too large, the verification pressure of the security chip is large, and the verification efficiency is reduced, resulting in a reduction in the processing efficiency of the V2X message.

SUMMARY OF THE INVENTION

The embodiments of the present application provide a V2X signature verification method, device, electronic device, and readable storage medium, which can improve the security chip verification pressure when the received V2X message is too large in a short period of time, and the signature verification The efficiency is reduced, which leads to the problem that the processing efficiency of the V2X message is reduced.

In a first aspect, an embodiment of the present application provides a V2X signature verification method, which is applied to an electronic device. The electronic device is provided with a security chip. The method includes: acquiring a signature verification load state of the security chip. When the signature verification load state is a high load, the subsequently received first V2X message that complies with the preset filtering rule is sent to the security chip for signature verification.

The V2X signature verification method provided in this application can be applied to electronic devices capable of sending and receiving V2X messages, such as on-board equipment (On Board Equipment, OBE), smartphones with V2X functions, tablet computers, wearable devices, customized terminals, etc.

In the first aspect, after it is determined that the signature verification load status of the electronic device is high, only the first V2X message that meets the preset filtering rule among the subsequently received V2X messages is sent to the security chip for signature verification. The number of V2X messages subject to signature verification is reduced, which relieves the security chip's signature verification pressure, improves signature verification efficiency, and improves the processing efficiency of V2X messages.

In some embodiments, acquiring the signature verification load status of the security chip includes: receiving signature verification load information from the security chip. When the signature verification load information indicates that the signature verification load of the security chip is greater than the first load threshold, it is determined that the signature verification load state is a high load.

In some embodiments, acquiring the signature verification load status of the security chip includes: acquiring the signature verification duration for the security chip to perform signature verification on the V2X message. When the signature verification duration is greater than the first signature verification time threshold, it is determined that the signature verification load state is a high load.

In some embodiments, acquiring the signature verification duration of the V2X message performed by the security chip includes: acquiring the first timestamp when the V2X message is sent to the security chip. Receive the signature verification result of the V2X message returned by the security chip, and obtain the second timestamp when the signature verification result of the V2X message is received. The signature verification duration is the time difference between the first timestamp and the second timestamp.

In some embodiments, the method of determining the first V2X message that complies with the preset filtering rule includes: acquiring the priority level of at least one V2X message with the same sender identifier received. A V2X message with a priority level higher than the first priority threshold in at least one V2X message is determined as the first V2X message.

In some embodiments, the method further includes: when the received multiple first V2X messages include N second V2X messages with the same priority, sending M second V2X messages to the security chip, where M is less than N.

In some embodiments, the method of determining the first V2X message that complies with the preset filtering rule further includes: determining the priority level and sender distance of at least one V2X message received. A V2X message whose sender distance is greater than the preset distance threshold and whose priority level is higher than the second priority threshold in at least one V2X message is determined to be the first V2X message. And, the V2X message whose sender distance is less than or equal to the distance threshold is the first V2X message.

In some embodiments, the method of determining the first V2X message that complies with the preset filtering rule includes: determining that the non-high-risk message in the received at least one V2X message is the first V2X message, and the sender identifier of the non-high-risk message is the same as the high-risk message. The senders of risk messages have different identifiers, and high-risk messages are V2X messages that have not passed the security chip verification.

In some embodiments, the method further includes: when the signature verification load state is low load, sending all subsequent received V2X messages to the security chip for signature verification.

In some embodiments, acquiring the signature verification load status when the security chip performs signature verification on the received V2X message includes: receiving signature verification load information from the security chip. When the signature verification load information indicates that the signature verification load of the security chip is less than the second load threshold, it is determined that the signature verification load state is a low load.

In some embodiments, acquiring the signature verification load status when the security chip performs signature verification on the received V2X message includes: acquiring the signature verification duration for the security chip to perform signature verification on the V2X message. When the signature verification duration is less than the second signature verification time threshold, it is determined that the signature verification load state is low load.

In a second aspect, an embodiment of the present application provides a V2X signature verification device, including: an acquisition module configured to acquire the signature verification load status of the security chip. A sending module, configured to send the subsequently received first V2X message conforming to the preset filtering rule to the security chip for signature verification when the signature verification load state is high load.

In some embodiments, the acquisition module is specifically configured to receive the signature verification payload information from the security chip. When the signature verification load information indicates that the signature verification load of the security chip is greater than the first load threshold, it is determined that the signature verification load state is a high load.

In some embodiments, the acquiring module is specifically configured to acquire the signature verification duration for the security chip to perform signature verification on the V2X message. When the signature verification duration is greater than the first signature verification time threshold, it is determined that the signature verification load state is a high load.

In some embodiments, the obtaining module is specifically configured to obtain the first timestamp when the V2X message is sent to the security chip. Receive the signature verification result of the V2X message returned by the security chip, and obtain the second timestamp when the signature verification result of the V2X message is received. The signature verification duration is the time difference between the first timestamp and the second timestamp.

In some embodiments, the sending module is specifically configured to acquire the priority level of at least one V2X message with the same sender identifier. A V2X message with a priority level higher than the first priority threshold in at least one V2X message is determined as the first V2X message.

In some embodiments, the sending module is further configured to send M second V2X messages to the security chip when the received multiple first V2X messages include N second V2X messages with the same priority, where M is less than N. .

In some embodiments, the sending module is further configured to determine the priority level and the distance to the sender of the received at least one V2X message. A V2X message whose sender distance is greater than the preset distance threshold and whose priority level is higher than the second priority threshold in at least one V2X message is determined to be the first V2X message. And, the V2X message whose sender distance is less than or equal to the distance threshold is the first V2X message.

In some embodiments, the sending module is further configured to determine that a non-high-risk message in the received at least one V2X message is the first V2X message, and the sender identifier of the non-high-risk message is different from that of the high-risk message, and the high-risk message is different from the sender identifier of the high-risk message. The message is a V2X message that fails the security chip verification.

In some embodiments, the sending module is further configured to send all subsequent received V2X messages to the security chip for signature verification when the signature verification load state is low load.

In some embodiments, the acquisition module is further configured to receive signature verification load information from the security chip. When the signature verification load information indicates that the signature verification load of the security chip is less than the second load threshold, it is determined that the signature verification load state is a low load.

In some embodiments, the acquiring module is further configured to acquire the signature verification duration for the security chip to perform signature verification on the V2X message. When the signature verification duration is less than the second signature verification time threshold, it is determined that the signature verification load state is low load.

In a third aspect, an embodiment of the present application provides an electronic device, including a memory, a processor, a security chip, and a computer program stored in the memory and running on the processor. When the processor executes the computer program, the security chip implements the following: The method provided by the first aspect.

In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, where the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method provided in the first aspect is implemented.

In a fifth aspect, an embodiment of the present application provides a computer program product, which enables the terminal device to execute the method provided in the first aspect when the computer program product runs on a terminal device.

In a sixth aspect, an embodiment of the present application provides a chip system, the chip system includes a memory and a processor, and the processor executes a computer program stored in the memory to implement the method provided in the first aspect.

In a seventh aspect, an embodiment of the present application provides a chip system, the chip system includes a processor, the processor is coupled to the computer-readable storage medium provided in the fourth aspect, and the processor executes a computer program stored in the computer-readable storage medium, to implement the method provided in the first aspect.

It can be understood that, for the beneficial effects of the foregoing second aspect to the seventh aspect, reference may be made to the relevant descriptions in the foregoing first aspect, which will not be repeated here.

Description of drawings

1 is a schematic diagram of an application scenario of the V2X signature verification method provided by an embodiment of the present application;

FIG. 2 is a schematic structural diagram of an electronic device for V2X message signature verification provided by an embodiment of the present application;

3 is a schematic flowchart of a V2X security chip signature verification provided by an embodiment of the present application;

4 is a schematic flowchart of a V2X signature verification method provided by an embodiment of the present application;

5 is a schematic flowchart of another V2X signature verification method provided by an embodiment of the present application;

6 is a schematic flowchart of another V2X signature verification method provided by an embodiment of the present application;

7 is a schematic structural diagram of a V2X signature verification device provided by an embodiment of the present application;

FIG. 8 is a schematic structural diagram of an electronic device according to an embodiment of the present application.

Detailed ways

In the following description, for the purpose of illustration rather than limitation, specific details such as a specific system structure and technology are set forth in order to provide a thorough understanding of the embodiments of the present application. However, it will be apparent to those skilled in the art that the present application may be practiced in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present application with unnecessary detail.

It should be understood that, as used in this specification and the appended claims, the term "and/or" refers to and including any and all possible combinations of one or more of the associated listed items.

As used in the specification of this application and the appended claims, the term "if" may be contextually interpreted as "when" or "once" or "in response to determining" or "in response to detecting ".

In addition, in the description of the specification of the present application and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the description, and should not be construed as indicating or implying relative importance.

References in this specification to "one embodiment" or "some embodiments" and the like mean that a particular feature, structure or characteristic described in connection with the embodiment is included in one or more embodiments of the present application. Thus, appearances of the phrases "in one embodiment," "in some embodiments," "in other embodiments," "in other embodiments," etc. in various places in this specification are not necessarily All refer to the same embodiment, but mean "one or more but not all embodiments" unless specifically emphasized otherwise. The terms "including", "including", "having" and their variants mean "including but not limited to" unless specifically emphasized otherwise.

FIG. 1 shows a schematic diagram of an application scenario of a V2X signature verification method.

For convenience of description, in FIG. 1 , the vehicles are divided into a vehicle 11 that receives a V2X message and a vehicle 12 that sends a V2X message. However, it should be noted that both the vehicle 11 receiving the V2X message and the vehicle 12 sending the V2X message have the functions of sending and receiving the V2X message. Under certain circumstances, the vehicle 11 receiving the V2X message and the vehicle 12 sending the V2X message may transition. For example, the vehicle that originally sent the V2X message receives the V2X message, or the vehicle that originally received the V2X message sends the V2X message, etc.

In FIG. 1 , multiple vehicles 12 sending V2X messages broadcast V2X messages, and vehicles 11 receiving V2X messages receive the broadcast V2X messages. After receiving the V2X message, the V2X message is verified by the security chip installed in the electronic device in the vehicle. The V2X message is processed only after the V2X message has passed the signature verification.

When the number of vehicles 12 sending V2X messages is too large, the number of V2X messages received by the vehicles 11 receiving V2X messages is large, the pressure on the security chip to verify V2X message signatures increases, and the signature verification efficiency decreases, resulting in the processing efficiency of V2X messages reduce.

To this end, the present application provides a V2X signature verification method, which includes: an electronic device performs signature verification on a received V2X message through a security chip. After determining that the electronic device's signature verification load state is high load, the electronic device performs signature verification on part of the V2X messages in the received V2X messages according to a preset filtering rule.

In the present application, after it is determined that the signature verification load status of the electronic device is a high load, the received V2X messages are filtered through a preset filtering rule. The security chip only needs to verify the signature of some of the received V2X messages. The number of V2X messages subject to signature verification is reduced, which relieves the security chip's signature verification pressure, improves signature verification efficiency, and improves the processing efficiency of V2X messages.

FIG. 2 shows a schematic structural diagram of an electronic device for V2X message signature verification.

Referring to Figure 2, it includes the access layer, the security chip and the application layer. The access layer can receive V2X messages from other devices and send them to the security chip for verification. After the verification is passed, the security chip will send the V2X message. to the application layer for processing. Since the V2X message communication in this application can be implemented based on the direct link (PC5) communication interface, the access layer can also be an access layer adapted to the PC5 communication interface, and the security chip can be used to pass the digital certification authority ( Certification Authority, CA) certificate signature method to verify the signature.

The security chip may include Internet Protocol (IP) address information of the application layer and the access layer, a data service management platform (Data Service Management Platform, DSMP), an adaptation layer, and security services.

Figure 3 shows a schematic flowchart of a V2X security chip signature verification, wherein the security chip can support a V2X application security subsystem, and the V2X application security subsystem can be located in on-board equipment, roadside equipment, and application service systems of V2X application service providers In the functional entity that provides communication security for V2X applications. These include V2X applications. V2X applications can be located in in-vehicle equipment, roadside equipment, and functional entities that require V2X application communication security in the application service system of V2X application service providers, such as in-vehicle applications of V2X vehicles and applications corresponding to V2X roadside stations. or application services, etc. The V2X security management entity can be used as a functional entity for security configuration and security data provision for the V2X application security subsystem, for example, functional entities such as registration, authorization, key provision and certificate issuance. The V2X application security service is located in the V2X application security subsystem. It interacts with the V2X application to complete operations such as message signing, verification, encryption, and decryption. The interaction with the V2X security management entity has completed key writing, certificate application and writing. and so on. The security environment can be used to store important security data, such as CA certificates, public and private keys, and encryption and decryption keys. And, provide important security computing services for security service entities, such as digital signature, data encryption and decryption, etc.

FIG. 4 shows a schematic flowchart of the V2X signature verification method provided by the present application. As an example and not a limitation, the method can be applied to the above electronic device.

S101. Receive a V2X message.

In some embodiments, the electronic device is located in the vehicle, and the V2X message received by the electronic device is from the surrounding vehicle and the V2X device sending the V2X message. Among them, V2X equipment includes electronic toll collection system (Electronic Toll Collection, ETC) equipment with V2X function, traffic lights with V2X function, etc.

S102. Receive the signature verification load information from the security chip.

In some embodiments, the security chip is used to verify the signature of the V2X message received by the access layer, and the signature verification load information of the security chip may be the number of V2X messages whose signature is verified per second. For example, referring to FIG. 1 , the frequency of each vehicle 12 sending the V2X message broadcasting the V2X message is 10 Hz, that is, 10 V2X messages are broadcast per second. When the number of vehicles 12 sending V2X messages is 200, the vehicles 11 receiving V2X messages receive 2,000 V2X messages per second, and accordingly, the security chip needs to verify 2,000 V2X messages per second. In this case, the signature verification load information is 2000 pieces per second.

S103. When the signature verification load information indicates that the signature verification load of the security chip is greater than the first load threshold, perform S104; otherwise, perform S111.

In some embodiments, the verification load information may indicate that the verification load status of the security chip is high load or low load. Wherein, when it is determined that the signature verification load information indicates that the signature verification load of the security chip is greater than the first load threshold, it can be determined that the current signature verification load state of the security chip is a high load. The first load threshold can be determined according to the maximum signature verification load of the security chip. For example, if the maximum signature verification load of the security chip is 2000 pieces/second, the first load threshold can be 80% of the maximum signature verification load, that is, 1600 pieces/second. second. When it is determined that the signature verification load information indicates that the signature verification load of the security chip is less than the second load threshold, it can be determined that the current signature verification load state of the security chip is a low load. The second load threshold may be equal to the first load threshold. For example, the second load threshold may be 80% of the maximum signature verification load, that is, 1600 pieces/second, and the second load threshold may also be 70% of the maximum signature verification load.

In still other embodiments, in order to more accurately determine the high load, a time limit of the first load threshold may be set, and when the signature verification load is greater than the first load threshold and exceeds the preset time limit, the current signature verification load of the security chip is determined. Status is high load. For example, when the signature verification load is greater than 1800 pieces/second and the duration is longer than 1 second, it is determined that the current signature verification load status of the security chip is a high load. Similarly, when determining the low load, it can also be determined according to a preset time limit.

S104. Acquire characteristic information of each received V2X message, where the characteristic information includes a sender identifier, a priority level, and a sender distance.

In some embodiments, the sender identifier and the priority level may be obtained from the structure header area of the V2X message, and the sender identifier may be the sender's layer-2 identity document (L2ID).

The priority level may be ProSe Pre-Packet Priority (PPPP), for example, the priority of the V2X message may be determined with reference to the PPPP shown in Table 1.

Table 1

In some embodiments, the structure header area of the V2X message further includes the signal strength of the V2X message sent by the sender. The signal strength can be represented by a reference signal received power (Reference Signal Receiving Power, RSRP) or a received signal strength indication (Received Signal Strength Indication, RSSI). According to the signal strength when the V2X message is sent and the signal strength when the V2X message is received, the sender distance can be calculated.

After it is determined that the verification load status of the security chip is high and the sender identification, priority level and sender distance of the received V2X message are obtained, one of S105, S107 and S109 can be executed to reduce the Check pressure.

S105. Send the V2X message conforming to the first filtering rule to the security chip for signature verification.

In some embodiments, the V2X message conforming to the first filtering rule is the first V2X message, and the first filtering rule may include: the sender identifiers of the V2X messages are the same and the priority level of the V2X messages is higher than the first priority threshold. For example, in the received V2X messages, if there are multiple V2X messages with the same sender L2ID, the high-priority V2X messages in these messages can be sent to the security chip for signature verification, and the low-priority V2X messages are discarded and not processed. deal with. As an example, the first priority threshold may be level 7, and the high-priority V2X messages may be V2X messages related to driving safety, for example, may be V2X messages with PPPP priority levels 2, 3, 4, and 5 . The low-priority V2X message may be a V2X message of level 7 or lower in the PPPP priority. Low priority V2X messages can be service class or application messages. For example, it can be to display the nearby parking lot, display the news of the nearby restaurant business, and so on. After the V2X messages that do not meet the first filtering rule are discarded, the number of V2X messages sent to the security chip for signature verification is reduced, which can reduce the security chip's signature verification pressure.

S106, the frequency of sending the V2X message that meets the second filtering rule to the security chip for signature verification is reduced.

In some embodiments, S106 further filters the first V2X messages on the basis of S105, and the second filtering rule includes: when the received multiple first V2X messages include N second V2X messages with the same priority When , send M second V2X messages to the security chip, where M is less than N.

After filtering out V2X messages with low priority in the same L2ID, if the verification pressure of the security chip is still high, the V2X messages with the same priority in the first V2X message (that is, the second V2X message) sent to the security chip can be reduced. The number of transmissions. For example, if the number N of the first V2X messages is 100 after filtering out V2X messages with low priority in the same L2ID, M (for example, 10, 20, or 50, etc.) can be used as The second V2X message is sent to the security chip.

Among them, when reducing the number of sending, the frequency of sending V2X messages can be used as a unit. As an example, if the frequency of sending the first V2X message to the security chip is 10 times/second, the frequency of sending the second V2X message to the security chip can be reduced to M/N, for example, when M/N is equal to 1 When /5, the sending frequency of the second V2X message to the security chip is reduced to 10 times/second*1/5=2 times/second. By reducing the frequency of V2X message signature verification with the same priority, the number of signature verifications of the security chip can be effectively reduced, thereby reducing the verification pressure of the security chip.

S107 , when the long-distance V2X message is received, execute S108 , otherwise execute S111 .

S108. Send the V2X message that meets the third filtering rule to the security chip for signature verification.

In some embodiments, the V2X message that conforms to the third filtering rule is the first V2X message. The third filtering rule may include: V2X messages whose sender distance is greater than the preset distance threshold and whose priority level is higher than the second priority threshold and V2X messages whose sender distance is less than or equal to the distance threshold are the first V2X messages . Wherein, a V2X message whose sender distance is greater than a preset distance threshold may also be referred to as a long-distance V2X message.

It should be noted that, after it is determined that a long-distance V2X message is received, a long-distance identification can be performed on the sending and sending identification of the long-distance V2X message. When a V2X message is subsequently received, it may be determined whether the received V2X message is a long-distance V2X message according to whether the L2ID of the received V2X message has a long-distance identifier.

When the L2ID of the V2X message is different from the long-distance V2X message, it indicates that the V2X message is not a long-distance V2X message, that is, the sender's distance is less than or equal to the distance threshold, and the V2X message needs to be verified.

When the L2ID of the V2X message is the same as that of the long-distance V2X message, it is confirmed that the vehicle corresponding to the sender is far away from the vehicle corresponding to the electronic device, and the safety hazard is low. Only the high-priority V2X message sent by the vehicle can be sent to the security chip. Perform signature verification and discard low-priority V2X messages. In this embodiment, the priority may be the PPPP priority, and the second priority threshold may be the same as or different from the first priority threshold, which is not limited in this application. Since the low-priority V2X messages sent by the distant car are discarded, the number of V2X messages for the security chip signature verification is reduced, which can reduce the security chip signature verification pressure.

It should also be noted that after long-distance identification of an L2ID, if the V2X message sent by the sender is received again, the sender distance can also be verified. If the sender's distance is less than or equal to the distance threshold, the long-distance identifier of the L2ID can be cleared, so as to filter the received V2X message more accurately.

S109 , when the high-risk V2X message is received, execute S110 , otherwise execute S111 .

S110. Send the V2X message conforming to the fourth filtering rule to the security chip for signature verification.

In some embodiments, the V2X message conforming to the fourth filtering rule is the first V2X message. The fourth filtering rule includes: V2X messages are non-high-risk messages. The sender identifier of the non-high-risk message is different from the sender identifier of the high-risk message, and the high-risk message is a V2X message that has not passed the security chip signature verification.

If a V2X message fails the verification at the security chip, the security chip can identify the L2ID of the V2X message as a high risk and report it to the access layer. When the L2ID of the subsequently received V2X message is an L2ID that identifies a high risk, the V2X message can be filtered without signature verification.

As an example, the high-risk V2X message may be a fake message, for example, a malicious non-standard message existing on the channel, a V2X message sent by an unauthorized device, and the like. These fake messages cannot pass signature verification in the security chip. Then, all pseudo messages corresponding to the L2ID are discarded, and no signature verification is performed on high-risk messages, thereby reducing the signature verification pressure on the security chip.

S111. Send all the received V2X messages to the security chip for signature verification.

In some embodiments, in the above process, when the V2X message does not need to be filtered, the received V2X message may be directly sent to the security chip for signature verification.

Optionally, after filtering the received V2X messages, when the signature verification load status of the security chip becomes low, the filtering of the received V2X messages can be stopped, and all received V2X messages can be sent to the security chip. Chip for signature verification. For example, verification payload information can be received from the security chip. When the signature verification load information indicates that the signature verification load of the security chip is less than the second load threshold, it is determined that the signature verification load status of the electronic device is a low load. Referring to S103, the second load threshold may be equal to the first load threshold, the second load threshold may be 80% of the maximum signature verification load, that is, 1600 pieces/second, and the second load threshold may also be 70% of the maximum signature verification load.

In this embodiment, the signature verification load of the security chip is used as the judgment parameter of the signature verification load status of the security chip. Since the signature verification load of the security chip can directly and accurately reflect the signature verification load status of the security chip, the judgment result is reliable. , the probability of misjudgment is low.

FIG. 5 shows a schematic flowchart of another V2X signature verification method provided by the present application. As an example and not a limitation, the method can be applied to the above electronic device.

S201. Receive a V2X message.

S202, when the electronic device performs signature verification on the received V2X message through the security chip, the signature verification duration of each V2X message.

S203. When the signature verification duration is greater than the first signature verification time threshold, perform S204; otherwise, perform S211.

In some embodiments, the V2X message may be delivered by the access layer receiving the V2X message, and then the access layer transmits the V2X message to the security chip for signature verification, and after the security chip signature verification is completed, the V2X message is sent to the application layer.

Among them, when the access layer sends the V2X message to the security chip for signature verification, the access layer can record the timestamp of sending the V2X message and transmit it to the security chip at the same time. When the V2X message is received, the application layer records the timestamp when the V2X message is received, and the time difference between the two timestamps indicates the time for signature verification, that is, the signature verification duration. When the signature verification time is longer than the first signature verification time threshold, it can be confirmed that the signature verification efficiency of the security chip is reduced, and the V2X message sent to the signature verification chip needs to be filtered.

S204. Acquire characteristic information of each received V2X message, where the characteristic information includes a sender identifier, a priority level, and a sender distance.

S205. Send the V2X message that conforms to the first filtering rule to the security chip for signature verification.

S206, the frequency of sending the V2X message that meets the second filtering rule to the security chip for signature verification is reduced.

S207 , when the long-distance V2X message is received, execute S208 , otherwise execute S211 .

S208. Send the V2X message that meets the third filtering rule to the security chip for signature verification.

S209 , when the high-risk V2X message is received, execute S210 , otherwise execute S211 .

S210. Send the V2X message conforming to the fourth filtering rule to the security chip for signature verification.

S211. Send all the received V2X messages to the security chip for signature verification.

In the above method, the implementation manners of S201 and S101, and S204 to S211 and S104 to S111 are the same, which will not be repeated here.

In this embodiment, the signature verification duration is used as the load information of the security chip, and the signature verification load status of the security chip can be judged when the signature verification load of the security chip cannot be directly obtained, which has a wide application range.

FIG. 6 shows a schematic diagram of another V2X signature verification method provided by the present application. As an example and not a limitation, the method can be applied to the above electronic device.

In the method shown in FIG. 6 , the security chip sends the signature verification load information to the access layer and the application layer, and the access layer and the application layer can determine the signature verification load status of the security chip according to the signature verification load information. If the load is high, the access layer can perform filtering autonomously or the application layer can also instruct the access layer to filter the received V2X messages to reduce the pressure on the security chip for signature verification. Alternatively, the application layer may also determine the signature verification load status of the security chip according to the acquired signature verification duration, and if the load is high, instruct the access layer to filter the received V2X messages. The method of V2X message filtering may refer to the methods in S105 to S110 above, which will not be repeated here.

In this embodiment, through the linkage between the security chip, the access layer, and the application layer, it is possible to more accurately identify scenarios where the security chip is under high pressure, and then filter the received V2X messages to reduce the signature verification of the security chip. pressure.

It should be understood that the size of the sequence numbers of the steps in the above embodiments does not mean the sequence of execution, and the execution sequence of each process should be determined by its function and internal logic, and should not constitute any limitation to the implementation process of the embodiments of the present application.

Corresponding to the V2X signature verification method described in the above embodiments, FIG. 7 shows a structural block diagram of the V2X signature verification apparatus provided by the embodiments of the present application. For convenience of description, only parts related to the embodiments of the present application are shown.

Referring to Figure 7, the V2X signature verification device includes:

The acquiring module 301 is configured to acquire the signature verification load status of the security chip.

The sending module 302 is configured to send a subsequently received first V2X message conforming to a preset filtering rule to the security chip for signature verification when the signature verification load state is a high load.

In some embodiments, the obtaining module 301 is specifically configured to receive the signature verification load information from the security chip. When the signature verification load information indicates that the signature verification load of the security chip is greater than the first load threshold, it is determined that the signature verification load state is a high load.

In some embodiments, the acquiring module 301 is specifically configured to acquire the signature verification duration for the security chip to perform signature verification on the V2X message. When the signature verification duration is greater than the first signature verification time threshold, it is determined that the signature verification load state is a high load.

In some embodiments, the obtaining module 301 is specifically configured to obtain the first timestamp when the V2X message is sent to the security chip. Receive the signature verification result of the V2X message returned by the security chip, and obtain the second timestamp when the signature verification result of the V2X message is received. The signature verification duration is the time difference between the first timestamp and the second timestamp.

In some embodiments, the sending module 302 is specifically configured to obtain the priority level of at least one V2X message with the same sender identifier. A V2X message with a priority level higher than the first priority threshold in at least one V2X message is determined as the first V2X message.

In some embodiments, the sending module 302 is further configured to send M second V2X messages to the security chip when the received multiple first V2X messages include N second V2X messages with the same priority, where M is less than N.

In some implementation manners, the sending module 302 is further configured to determine the priority level and sender distance of the received at least one V2X message. A V2X message whose sender distance is greater than the preset distance threshold and whose priority level is higher than the second priority threshold in at least one V2X message is determined to be the first V2X message. And, the V2X message whose sender distance is less than or equal to the distance threshold is the first V2X message.

In some embodiments, the sending module 302 is further configured to determine that a non-high-risk message in the received at least one V2X message is the first V2X message, and the sender identifier of the non-high-risk message is different from the sender identifier of the high-risk message, and the high-risk message is different. Risk messages are V2X messages that fail the security chip signature verification.

In some embodiments, the sending module 302 is further configured to send all subsequent received V2X messages to the security chip for signature verification when the load status of the signature verification is low.

In some embodiments, the obtaining module 301 is further configured to receive the signature verification load information from the security chip. When the signature verification load information indicates that the signature verification load of the security chip is less than the second load threshold, it is determined that the signature verification load state is a low load.

In some embodiments, the acquiring module 301 is further configured to acquire the signature verification duration for the security chip to perform signature verification on the V2X message. When the signature verification duration is less than the second signature verification time threshold, it is determined that the signature verification load state is low load.

It should be noted that the information exchange, execution process and other contents between the above modules are based on the same concept as the method embodiments of the present application, and the specific functions and technical effects brought by them can be found in the method embodiments section for details. Repeat.

Those skilled in the art can clearly understand that, for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example. Module completion, that is, dividing the internal structure of the device into different functional units or modules to complete all or part of the functions described above. Each functional unit and module in the embodiment may be integrated in one processing unit, or each unit may exist physically alone, or two or more units may be integrated in one unit, and the above-mentioned integrated units may adopt hardware. It can also be realized in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing from each other, and are not used to limit the protection scope of the present application. For the specific working processes of the units and modules in the above-mentioned system, reference may be made to the corresponding processes in the foregoing method embodiments, which will not be repeated here.

FIG. 8 is a schematic structural diagram of an electronic device according to an embodiment of the present application. As shown in FIG. 8 , the electronic device 4 of this embodiment includes: at least one processor 401 (only one processor is shown in FIG. 8 ), a memory 402 , a security chip 404 , and a memory 402 that is stored in the memory 402 and can be processed in at least one computer program 403 running on the server 401 . When the processor 401 executes the computer program 403, the security chip 404 implements the steps in the above method embodiments.

The electronic device 4 may be an electronic device such as a mobile phone, a desktop computer, a notebook, a palmtop computer and a cloud server. The electronic device may include, but is not limited to, the processor 401 and the memory 402 . Those skilled in the art can understand that FIG. 8 is only an example of the electronic device 4, and does not constitute a limitation to the electronic device 4, and may include more or less components than the one shown, or combine some components, or different components , for example, may also include input and output devices, network access devices, and the like.

The so-called processor 401 may be a central processing unit (Central Processing Unit, CPU), and the processor 401 may also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (Application Specific Integrated Circuits) , ASIC), off-the-shelf programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.

The memory 402 may in some embodiments be an internal storage unit of the electronic device 4 , such as a hard disk or memory of the electronic device 4 . The memory 402 may also be an external storage device of the electronic device 4 in other embodiments, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) equipped on the electronic device 4 card, Flash Card, etc. Further, the memory 402 may also include both an internal storage unit of the electronic device 4 and an external storage device. The memory 402 is used to store an operating system, application programs, a boot loader (Boot Loader), data, and other programs, such as program codes of computer programs, and the like. The memory 402 may also be used to temporarily store data that has been or will be output.

The security chip 404 is a chip that can provide V2X application security services. The security chip 404 can be an independent chip or a structure that can be integrated in other chips and can implement the function of the security chip. V2X application security services can include signing, verification, encryption, decryption, key writing or certificate writing. The specific form of the security chip is not limited in this application.

Embodiments of the present application further provide a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, the steps in the foregoing method embodiments can be implemented.

The embodiments of the present application provide a computer program product, when the computer program product runs on a mobile terminal, the steps in the foregoing method embodiments can be implemented when the mobile terminal executes the computer program product.

The integrated unit, if implemented in the form of a software functional unit and sold or used as an independent product, may be stored in a computer-readable storage medium. Based on this understanding, the present application realizes all or part of the processes in the methods of the above embodiments, which can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a computer-readable storage medium. When executed by a processor, the steps of each of the above method embodiments can be implemented. Wherein, the computer program includes computer program code, and the computer program code may be in the form of source code, object code, executable file or some intermediate form, and the like. The computer-readable medium may include at least: any entity or device capable of carrying computer program codes to an electronic device, a recording medium, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electrical carrier signals, telecommunication signals, and software distribution media. For example, U disk, mobile hard disk, disk or CD, etc. In some jurisdictions, under legislation and patent practice, computer readable media may not be electrical carrier signals and telecommunications signals.

An embodiment of the present application provides a chip system, where the chip system includes a memory and a processor, and the processor executes a computer program stored in the memory to implement the steps in each of the foregoing method embodiments.

An embodiment of the present application provides a chip system, the chip system includes a processor, the processor is coupled to a computer-readable storage medium, and the processor executes a computer program stored in the computer-readable storage medium, so as to implement the above method embodiments. step.

In the foregoing embodiments, the description of each embodiment has its own emphasis. For parts that are not described or described in detail in a certain embodiment, reference may be made to the relevant descriptions of other embodiments.

Those of ordinary skill in the art can realize that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may implement the described functionality using different methods for each particular application, but such implementations should not be considered beyond the scope of this application.

In the embodiments provided in this application, it should be understood that the disclosed method, apparatus and electronic device may be implemented in other manners. For example, the device embodiments described above are only illustrative. For example, the division of the modules or units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be Combinations can either be integrated into another system, or some features can be omitted, or not implemented. On the other hand, the shown or discussed mutual coupling or direct coupling or communication connection may be through some interfaces, indirect coupling or communication connection of devices or units, and may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution in this embodiment.

Finally, it should be noted that: the above are only specific embodiments of the present application, but the protection scope of the present application is not limited to this, and any changes or replacements within the technical scope disclosed in the present application should be covered by the present application. within the scope of protection of the application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

A V2X signature verification method, applied to electronic equipment, wherein the electronic equipment is provided with a security chip, and is characterized in that, comprising:

obtaining the signature verification load status of the security chip;

When the signature verification load state is a high load, the subsequently received first V2X message that complies with the preset filtering rule is sent to the security chip for signature verification.
The method according to claim 1, wherein the acquiring the signature verification load status of the security chip comprises:

Receive the verification payload information from the security chip;

When the signature verification load information indicates that the signature verification load of the security chip is greater than a first load threshold, it is determined that the signature verification load state is a high load.
The method according to claim 1, wherein the acquiring the signature verification load status of the security chip comprises:

Obtain the signature verification duration for the security chip to perform signature verification on the V2X message;

When the signature verification duration is greater than the first signature verification time threshold, it is determined that the signature verification load state is a high load.
The method according to claim 3, wherein the acquiring the signature verification duration for the V2X message to be verified by the security chip comprises:

obtaining the first timestamp when the V2X message is sent to the security chip;

Receive the signature verification result of the V2X message returned by the security chip, and obtain a second timestamp when the signature verification result of the V2X message is received;

The signature verification duration is the time difference between the first timestamp and the second timestamp.
The method according to any one of claims 1-4, wherein the method of determining the first V2X message that complies with a preset filtering rule comprises:

Obtain the priority level of at least one V2X message with the same sender identifier;

It is determined that a V2X message with a priority level higher than the first priority threshold in the at least one V2X message is the first V2X message.
The method according to claim 5, wherein the method further comprises:

When the received multiple first V2X messages include N second V2X messages with the same priority, send M second V2X messages to the security chip, where M is less than N.
The method according to any one of claims 1-4, wherein the method for determining the first V2X message that complies with a preset filtering rule further comprises:

Determine the priority level and sender distance of at least one V2X message received;

determining that the V2X message in the at least one V2X message whose sender distance is greater than a preset distance threshold and whose priority level is higher than a second priority threshold is the first V2X message; and,

The V2X message whose sender distance is less than or equal to the distance threshold is the first V2X message.
The method according to any one of claims 1-4, wherein the method of determining the first V2X message that complies with a preset filtering rule comprises:

It is determined that the non-high-risk message in the received at least one V2X message is the first V2X message, the sender identifier of the non-high-risk message is different from the sender identifier of the high-risk message, and the high-risk message is not passed. The V2X message for the security chip signature verification.
The method according to any one of claims 1-8, further comprising:

When the signature verification load state is low load, all subsequent received V2X messages are sent to the security chip for signature verification.
The method according to claim 9, wherein the acquiring the signature verification load status of the security chip comprises:

Receive the verification payload information from the security chip;

When the signature verification load information indicates that the signature verification load of the security chip is less than a second load threshold, it is determined that the signature verification load state is a low load.
The method according to claim 9, wherein the acquiring the signature verification load status of the security chip comprises:

Obtain the signature verification duration for the security chip to perform signature verification on the V2X message;

When the signature verification duration is less than the second signature verification time threshold, it is determined that the signature verification load state is a low load.
A V2X signature verification device, comprising:

The acquisition module is used to acquire the signature verification load status of the security chip;

A sending module, configured to send the subsequently received first V2X message conforming to the preset filtering rule to the security chip for signature verification when the signature verification load state is high load.
An electronic device comprising a memory, a processor, a security chip, and a computer program stored in the memory and executable on the processor, characterized in that the processor executes the computer program so that the electronic A device implements a method as claimed in any one of claims 1 to 11.
A computer-readable storage medium storing a computer program, characterized in that, when the computer program is executed by a processor, the method according to any one of claims 1 to 11 is implemented.
A chip system, the chip system includes a memory and a processor, and the processor executes a computer program stored in the memory, wherein the processor executes the computer program so that the chip system realizes as claimed in the claim The method of any one of claims 1 to 11.