WO2023010871A1

WO2023010871A1 - Vehicle-infrastructure cooperation-based certificate application method and apparatus, computer device, and medium

Info

Publication number: WO2023010871A1
Application number: PCT/CN2022/084665
Authority: WO
Inventors: 韦杏媛
Original assignee: 中兴通讯股份有限公司
Priority date: 2021-08-05
Filing date: 2022-03-31
Publication date: 2023-02-09
Also published as: CN115706953A

Abstract

A vehicle-infrastructure cooperation-based certificate application method, a terminal device, a computer device, and a readable medium. The method is applied to a terminal device. When it is determined that there are certificates to be applied for, the validity period of said certificates is determined according to a certificate set of the terminal device, and the validity period of said certificates satisfies the following condition: after certificate application is completed, the validity period of at least one certificate in the certificate set is different from that of other certificates in the certificate set. A certificate application request comprising the validity period and quantity of the certificates to be applied for is sent to a certificate authority server, so that the certificate authority server generates certificates according to the validity period and quantity of the certificates to be applied for.

Description

Certificate application method, device, computer equipment and medium based on vehicle-road coordination

Cross References to Related Applications

This application is based on a Chinese patent application with application number 202110896122.3 and a filing date of August 5, 2021, and claims the priority of this Chinese patent application. The entire content of this Chinese patent application is hereby incorporated by reference into this application.

technical field

The present application relates to the technical field of Internet of Vehicles, and specifically relates to a certificate application method, device, computer equipment and readable medium based on vehicle-road coordination.

Background technique

Vehicle-to-vehicle equipment V2X (Vehicle to X, vehicle wireless communication technology) data communication is used for information exchange between the vehicle and the outside world. The Internet of Vehicles establishes a new direction for the development of automotive technology by integrating Global Positioning System (GPS) navigation technology, vehicle-to-vehicle communication technology, wireless communication and remote sensing technology, and realizes the compatibility of manual driving and automatic driving. V2X is the key technology of the future intelligent transportation system, which enables communication between vehicles, vehicles and base stations, and base stations. In order to obtain a series of traffic information such as real-time road conditions, road information, and pedestrian information, so as to improve driving safety, reduce congestion, improve traffic efficiency, and provide in-vehicle entertainment information.

Since there are many sources of V2X data transmission, including base stations, roadside units, and other vehicle-mounted devices, a security mechanism is required to ensure the safe transmission of V2X data, so as to prevent attackers from sending a large number of spam messages to form a message storm, causing terminal processing Exhaustion of resources leads to interruption of business services, and the attacked device directly parses and uses the attack information without going through the security check, causing the device to execute wrong instructions. In the V2X secure communication mechanism, the certificates are generated and issued by the CA (Certificate Authority) server once in a batch application, and the validity period of the certificates for a batch application is the same. Failure, affecting the security of subsequent V2X data communication.

Contents of the invention

The present application provides a certificate application method, device, computer equipment and readable medium based on vehicle-road coordination.

In the first aspect, an embodiment of the present application provides a method for applying for a certificate based on vehicle-road coordination, which is applied to a terminal device. The method includes: in response to determining that there is a certificate to be applied for, determining the certificate according to the certificate set of the terminal device. The validity period of the certificate to be applied for; wherein, the validity period of the certificate to be applied for satisfies the following conditions: after the certificate application is completed, the validity period of at least one certificate in the certificate set is different from the validity period of other certificates in the certificate set; The server sends a certificate application request including the validity period and quantity of the certificates to be applied for, and the certificate application request is used to make the certificate issuing server generate a certificate according to the validity period and quantity of the certificates to be applied for.

In yet another aspect, the embodiment of the present application further provides a terminal device, including a certificate management module and a certificate application module, and the certificate management module is configured to, in response to determining that there are certificates to be applied for, determine the The validity period of the certificate to be applied for; wherein, the validity period of the certificate to be applied for meets the following conditions: after the certificate application is completed, the validity period of at least one certificate in the certificate set is different from the validity period of other certificates in the certificate set; The certificate application module is configured to send a certificate application request including the validity period and quantity of the certificate to be applied for to the certificate issuing server, and the certificate application request is used to make the certificate issuing server according to the validity period and quantity of the certificate to be applied for Generate a certificate.

In yet another aspect, the embodiment of the present application also provides a computer device, including: one or more processors; a storage device, on which one or more programs are stored; wherein, when the one or more programs are executed by the When the one or more processors execute, the one or more processors implement the above-mentioned method for applying for a certificate based on vehicle-road coordination.

In yet another aspect, the embodiment of the present application further provides a computer-readable medium on which a computer program is stored, wherein when the program is executed, the above-mentioned method for applying for a certificate based on vehicle-road coordination is implemented.

Description of drawings

Fig. 1 is a system architecture diagram of an embodiment of the present application;

FIG. 2 is a schematic flowchart of a certificate application method based on vehicle-road coordination provided by the embodiment of the present application;

FIG. 3 is a schematic flow diagram of determining that there is a certificate to be applied for provided by the embodiment of the present application;

FIG. 4 is a schematic flow diagram of determining the validity period of the certificate to be applied for provided by the embodiment of the present application;

FIG. 5 is a first schematic structural diagram of a terminal device provided by an embodiment of the present application;

FIG. 6 is a second schematic structural diagram of a terminal device provided by an embodiment of the present application.

Detailed ways

Several embodiments will be described more fully hereinafter with reference to the accompanying drawings, but may be embodied in different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this application will be thorough and complete, and will fully convey the scope of the application to those skilled in the art.

As used herein, the term "and/or" includes any and all combinations of one or more of the associated listed items.

The terminology used herein is for describing particular embodiments only and is not intended to limit the application. As used herein, the singular forms "a" and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise. It will also be understood that when the terms "comprising" and/or "consisting of" are used in this specification, the stated features, integers, steps, operations, elements and/or components are specified to be present but not excluded to be present or Add one or more other features, integers, steps, operations, elements, components and/or groups thereof.

Embodiments described herein may be described with reference to plan views and/or cross-sectional views by way of idealized schematic representation of the application. Accordingly, illustrations may be modified according to manufacturing techniques and/or tolerances. Therefore, the embodiments are not limited to the ones shown in the drawings but include modifications of configurations formed based on manufacturing processes. Accordingly, the regions illustrated in the figures have schematic properties, and the shapes of the regions shown in the figures illustrate the specific shapes of the regions of the elements, but are not intended to be limiting.

Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having meanings consistent with their meanings in some circumstances and in the context of this application, and will not be interpreted as having idealized or overly formal meanings , unless expressly so limited herein.

An embodiment of the present application provides a method for applying for a certificate based on vehicle-road coordination, which is applied to the system shown in FIG. 1 . As shown in Figure 1, the system includes a CA server, a certificate storage server and a terminal device, and the terminal device may include a Road Side Unit (Road Side Unit, RSU) and an on-board terminal (On-Board Unit, OBU). In the embodiment of the present application, one roadside unit and two vehicle-mounted terminals located in different vehicles are taken as an example for illustration. The CA server is used to generate a certificate according to the application of the terminal equipment (including the roadside unit and the vehicle terminal); the certificate storage server is used to store the certificate generated by the CA server; the roadside unit is used to send road information to the vehicle terminal, and from the certificate storage server Download the certificate; the vehicle-mounted terminal is used to send vehicle information to other vehicle-mounted terminals or roadside units, and download the certificate from the certificate storage server. In the embodiment of the present application, the communication between the CA server and the terminal device is described as an example through the V2X communication method, but those skilled in the art know that any communication method that can realize vehicle-road coordination falls within the protection scope of the present application.

As shown in Figure 2, the method for applying for a certificate based on vehicle-road coordination provided by the embodiment of the present application is applied to terminal equipment (including roadside units or vehicle-mounted terminals), and the method includes the following steps:

Step 21, in response to determining that there is a certificate to be applied for, determine the validity period of the certificate to be applied for according to the certificate set of the terminal device; wherein, the validity period of the certificate to be applied for meets the following conditions: after the certificate application is completed, at least A certificate has a different validity period than other certificates in the set of certificates.

The terminal device has a certificate set, the certificate set includes multiple certificates, and the multiple certificates downloaded by the terminal device from the certificate storage server form the certificate set. In this step, when the terminal device determines that there is a certificate to be applied for, it calculates the validity period of the certificate to be applied for according to the set of certificates, the terminal device can mark the identity of the certificate to be applied for, and count the number of certificates to be applied for.

Step 22: Send a certificate application request including the validity period and quantity of certificates to be applied for to the certificate issuing server, and the certificate application request is used to make the certificate issuing server generate certificates according to the validity period and quantity of the certificates to be applied for.

In this step, the terminal device sends a certificate application request to the CA server, and the certificate application request carries the validity period of the certificate to be applied for and the quantity of the certificates to be applied for, so that the CA server can generate the certificate according to the validity period and quantity. It should be noted that the certificate application request may also include information such as a public key.

The method for applying for a certificate based on vehicle-road coordination provided by the embodiment of the present application is applied to a terminal device. When it is determined that there is a certificate to be applied for, the validity period of the certificate to be applied for is determined according to the certificate set of the terminal device; The validity period of the application certificate meets the following conditions: after the certificate application is completed, the validity period of at least one certificate in the certificate set is different from the validity period of other certificates in the certificate set; a certificate application request including the validity period and quantity of the certificate to be applied is sent to the certificate issuing server, In order to make the certificate issuing server generate certificates according to the validity period and quantity of the certificates to be applied for. In this embodiment of the application, the validity period of at least one certificate of the terminal device is different from the validity period of other certificates of the terminal device. In this way, when some certificates become invalid, other certificates are still valid, thereby reducing the possibility of all certificates being invalid at the same time. In addition, it can expand the coverage time of the validity period of the certificate set, thereby reducing the security risk of the vehicle-road coordination data communication caused by the inability of the terminal device to update the certificate in time.

The types of certificates in the certificate set include valid certificates and certificates to be applied for. A valid certificate refers to a certificate that is currently in a valid state, that is, the expiration time of the certificate is after the current time, and a certificate to be applied for refers to a certificate that meets the preset conditions. The total number of certificates in the certificate set and the total validity period of the certificates in the certificate set are preset. The total number of certificates in the certificate set is the total number of certificates stored on the terminal device, and the total validity period of the certificates in the certificate set is the period of validity of all certificates in the certificate set. The duration corresponding to the union. In some embodiments, if the total number of certificates in the certificate set is 10, among which 5 certificates have a validity period from t1 to t2, and the other 5 certificates have a validity period from t2 to t3, then the total validity period of the certificates in the certificate set is t1 to t3.

In some embodiments, the validity period of at least one certificate to be applied for meets at least one of the following conditions:

The validity period of at least one certificate to be applied for is different from the validity period of at least one valid certificate in the certificate set;

The validity period of at least one pending certificate is different from the valid period of other pending certificates.

In some embodiments, as shown in FIG. 3 , determining that there is a certificate to be applied for includes the following steps:

Step 31, traversing the certificate collection.

In this step, it is determined whether there is a certificate to be applied for by traversing the certificate collection of the terminal device.

Step 32: In response to the fact that there is no certificate in the certificate set, it is determined that there are at least two certificates to be applied for; or, in response to the presence of certificates in the certificate set and the certificates meet the preset conditions, it is determined that the preset conditions are satisfied. Conditional certificates are pending certificates.

If the certificate set is empty, it means that the current terminal device has not downloaded the certificate, and it is considered that there are certificates to be applied for, and the number of certificates to be applied for is the total number of certificates in the certificate set. Usually, the total number of certificates is greater than 2, that is, the certificate set usually includes multiple certificates.

If the certificate set is not empty, and at least one certificate in the certificate set satisfies the preset condition, it means that the current terminal device has downloaded the certificate, then judge whether there is a certificate to be applied for in the certificate set according to the preset condition, and the certificate that meets the preset condition is Certificate pending.

There are two situations where the terminal device has a certificate to be applied for. One is that the terminal device has downloaded a certificate and there is a certificate to be applied for in the downloaded certificate. At this time, there are certificates in the certificate set, but at least some of the certificates in the certificate set meet the preset conditions. . In this case, there may be one or more certificates to be applied for, and the validity period of at least one certificate to be applied for is different from the validity period of at least one valid certificate in the certificate set. That is to say, if the certificate set includes multiple valid certificates, and the validity period of each valid certificate is different, the validity period of at least one certificate to be applied for is different from the validity period of one of the valid certificates; in some embodiments, the validity period of at least one certificate to be applied for is The validity period of each valid certificate is different, which can further reduce the probability of multiple certificates becoming invalid at the same time, and expand the coverage time of the validity period of the certificate set. In some embodiments, if there are multiple certificates to be applied for, it can be satisfied at the same time: the validity period of at least one certificate to be applied for is different from the validity period of at least one valid certificate in the certificate set, and the validity period of at least one certificate to be applied for is different from that of other certificates to be applied for Certificates have different validity periods, so that the probability of multiple certificates being invalidated at the same time is reduced, and the effect of expanding the coverage time of the validity period of the certificate set is good. Another situation where the terminal device has a certificate to be applied for is that the terminal device has not downloaded the certificate, and the certificate set is empty at this time, that is, there is no certificate. In this case, the number of certificates to be applied for and the value of the preset certificate set The total number of certificates, as long as the validity period of at least one certificate to be applied for is different from that of other certificates to be applied for, the probability of multiple certificates being invalidated at the same time can be achieved, and the purpose of expanding the validity period of the certificate set can be achieved.

In some embodiments, the traversing the certificate set includes: periodically traversing the certificate set. By traversing the certificate collection periodically, you can apply for a new certificate in time to realize the rolling update of the certificate.

In some embodiments, if there is no certificate in the certificate set, the number of certificates to be applied for is the total number of certificates in the preset certificate set. The determining the validity period of the certificate to be applied for according to the certificate set of the terminal device includes the following steps: determining the validity period of the certificate to be applied for according to the total number of certificates in the preset certificate set and the total validity period of the certificate, wherein the validity period of at least one certificate to be applied for is The validity period is different from other pending certificates. That is to say, when the terminal device has not downloaded the certificate, it can apply for certificates in batches at one time, and at least one of the certificates applied for in batches has a validity period different from that of other certificates applied for. Of course, those skilled in the art know that a One solution is that among multiple certificates applied in batches, the validity periods of each certificate are different and the same. In this step, there are multiple ways to determine the validity period of the certificates to be applied for according to the total number of certificates in the certificate set and the total validity period of the certificates. In some embodiments, according to the number of certificates to be applied for (that is, the total number of certificates in the certificate set), Divide the total validity period of the certificates evenly, and the validity periods of the certificates to be applied for do not overlap. For example, if the number of certificates to be applied for is 10 and the total validity period of the certificates is 30 days, the validity period of each certificate to be applied for is 3 days. And the valid periods of the 10 certificates to be applied for are continuous in pairs. It is also possible to firstly divide the certificates to be applied for (the number of which is the total number of certificates in the certificate set) into multiple groups, and then for each group of certificates, carry out a superimposed division on the total validity period of the certificates. For example, if the number of certificates to be applied for is 20, the total number of certificates The validity period is 40 days, and the certificates to be applied are divided into 4 groups, each group has 5 certificates to be applied for, and the start time of the validity period of each group of certificates to be applied for is the same (that is, the start time of the validity period of the 20 certificates to be applied for is the same), The validity period of each group of certificates to be applied for is different (that is, the validity period is different). The validity period of the first group of certificates to be applied for is 10 days, the validity period of the second group of certificates to be applied for is 20 days, and the validity period of the third group of certificates to be applied for is 30 days. days, the fourth group of certificates to be applied for is valid for 40 days. It should be noted that the above method of determining the validity period of the certificates to be applied for is only an example. Any scheme for determining the validity period of the certificates to be applied for can reduce the probability of certificates being invalidated at the same time and/or expand the coverage time of the validity period of the certificate set in the embodiment of this application. , all belong to the scope of protection of the embodiments of the present application.

In some embodiments, when a certificate exists in the certificate set and the certificate satisfies a preset condition, as shown in FIG. 4 , determining the validity period of the certificate to be applied for according to the certificate set of the terminal device includes the following steps:

Step 41, determine the number of certificates to be applied for, if there is one certificate to be applied for, then perform step 42; if there are at least two certificates to be applied for, then perform step 43.

Step 42: Determine the validity period of the certificate to be applied for according to the validity period of the valid certificate in the certificate set, wherein the validity period of the certificate to be applied for is different from the validity period of at least one valid certificate in the certificate set.

In the case that the terminal device has a certificate and currently only applies for one certificate, the validity period of the certificate to be applied is different from the validity period of at least one valid certificate that is currently valid. Of course, if there are multiple valid certificates in the certificate set, only the certificate to be applied for The validity period of each valid certificate is different from the validity period of each valid certificate to reduce the probability of certificates being invalid at the same time and to expand the coverage time of the validity period of the certificate set.

Step 43: Determine the validity period of the certificates to be applied for according to the period of validity of the valid certificates in the certificate set, the number of certificates to be applied for, the total number of certificates in the preset certificate set, and the total validity period of the certificates.

In the case that the terminal device has a certificate and is currently applying for multiple certificates in batches, the validity period of at least one certificate to be applied for is different from the validity period of other certificates to be applied for, and/or, the validity period of at least one certificate to be applied for is different from that of at least one of the certificate sets Valid certificates have different validity periods. In some embodiments, among the plurality of certificates to be applied for, the validity period of each certificate to be applied for is different, and the validity period of each certificate to be applied for is different from that of all valid certificates in the certificate set. The probability and the effect of extending the validity period coverage time of the certificate set is good. In this step, according to the validity period of the valid certificates in the certificate set, the number of certificates to be applied for, the total number of certificates in the certificate set, and the total validity period of the certificates, there are many ways to determine the validity period of the certificates to be applied for. In some embodiments, you can First divide the certificates to be applied for into multiple groups, and then divide the total validity period of the certificates in a superimposed manner for each group of certificates. For example, the total validity period of certificates is 40 days, the total number of certificates in the certificate set is 20, the number of valid certificates in the certificate set is 5, and the validity period of the 5 valid certificates is 10 days. Therefore, the number of certificates to be applied for is 15. Currently The time is the 5th day within the valid period of 5 valid certificates. Divide the 15 certificates to be applied for into 3 groups, and each group has 5 certificates to be applied for. The start time of the validity period of each group of certificates to be applied for can be the same, for example, they can all be the current time, and the expiration time of the validity period of each group of certificates to be applied for is different ( That is, the validity period is different), the validity period of the first group of certificates to be applied for is 15 days, the validity period of the second group of certificates to be applied for is 25 days, the validity period of the third group of certificates to be applied for is 30 days, and the validity period of the fourth group of certificates to be applied for is 35 days. It should be noted that the determination of the validity period of the above-mentioned certificates to be applied for is only an example. Any determination of the validity period of the certificates to be applied for can reduce the probability of certificates being invalidated at the same time and/or expand the validity period coverage time of the certificate set in the embodiment of this application. The schemes all belong to the scope of protection of the embodiments of the present application.

In some embodiments, the preset conditions include: the expiration time of the certificate's validity period is greater than the current time, and the difference between the expiration time of the certificate's validity period and the current time is less than a preset threshold; or, the expiration time of the certificate's validity period is less than or equal to the current time time. That is to say, the certificate that satisfies the preset condition is a certificate that has not yet expired but is about to expire, or a certificate that has currently expired. In this embodiment of the application, the above preset conditions are used to determine the certificates that have expired or are about to expire, and these certificates are used as certificates to be applied for, and the certificates are updated.

In some embodiments, after sending the certificate application request including the validity period and quantity of the certificate to be applied for to the certificate issuing server (that is, step 22), the following steps may also be included: in response to receiving the certificate application response sent by the certificate issuing server, Obtain the download information contained therein; download the certificate according to the download information, and the certificates in the certificate set are the downloaded certificates. In some embodiments, the download information may include a download address (that is, the address of the certificate storage server) and a download time. That is to say, after receiving the certificate application request sent by the terminal device, the CA server generates a certificate according to the validity period and quantity of the certificate to be applied for, and stores the generated certificate in the designated certificate storage server, and sends the certificate in the certificate application response. Carry the download address and download time. After receiving the certificate application response, the terminal device downloads the certificate from the certificate storage server at the download time, and loads the downloaded certificate.

In some embodiments, when there are valid certificates in the certificate set, the certificate application method based on vehicle-road coordination may further include the following steps: in response to generating the vehicle-road coordination data message, randomly select a certificate from the certificate set Valid certificate; sign the vehicle-road coordination data message according to the private key of the terminal device and the selected valid certificate, and obtain the signed vehicle-road coordination data message; broadcast the signed vehicle-road coordination data message. That is to say, after the terminal device constructs the V2X data message due to business needs, it randomly obtains a valid certificate from the certificate set, uses the certificate and the private key of the terminal device to sign the V2X data message, and sends the signed The V2X data packet and the selected certificate are broadcast.

In some embodiments, the certificate application method based on vehicle-road coordination may further include the following steps: in response to receiving the vehicle-road coordination data message and certificate broadcast by other terminal devices, verifying the validity of the certificate according to the CA root certificate properties, for example, whether it is issued by a CA root certificate, whether it is within the validity period, and so on. If the verification is passed, the public key is obtained from the certificate, and the signature of the V2X data message is verified according to the public key. After the signature verification is passed, the data in the V2X data message is analyzed and corresponding processing is performed.

The embodiment of the present application can be applied to secure communication based on the V2X protocol between vehicle-mounted terminals and vehicle-mounted terminals, and between vehicle-mounted terminals and roadside units. The vehicle-mounted terminal/roadside unit randomly selects one of multiple certificates and multiple private keys. A certificate and a private key are used to ensure the safe transmission of data. The secure communication mechanism is to sign and verify the signature of the V2X data message through a random certificate. The vehicle terminal, roadside unit and CA server need to support wireless or wired network communication, and follow the security protocol for certificate application and download.

The embodiment of this application proposes a certificate application method applied to the vehicle-road coordination scenario, which enables terminal devices to obtain certificates with different validity periods, and expands the coverage time of the validity period of the certificate set. When some certificates fail, the remaining certificates are still valid. When the certificate expires and the certificate cannot be updated in time in the case of no network, for example, the vehicle is parked for a long time or is in a state of no network, SIM (Subscriber Identity Module, user identification card) card arrears, etc., the remaining valid certificate can guarantee the subsequent V2X data Secure communication; by periodically checking whether there is a certificate to be applied for, the rolling update of the certificate can be realized.

Based on the same technical idea, the embodiment of the present application also provides a terminal device, and the terminal device may be a vehicle-mounted terminal or a roadside unit. As shown in Figure 5, the terminal device includes a certificate management module 101 and a certificate application module 102, and the certificate management module 101 is configured to, in response to determining that there is a certificate to be applied for, determine the certificate to be applied for according to the certificate set of the terminal device The validity period of the certificate; wherein, the validity period of the certificate to be applied for satisfies the following condition: after the certificate application is completed, the validity period of at least one certificate in the certificate set is different from the validity period of other certificates in the certificate set.

The certificate application module 102 is configured to send a certificate application request including the validity period and quantity of the certificate to be applied for to the certificate issuing server, and the certificate application request is used to make the certificate issuing server according to the validity period and quantity of the certificate to be applied for Quantity Generate Certificate.

In some embodiments, the types of certificates in the certificate set include valid certificates and certificates to be applied for, and the validity period of at least one of the certificates to be applied for is different from the validity period of at least one valid certificate in the certificate set.

In some embodiments, the validity period of at least one of the certificates to be applied for is different from the validity period of the other certificates to be applied for.

In some embodiments, the certificate management module 101 is configured to traverse the certificate set; in response to no certificates in the certificate set, determine that there are at least two certificates to be applied for; or, In response to the existence of certificates in the certificate set and the certificates meeting the preset conditions, it is determined that the certificates meeting the preset conditions are certificates to be applied for.

In some embodiments, the certificate management module 101 is configured to periodically traverse the certificate set.

In some embodiments, the certificate management module 101 is configured to, if there is no certificate in the certificate set, determine the validity period of the certificate to be applied for according to the total number of certificates in the certificate set and the total validity period of the certificates, Wherein, the validity period of at least one of the certificates to be applied for is different from the validity period of other certificates to be applied for.

In some embodiments, the certificate management module 101 is configured to, if there is a certificate in the certificate set and the certificate satisfies a preset condition, in response to the fact that there is one certificate to be applied for, according to the The validity period of the valid certificate determines the validity period of the certificate to be applied for, wherein the validity period of the certificate to be applied for is different from the validity period of at least one valid certificate in the certificate set.

In some embodiments, the certificate management module 101 is configured to, if there are certificates in the certificate set and the certificates meet the preset conditions, in response to the number of the certificates to be applied for is at least two, according to the certificate The validity period of the valid certificates in the set, the number of the certificates to be applied for, the total number of certificates in the certificate set, and the total validity period of the certificates determine the validity period of the certificates to be applied for.

In some embodiments, the preset condition includes: the expiration time of the certificate's validity period is greater than the current time, and the difference between the expiration time of the certificate's validity period and the current time is smaller than a preset threshold; or, the expiration time of the certificate's validity period is less than or equal to the current time.

In some embodiments, as shown in FIG. 6 , the terminal device may further include a communication module 103, and the certificate management module 101 is configured to, after the communication module 103 generates the vehicle-road coordination data message, select Randomly select a valid certificate.

The communication module 103 is configured to sign the vehicle-road coordination data message according to the private key of the terminal device and the selected valid certificate, obtain the signed vehicle-road coordination data message, and broadcast the signed vehicle-road coordination data message. Road coordination data packets.

The embodiment of the present application also provides a computer device, the computer device includes: one or more processors and a storage device; wherein, one or more programs are stored on the storage device, when the above one or more programs are executed by the above one When executed by one or more processors, the above one or more processors implement the certificate application method based on vehicle-road coordination as provided in the foregoing embodiments.

The embodiment of the present application also provides a computer-readable medium on which a computer program is stored, wherein when the computer program is executed, the method for applying for a certificate based on vehicle-road coordination as provided in the foregoing embodiments is implemented.

The method for applying for a certificate based on vehicle-road coordination provided by the embodiment of the present application is applied to a terminal device. When it is determined that there is a certificate to be applied for, the validity period of the certificate to be applied for is determined according to the certificate set of the terminal device; The validity period of the application certificate meets the following conditions: after the certificate application is completed, the validity period of at least one certificate in the certificate set is different from the validity period of other certificates in the certificate set; a certificate application request including the validity period and quantity of the certificate to be applied is sent to the certificate issuing server, In order to make the certificate issuing server generate certificates according to the validity period and quantity of the certificates to be applied for. In this embodiment of the application, the validity period of at least one certificate of the terminal device is different from that of other certificates of the terminal device. In this way, when some certificates become invalid, other certificates are still valid, thereby reducing the failure rate of certificates at the same time. In addition, it can expand the coverage time of the validity period of the certificate set, thereby reducing the security risk of the vehicle-road coordination data communication caused by the inability of the terminal device to update the certificate in time.

Those skilled in the art can understand that all or some of the steps in the method disclosed above and the functional modules/units in the device can be implemented as software, firmware, hardware and an appropriate combination thereof. In a hardware implementation, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be composed of several physical components. Components cooperate to execute. Some or all of the physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit . Such software may be distributed on computer readable media, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As known to those of ordinary skill in the art, the term computer storage media includes both volatile and nonvolatile media implemented in any method or technology for storage of information, such as computer readable instructions, data structures, program modules, or other data. permanent, removable and non-removable media. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cartridges, tape, magnetic disk storage or other magnetic storage devices, or can Any other medium used to store desired information and which can be accessed by a computer. In addition, as is well known to those of ordinary skill in the art, communication media typically embodies computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media .

Several embodiments have been disclosed herein, and while specific terms have been employed, they are used and should be construed in a generally descriptive sense only and not for purposes of limitation. In some instances, it will be apparent to those skilled in the art that features, characteristics and/or elements described in connection with a particular embodiment may be used alone, or may be described in combination with other embodiments, unless explicitly stated otherwise. Combinations of features and/or elements. Accordingly, it will be understood by those of ordinary skill in the art that various changes in form and details may be made without departing from the scope of the present application as set forth in the appended claims.

Claims

A method for applying for a certificate based on vehicle-road coordination, applied to a terminal device, wherein the method includes:

In response to determining that there is a certificate to be applied for, the validity period of the certificate to be applied for is determined according to the certificate set of the terminal device; wherein, the validity period of the certificate to be applied for meets the following conditions: after the certificate application is completed, the certificate set in the at least one certificate has a different validity period than other certificates in said set of certificates;

Sending a certificate application request including the validity period and quantity of the certificate to be applied for to the certificate issuing server, where the certificate application request is used to make the certificate issuing server generate a certificate according to the validity period and quantity of the certificate to be applied for.
The method according to claim 1, wherein the types of certificates in the certificate set include valid certificates and certificates to be applied for, and the validity period of at least one of the certificates to be applied for is different from the validity period of at least one valid certificate in the certificate set.
The method according to claim 1 or 2, wherein the valid period of at least one of the certificates to be applied for is different from the valid period of other said certificates to be applied for.
The method according to claim 3, wherein said determining that there is a certificate to be applied for comprises:

traverse the certificate collection;

In response to no certificates in the certificate set, it is determined that there are at least two certificates to be applied for; or, in response to the presence of certificates in the certificate set and the certificates satisfy a preset condition, it is determined that The certificates that meet the preset conditions are the certificates to be applied for.
The method according to claim 4, wherein the traversing the certificate set comprises: traversing the certificate set periodically.
The method according to claim 4, wherein, when there is no certificate in the certificate set, the number of certificates to be applied for is the total number of certificates in the preset certificate set, and the certificate according to the terminal device The set determines the validity period of the certificate to be applied for, including:

The validity period of the certificates to be applied for is determined according to the total number of certificates and the total validity period of the certificates in the certificate set, wherein the validity period of at least one of the certificates to be applied for is different from the validity period of other certificates to be applied for.
The method according to claim 4, wherein, when a certificate exists in the certificate set and the certificate satisfies a preset condition, the validity period of the certificate to be applied is determined according to the certificate set of the terminal device, include:

In response to the fact that there is one certificate to be applied for, the validity period of the certificate to be applied for is determined according to the validity period of the valid certificates in the certificate set, wherein the validity period of the certificate to be applied for is the same as the validity period of at least one valid certificate in the certificate set different.
The method according to claim 4, wherein, when a certificate exists in the certificate set and the certificate satisfies a preset condition, the validity period of the certificate to be applied is determined according to the certificate set of the terminal device, include:

In response to the fact that there are at least two certificates to be applied for, the certificate to be applied for is determined according to the validity period of the valid certificates in the certificate set, the number of the certificates to be applied for, the total number of certificates in the certificate set, and the total validity period of the certificates validity period.
The method of claim 4, wherein the preset conditions include:

The expiration time of the validity period of the certificate is greater than the current time, and the difference between the expiration time of the validity period of the certificate and the current time is smaller than a preset threshold; or, the expiration time of the validity period of the certificate is less than or equal to the current time.
A terminal device, including a certificate management module and a certificate application module, wherein the certificate management module is configured to, in response to determining that there is a certificate to be applied for, determine the validity period of the certificate to be applied for according to a set of certificates of the terminal device; wherein , the validity period of the certificate to be applied for meets the following conditions: after the certificate application is completed, the validity period of at least one certificate in the certificate set is different from the validity period of other certificates in the certificate set;

The certificate application module is configured to send a certificate application request including the validity period and quantity of the certificate to be applied for to the certificate issuance server, and the certificate application request is used to make the certificate issuance server according to the validity period of the certificate to be applied for and quantity to generate the certificate.
A computer device comprising:

one or more processors;

a storage device having one or more programs stored thereon;

Wherein, when the one or more programs are executed by the one or more processors, the one or more processors are made to implement the vehicle-road coordination-based certificate according to any one of claims 1-9 How to apply.
A computer-readable medium, on which a computer program is stored, wherein, when the program is executed, the method for applying for a certificate based on vehicle-road coordination according to any one of claims 1-9 is realized.