WO2024055303A1

WO2024055303A1 - Key management method, key usage apparatus and key management apparatus

Info

Publication number: WO2024055303A1
Application number: PCT/CN2022/119399
Authority: WO
Inventors: 彭建芬; 郭志鹏; 刘自友
Original assignee: 华为技术有限公司
Priority date: 2022-09-16
Filing date: 2022-09-16
Publication date: 2024-03-21
Also published as: CN118056376A

Abstract

The present application relates to a key management method, a key usage apparatus and a key management apparatus; and the present application relates to the technical field of intelligent transportation and intelligent driving. The method is applied to a key usage apparatus. The method comprises: determining the position of a key usage apparatus; acquiring at least one key according to the position, wherein the at least one key is allocated to a key usage apparatus located in a first area, the position is located in the first area, and the at least one key comprises a first key; and using the first key. The key usage apparatus and the key management apparatus can be applied to a vehicle; and the key management method, key usage apparatus and key management apparatus provided in the embodiments of the present application can improve the security of a key.

Description

A key management method, usage device and management device

Technical field

The present application relates to the technical fields of intelligent transportation and intelligent driving, and in particular to a key management method, usage device and management device.

Background technique

With the development of society, people's demand for vehicles is increasing year by year. While vehicles provide people with travel convenience, they also bring about problems such as traffic congestion and frequent traffic accidents. Based on this, Vehicle to Everything (V2X) technology emerged as the times require. Vehicles can obtain road traffic information, safety warning information, etc. in a timely manner through vehicle-to-vehicle (V2V) communication or vehicle-to-roadside infrastructure (Vehicle to Infrastructure, V2I) communication to achieve autonomous driving or assisted driving. .

In autonomous driving scenarios, V2X communication can help autonomous driving achieve lane-level assisted driving, mainly by sending its own location information between vehicles. For example, vehicle position information is broadcast through V2X, so that other vehicles that can obtain V2X messages can determine the position with other vehicles, and realize forward collision warning, blind spot assistance, lane change assistance, emergency braking warning, reverse overtaking warning, etc. function.

In a V2X scenario, vehicles need to broadcast their own location information at any time and record the trajectory changes of the vehicle based on a certain reference point. This location information needs to be encrypted and protected. At the same time, vehicle historical trajectory information belongs to users’ personal privacy data. In order to prevent malicious vehicles from intentionally monitoring and collecting the broadcast information of surrounding vehicles to obtain sensitive data such as continuous coordinates, the sensitive data in the V2X message or the V2X message needs to be encrypted and protected. How to reduce the impact caused by key leakage and improve the security of keys has become an urgent problem to be solved.

Contents of the invention

In view of this, a key management method, usage device and management device are proposed, which can improve the security of the key.

In a first aspect, embodiments of the present application provide a key management method, which method is applied to a key using device. The method includes: determining the location of the key using device; and obtaining at least A key, the at least one key is allocated to a key using device located in the first area, the location is located in the first area, the at least one key includes the first key; using the The first key.

In the embodiment of this application, the key corresponds to the region, and the keys used in different regions are different. This reduces the coverage of the same key to one region, which not only reduces the usage range and number of uses of the same key, In addition, when the key of one area is leaked, it will not affect the security of the keys of other areas, thereby reducing the impact caused by the leakage of the key of one area and improving the security of the key.

In a possible implementation, obtaining at least one key according to the location includes: sending location information indicating the location to a key management device; receiving a response to the key management device from the key management device. the at least one key for the location information.

In this embodiment of the present application, the key using device can apply to the key management device for at least one key corresponding to the first area, and then use the first key among the at least one key, thus reducing the coverage of the key. In the first area, when the key is leaked, it will not affect the security of other areas, thereby reducing the impact caused by the leakage of the key corresponding to the first area and improving the security of the key.

In a possible implementation, the location information is identification information of the first area; obtaining at least one key according to the location further includes: based on the location and a preset area division method , determine the first area.

In the embodiment of the present application, the key usage device calculates the identification information, which can effectively reduce the workload of the key management device.

In a possible implementation, the method further includes: receiving a message including the at least one key from a key management device; and obtaining the at least one key according to the location includes: according to the location, It is determined not to discard the at least one key.

In this embodiment of the present application, the key management device may send at least one key corresponding to the first region to the key usage device in the first region. In this way, on the one hand, the coverage of the key is reduced to the first area. When the key is leaked, it will not affect the security of other areas, thereby reducing the impact caused by the leakage of the key corresponding to the first area. , which improves the security of the key; on the other hand, it saves communication resources.

In a possible implementation, the at least one key is a plurality of keys, and the method further includes: selecting the first key from the plurality of keys; using the first key Keying includes using the first key as an encryption key.

In the embodiment of this application, the same area corresponds to multiple keys, which can reduce the number of key uses, thereby reducing the risk of key leakage and further improving the security of the key.

In a possible implementation, the selection is random selection, weighted random selection or rotating selection.

In a possible implementation, the at least one key is a plurality of keys, and the method further includes: receiving ciphertext from the first device, the ciphertext being encrypted according to the first key; Obtaining a key parameter, the key parameter indicating the first key; using the first key includes: selecting the first key from the plurality of keys according to the key parameter The key serves as the decryption key for the ciphertext.

In the embodiment of the present application, by setting key parameters, it is possible to quickly determine whether there is a matching key, reduce invalid decryption operations, actively discard error messages, and reduce the computing pressure of the key using device.

In a possible implementation, the at least one key is a plurality of keys, and the method further includes: receiving ciphertext from the first device, the ciphertext being encrypted according to the first key; Decrypting the ciphertext by traversing the use of the plurality of keys determines that the first key can successfully decrypt the ciphertext; the use of the first key includes: decrypting the ciphertext from the plurality of keys Select the first key as the decryption key of the ciphertext.

In this way, by traversing multiple keys to decrypt the ciphertext, the key using device can reduce the amount of data carried when interacting with the first device and save communication resources.

In a possible implementation, the first area is divided based on at least one of the following methods: area division based on regular graphics or irregular graphics; area division based on administrative areas; area division based on road grades; Divide areas based on the autonomous driving levels supported by roads; divide areas based on commercial areas.

In a possible implementation, the boundary of the first area is dynamically set.

In a possible implementation, obtaining at least one key according to the location includes:

When a first preset condition is met, the at least one key is obtained according to the location, wherein the first preset condition includes at least one of the following situations: the key using device is encrypted The key management device registers; the area where the key using device is located changes; the currently saved key expires; the time interval between the current moment and the last time the key was obtained reaches the first update threshold; the currently saved key is used The key cannot successfully decrypt the received data.

In a possible implementation, the method further includes: obtaining a preset second key; when the second preset condition is met, using the second key; wherein the second preset key Assume that the conditions include at least one of the following situations: the key using device is located in a transition area; the key using device is located in a specific area; the key using device does not obtain the at least one key; the at least One key has expired and failed to be updated; the key using device cannot successfully decrypt the received data using the at least one key; the key using device cannot communicate with the key management device.

In this embodiment of the present application, by setting the second key as a backup key or emergency key, service interruption caused by untimely key acquisition or untimely update can be avoided.

In a possible implementation, the number of the at least one key is related to at least one of the following: the area of the first area; the number of key using devices in the first area; The level of the first area; the update frequency of the at least one key.

In a possible implementation, the number of at least one key is fixed or dynamically changed.

In a possible implementation, the at least one key is used for geographical location information, vehicle driving information or service content information.

In a possible implementation, the method further includes: when registering on the key management device, obtaining third key information from the key management device, the third key information being used for subsequent The message received from the key management device is decrypted.

In this way, the use scope of the key can be limited to registered key using devices, so that unregistered key using devices cannot obtain the key provided by the key management device, thereby further improving key security.

In a second aspect, embodiments of the present application provide a key management method. The method is applied to a key management device. The method includes: obtaining multiple preset areas through area division. The multiple preset areas are The method includes a first area; generating at least one key corresponding to the first area; and sending the at least one key to a key using device in the first area.

In a possible implementation, before sending the at least one key to the key usage device in the first area, the method further includes: receiving from the key usage device a message indicating the Location information of the location of the key using device; based on the location information, the at least one key is allocated to the key using device for use.

In a possible implementation, the location information is identification information of the first area or geographical coordinate information of the key using device.

In a possible implementation, sending the at least one key to the key usage device in the first area includes:

A message including the at least one key is sent within the first area.

In a possible implementation, the at least one key is multiple keys, and the method further includes:

A plurality of key parameters corresponding to the plurality of keys are sent to the key using device.

In a possible implementation, the area division is based on at least one of the following ways:

Divide areas based on regular graphics or irregular graphics;

Regional division based on administrative regions;

Zoning based on road grade;

Regional division based on the autonomous driving level supported by the road;

Zoning based on commercial areas.

In a possible implementation, the sending of the at least one key to the key usage device in the first area is triggered by at least one of the following:

The key usage device is registered with the key management device;

The key using device enters the first area from an area other than the first area;

The key currently corresponding to the first area expires;

The time interval between the current time and the last time the key was sent to the key using device reaches the first update threshold;

The key using device requests an update of the key corresponding to the first area.

In a possible implementation, the method further includes:

Send a second key to the key usage device, the second key being used by the key usage device in at least one of the following situations:

The key usage device is located in the transition area;

The key usage device is located in a specific area;

The key using device has not obtained the at least one key;

The at least one key expires and the update fails;

The key using device is unable to successfully decrypt the received data using the at least one key. The key using device is unable to communicate with the key management device.

In a possible implementation, the number of the at least one key is related to at least one of the following:

The area of the first region;

The number of key using devices in the first area;

The level of the first area;

The update frequency of the at least one key.

In a possible implementation, the number of the at least one key is fixed or dynamically changed.

In a possible implementation, the method further includes:

When the key using device is registered, third key information is sent to the key using device, and the third key information is used for subsequent processing by the key management device to the key using device. The message is decrypted.

In a third aspect, embodiments of the present application provide a key usage device, which includes:

A first determination module, used to determine the location of the key using device;

A first acquisition module configured to acquire at least one key according to the location, the at least one key being allocated to a key using device located in the first area, and the location being located in the first area, The at least one key includes a first key;

The first usage module is used to use the first key.

In a possible implementation, the first acquisition module is also used to:

sending location information indicating the location to the key management device;

The at least one key responsive to the location information is received from the key management device.

In one possible implementation,

The location information is the identification information of the first area;

The first acquisition module is also used to:

The first area is determined according to the location and a preset area division method.

In a possible implementation, the device further includes:

A first receiving module configured to receive a message including the at least one key from the key management device;

The first acquisition module is also used to:

Based on the location, it is determined not to discard the at least one key.

In a possible implementation, the at least one key is multiple keys, and the device further includes:

A first selection module, configured to select the first key from the plurality of keys;

The first using module is also configured to use the first key as an encryption key.

a second receiving module, configured to receive ciphertext from the first device, where the ciphertext is encrypted according to the first key;

a second acquisition module, configured to acquire key parameters, where the key parameters indicate the first key;

The first usage module is also used for:

According to the key parameter, the first key is selected from the plurality of keys as the decryption key of the ciphertext.

A third receiving module, configured to receive ciphertext from the first device, where the ciphertext is encrypted according to the first key;

A traversal module, configured to decrypt the ciphertext using the plurality of keys through traversal, and determine that the first key can successfully decrypt the ciphertext;

The first usage module is also used for:

The first key is selected from the plurality of keys as the decryption key of the ciphertext.

In a possible implementation, the first area is divided based on at least one of the following methods:

Divide areas based on regular graphics or irregular graphics;

Regional division based on administrative regions;

Zoning based on road grade;

Regional division based on the autonomous driving level supported by the road;

Zoning based on commercial areas.

In a possible implementation, the first acquisition module is also used to:

When a first preset condition is met, the at least one key is obtained according to the location, wherein the first preset condition includes at least one of the following situations:

The key using device is registered with the key management device;

The area where the key using device is located changes;

The currently saved key expires;

The time interval between the current moment and the last time the key was obtained reaches the first update threshold;

The received data could not be successfully decrypted using the currently saved key.

In a possible implementation, the device further includes:

The third acquisition module is used to acquire the preset second key;

The second use module is used to use the second key when the second preset condition is met;.

Wherein, the second preset condition includes at least one of the following situations:

The key usage device is located in the transition area;

The key usage device is located in a specific area;

The key using device has not obtained the at least one key;

The at least one key expires and the update fails;

The area of the first region;

The number of key using devices in the first area;

The level of the first area;

The update frequency of the at least one key.

In a possible implementation, the device further includes:

The fourth acquisition module is used to obtain third key information from the key management device when registering on the key management device. The third key information is used for subsequent reception from the key management device. The incoming message is decrypted.

In a fourth aspect, embodiments of the present application provide a key management device, which includes:

A dividing module, configured to obtain multiple preset areas through area division, where the multiple preset areas include a first area;

A first generation module configured to generate at least one key corresponding to the first area;

The first sending module is configured to send the at least one key to the key using device in the first area.

In a possible implementation, the device further includes:

A first receiving module configured to receive location information indicating the location of the key using device from the key using device;

A first allocation module, configured to allocate the at least one key to the key using device based on the location information.

In a possible implementation, the first sending module is also used to:

A message including the at least one key is sent within the first area.

The second sending module is configured to send a plurality of key parameters corresponding to the plurality of keys to the key using device.

Divide areas based on regular graphics or irregular graphics;

Regional division based on administrative regions;

Zoning based on road grade;

Regional division based on the autonomous driving level supported by the road;

Zoning based on commercial areas.

The key usage device is registered with the key management device;

The key currently corresponding to the first area expires;

In a possible implementation, the device further includes:

A third sending module, configured to send a second key to the key using device, where the second key is used by the key using device in at least one of the following situations:

The key usage device is located in the transition area;

The key usage device is located in a specific area;

The key using device has not obtained the at least one key;

The at least one key expires and the update fails;

The key using device cannot successfully decrypt the received data using the at least one key;

The key using device cannot communicate with the key management device.

The area of the first region;

The number of key using devices in the first area;

The level of the first area;

The update frequency of the at least one key.

In a possible implementation, the device further includes:

The fourth sending module is configured to send third key information to the key using device when the key using device is registered. The third key information is used to subsequently send the key information to the key using device. The key is used to decrypt the message sent by the device.

In a fifth aspect, embodiments of the present application provide a key usage device that can perform key management in one or more of the first aspect or multiple possible implementations of the first aspect. method.

In a sixth aspect, embodiments of the present application provide a key management device that can perform key management in one or more of the above-mentioned second aspects or multiple possible implementations of the second aspect. method.

In a seventh aspect, embodiments of the present application provide a key management system, which may include the key using device described in the fifth aspect, and the key management device described in the sixth aspect.

In an eighth aspect, embodiments of the present application provide a non-volatile computer-readable storage medium on which computer program instructions are stored. When the computer program instructions are executed by a processor, the above-mentioned first aspect or aspects are implemented. One or more key usage methods among multiple possible implementations, or, when the computer program instructions are executed by the processor, the above second aspect or one of the multiple possible implementations of the second aspect is implemented One or more key management methods.

In a ninth aspect, embodiments of the present application provide a computer program product, including a computer readable code, or a non-volatile computer readable storage medium carrying the computer readable code, when the computer readable code is stored electronically When running in the device, the processor in the electronic device executes one or more of the key usage methods of the first aspect or multiple possible implementations of the first aspect, or, the processor in the electronic device The processor executes one or more of the key management methods of the above-mentioned second aspect or multiple possible implementations of the second aspect.

In a tenth aspect, embodiments of the present application provide a vehicle, including the key usage device described in the fifth aspect, and/or the key management device described in the sixth aspect.

These and other aspects of the application will be better understood in the description of the embodiment(s) below.

Description of drawings

The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate exemplary embodiments, features, and aspects of the application and together with the description, serve to explain the principles of the application.

Figure 1 shows a schematic structural diagram of an application scenario key management system provided by an embodiment of the present application.

Figure 2 shows a flow chart of the key management method provided by the embodiment of the present application.

Figure 3 shows a schematic diagram of area division provided by the embodiment of the present application.

Figure 4 shows an interactive flow chart of the key management method provided by the embodiment of the present application.

Figure 5 shows an interactive flow chart of the key management method provided by the embodiment of the present application.

Figure 6 shows an interactive flow chart of the key management method provided by the embodiment of the present application.

Figure 7 shows a schematic diagram of area division provided by the embodiment of the present application.

Figure 8 shows a schematic diagram of the division of specific areas in the embodiment of the present application.

Figure 9 shows a block diagram of a key usage device provided by an embodiment of the present application.

Figure 10 shows a block diagram of a key management device provided by an embodiment of the present application.

Figure 11 shows a schematic structural diagram of an electronic device provided by an embodiment of the present application.

Detailed ways

Various exemplary embodiments, features, and aspects of the present application will be described in detail below with reference to the accompanying drawings. The same reference numbers in the drawings identify functionally identical or similar elements. Although various aspects of the embodiments are illustrated in the drawings, the drawings are not necessarily drawn to scale unless otherwise indicated.

The word "exemplary" as used herein means "serving as an example, example, or illustrative." Any embodiment described herein as "exemplary" is not necessarily to be construed as superior or superior to other embodiments.

In addition, in order to better explain the present application, numerous specific details are given in the following detailed description. It will be understood by those skilled in the art that the present application may be practiced without certain specific details. In some instances, methods, means, components and circuits that are well known to those skilled in the art are not described in detail in order to highlight the subject matter of the present application.

Figure 1 shows a schematic structural diagram of an application scenario key management system provided by an embodiment of the present application. As shown in Figure 1, the system includes: a key usage device 101 and a key management device 102. Among them, the key usage device 101 and the key management device 102 can communicate through the network. The key management device 102 can generate keys corresponding to each region, and the key using device 101 can use the keys corresponding to the region where it is located.

In a possible implementation, the key using device 101 may be an electronic device with communication capabilities and data encryption and decryption capabilities. For example, the key usage device 101 may be (or be deployed in) a vehicle with a vehicle communication unit (Telematics box, T-box), a roadside unit (Road Side Unit, RSU), or other terminal equipment.

In a possible implementation, the key management device 102 may be an electronic device with key generation capabilities, may be (or be deployed on) a physical device such as a host, a frame server, a blade server, etc., or may be a virtual device. Devices such as virtual machines, containers, etc. The key management device 102 can be deployed in the cloud, in an RSU, or in a vehicle, and the embodiments of this application are not limited to this.

In one example, key management device 102 may also have distribution capabilities. The key management device 102 may directly distribute the generated key to the key usage device 101 . In yet another example, the key management device 102 may distribute the generated key to the key usage device 101 through a distribution device (eg, a gateway or a router, etc.).

In the embodiment of the present application, the key usage device 101 can be deployed in a vehicle, and the key management device 102 can be deployed in the cloud; or the key usage device 101 and the key management device 102 can be deployed in different vehicles; or the key management device 102 can be deployed in a different vehicle. The key usage device 101 and the key management device 102 are deployed in the same vehicle; or the key usage device 101 is deployed in the RSU and the key management device 102 is deployed in the cloud, which is not limited in this embodiment of the present application.

Figure 2 shows a flow chart of the key management method provided by the embodiment of the present application. This method can be applied to the key using device shown in Figure 1. As shown in Figure 2, the method may include:

Step S401: Determine the location of the key using device.

In this embodiment of the present application, the key usage device is located in the first area, and the first area can be any preset area.

In a possible implementation, the first area is divided based on at least one of the following methods: area division based on regular graphics or irregular graphics; area division based on administrative areas; area division based on road grades; The regions are divided based on the supported autonomous driving levels; the regions are divided based on commercial areas.

Among them, regular graphics include but are not limited to rectangles, trapezoids, triangles, etc. Administrative regions include but are not limited to provinces, cities, counties and streets. Road grades include but are not limited to national highways, provincial highways, altitude and autonomous driving lanes, etc. The autonomous driving levels supported by roads include but are not limited to pure manual driving (L0), driving automation (L1), assisted driving (L2), automatic assisted driving (L3), automatic driving (L4) and driverless driving (L5). Commercial areas include but are not limited to parking lots, shopping malls, supermarkets and wholesale markets.

The following is an example of dividing the first area based on a regular graphic (specifically, a rectangle). Figure 3 shows a schematic diagram of area division provided by the embodiment of the present application. As shown in Figure 3, 9 preset areas are obtained through area division, which are the 0th preset area, the 1st preset area, ... and the 8th preset area. Based on the position (x, y) of the key using device and Formula 1, the identification information Zoneid of the first zone can be obtained.

Wherein, x is the longitude geodetic distance (in meters) between the position of the key usage device and the geographic location coordinate (0,0) in the WGS84/GCJ-02 coordinate system, and y is the dimensional geodetic distance (in meters) between the position of the key usage device and the geographic location coordinate (0,0) in the WGS84/GCJ-02 coordinate system. L represents the length of the preset area, and W represents the width of the preset area. The values of L and W can be the same or different. In one example, the values of L and W can be 100 kilometers or 500 kilometers, etc. Nx represents the number of preset areas divided in the latitudinal direction, and Ny represents the number of preset areas divided in the longitude direction. The values of Nx and Ny can be the same or different. For example, the values of Nx and Ny in Figure 3 are both 3. Floor is a rounding-down operation, and Mod is a modulo operation.

It should be noted that the above is only an illustrative example of the division method and is not used to limit the division method. In the embodiment of the present application, other division methods can also be used to obtain the first region.

In a possible implementation, the boundary of the first area is dynamically set. In other words, the boundary of the first area can be changed. This way, flexibility can be increased.

Step S402: Obtain at least one key according to the location, and the at least one key includes the first key.

Wherein, the at least one key is assigned to a key using device located in the first area. That is to say, the keys available to the key using device located in the first area are the same. The key distribution method will be explained in detail later and will not be repeated here.

The first key may represent a key to be used by the key using device. In the case where the at least one key is a key, the key using device may determine the key as the first key. In the case where the at least one key is a plurality of keys, the key using device may determine the first key from the plurality of keys. In the embodiment of the present application, the method of selecting the first key is also different depending on the usage of the first key. The method of selecting the first key will be explained in step S403 and will not be described again here.

In a possible implementation, step S402 may include: when the first preset condition is met, obtaining the at least one key according to the location. Wherein, the first preset condition includes at least one of the following situations: the key using device is registered with the key management device; the area where the key using device is located changes; the currently saved key expires; The time interval between the current moment and the last time the key was obtained reaches the first update threshold; the received data cannot be successfully decrypted using the currently saved key.

In one example, the key using device may obtain the key when the key management device registers. In this way, the key using device can use the key immediately after registration without waiting, which is beneficial to improving business efficiency.

In addition, in an application scenario in the embodiment of the present application, the key using device can register with the key management device only after completing the payment. In this way, only the paid key-using device (such as a vehicle) can obtain the first key and the second key (to be introduced later) for use, which can play an access control role.

In one example, the key using device can reacquire the key when the area it is located in changes. In the embodiment of the present application, keys are distributed according to regions. When the region where the key using device is located changes, the keys that can be used by the key using device also change accordingly. At this time, the key needs to be obtained again. key. In this way, the matching degree of the key can be improved and the decryption success rate can be improved.

In one example, the key using device can re-obtain the key when the currently saved key expires. It is understandable that as the existence time of the key increases, the possibility of the key being cracked increases accordingly, and the security of the key decreases accordingly. Therefore, in the embodiment of the present application, a validity period is set for the key so that when the key expires, the key using device can re-obtain the key, thus improving the security of the key.

In one example, the key using device may re-obtain the key when the time interval between the current time and the last time the key was obtained reaches the first update threshold. When the time interval between the previous moment and the last time the key was obtained reaches the first update threshold, it indicates that the key has not been updated for a long time, and the risk of the key being cracked or leaked is high, so the key needs to be obtained in order to Improve security.

The first update threshold can be set as needed, for example, it can be set to 1 hour or 1 day. In a possible implementation, the first update threshold may be determined based on the area of the first area or the number of key using devices in the first area. For example, the larger the area of the first area, the smaller the value of the first update threshold (that is, the greater the update frequency), and the greater the number of key using devices in the first area, the smaller the value of the first update threshold. Small (that is, the greater the update frequency).

In one example, the key using device re-obtains the key when the received data cannot be successfully decrypted using the currently saved key. If the key using device cannot successfully decrypt the received data using the currently saved key, it indicates that the current key is incorrect. In order not to affect the business, the key needs to be obtained again.

In addition, in the embodiment of the present application, by setting different validity periods for keys in different areas, the update times of keys in different areas can be different, thereby reducing the pressure on the key management device during key update.

It should be noted that the above are only exemplary first preset conditions and are not used to limit the first preset conditions. The embodiment of the present application can also obtain the at least one key according to the location in other circumstances.

Step S403, use the first key.

In this step, the key using device may use the first key for encryption or the first key for decryption. In a possible implementation, the at least one key can be used for first location information, vehicle driving information or service content information. That is to say, in the embodiment of the present application, the first key can be used to encrypt the first location information, vehicle driving information or service content information, or the first key can be used to encrypt the first location information, vehicle driving information and so on. Decrypt the information or service content information. In addition, in the embodiment of the present application, the first key can also be used to encrypt the message containing the first location information, vehicle driving information or service content information, or the first key can be used to encrypt the message containing the first location information. , vehicle driving information or service content information. Of course, the above are only illustrative examples, and at least one key can also be used to encrypt and decrypt other data or messages, which is not limited by the embodiments of this application.

It should be noted that, assuming that key using device A and key using device B are located in the same area, at this time, at least one key obtained by key using device A and key using device B is the same. The first key used when the key using device A sends the V2X message to the key using device B and the first key used when the key using device B sends the V2X message to the key using device A may be the same or different. . For example, key using device A and key using device B have obtained key 1, key 2 and key 3. When key using device A sends a V2X message to key using device B, key 1 is randomly selected for encryption. When key using device B sends a V2X message to key using device A, key 2 is randomly selected for encryption.

The process of encryption using the first key is explained below.

In a possible implementation, the at least one key is a plurality of keys, and the method may further include: selecting the first key from the plurality of keys. Step S403 may include using the first key as an encryption key.

Wherein, the selection may be random selection, weighted random selection or rotation selection.

In one example, the key using device randomly selects a key from a plurality of keys as the first key.

In yet another example, the key using device may randomly select a key from a plurality of keys as the first key. Among them, the weighting coefficient of a key can be determined based on the number of times the key has been used. The weighting factor of a key is inversely proportional to the number of times the key has been used. That is to say, the more times a key has been used, the lower the weighting coefficient of the key, and the less likely the key is to be selected; the less the number of times a key has been used, the lower the weighting coefficient of the key. The higher the weighting factor, the more likely the key is to be selected. In this way, the number of uses of each key can be balanced and the impact caused by key leakage can be reduced.

In yet another example, the key usage device may rotate multiple keys as the first key. For example, the key using device can change the first key every once in a while, or change the first key every time it moves a certain distance. For another example, the key using device can replace the first key according to the speed of the vehicle. When the speed of the vehicle is 0, the first key may not be rotated, or the rotation time may be extended.

It should be noted that the above are only exemplary ways of selecting the first key and are not used to limit the ways of selecting the first key. In the embodiments of the present application, other ways can also be used to select the first key.

The process of decryption using the first key is explained below.

In a possible implementation, the at least one key is a plurality of keys, and the method may further include: receiving ciphertext from the first device, the ciphertext being encrypted according to the first key ; Obtain a key parameter indicating the first key. Step S403 may include: selecting the first key from the plurality of keys as the decryption key of the ciphertext according to the key parameter.

The first device may be a key management device, or other devices such as vehicles, RSUs, and portable terminals. The embodiments of this application do not limit the first device.

In a possible implementation, the key using device sends multiple key parameters corresponding to the multiple keys. When the key using device obtains multiple keys, it can obtain the key parameters of each key at the same time. Afterwards, the key using device can find the key parameter corresponding to the ciphertext, find the first key, and then use the first key to decrypt the ciphertext. In this way, the speed of determining the first key can be increased and the decryption efficiency can be improved.

Among them, the key parameter can be the id of the key or the derivation time of the key.

In a possible implementation, the at least one key is multiple keys, and the method may further include: receiving ciphertext from the first device, where the ciphertext is encrypted according to the first key; by The ciphertext is decrypted by traversing and using the multiple keys, and it is determined that the first key can successfully decrypt the ciphertext. Step S403 may include: selecting the first key from the plurality of keys as the decryption key of the ciphertext.

In this embodiment of the present application, the key management device can obtain multiple preset areas through area division, generate at least one key corresponding to the first area, and send the key usage device in the first area. At least one key. The first area may represent any preset area among multiple preset areas. Other preset areas can refer to the first area, which will not be described again here.

In a possible implementation, the key management device sending at least one key to the key usage device in the first area may be triggered by at least one of the following: the key usage device The device registers; the key using device enters the first area from an area other than the first area; the current key corresponding to the first area expires; the current moment is the same as the last time the key was used. The time interval between the moments when the device sends the key reaches the first update threshold; the key using device requests to update the key corresponding to the first area.

In a possible implementation, the key management device may send the key to the key usage device based on the received location information. Figure 4 shows an interactive flow chart of the key management method provided by the embodiment of the present application. This method can be applied to the system shown in Figure 1. As shown in Figure 4, the method may include:

Step S501: The key management device obtains multiple preset areas through area division.

The multiple preset areas obtained in this step include the first area. In a possible implementation, the regional division is based on at least one of the following methods: regional division based on regular graphics or irregular graphics; regional division based on administrative regions; regional division based on road grades; automatic Divide areas based on driving level; divide areas based on commercial areas. For the specific area division method, please refer to step S401, which will not be described again here.

Step S502: The key management device generates at least one key corresponding to the first area.

In this step, the key management device may generate at least one key corresponding to the first area, at least one of which is assigned to the key using device located in the first area.

In a possible implementation, the number of at least one key corresponding to the first area is related to at least one of the following: the area of the first area; the size of the key using device in the first area. quantity; the level of the first area; the update frequency of the at least one key.

When the area of the first area is large, it indicates that there may be more key using devices in the first area, and the same key is more likely to be used by too many key using devices, so it can be the first area. Generate more keys to increase key security. When the area of the first area is small, it indicates that there may be fewer key using devices in the first area, and the same key is less likely to be used by too many key using devices, so it can be generated for the first area. Fewer keys to save key resources and communication overhead.

When there are a large number of key using devices in the first area, the same key is more likely to be used by too many key using devices. Therefore, more keys can be generated for the first area to improve the key quality. security. When the number of key using devices in the first area is small, the same key is less likely to be used by too many key using devices, so fewer keys can be generated for the first area to save passwords. Key resources and communication overhead.

When the level of the first area is relatively high, for example, when the first area is a provincial, municipal, national highway, autonomous driving (L4) or unmanned driving (L5), or a commercial area with a large passenger flow, it indicates that there may be There are more key using devices, and the same key is more likely to be used by too many key using devices. Therefore, more keys can be generated for the first area to improve the security of the key. When the level of the first area is low, for example, when the first area is a county, street, provincial highway, driving automation (L1), assisted driving (L2) or a commercial area with small passenger flow, it indicates that there may be With fewer key using devices, the same key is less likely to be used by too many key using devices. Therefore, fewer keys can be generated for the first area to save key resources and communication overhead.

It should be noted that the above are only exemplary factors that affect the number of at least one key corresponding to the first area, and do not apply to limit the factors that affect the number of keys. The number of keys can also be related to other factors. This application implements There is no restriction on this. For example, the number of keys can also be set and modified by the user, or it can be set to a fixed value.

In addition, when the number of at least one key corresponding to the first area is large, it indicates that the number of key using devices in the first area may be large, and the same key is more likely to be used by too many key using devices. , so the update frequency of at least one key can be increased to improve the security of the key. When the number of at least one key corresponding to the first area is small, it indicates that there may be fewer key using devices in the first area, and the same key is less likely to be used by too many key using devices, Therefore, the update frequency of at least one key can be reduced to save computing resources.

In the embodiment of this application, by flexibly adjusting the number of keys and the key update frequency, the number and duration of key usage can be reduced, and key security can be enhanced.

In a possible implementation, the number of at least one key corresponding to the first area may be fixed or dynamically changed. In one example, the number of at least one key corresponding to the first area may be determined based on the area of the first area, such that when the area of the first area is fixed, the number of at least one key corresponding to the first area The number of keys remains unchanged. In yet another example, the number of at least one key corresponding to the first area may be determined based on the number of key using devices in the first area. Since the number of key using devices in the first area changes, therefore The number of at least one key corresponding to the first area will also change accordingly. For example, if the number of key using devices increases, the number of keys will increase accordingly, and if the number of key using devices decreases, the number of keys will decrease accordingly.

Step S503: The key using device determines the location of the key using device, and the location is located in the first area.

Step S504: The key usage device sends location information indicating the location to the key management device.

The location information may be identification information of the first area or geographical coordinate information of the key using device.

Step S505: The key management device allocates at least one key corresponding to the first area to the key using device based on the location information.

In a possible implementation, the location information is identification information of the first area. The key using device may first determine the first area based on the location and a preset area division method, and then send the identification information of the first area to the key management device. The key management device may find at least one key corresponding to the first area based on the identification information, and allocate the found at least one key to the key using device for use.

In one example, the identification information may be a number, a name, a code, etc., which is not limited by the embodiment of the present application.

In a possible implementation, the location information is the geographical coordinate information of the key using device. The key using device may send the geographical coordinate information of the key using device to the key management device. The key management device may determine the first area according to the first coordinate information and a preset area division method, and then allocate at least one key corresponding to the first area to the key using device for use.

Since the preset area division method in the key management device may change, when it changes, the key using device may not be able to update the area division method in time due to some reasons (such as poor network or busy business, etc.), thus As a result, the calculated identification information does not match the actual identification information. In this case, the key obtained by the key using device does not match the first area, causing the key using device to be unable to perform normal V2X communication. The key using device sends geographical coordinate information to the key management device, and the key management device calculates the identification information, which can avoid the problem of the key using device obtaining the wrong key due to changes in the preset area division method.

Step S506: The key using device sends the at least one key to the key using device.

Step S506: The key using device receives the at least one key from the key management device.

Step S507: The key using device uses the first key included in the at least one key.

The process of selecting the first key from at least one key by the key using device and the process of using the first key can refer to step S402 and step S403, which will not be described again here.

In a possible implementation, the key management device can push the key. Figure 5 shows an interactive flow chart of the key management method provided by the embodiment of the present application. This method can be applied to the system shown in Figure 1. As shown in Figure 5, the method may include:

Step S601: The key management device obtains multiple preset areas through area division.

Step S602: The key management device generates at least one key corresponding to the first area.

In the embodiment of the present application, step S601 and step S602 may refer to step S501 and step S502, which will not be described again here.

Step S603: The key management device sends a message including the at least one key in the first area.

The key management device can send a message including the at least one key in the first area, so that all key using devices located in the first area can obtain at least one key corresponding to the first area. In one example, the key management device may periodically send messages including the at least one key within the first area. In yet another example, the key management device may send a message including the at least one key to the key using device when detecting that a key using device enters the first area. The embodiment of the present application does not limit the timing when the key management device sends a message including the at least one key.

Step S604: The key using device receives a message including at least one key from the key management device.

Step S605: The key using device determines the location of the key using device, and the location is located in the first area.

Step S606: The key using device determines not to discard the at least one key according to the location.

In a possible implementation, if the key using device determines that the location is not located in the first area, the key using device may discard the at least one key.

It is considered that a key using device located outside the first area but close to the first area or a key using device that has just left the first area may also receive a message including at least one key corresponding to the first area. Therefore, after receiving the message including the message, the key using device can determine whether to discard the at least one received key according to the location. If the key using device is located in the first area, the key using device does not discard at least one key corresponding to the first area, thereby enabling the key using device to use the key corresponding to the first area. If the key using device is not located in the first area, the key using device will discard at least one key corresponding to the first area, so that the key using device avoids misuse of the key corresponding to the first area.

Step S607: The key using device uses the first key included in the at least one key.

For this step, please refer to step S607, which will not be described again here.

Figure 6 shows an interactive flow chart of the key management method provided by the embodiment of the present application. This method can be applied to the system shown in Figure 1. As shown in Figure 6, the method may include:

Step S701: The key management device sends the second key to the key using device.

In a possible implementation, the key management device may send the second key to the key using device when the key using device registers. In this way, as long as the key using device is registered with the key management device, the same second key will be stored therein.

In a possible implementation, the key management device may send a new second key to all registered key using devices after the second key becomes invalid or expires. In this way, the second key can be updated synchronously through all registered key using devices, thereby improving the security of the second key.

Step S702: The key using device receives the second key.

Step S703: The key using device uses the second key if the second preset condition is met.

Wherein, the second preset condition includes at least one of the following situations: the key using device is located in a transition area; the key using device is located in a specific area; the key using device does not obtain the at least one One key; the at least one key has expired and failed to be updated; the key using device cannot successfully decrypt the received data using the at least one key; the key using device cannot communicate with the key management device communication.

The method of using the second key may refer to the method of using the first key, which will not be described again here.

In a possible implementation, the multiple preset areas obtained by the key management device through area division may include transition areas. The transition area may represent a preset area among the plurality of preset areas that can be connected to any other preset area. When the key using device is located in a transition area, the second key can be used. In this way, the problem of frequent key updates caused by the key using device frequently crossing regions can be avoided.

Figure 7 shows a schematic diagram of area division provided by the embodiment of the present application. As shown in Figure 7, 10 preset areas are obtained through area division, which are the 0th preset area, the 1st preset area,... and the 8th preset area, as well as the transition area. Among them, the transition area can connect any one of the 0th preset area, the 1st preset area, ... and the 8th preset area.

In one example, the area can be divided first through Formula 1 to obtain the identification information of each preset area. Then, based on the division result, the boundary area between two adjacent preset areas is set as a transition area, and each boundary area can constitute the final transition area. When the preset area divided by Formula 1 is a square, and the distance between adjacent preset areas in the longitude direction and the distance between adjacent preset areas in the latitudinal direction are the same, the location that satisfies any one of the conditions in Formula 2 (x, y) is located in the transition region.

Among them, the value of M is the same as L, the value of Z is half the length of the transition region, and the value of N is the difference between M and Z. Assume that the length and width of each preset area obtained by regional division through formula 1 are both 500 kilometers, and the length and width of the transition area are both 200 kilometers. That is to say, the value of L is 500, the length of the transition area is 200, then the value of M is 500, the value of Z is 200/2=100, and the value of N is 500-100=400. In the case where x is greater than 400 and less than 600, the position is in the transition area. In the case where y is greater than 400 and less than 600, the position is in the transition region.

It should be noted that the above are only exemplary ways of determining the transition area and are not used to limit the ways of determining the transition area. In the embodiments of the present application, other ways can also be used to determine the transition area.

In a possible implementation, the key management device can demarcate a specific area, and the specific area can be an area with poor communication conditions (that is, it is easy to communicate between the key management device and the key using devices in the area). Interruption occurs or even failure to connect) or busy business areas (that is, key-using devices in this area need to use keys frequently). The second key can be used when the key-using device is located in that specific area. In this way, when the key using device determines that the location is located in a specific area, the process of determining whether the location is located in the first area can be omitted and the second key can be used directly. In this way, computing resources can be saved. Especially when the specific area is an area with poor communication conditions, there is no need for the key using device to repeatedly send location information to the key management device to obtain at least one key corresponding to the first area, thus saving a large amount of communication resources.

In one example, the specific area may overlap with multiple preset areas obtained by the key using device through area division. At this time, the key using device may preferentially use the second key. Figure 8 shows a schematic diagram of the division of specific areas in the embodiment of the present application. As shown in Figure 7, the specific area overlaps with the 0th preset area and the 3rd preset area. , if the key using device is located in both the specific area and the 0th preset area, the key using device can preferentially use the second key.

In a possible implementation, the key using device may use the second key without obtaining at least one key corresponding to the first area. The failure of the key management device to obtain at least one key corresponding to the first area may be due to poor communication conditions. At this time, if it waits for at least one key, the sending of service information may be delayed. In order to reduce the need for service information The effect is that a second key can be used.

In a possible implementation, the key using device may try to use the second key when the received data cannot be successfully decrypted using currently existing keys. Because this situation may be caused by the sender being located in a transition area, a specific area, or unable to obtain at least one key. In this way, the impact on business information can be reduced.

In a possible implementation, the key using device may use the second key when it is unable to communicate with the key management device. The key using device cannot communicate with the key management device, which may cause the key using device to be unable to obtain at least one key corresponding to the first area or to update at least one key corresponding to the first area in a timely manner. At this time, the key using device uses the second key, which can increase the probability of successful decryption by the receiving end and reduce the impact on the business information caused by poor communication conditions with the key management device.

In a possible implementation, when the key using device registers on the key management device, the key management device may send the third key information to the key using device.

The third key information may be used to decrypt subsequent messages sent by the key management device to the key usage device. That is to say, the key using device can use the third key information to decrypt subsequent messages received from the key management device. In one example, the third key information may be the key itself (recorded as: third key), or may be a parameter used to generate the third key, which is not limited in this embodiment of the present application.

For example, the third key information may be used to decrypt a message from the key management device and including at least one key corresponding to the first area, so as to obtain at least one key corresponding to the first area. For another example, the third key information can be used to decrypt a message from the key management device and including the second key, so as to obtain the second key. In this way, for a key management device that is not registered with the key management device, even if it receives a message from the key management device that includes at least one key corresponding to the first area or a message that includes the second key. , the received message cannot be decrypted successfully, and at least one key and the second key corresponding to the first area cannot be obtained, thereby improving the security of the key. In this way, key protection services can be provided to registered users (such as paid registered users).

Figure 9 shows a block diagram of a key usage device provided by an embodiment of the present application. As shown in Figure 9, the device 800 may include:

The first determination module 801 is used to determine the location of the key using device;

The first acquisition module 802 is configured to acquire at least one key according to the location. The at least one key is allocated to a key using device located in the first area, and the location is located in the first area. , the at least one key includes a first key;

The first use module 803 is used to use the first key.

In a possible implementation, the first acquisition module is also used to:

In one possible implementation,

The location information is the identification information of the first area;

The first acquisition module is also used to:

In a possible implementation, the device further includes:

The first acquisition module is also used to:

Based on the location, it is determined not to discard the at least one key.

The first usage module is also used for:

Divide areas based on regular graphics or irregular graphics;

Regional division based on administrative regions;

Zoning based on road grade;

Regional division based on the autonomous driving level supported by the road;

Zoning based on commercial areas.

In a possible implementation, the first acquisition module is also used to:

The key using device is registered with the key management device;

The area where the key using device is located changes;

The currently saved key expires;

In a possible implementation, the device further includes:

The third acquisition module is used to acquire the preset second key;

The key usage device is located in the transition area;

The key usage device is located in a specific area;

The key using device has not obtained the at least one key;

The at least one key expires and the update fails;

The key using device cannot communicate with the key management device.

The area of the first region;

The number of key using devices in the first area;

The level of the first area;

The update frequency of the at least one key.

In a possible implementation, the device further includes:

Figure 10 shows a block diagram of a key management device provided by an embodiment of the present application. As shown in Figure 10, the device 900 may include:

Division module 901, configured to obtain multiple preset areas through area division, where the multiple preset areas include the first area;

A first generation module 902, configured to generate at least one key corresponding to the first area;

The first sending module 903 is configured to send the at least one key to the key using device in the first area.

In a possible implementation, the device further includes:

In a possible implementation, the first sending module is also used to:

A message including the at least one key is sent within the first area.

Divide areas based on regular graphics or irregular graphics;

Regional division based on administrative regions;

Zoning based on road grade;

Regional division based on the autonomous driving level supported by the road;

Zoning based on commercial areas.

The key usage device is registered with the key management device;

The key currently corresponding to the first area expires;

In a possible implementation, the device further includes:

The key usage device is located in the transition area;

The key usage device is located in a specific area;

The key using device has not obtained the at least one key;

The at least one key expires and the update fails;

The key using device cannot communicate with the key management device.

The area of the first region;

The number of key using devices in the first area;

The level of the first area;

The update frequency of the at least one key.

Figure 11 shows a schematic structural diagram of an electronic device provided by an embodiment of the present application. The electronic device may be a key usage device or a key management device. The electronic device can be deployed in terminal devices such as vehicles and RSUs, or in cloud servers.

As shown in Figure 11, the test device may include at least one processor 301, a memory 302, an input and output device 303 and a bus 304. The following is a detailed introduction to each component of the test device in conjunction with Figure 11:

The processor 301 is the control center of the test device, and may be a processor or a collective name for multiple processing elements. For example, the processor 301 is a Central Processing Unit (CPU), an Application Specific Integrated Circuit (ASIC), or one or more integrated circuits configured to implement embodiments of the present disclosure. , for example: one or more microprocessors (Digital Signal Processor, DSP), or one or more Field Programmable Gate Array (Field Programmable Gate Array, FPGA).

The processor 301 can execute various functions of the test device by running or executing software programs stored in the memory 302 and calling data stored in the memory 302 .

In a specific implementation, as an embodiment, the processor 301 may include one or more CPUs, such as CPU 0 and CPU 1 shown in the figure.

In specific implementation, as an embodiment, the test device may include multiple processors, such as the processor 301 and the processor 305 shown in FIG. 11 . Each of these processors can be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). A processor here may refer to one or more devices, circuits, and/or processing cores for processing data (eg, computer program instructions).

The memory 302 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (Random Access Memory, RAM) or other types that can store information and instructions. Dynamic storage device, it can also be Electrically Erasable Programmable Read-Only Memory (EEPROM), Compact Disc Read-Only Memory (CD-ROM) or other optical disk storage, optical disk storage (including compressed optical discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), disk storage media or other magnetic storage devices, or can be used to carry or store desired program code in the form of instructions or data structures and can be used by a computer Any other medium for access, but not limited to this. The memory 302 may exist independently and be connected to the processor 301 through a bus 304. The memory 302 may also be integrated with the processor 301.

Input and output device 303, used to communicate with other devices or communication networks. Such as used to communicate with Ethernet, Radio access network (Radio access network, RAN), Wireless Local Area Networks (Wireless Local Area Networks, WLAN) and other communication networks. The input and output device 303 may include all or part of a baseband processor, and may also optionally include a radio frequency (Radio Frequency, RF) processor. The RF processor is used to send and receive RF signals, and the baseband processor is used to implement the processing of the baseband signal converted from the RF signal or the baseband signal to be converted into an RF signal.

In specific implementation, as an example, the input and output device 303 may include a transmitter and a receiver. Among them, the transmitter is used to send signals to other devices or communication networks, and the receiver is used to receive signals sent by other devices or communication networks. The transmitter and receiver can exist independently or integrated together.

The bus 304 may be an Industry Standard Architecture (Industry Standard Architecture, ISA) bus, a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into address bus, data bus, control bus, etc. For ease of presentation, only one thick line is used in Figure 11, but it does not mean that there is only one bus or one type of bus.

The equipment structure shown in Figure 11 does not constitute a limitation of the test device, and may include more or less components than shown, or combine certain components, or arrange different components.

An embodiment of the present application also provides a key usage device, including: a processor and a memory used to store instructions executable by the processor; wherein the processor is configured to implement the above method when executing the instructions.

An embodiment of the present application also provides a key management device, including: a processor and a memory used to store instructions executable by the processor; wherein the processor is configured to implement the above method when executing the instructions.

An embodiment of the present application also provides a key management system, including the above-mentioned key usage device and the above-mentioned key management device.

An embodiment of the present application also provides a vehicle, including the above key usage device and/or the above key management device.

Embodiments of the present application also provide a non-volatile computer-readable storage medium on which computer program instructions are stored. When the computer program instructions are executed by a processor, the above method is implemented.

Embodiments of the present application provide a computer program product, including computer readable code, or a non-volatile computer readable storage medium carrying the computer readable code, when the computer readable code is stored in a processor of an electronic device When running, the processor in the electronic device executes the above method.

Computer-readable storage media may be tangible devices that can retain and store instructions for use by an instruction execution device. The computer-readable storage medium may be, for example, but not limited to, an electronic storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the above. More specific examples (non-exhaustive list) of computer-readable storage media include: portable computer disks, hard drives, random access memory (RAM), read only memory (ROM), erasable memory Electrically Programmable Read-Only-Memory (EPROM or Flash Memory), Static Random-Access Memory (SRAM), Portable Compact Disc Read-Only Memory (CD) -ROM), Digital Video Disc (DVD), memory stick, floppy disk, mechanical encoding device, such as a punched card or a raised structure in a groove with instructions stored thereon, and any suitable combination of the above .

Computer-readable program instructions or code described herein may be downloaded from a computer-readable storage medium to various computing/processing devices, or to an external computer or external storage device over a network, such as the Internet, a local area network, a wide area network, and/or a wireless network. The network may include copper transmission cables, fiber optic transmission, wireless transmission, routers, firewalls, switches, gateway computers, and/or edge servers. A network adapter card or network interface in each computing/processing device receives computer-readable program instructions from the network and forwards the computer-readable program instructions for storage on a computer-readable storage medium in the respective computing/processing device .

The computer program instructions used to perform the operations of this application can be assembly instructions, instruction set architecture (Instruction Set Architecture, ISA) instructions, machine instructions, machine-related instructions, microcode, firmware instructions, status setting data, or one or more Source code or object code written in any combination of programming languages, including object-oriented programming languages—such as Smalltalk, C++, etc., and conventional procedural programming languages—such as the “C” language or similar programming languages. The computer-readable program instructions may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server implement. In situations involving remote computers, the remote computer can be connected to the user's computer through any kind of network—including a Local Area Network (LAN) or a Wide Area Network (WAN)—or it can be connected to an external computer (such as Use an Internet service provider to connect via the Internet). In some embodiments, electronic circuits are customized by utilizing state information of computer-readable program instructions, such as programmable logic circuits, field-programmable gate arrays (Field-Programmable Gate Arrays, FPGAs) or programmable logic arrays (Programmable Logic Array (PLA), the electronic circuit can execute computer-readable program instructions to implement various aspects of the present application.

Various aspects of the present application are described herein with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the application. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer-readable program instructions.

These computer-readable program instructions may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus, thereby producing a machine that, when executed by the processor of the computer or other programmable data processing apparatus, , resulting in an apparatus that implements the functions/actions specified in one or more blocks in the flowchart and/or block diagram. These computer-readable program instructions can also be stored in a computer-readable storage medium. These instructions cause the computer, programmable data processing device and/or other equipment to work in a specific manner. Therefore, the computer-readable medium storing the instructions includes An article of manufacture that includes instructions that implement aspects of the functions/acts specified in one or more blocks of the flowcharts and/or block diagrams.

Computer-readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other equipment, causing a series of operating steps to be performed on the computer, other programmable data processing apparatus, or other equipment to produce a computer-implemented process. , thereby causing instructions executed on a computer, other programmable data processing apparatus, or other equipment to implement the functions/actions specified in one or more blocks in the flowcharts and/or block diagrams.

The flowcharts and block diagrams in the figures illustrate the architecture, functionality and operations of possible implementations of apparatuses, systems, methods and computer program products according to various embodiments of the present application. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of instructions that embody one or more elements for implementing the specified logical function(s). Executable instructions. In some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two consecutive blocks may actually execute substantially in parallel, or they may sometimes execute in the reverse order, depending on the functionality involved.

It will also be noted that each block of the block diagram and/or flowchart illustration, and combinations of blocks in the block diagram and/or flowchart illustration, can be implemented by hardware (such as circuits or ASICs) that perform the corresponding function or action. Specific Integrated Circuit), or can be implemented with a combination of hardware and software, such as firmware.

The embodiments of the present application have been described above. The above description is illustrative, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope of the illustrated embodiments. The terminology used herein is chosen to best explain the principles, practical applications, or improvements to technology in the market of the embodiments, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

A key management method, characterized in that the method is applied to a key using device, and the method includes:

Determine the location of the key using device;

According to the location, at least one key is obtained, the at least one key is allocated to a key using device located in the first area, the location is located in the first area, the at least one key includes first key;

Use the first key.
The method according to claim 1, wherein obtaining at least one key according to the location includes:

sending location information indicating the location to the key management device;

The at least one key responsive to the location information is received from the key management device.
The method according to claim 2, characterized in that:

The location information is the identification information of the first area;

Obtaining at least one key according to the location further includes:

The first area is determined according to the location and a preset area division method.
The method of claim 1, further comprising:

receiving a message including the at least one key from a key management device;

Obtaining at least one key according to the location includes:

Based on the location, it is determined not to discard the at least one key.
The method according to any one of claims 1 to 4, characterized in that the at least one key is a plurality of keys, and the method further includes: selecting the first key from the plurality of keys. key;

The using the first key includes using the first key as an encryption key.
The method according to claim 5, characterized in that the selection is random selection, weighted random selection or rotation selection.
The method according to any one of claims 1 to 4, characterized in that the at least one key is a plurality of keys, and the method further includes:

receiving ciphertext from a first device, the ciphertext being encrypted according to the first key;

Obtain a key parameter, the key parameter indicating the first key;

The use of the first key includes:

According to the key parameter, the first key is selected from the plurality of keys as the decryption key of the ciphertext.
The method according to any one of claims 1 to 6, characterized in that the at least one key is a plurality of keys, and the method further includes:

receiving ciphertext from a first device, the ciphertext being encrypted according to the first key;

Determine that the first key can successfully decrypt the ciphertext by traversing and using the plurality of keys to decrypt the ciphertext;

The use of the first key includes:

The first key is selected from the plurality of keys as the decryption key of the ciphertext.
The method according to any one of claims 1-8, characterized in that the first area is divided based on at least one of the following methods:

Divide areas based on regular graphics or irregular graphics;

Regional division based on administrative regions;

Zoning based on road grade;

Regional division based on the autonomous driving level supported by the road;

Zoning based on commercial areas.
The method according to any one of claims 1 to 9, characterized in that the boundary of the first area is dynamically set.
The method according to any one of claims 1-10, wherein obtaining at least one key according to the location includes:

When a first preset condition is met, the at least one key is obtained according to the location, wherein the first preset condition includes at least one of the following situations:

The key using device is registered with the key management device;

The area where the key using device is located changes;

The currently saved key expires;

The time interval between the current moment and the last time the key was obtained reaches the first update threshold;

The received data could not be successfully decrypted using the currently saved key.
The method according to any one of claims 1-11, characterized in that the method further includes:

Get the preset second key;

When the second preset condition is met, use the second key;

Wherein, the second preset condition includes at least one of the following situations:

The key usage device is located in the transition area;

The key usage device is located in a specific area;

The key using device has not obtained the at least one key;

The at least one key expires and the update fails;

The key using device cannot successfully decrypt the received data using the at least one key;

The key using device cannot communicate with the key management device.
The method according to any one of claims 1-12, characterized in that the number of the at least one key is related to at least one of the following:

The area of the first region;

The number of key using devices in the first area;

The level of the first area;

The update frequency of the at least one key.
The method according to any one of claims 1 to 13, characterized in that the number of at least one key is fixed or dynamically changed.
The method according to any one of claims 1 to 14, characterized in that the at least one key is used for geographical location information, vehicle driving information or service content information.
The method according to any one of claims 1 to 15, characterized in that the method further includes:

When registering on the key management device, third key information is obtained from the key management device, and the third key information is used to decrypt subsequent messages received from the key management device.
A key management method, characterized in that the method is applied to a key management device, and the method includes:

A plurality of preset areas are obtained through area division, and the plurality of preset areas include a first area;

generating at least one key corresponding to the first region;

The at least one key is sent to the key using device in the first area.
The method according to claim 17, characterized in that, before sending the at least one key to the key using device in the first area, the method further includes:

receiving location information indicating the location of the key using device from the key using device;

Based on the location information, the at least one key is assigned to the key using device for use.
The method according to claim 18, characterized in that the location information is identification information of the first area or geographical coordinate information of the key using device.
The method according to claim 17, characterized in that said sending the at least one key to the key using device in the first area includes:

A message including the at least one key is sent within the first area.
The method according to any one of claims 17-20, characterized in that the at least one key is a plurality of keys, and the method further includes:

A plurality of key parameters corresponding to the plurality of keys are sent to the key using device.
The method according to any one of claims 17-21, characterized in that the area division is based on at least one of the following methods:

Divide areas based on regular graphics or irregular graphics;

Regional division based on administrative regions;

Zoning based on road grade;

Regional division based on the autonomous driving level supported by the road;

Zoning based on commercial areas.
The method according to any one of claims 17-22, characterized in that the boundary of the first area is dynamically set.
The method according to any one of claims 17-23, characterized in that sending the at least one key to the key usage device in the first area is triggered by at least one of the following:

The key usage device is registered with the key management device;

The key using device enters the first area from an area other than the first area;

The key currently corresponding to the first area expires;

The time interval between the current time and the last time the key was sent to the key using device reaches the first update threshold;

The key using device requests an update of the key corresponding to the first area.
The method according to any one of claims 17-24, characterized in that the method further includes:

Send a second key to the key usage device, the second key being used by the key usage device in at least one of the following situations:

The key usage device is located in the transition area;

The key usage device is located in a specific area;

The key using device has not obtained the at least one key;

The at least one key expires and the update fails;

The key using device cannot successfully decrypt the received data using the at least one key;

The key using device cannot communicate with the key management device.
The method according to any one of claims 17-25, characterized in that the number of the at least one key is related to at least one of the following:

The area of the first region;

The number of key using devices in the first area;

The level of the first area;

The update frequency of the at least one key.
The method according to any one of claims 17-26, characterized in that the number of at least one key is fixed or dynamically changed.
The method according to any one of claims 17-27, characterized in that the at least one key is used for geographical location information, vehicle driving information or service content information.
The method according to any one of claims 17 to 28, characterized in that the method further includes:

When the key using device is registered, third key information is sent to the key using device, and the third key information is used for subsequent processing by the key management device to the key using device. The message is decrypted.
A key usage device, characterized in that the device includes:

A first determination module, used to determine the location of the key using device;

A first acquisition module configured to acquire at least one key according to the location, the at least one key being allocated to a key using device located in the first area, and the location being located in the first area, The at least one key includes a first key;

The first usage module is used to use the first key.
A key management device, characterized in that the device includes:

A dividing module, configured to obtain multiple preset areas through area division, where the multiple preset areas include a first area;

A first generation module configured to generate at least one key corresponding to the first area;

The first sending module is configured to send the at least one key to the key using device in the first area.
A key usage device, characterized by including:

processor;

Memory used to store instructions executable by the processor;

Wherein, the processor is configured to implement the method according to any one of claims 1 to 16 when executing the instructions.
A key management device, characterized in that it includes:

processor;

Memory used to store instructions executable by the processor;

Wherein, the processor is configured to implement the method according to any one of claims 17 to 29 when executing the instructions.
A key management system, characterized in that it includes a key usage device as claimed in claim 32 and a key management device as claimed in claim 33.
A non-volatile computer-readable storage medium with computer program instructions stored thereon, characterized in that when the computer program instructions are executed by a processor, the method described in any one of claims 1 to 16 is implemented, or Implement the method of any one of claims 17 to 29.
A computer program product, including computer readable code, or a non-volatile computer readable storage medium carrying computer readable code, when the computer readable code is run in an electronic device, The processor executes the method described in any one of claims 1 to 16, or implements the method described in any one of claims 17 to 29.
A vehicle, characterized by comprising a key using device as claimed in claim 32, and/or a key management device as claimed in claim 33.