WO2024098402A1

WO2024098402A1 - Method for replacing pseudonym certificate, apparatus and system

Info

Publication number: WO2024098402A1
Application number: PCT/CN2022/131478
Authority: WO
Inventors: 刘晓伟; 汪洋一舟; 鲁广顺
Original assignee: 华为技术有限公司
Priority date: 2022-11-11
Filing date: 2022-11-11
Publication date: 2024-05-16

Abstract

A method for replacing a pseudonym certificate, an apparatus and a system. The method comprises: a first device acquires first information, the first information being used for instructing the first device to replace a pseudonym certificate, and the first information being associated with a first region where the first device is located and/or the operating state of the first device; and, according to the first information, the first device performs control to replace the pseudonym certificate. The method of the present application can be applied to intelligent driving devices such as intelligent vehicles and electric vehicles, and can prevent attackers from continuously tracking the first device when knowing the replacement period, helping to improve the security of the first device.

Description

Method, device and system for replacing pseudonymous certificate

Technical Field

The present application relates to the field of Internet of Vehicles security, and more specifically, to a method, device and system for replacing a pseudonym certificate.

Background technique

With the development of intelligent driving technology, information can be exchanged with surrounding vehicles, base stations, road side units (RSU) and other nodes through the vehicle to everything (V2X) communication network to assist driving. In the V2X scenario, the vehicle continuously broadcasts its own driving parameters and location information to surrounding vehicles, base stations, RSU and other nodes, which may be obtained by attackers. The attacker can determine the location of the vehicle based on the above broadcast information, thereby further damaging the driver's privacy security through the association between the vehicle and the driver. In order to prevent attackers from tracking the vehicle's location and thus infringing the driver's privacy, the current common method is to use pseudonymous certificate authentication to resolve the threat to vehicle security posed by attackers.

Vehicles can make it difficult for attackers to associate the pseudonym certificates with the vehicles at the corresponding locations by constantly changing the pseudonym certificates they use, thereby increasing the complexity of location tracking. However, the traditional pseudonym certificate replacement based on a fixed period still cannot prevent attackers from determining the location of the vehicle based on the pseudonym certificates, and it is still easy to cause privacy leaks such as vehicle location.

In view of this, a solution for replacing pseudonymous certificates that can improve vehicle safety needs to be developed urgently.

Summary of the invention

The embodiments of the present application provide a method, device, and system for replacing a pseudonym certificate, which can reduce the probability of attackers continuously tracking smart driving devices and causing smart privacy leakage, and help improve the security of smart driving devices.

The method provided in the present application can be applied to an intelligent driving device, which can be a vehicle in a broad sense, such as a means of transportation (such as commercial vehicles, passenger cars, trucks, motorcycles, airplanes, flying cars, trains, ships, etc.), industrial vehicles (such as forklifts, trailers, tractors, etc.), engineering vehicles (such as excavators, bulldozers, cranes, etc.), agricultural equipment (such as mowers, harvesters, etc.), amusement equipment, toy vehicles, etc. The present application does not specifically limit the type of vehicle.

In a first aspect, a method for replacing a pseudonym certificate is provided, which method may be executed by an intelligent driving device; or, alternatively, may be executed by a chip or circuit for an intelligent driving device, which is not limited in the present application.

The method includes: a first device acquires first information, the first information is used to instruct the first device to replace a pseudonym certificate, the first information is associated with a first area where the first device is located and/or an operating state of the first device; the first device controls the replacement of the pseudonym certificate according to the first information.

In the above technical solution, when the first device is in a specific operating state and/or travels to a specific area, the replacement of the pseudonym certificate is controlled, which can prevent attackers from continuously tracking the first device when they know the replacement cycle, thereby helping to improve the security of the first device.

Exemplarily, the first device may be an intelligent driving device, or the first device may be a processor disposed in the intelligent driving device. When the first device is a processor disposed in the intelligent driving device, the area where the first device is located is the area where the intelligent driving device is located; and the operating state of the first device is the operating state of the intelligent driving device.

Exemplarily, “the first information is associated with the first area where the first device is located and/or the operating state of the first device” can be understood as: the first information is generated and/or obtained when the first device is located in the first area, and/or the first information is generated and/or obtained when the first device is in a certain operating state. The certain operating state may include at least one of a driving state, a power-on parking state, and a just-started state.

Exemplarily, the first area may include at least one of the following areas: an area where pseudonym certificates are used less frequently, an area where the first device often travels, and an area determined based on places of interest to a user of the first device.

In some possible implementations, the first information may be received from a roadside device; or, the first information may also be obtained from other processors of the intelligent driving device.

In combination with the first aspect, in certain implementations of the first aspect, the first area includes a second area, the second area is an area associated with a place of interest to a user of the first device, and the first device obtains first information, including: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first device receives the first information from a first roadside device, and the first roadside device is the roadside device that is closest to the first device in the first area.

Exemplarily, the preset distance threshold may be 5 meters, or 3 meters, or other distances.

Exemplarily, “the second area is an area associated with a place of interest to the user of the first device” can be understood as: the second area is a cluster determined according to the place of interest to the user of the first device, or the second area is a place of interest to the user of the first device.

It should be noted that the first device may also obtain the first information from other devices, for example, from other intelligent driving devices.

In the above technical solution, an adaptive pseudonym certificate replacement scheme can be designed for the first device according to the places of interest to the user, which helps to improve the user experience. In addition, after the attacker obtains the relevant information of the places of interest to the user, the first device may be tracked in combination with the pseudonym certificate replacement cycle. When the first device travels to the area associated with the places of interest to the user, the replacement of the pseudonym certificate is controlled, which can increase the difficulty for the attacker to break the relationship between the old and new pseudonym certificates of the vehicle, help reduce the probability of the attacker obtaining the privacy of the first device, and further improve the security of the first device.

In combination with the first aspect, in certain implementations of the first aspect, the first area includes a first traffic light intersection, and the first device controls the replacement of the pseudonym certificate according to the first information, including: when the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

In some possible implementations, the first traffic light intersection is a place of interest to the user, or a second area associated with the place of interest to the user. When the distance between the first device and the first traffic light intersection is less than or equal to a preset distance threshold, the first device receives the first information; further, when the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

In some possible implementations, the first device receives the first information when the traffic light at the first traffic light intersection turns red; further, when the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate. Exemplarily, the traffic light is a traffic light in the driving direction of the first device. For example, if the first device needs to go straight from south to north at the first traffic light intersection, the traffic light can be a traffic light indicating north-south straight driving at the first traffic light intersection.

Exemplarily, the preset speed threshold may be 3 km/h, or may be 0 km/h, or may be other speeds.

In the above technical solution, when the first device is driving and stops at an intersection, since the need for the first device to communicate with other devices is relatively small in this scenario, the replacement of the pseudonym certificate can be controlled, thereby improving the security of the first device while ensuring that the communication of the first device is not affected.

In combination with the first aspect, in some implementations of the first aspect, the first device controls the replacement of the pseudonym certificate according to the first information, including: when the first device is started, the first device controls the replacement of the pseudonym certificate.

In some possible implementations, when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first device receives the first information, and shuts down the engine and powers off after receiving the first information. Since the first device does not need to communicate with other devices when shutting down the engine, there is no need to replace the pseudonym certificate. Furthermore, when the first device is started in the second area, the first device controls the replacement of the pseudonym certificate.

In the above technical solution, before the first device is started, it does not need to communicate with other devices, so the pseudonym certificate may not be replaced for a long time. After the first device is started, the previous pseudonym certificate is directly used, which is easier to be tracked by attackers. Therefore, replacing the pseudonym certificate when the first device is started helps to improve the security of the first device.

In combination with the first aspect, in certain implementations of the first aspect, the method also includes: the first device determines a replacement cycle of the pseudonym certificate, and the replacement cycle is associated with a real-time status parameter of the first device; when the replacement cycle arrives, the first device controls the replacement of the pseudonym certificate.

In the above technical solution, the replacement cycle of the pseudonym certificate can be determined according to the real-time status parameters of the first device. Since the pseudonym replacement cycle is variable, attackers cannot determine the replacement cycle of the pseudonym certificate of the first device, and thus cannot track the first device, which helps to improve the security of the first device.

In combination with the first aspect, in certain implementations of the first aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

In a second aspect, a method for replacing a pseudonym certificate is provided, which can be executed by a cloud server, or by a chip or circuit used for a cloud server. In some possible implementations, the method can also be executed by a roadside device, or by a chip or circuit using a roadside device, which is not limited in this application.

The method includes: a second device generates first information, the first information is used to instruct the first device to change the pseudonym certificate, the first information is associated with a first area where the first device is located and/or an operating state of the first device; the second device sends the first information to the first device.

In the above technical solution, when the first device is in a specific operating state and/or travels to a specific area, a first message is sent to the first device to control the first device to replace the pseudonym certificate. This can prevent attackers from continuously tracking the first device when they know the replacement cycle, thereby helping to improve the security of the first device.

In combination with the second aspect, in certain implementations of the second aspect, the first area includes a second area, the second area is an area associated with places of interest to users of the first device, the second device is a roadside device in the first area that is closest to the first device, and the second device sends the first information to the first device, including: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the second device sends the first information to the first device.

In the above technical solution, instruction information instructing the first device to replace the pseudonym certificate is generated in a specific area and sent to the first device, so that the first device replaces the pseudonym certificate in the specific area according to the instruction information of the second device. This can not only save the computing overhead of the first device, but also further prevent the attacker from tracking the first device and causing the user privacy leakage.

In combination with the second aspect, in certain implementations of the second aspect, the first area includes a first traffic light intersection, and the second device generates the first information, including: when the second device obtains information that the traffic light at the first traffic light intersection turns red, the second device generates the first information.

Exemplarily, the traffic light is a traffic light for the driving direction of the first device.

Exemplarily, the red turn of the traffic light at the first traffic light intersection may be detected by the second device, or may be indicated by other devices.

In the above technical solution, when the first device is driving and stops at an intersection, since the need for the first device to communicate with other devices is relatively small in this scenario, the first device can be instructed to replace the pseudonym certificate, thereby improving the security of the first device while ensuring that the communication of the first device is not affected.

In combination with the second aspect, in some implementations of the second aspect, the second device sending the first information to the first device includes: the second device sending the first information to the first device via a third device.

Exemplarily, the second device is a cloud server, and the third device is a roadside device. For example, the third device may be a roadside device in an area where the first device is traveling.

In some possible implementations, if it is inconvenient for the second device to directly send information instructing the first device to change its pseudonym certificate, the second device may send the information instructing the first device to change its pseudonym certificate to the first device via a third device.

In combination with the second aspect, in some implementations of the second aspect, the method further includes: the second device acquiring information about the first area and/or information about an operating status of the first device.

Exemplarily, the second device may obtain information about the first area and/or information about the operating status of the first device from the first device; alternatively, the second device may also detect the first area where the first device is located and/or the operating status of the first device by itself.

In combination with the second aspect, in certain implementations of the second aspect, the method also includes: the second device obtains real-time status parameters of the first device; the second device determines a replacement cycle of the pseudonym certificate based on the real-time status parameters; and the second device sends information about the replacement cycle to the first device.

In the above technical solution, the second device can determine the replacement cycle of the pseudonym certificate according to the real-time status parameters of the first device. Since the pseudonym replacement cycle is variable, the attacker cannot determine the replacement cycle of the pseudonym certificate of the first device, and thus cannot track the first device, which helps to improve the security of the first device. In addition, the first device does not need to determine the replacement cycle by itself, which helps to save the computing overhead of the first device.

In combination with the second aspect, in certain implementations of the second aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

According to a third aspect, a method for replacing a pseudonym certificate is provided, which may include: a first device determines a replacement cycle of the pseudonym certificate, wherein the replacement cycle is associated with a real-time status parameter of the first device; and when the replacement cycle arrives, the first device controls the replacement of the pseudonym certificate.

In combination with the third aspect, in certain implementations of the third aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

In combination with the third aspect, in certain implementations of the third aspect, the first device obtains first information, where the first information is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with a first area where the first device is located and/or an operating status of the first device; the first device controls the replacement of the pseudonym certificate according to the first information.

In combination with the third aspect, in certain implementations of the third aspect, the first area includes a second area, the second area is an area associated with a place of interest to a user of the first device, and the first device obtains first information, including: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first device receives the first information from a first roadside device, and the first roadside device is the roadside device that is closest to the first device in the first area.

In combination with the third aspect, in certain implementations of the third aspect, the first area includes a first traffic light intersection, and the first device controls the replacement of the pseudonym certificate according to the first information, including: when the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

In combination with the third aspect, in certain implementations of the third aspect, the first device controls the replacement of the pseudonym certificate according to the first information, including: when the first device is started, the first device controls the replacement of the pseudonym certificate.

In a fourth aspect, a device for replacing a pseudonym certificate is provided, the device comprising an acquisition unit and a processing unit; wherein the acquisition unit is used to acquire first information, the first information is used to instruct a first device to replace a pseudonym certificate, and the first information is associated with a first area where the first device is located and/or an operating status of the first device; the processing unit is used to control the replacement of the pseudonym certificate according to the first information.

In combination with the fourth aspect, in certain implementations of the fourth aspect, the first area includes a second area, the second area is an area associated with a place of interest to a user of the first device, and the acquisition unit is used to: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, receive the first information from a first roadside device, the first roadside device being the roadside device that is closest to the first device in the first area.

In combination with the fourth aspect, in certain implementations of the fourth aspect, the first area includes a first traffic light intersection, and the processing unit is used to control the replacement of the pseudonym certificate when the driving speed of the first device in the first area is less than or equal to a preset speed threshold.

In combination with the fourth aspect, in certain implementations of the fourth aspect, the processing unit is used to: when the first device is started, control the replacement of the pseudonym certificate.

In combination with the fourth aspect, in certain implementations of the fourth aspect, the device also includes a determination unit, used to: determine a replacement cycle of the pseudonym certificate, and the replacement cycle is associated with the real-time status parameters of the first device; the processing unit is also used to: control the replacement of the pseudonym certificate when the replacement cycle arrives.

In combination with the fourth aspect, in certain implementations of the fourth aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

In a fifth aspect, a device for replacing a pseudonym certificate is provided, the device comprising a generating unit and a transceiver unit; wherein the generating unit is used to: generate first information, the first information being used to instruct a first device to replace a pseudonym certificate, the first information being associated with a first area where the first device is located and/or an operating status of the first device; the transceiver unit being used to send the first information to the first device.

In combination with the fifth aspect, in certain implementations of the fifth aspect, the first area includes a second area, the second area is an area associated with places of interest to users of the first device, the second device is a roadside device in the first area that is closest to the first device, and the transceiver unit is used to send the first information to the first device when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold.

In combination with the fifth aspect, in certain implementations of the fifth aspect, the first area includes a first traffic light intersection, and the device also includes an acquisition unit, and the generation unit is used to generate the first information when the acquisition unit acquires information that the traffic light at the first traffic light intersection turns red.

In combination with the fifth aspect, in certain implementations of the fifth aspect, the transceiver unit is used to: send the first information to the first device via a third device.

In combination with the fifth aspect, in some implementations of the fifth aspect, the apparatus further includes an acquisition unit, which is used to: acquire information about the first area and/or information about the operating status of the first device.

In combination with the fifth aspect, in certain implementations of the fifth aspect, the device also includes an acquisition unit and a determination unit, the acquisition unit is used to: obtain the real-time status parameters of the first device; the determination unit is used to: determine the replacement cycle of the pseudonym certificate based on the real-time status parameters; the transceiver unit is also used to: send information about the replacement cycle to the first device.

In combination with the fifth aspect, in certain implementations of the fifth aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage degree of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

In the sixth aspect, a device for replacing a pseudonym certificate is provided, the device comprising a determination unit and a processing unit, the determination unit being used to: determine a replacement cycle of the pseudonym certificate, the replacement cycle being associated with a real-time status parameter of the first device; the processing unit being also used to: control the replacement of the pseudonym certificate when the replacement cycle arrives.

In combination with the sixth aspect, in certain implementations of the sixth aspect, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

In combination with the sixth aspect, in certain implementations of the sixth aspect, the device also includes an acquisition unit; the acquisition unit is used to acquire first information, the first information is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with the first area where the first device is located and/or the operating status of the first device; the processing unit is used to control the replacement of the pseudonym certificate according to the first information.

In combination with the sixth aspect, in certain implementations of the sixth aspect, the first area includes a second area, the second area is an area associated with a place of interest to a user of the first device, and the acquisition unit is used to: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, receive the first information from a first roadside device, the first roadside device being the roadside device that is closest to the first device in the first area.

In combination with the sixth aspect, in certain implementations of the sixth aspect, the first area includes a first traffic light intersection, and the processing unit is used to control the replacement of the pseudonym certificate when the driving speed of the first device in the first area is less than or equal to a preset speed threshold.

In combination with the sixth aspect, in certain implementations of the sixth aspect, the processing unit is used to: when the first device is started, control the replacement of the pseudonym certificate.

In a seventh aspect, a device for replacing a pseudonym certificate is provided, the device comprising: a memory for storing a computer program; a processor for executing the computer program stored in the memory, so that the device performs a method in any possible implementation of the first aspect or the third aspect.

In an eighth aspect, a device for replacing a pseudonym certificate is provided, the device comprising: a memory for storing a computer program; and a processor for executing the computer program stored in the memory, so that the device performs a method as in any possible implementation of the second aspect.

In a ninth aspect, an intelligent driving device is provided, which includes an apparatus as in any possible implementation of the fourth aspect, the sixth aspect or the seventh aspect.

In combination with the ninth aspect, in certain implementations of the ninth aspect, the intelligent driving device is a vehicle.

In a tenth aspect, a server is provided, comprising a device as in any possible implementation of the fifth aspect or the eighth aspect.

In combination with the tenth aspect, in certain implementations of the tenth aspect, the server is a cloud server, or a server set in a roadside device.

In the eleventh aspect, a computer program product is provided, the computer program product comprising: a computer program code, when the computer program code is run on a computer, the computer executes the method in any possible implementation of the first to third aspects.

It should be noted that the above-mentioned computer program code may be stored in whole or in part on a first storage medium, wherein the first storage medium may be packaged together with the processor or may be packaged separately from the processor.

In the twelfth aspect, a computer-readable medium is provided, wherein the computer-readable medium stores instructions, and when the instructions are executed by a processor, the processor implements the method in any possible implementation of the first to third aspects.

In a thirteenth aspect, a chip is provided, the chip comprising a circuit for executing a method in any possible implementation of the first to third aspects above.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a schematic diagram of a system framework for replacing a pseudonym certificate provided in an embodiment of the present application;

FIG2 is a schematic flow chart of a method for replacing a pseudonym certificate provided in an embodiment of the present application;

FIG3 is another schematic flow chart of a method for replacing a pseudonym certificate provided in an embodiment of the present application;

FIG4 is another schematic flow chart of a method for replacing a pseudonym certificate provided in an embodiment of the present application;

FIG5 is another schematic flow chart of the method for replacing a pseudonym certificate provided in an embodiment of the present application;

FIG6 is another schematic flow chart of the method for replacing a pseudonym certificate provided in an embodiment of the present application;

FIG7 is a schematic block diagram of an apparatus for replacing a pseudonym certificate according to an embodiment of the present application;

FIG8 is another schematic block diagram of an apparatus for replacing a pseudonym certificate provided in an embodiment of the present application;

FIG. 9 is another schematic block diagram of the apparatus for replacing a pseudonym certificate provided in an embodiment of the present application.

Detailed ways

In the description of the embodiments of the present application, unless otherwise specified, "/" means or, for example, A/B can mean A or B; "and/or" in this article is a kind of association relationship that describes associated objects, indicating that three relationships can exist, for example, A and/or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In the present application, "at least one" means one or more, and "multiple" means two or more. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, a-b, a-c, b-c, or a-b-c, where a, b, c can be single or multiple.

The prefixes such as "first" and "second" used in the embodiments of the present application are only used to distinguish different description objects, and have no limiting effect on the position, order, priority, quantity or content of the described objects. The use of prefixes such as ordinal numbers used to distinguish description objects in the embodiments of the present application does not constitute a limitation on the described objects. For the statement of the described objects, please refer to the description in the context of the claims or embodiments, and the use of such prefixes should not constitute an unnecessary limitation.

As mentioned above, in the V2X scenario, vehicles continuously broadcast their own driving parameters and location information to surrounding vehicles, base stations, RSU and other nodes, which may be obtained by attackers. Attackers can determine the location of the vehicle based on the above broadcast information. Under the current technical background, vehicles can continuously change the pseudonym certificates they use, making it difficult for attackers to associate the pseudonym certificates with the vehicles at the corresponding locations, thereby increasing the complexity of location tracking. However, the traditional fixed-cycle replacement of pseudonym certificates still cannot prevent attackers from determining the location of the vehicle based on the pseudonym certificates, and it is still easy to cause privacy leaks such as vehicle location.

In order to solve the problem of vehicle privacy leakage caused by the fixed cycle of pseudonym certificate replacement, there are two current methods: First, within the preset pseudonym cycle, obtain the privacy leakage of the vehicle, calculate the privacy leakage degree of the vehicle based on the privacy leakage, and when the privacy leakage degree reaches the privacy leakage threshold, select the next pseudonym from the vehicle pseudonym set to replace and enter the next pseudonym cycle; if within the pseudonym cycle, when the privacy leakage degree does not reach the privacy leakage threshold, the pseudonym is not replaced, and the next pseudonym is selected from the vehicle pseudonym set to replace and automatically enter the next pseudonym cycle when the inherent cycle arrives. Second, if the vehicle is in a driving state, the vehicle regularly broadcasts basic safety information, determines the pseudonym replacement conditions based on the driving state of nearby vehicles, and executes the pseudonym replacement if the pseudonym replacement conditions are met; without the participation of RSU, the legal pseudonym certificate is independently calculated through collaboration with surrounding vehicles. In the former scheme, the privacy leakage degree and the predetermined pseudonym update cycle are considered as the basis for judging the pseudonym change. Although when the privacy leakage degree is high, the time of replacing the pseudonym certificate breaks the fixed cycle of pseudonym certificate replacement, when the privacy leakage degree is low, it is still difficult to prevent the attacker from continuously tracking the vehicle when the name change time interval is known. In the latter scheme, the legitimate pseudonym certificate is independently calculated through cooperation with surrounding vehicles without the participation of RSU. The vehicle initiating the pseudonym change requires large communication and computing overhead, and it is difficult to ensure that enough vehicles participate in the cooperation of pseudonym change.

In view of this, a method for replacing a pseudonym certificate provided in an embodiment of the present application can determine the replacement cycle of the pseudonym certificate according to the real-time status parameters of the intelligent driving device. Since the pseudonym replacement cycle is variable, attackers cannot determine the pseudonym certificate replacement cycle of the intelligent driving device, and thus cannot track the intelligent driving device, which helps to improve the safety of the intelligent driving device. Furthermore, when the intelligent driving device is in a specific operating state and/or travels to a specific area, controlling the replacement of the pseudonym certificate can prevent attackers from continuously tracking the intelligent driving device when they know the replacement cycle, which helps to improve the safety of the intelligent driving device.

The technical solutions in the embodiments of the present application will be described below in conjunction with the accompanying drawings.

FIG1 is an application scenario of a method for replacing a pseudonym certificate provided in an embodiment of the present application. In this application scenario, an intelligent driving device 100 , a cloud server 210 , and a roadside device 220 may be included.

The intelligent driving device 100 may include a perception system 140, a computing platform 150, and a peripheral device 160. The perception system 140 may include one or more sensors for sensing environmental information about the surroundings of the intelligent driving device 100 and driving parameters of the intelligent driving device. For example, the perception system 140 may include a positioning system, which may be a global positioning system (GPS), a Beidou system or other positioning systems, or an inertial measurement unit (IMU). The perception system 140 may also include one or more of a laser radar, a millimeter wave radar, an ultrasonic radar, and a camera device; the perception system 140 may also include a wheel speed sensor, a pedal position sensor, etc., for sensing the speed and/or acceleration of the intelligent driving device.

Some or all functions of the intelligent driving device 100 may be controlled by the computing platform 150. The computing platform 150 may include one or more processors, such as processors 151 to 15n (n is a positive integer). The processor is a circuit with signal processing capability. In one implementation, the processor may be a circuit with instruction reading and execution capability, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP); in another implementation, the processor may implement certain functions through the logical relationship of a hardware circuit, and the logical relationship of the hardware circuit is fixed or reconfigurable, such as a hardware circuit implemented by an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as a field programmable gate array (FPGA). In a reconfigurable hardware circuit, the process of the processor loading a configuration document to implement the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc. In addition, the computing platform 150 can also include a memory, the memory is used to store instructions, and some or all of the processors 151 to 15n can call the instructions in the memory and execute the instructions to implement the corresponding functions.

The intelligent driving device 100 interacts with the cloud server 210, external sensors, other intelligent driving devices, other computer systems or users through the peripheral device 160. The peripheral device 160 may include a wireless communication system.

The cloud server 210 may include a computing platform 211 , and the computing platform 211 may include one or more processors. The specific forms and corresponding functions of the one or more processors may refer to the description in the above embodiments, and will not be repeated here.

It should be understood that the above-mentioned devices and equipment are only examples. In actual applications, the above-mentioned devices and equipment may be added or deleted according to actual needs.

In an embodiment of the present application, the cloud server 210 can determine the replacement cycle of the pseudonym certificate according to the speed of the intelligent driving device 100, the traffic density near the intelligent driving device 100, the safety level (or privacy leakage) of the intelligent driving device, and the user demand level, and send the replacement cycle to the intelligent driving device 100, so that the intelligent driving device 100 can replace the pseudonym certificate when the replacement cycle is reached. The cloud server 210 can also determine the replacement area of the pseudonym certificate according to the location of interest to the user of the intelligent driving device 100, and then control the roadside device 220 in the area to send a pseudonym certificate replacement instruction to the intelligent driving device 100, so that the intelligent driving device 100 can replace the pseudonym certificate in the area. In addition, when the roadside device 220 is set at a signal light intersection, the roadside device 220 can also determine whether to send a pseudonym certificate replacement instruction to the intelligent driving device 100 according to the state of the signal light. For example, when the signal light turns red, a pseudonym certificate replacement instruction is sent to the surrounding intelligent driving devices, so that the intelligent driving device 100 in the parking state replaces the pseudonym certificate. In addition to replacing the pseudonym certificate according to the replacement cycle and the replacement instruction from the roadside device 220, the intelligent driving device 100 can also replace the pseudonym certificate according to the driving scenario. For example, the intelligent driving device 100 can replace the pseudonym certificate when it is just started.

FIG2 shows a schematic flow chart of a method 200 for replacing a pseudonym certificate provided in an embodiment of the present application. The method 200 can be applied to the application scenario shown in FIG1. Exemplarily, the method 200 can be executed by one or more processors in the computing platform 150 in FIG1. The method 200 includes:

S201, a first device obtains first information, where the first information is used to instruct the first device to change a pseudonym certificate, and the first information is associated with a first area where the first device is located and/or an operating state of the first device.

In some possible implementations, the first device may be the intelligent driving device in the above embodiment, and the first information may be received from a roadside device.

Exemplarily, the first area may include an area where the intelligent driving device uses the pseudonym certificate less frequently, such as a traffic light intersection; or, the first area may also include an area of interest to users of the intelligent driving device.

Exemplarily, the operating state of the first device may include at least one of the following: a driving state, a parking state, and a just-started state (ie, a state from power-off to power-on).

In some possible implementations, the first device may be a processor disposed in a computing platform of the intelligent driving device, and the first information may be sent to the first device by another processor in the computing platform of the intelligent driving device. In the above scenario, the first area where the first device is located may represent the first area where the intelligent driving device is located, and the operating state of the first device may represent the operating state of the intelligent driving device.

It should be noted that the first information is associated with the first area where the first device is located and/or the operating state of the first device, which can be understood as follows: the first information may be generated and/or obtained when it is detected that the first device has driven to a traffic light intersection and the traffic light has changed from green to red; or, the first information may be generated and/or obtained when it is detected that the first device has driven to an area of interest to the user; or, the first information may be generated and/or obtained when it is detected that the first device has just been started. Among them, "the first device has just been started" may mean that the first device has just been started after parking in a parking lot, or it may also mean that the first device has just been started after maintenance, or it may also mean other scenarios where the first device has just been started.

In some possible implementations, the first area includes a second area, the second area is an area associated with a location of interest to a user of the first device, and the first device obtains the first information, including: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first device receives the first information from a first roadside device, the first roadside device being the roadside device closest to the first device in the first area. Alternatively, the first device is a vehicle in an adaptive cruise control (CACC) vehicle queue, then when the distance between the first device and the center of the second area is less than or equal to the preset distance threshold, the first device receives the first information from other vehicles in the CACC vehicle queue.

Exemplarily, the second area may be a cluster determined according to places of interest to the user through a clustering algorithm, wherein the places of interest to the user may be places where the user frequently travels (for example, more than three times a week), or places that the user has collected or marked in an electronic map, or other places of interest to the user.

S202: The first device controls the replacement of the pseudonym certificate according to the first information.

In one example, when the first device receives the first information, it controls the replacement of the pseudonym certificate.

In another example, the first area includes a first traffic light intersection, and when a driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

Exemplarily, the preset speed threshold may be 3 kilometers per hour (kilometer per hour, km/h), or may be 0 km/h, or may be other speeds.

In yet another example, when the first device is started, the first device controls the replacement of the pseudonym certificate.

In some possible implementations, the area of interest to the user includes a first traffic light intersection. When the distance between the first device and the center of the cluster determined in the area of interest to the user is less than or equal to a preset distance threshold, the first device receives first information; further, when the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.

In some possible implementations, when the first device is an intelligent driving device, the intelligent driving device may determine the replacement cycle of the pseudonym certificate according to the real-time state parameter of the intelligent driving device. The real-time state parameter may include at least one of the following: the speed of the intelligent driving device, the traffic density around the intelligent driving device, the privacy leakage of the intelligent driving device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the intelligent driving device to replace the pseudonym certificate.

A method for replacing a pseudonym certificate provided in an embodiment of the present application controls the replacement of a pseudonym certificate when the intelligent driving device is in a specific operating state and/or travels to a specific area. This can prevent attackers from continuously tracking the intelligent driving device when they know the replacement cycle, thereby helping to improve the security of the intelligent driving device.

FIG3 shows a schematic flow chart of a method 300 for replacing a pseudonym certificate provided in an embodiment of the present application. The method 300 can be applied to the application scenario shown in FIG1 . Exemplarily, the method 300 can be executed by one or more processors in the computing platform 211 in FIG1 , or can also be executed by the roadside device 220 shown in FIG1 . The method 300 includes:

S301, a second device generates first information, where the first information is used to instruct the first device to change a pseudonym certificate, and the first information is associated with a first area where the first device is located and/or an operating state of the first device.

In some possible implementations, the second device may be the roadside device in the above embodiment, or may also be the cloud server in the above embodiment.

In some possible implementations, the second device may be a processor provided in a computing platform of the intelligent driving device.

Exemplarily, the second device generating the first information may include at least one of the following: when the second device obtains information that the first device drives to a traffic light intersection and the traffic light turns from green to red, the second device generates the first information; or, when the second device obtains information that the first device drives to an area of interest to the user, the second device generates the first information; or, when the second device obtains information that the first device has just started, the second device generates the first information.

Exemplarily, the signal light is a signal light for the driving direction of the first device.

In some possible implementations, the information obtained by the second device may be a result of detection by the second device, or may be sent to the second device by other devices, which is not specifically limited in the embodiments of the present application.

S302: The second device sends the first information to the first device.

In some possible implementations, the second device sends the first information to the first device via the third device. Exemplarily, the first device is an intelligent driving device, the second device is a cloud server, and the third device is a roadside device. In some scenarios, the second device sends the first information to the first device via the third device. For example, when the first device drives to a traffic light intersection and the second device obtains information that the traffic light turns from green to red, the second device sends the first information to the first device via the third device; or, when the first device drives to the second area and the second device obtains information that the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the second device sends the first information to the first device via the third device. The second area can be a cluster determined according to the places of interest to the user through a clustering algorithm.

A method for replacing a pseudonym certificate provided in an embodiment of the present application generates first information when the intelligent driving device is in a specific operating state and/or travels to a specific area to control the intelligent driving device to replace the pseudonym certificate. This can prevent attackers from continuously tracking the intelligent driving device when they know the replacement cycle, thereby helping to improve the security of the intelligent driving device.

The following is a detailed description of a specific solution for replacing a pseudonym certificate provided in an embodiment of the present application in conjunction with FIGS. 4 to 6 :

FIG4 shows a schematic flow chart of a method 400 for replacing a pseudonym certificate provided in an embodiment of the present application. The method 400 can be applied to the application scenario shown in FIG1 . The method 400 can be understood as an extension of the method 200 and/or the method 300 . The method 400 includes:

S401, the cloud server determines the replacement cycle of the pseudonym certificate according to the real-time status parameters of the intelligent driving device.

Exemplarily, the cloud server may include the second device in the above embodiment, and the intelligent driving device may include the first device in the above embodiment.

Exemplarily, the real-time status parameter may include at least one of the following: the speed S _i of the intelligent driving device, the traffic density F _i around the intelligent driving device, the privacy leakage degree P _i of the intelligent driving device, and the user demand level R _i , wherein the user demand level is used to indicate the demand level of the user of the intelligent driving device to change the pseudonym certificate.

Among them, the privacy leakage degree is determined based on the number of times the intelligent driving device sends information to other devices and the time interval between sending information.

For example, the privacy leakage

Among them, “*” represents convolution calculation, P represents the privacy leakage threshold, T represents the replacement cycle of the pseudonym certificate, β represents the average interval time for sending information, Γ(α) is the Gamma function, and t represents time.

Exemplarily, a multivariate linear regression model of the pseudonym replacement time interval of the intelligent driving device may be constructed. Further, the replacement period _Ti of the pseudonym certificate may be determined by the least square method using the following formula:

Wherein, ε∈N(0,σ ² ), β ₁ to β ₄ are the weights of S _i , _Fi , _Pi , and _Ri determined for the intelligent driving device i, respectively.

S402, the cloud server sends information about the pseudonym certificate replacement cycle to the intelligent driving device.

In some possible implementations, the cloud server sends information about the pseudonym certificate replacement cycle to the intelligent driving device at fixed intervals. For example, the fixed interval may be 5 minutes, 10 minutes, or other intervals.

In some possible implementations, when the replacement cycle determined by the cloud server is different from the previously determined replacement cycle, information on the pseudonym certificate replacement cycle is sent to the intelligent driving device.

S403, the intelligent driving device replaces the pseudonym certificate according to the replacement cycle.

Exemplarily, when the replacement period arrives, the intelligent driving device replaces the pseudonym certificate.

S404: When the traffic light at the intersection turns red, the first RSU generates first indication information for replacing the pseudonym certificate.

In some possible implementations, the first indication information may be one of the first information in the above-mentioned embodiments.

S405: The first RSU sends first instruction information for replacing the pseudonym certificate to the intelligent driving device.

S406: The intelligent driving device replaces the pseudonym certificate according to the first instruction information.

In some possible implementations, when the driving speed of the intelligent driving device is less than or equal to a preset speed threshold, the intelligent driving device replaces the pseudonym certificate.

S407, the cloud server determines a replacement area for the pseudonym certificate according to the location of interest to the user of the smart driving device.

In some possible implementations, the cloud server uses a clustering algorithm to process a set of places of interest to the user based on the places of interest to the user, determines a cluster, and controls the smart driving device to replace the pseudonym certificate at the cluster.

S408, the cloud server sends area indication information to the second RSU, where the area indication information is used to instruct the second RSU in the replacement area to send indication information for replacing the pseudonym certificate to the intelligent driving device.

In some possible implementations, the second RSU and the first RSU are the same roadside equipment.

S409: The second RSU sends second instruction information for replacing the pseudonym certificate to the intelligent driving device.

In some possible implementations, the second indication information may be one of the first information in the above-mentioned embodiments.

S410: The intelligent driving device replaces the pseudonym certificate according to the second instruction information.

It should be noted that S401 to S403, S404 to S406, and S407 to S410 can be executed simultaneously, or can be executed sequentially. The embodiment of the present application does not limit the execution order of S401 to S403, S404 to S406, and S407 to S410.

The present application provides a method for replacing a pseudonym certificate. The cloud server determines the replacement cycle of the pseudonym certificate according to the real-time status parameters of the intelligent driving device, and indicates the replacement cycle to the intelligent driving device. On the one hand, it can indicate the changed pseudonym certificate replacement cycle to the intelligent driving device, so that attackers cannot determine the pseudonym certificate replacement cycle of the intelligent driving device, and thus cannot track the intelligent driving device, which helps to improve the security of the intelligent driving device; on the other hand, the intelligent driving device does not need to determine the replacement cycle by itself, which helps to save the computing overhead of the intelligent driving device. In addition, when the intelligent driving device replaces the pseudonym certificate according to the replacement cycle, the pseudonym certificate can also be replaced according to the indication information of the roadside device in a specific area, which can not only save the computing overhead of the intelligent driving device, but also further prevent the problem of attackers tracking the intelligent driving device and causing user privacy leakage.

FIG5 shows a schematic flow chart of a method 500 for replacing a pseudonym certificate provided in an embodiment of the present application. The method 500 can be executed by an intelligent driving device. The method 500 can be understood as an example of executing S401 to S403 and S404 to S406 simultaneously, or executing S401 to S403 and S407 to S410 simultaneously. The method 500 includes:

S501, determining whether first information is received.

Exemplarily, the first information may be the first information in the above-mentioned method 200 and/or method 300, for example, may include the first indication information or the second indication information in the method 400.

Specifically, if the first information is received, execute S503, otherwise execute S502.

S502, determining whether the replacement period of the pseudonym certificate has arrived.

Exemplarily, the replacement cycle may be the replacement cycle in the above embodiment.

Specifically, when the replacement period of the pseudonym certificate arrives, S503 is executed; otherwise, S502 is continued to be executed (or, in some possible implementations, S501 is executed).

S503, putting the old pseudonym certificate at the end of the pseudonym set, taking out a new pseudonym certificate from the head of the pseudonym set as the pseudonym certificate used for the next communication.

S504, determining the time for replacing the pseudonym certificate next time.

Exemplarily, the time of changing the pseudonym certificate next time is determined according to the current time and the change cycle. For example, if the change cycle is 30 minutes, the time of changing the pseudonym certificate next time is 30 minutes after the current time.

It should be understood that between the current moment and the moment 30 minutes later, when the intelligent driving device receives the first information, the pseudonym certificate is replaced according to the first information.

It should be understood that the completion of S503 means that the replacement of the pseudonym certificate is completed. It can also be understood that before the intelligent driving device executes S501, a pseudonym set has been obtained, and the pseudonym set includes multiple pseudonym certificates.

FIG6 shows a schematic flow chart of a method 600 for replacing a pseudonym certificate provided in an embodiment of the present application. The method 600 may be executed by an intelligent driving device. The method 600 includes:

S601, determining whether the intelligent driving device has just been started.

Specifically, if the intelligent driving device has just been started, execute S604; otherwise, execute S602.

For example, the intelligent driving device may be in a state of just starting up after being turned off for a long time. The intelligent driving device may be in a parking lot when it is turned off, or the intelligent driving device may be in a repair shop when it is turned off. This embodiment of the present application does not specifically limit this.

S602: When the intelligent driving device is in driving state, determine whether the pseudonym certificate is expired.

Specifically, if the pseudonym certificate expires, execute S604; otherwise, execute S603.

Exemplarily, the driving state may include that the speed of the intelligent driving device is not zero; or, although the speed of the intelligent driving device is zero, it is in driving (drive, D) gear, or neutral (neutral, N) gear, that is, the intelligent driving device is in a temporary parking state.

S603, determining whether the replacement period of the pseudonym certificate has arrived.

Specifically, if the replacement period of the pseudonym certificate arrives, execute S604; otherwise, execute S603 (or in some possible implementations, execute S602).

S604, putting the old pseudonym certificate at the end of the pseudonym set, taking out a new pseudonym certificate from the head of the pseudonym set as the pseudonym certificate used for the next communication.

S605, discard the old pseudonym certificate, take out a new pseudonym certificate from the pseudonym set header, and use it as the pseudonym certificate for the next communication.

S606, determining the time for replacing the pseudonym certificate next time.

It should be understood that between the current moment and the moment 30 minutes later, if the intelligent driving device determines that the pseudonym certificate has expired, the pseudonym certificate will be replaced.

An embodiment of the present application provides a method for replacing a pseudonym certificate. Before the intelligent driving device is started, the pseudonym certificate has not been replaced for a long time. After the intelligent driving device is started, directly using the current pseudonym certificate for communication may not be safe enough. Therefore, replacing the pseudonym certificate when it is just started helps to improve the security of the intelligent driving device.

In the various embodiments of the present application, unless otherwise specified or provided for by logic, the terms and/or descriptions between the various embodiments are consistent and may be referenced to each other, and the technical features in different embodiments may be combined to form new embodiments according to their inherent logical relationships.

The method provided by the embodiment of the present application is described in detail above in conjunction with Figures 1 to 6. The device provided by the embodiment of the present application will be described in detail below in conjunction with Figures 7 to 9. It should be understood that the description of the device embodiment corresponds to the description of the method embodiment. Therefore, the content not described in detail can be referred to the method embodiment above, and for the sake of brevity, it will not be repeated here.

FIG. 7 shows a schematic block diagram of an apparatus 700 for replacing a pseudonym certificate provided in an embodiment of the present application. The apparatus 700 includes an acquisition unit 710 and a processing unit 720 .

The device 700 may include units for executing the method in Figure 2, Figure 6 or Figure 7. In addition, each unit in the device 700 and the above-mentioned other operations and/or functions are respectively for implementing the process of the corresponding method embodiment in Figure 2, Figure 6 or Figure 7.

When the device 700 is used to execute the method 200 in FIG. 2 , the acquisition unit 710 may be used to execute S201 in the method 200 , and the processing unit 720 may be used to execute S202 in the method 200 .

Specifically, the acquisition unit 710 is used to acquire first information, which is used to instruct the first device to replace the pseudonym certificate, and the first information is associated with the first area where the first device is located and/or the operating status of the first device; the processing unit 720 is used to control the replacement of the pseudonym certificate according to the first information.

In some possible implementations, the first area includes a second area, which is an area associated with a place of interest to a user of the first device, and the acquisition unit 720 is used to: when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, receive the first information from a first roadside device, and the first roadside device is the roadside device that is closest to the first device in the first area.

In some possible implementations, the first area includes a first signal light intersection, and the processing unit 720 is used to control the replacement of the pseudonym certificate when the driving speed of the first device in the first area is less than or equal to a preset speed threshold.

In some possible implementations, the processing unit 720 is used to: when the first device is started, control the replacement of the pseudonym certificate.

In some possible implementations, the apparatus further includes a determination unit for determining a replacement cycle of the pseudonym certificate, wherein the replacement cycle is associated with a real-time status parameter of the first device; the processing unit 720 is further used for controlling the replacement of the pseudonym certificate when the replacement cycle arrives.

In some possible implementations, the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.

In the specific implementation process, the operations performed by the acquisition unit 710 and the processing unit 720 can be performed by the same processor, or can be performed by different processors, for example, respectively performed by multiple processors. Exemplarily, in the specific implementation process, the one or more processors can be processors set in the vehicle computer, or can also be processors set in other vehicle terminals. In one example, the device 700 can be a chip set in the vehicle computer or other vehicle terminals. In another example, the device 700 can be a computing platform 150 as shown in Figure 1 set in the intelligent driving device.

FIG8 shows a schematic block diagram of an apparatus 800 for replacing a pseudonym certificate provided in an embodiment of the present application. The apparatus 800 includes a generating unit 810 and a transceiver unit 820 .

The device 800 may include a unit for executing the method of FIG3, or may also include a unit for executing the method executed by the cloud server or RSU in FIG4. In addition, each unit in the device 800 and the above-mentioned other operations and/or functions are respectively for implementing the process of the corresponding method embodiment in FIG3 or FIG4.

When the device 800 is used to execute the method 300 in FIG. 3 , the generating unit 810 may be used to execute S301 in the method 300 , and the transceiving unit 820 may be used to execute S302 in the method 300 .

Specifically, the generating unit 810 is used to: generate first information, the first information is used to instruct the first device to change the pseudonym certificate, the first information is associated with the first area where the first device is located and/or the operating status of the first device; the transceiver unit 820 is used to send the first information to the first device.

In some possible implementations, the first area includes a second area, which is an area associated with places of interest to users of the first device, and the second device is a roadside device in the first area that is closest to the first device. The transceiver unit 820 is used to send the first information to the first device when the distance between the first device and the center of the second area is less than or equal to a preset distance threshold.

In some possible implementations, the first area includes a first signal light intersection, the device further includes an acquisition unit, and the generation unit 810 is used to generate the first information when the acquisition unit acquires information that the signal light at the first signal light intersection turns red.

In some possible implementations, the transceiver unit 820 is used to send the first information to the first device via a third device.

In some possible implementations, the apparatus further includes an acquisition unit, which is configured to acquire information about the first area and/or information about an operating status of the first device.

In some possible implementations, the apparatus further includes an acquisition unit and a determination unit, wherein the acquisition unit is used to: acquire the real-time status parameters of the first device; the determination unit is used to: determine the replacement cycle of the pseudonym certificate according to the real-time status parameters; the transceiver unit 820 is also used to: send information about the replacement cycle to the first device.

In the specific implementation process, the operations performed by the above-mentioned generation unit 810 and the transceiver unit 820 can be performed by the same processor, or can also be performed by different processors, for example, respectively performed by multiple processors. Exemplarily, in the specific implementation process, the above-mentioned one or more processors can be processors arranged in a cloud server or a roadside device. In some possible implementations, the above-mentioned device 800 can also be a processor arranged in an intelligent driving device. In one example, the above-mentioned device 800 can be a chip arranged in a cloud server or a roadside device. For example, the above-mentioned device 800 can be a computing platform 211 arranged in the cloud server 210 shown in Figure 1. In another example, the above-mentioned device 800 can be a chip arranged in an intelligent driving device. For example, the above-mentioned device 800 can be a computing platform 150 arranged in Figure 1.

It should be understood that the division of the units in the above device is only a division of logical functions. In actual implementation, they can be fully or partially integrated into one physical entity, or they can be physically separated. In addition, the units in the device can be implemented in the form of a processor calling software; for example, the device includes a processor, the processor is connected to a memory, and instructions are stored in the memory. The processor calls the instructions stored in the memory to implement any of the above methods or realize the functions of the units of the device, wherein the processor is, for example, a general-purpose processor, such as a CPU or a microprocessor, and the memory is a memory in the device or a memory outside the device. Alternatively, the units in the device can be implemented in the form of hardware circuits, and the functions of some or all of the units can be realized by designing the hardware circuits. The hardware circuit can be understood as one or more processors; for example, in one implementation, the hardware circuit is an ASIC, and the functions of some or all of the above units are realized by designing the logical relationship of the components in the circuit; for another example, in another implementation, the hardware circuit can be implemented by PLD. Taking FPGA as an example, it can include a large number of logic gate circuits, and the connection relationship between the logic gate circuits is configured through the configuration file, so as to realize the functions of some or all of the above units. All units of the above device may be implemented entirely in the form of a processor calling software, or entirely in the form of a hardware circuit, or partially in the form of a processor calling software and the rest in the form of a hardware circuit.

Each unit in the above device may be one or more processors (or processing circuits) configured to implement the above method, such as: CPU, GPU, NPU, TPU, DPU, microprocessor, DSP, ASIC, FPGA, or a combination of at least two of these processor forms.

In addition, the units in the above device can be fully or partially integrated together, or can be implemented independently. In one implementation, these units are integrated together and implemented in the form of a system-on-a-chip (SOC). The SOC may include at least one processor for implementing any of the above methods or implementing the functions of each unit of the device. The type of the at least one processor may be different, for example, including a CPU and an FPGA, a CPU and an artificial intelligence processor, a CPU and a GPU, etc.

FIG9 is a schematic block diagram of an apparatus for replacing a pseudonym certificate according to an embodiment of the present application. The apparatus 900 for replacing a pseudonym certificate shown in FIG9 may include: a processor 910, a transceiver 920, and a memory 930. The processor 910, the transceiver 920, and the memory 930 are connected via an internal connection path, the memory 930 is used to store instructions, the processor 910 is used to execute the instructions stored in the memory 930, and the transceiver 920 receives/sends some parameters. In some possible implementations, the memory 930 may be coupled to the processor 910 via an interface, or may be integrated with the processor 910.

It should be noted that the above-mentioned transceiver 920 may include but is not limited to a transceiver device such as an input/output interface to achieve communication between the device 900 and other devices or communication networks.

Memory 930 can be a read-only memory (ROM), a static storage device, a dynamic storage device or a random access memory (RAM).

The transceiver 920 uses a transceiver device such as, but not limited to, a transceiver to implement communication between the apparatus 900 and other devices or a communication network.

In some possible implementations, the device 900 may be arranged in the computing platform 150 shown in FIG. 1 , or may be arranged in the computing platform 211 shown in FIG. 1 , or may be arranged in the roadside equipment 220 shown in FIG. 1 .

An embodiment of the present application further provides an intelligent driving device, which may include the above-mentioned device 700, or the above-mentioned device 900; in some possible implementations, the intelligent driving device may also include the above-mentioned device 800.

In some possible implementations, the smart device may be a vehicle.

An embodiment of the present application also provides a server, and the intelligent driving device may include the above-mentioned device 800, or the above-mentioned device 900.

In some possible implementations, the server is a cloud server, or a server installed in a roadside device.

An embodiment of the present application provides a system for replacing a pseudonym certificate, which may include the intelligent driving device and server in the above embodiment.

The embodiment of the present application also provides a computer program product, which includes a computer program code. When the computer program code runs on a computer, the computer implements the method in the embodiment of the present application.

The embodiment of the present application also provides a computer-readable storage medium, which stores computer instructions. When the computer instructions are executed on a computer, the computer implements the method in the embodiment of the present application.

The embodiment of the present application also provides a chip, including a circuit, for executing the method in the embodiment of the present application.

In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in a processor or an instruction in the form of software. The method disclosed in conjunction with the embodiment of the present application can be directly embodied as a hardware processor for execution, or a combination of hardware and software modules in a processor for execution. The software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or a power-on erasable programmable memory, a register, etc. The storage medium is located in a memory, and the processor reads the information in the memory and completes the steps of the above method in conjunction with its hardware. To avoid repetition, it is not described in detail here.

Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can essentially or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard drives, ROM, RAM, magnetic disks, or optical disks.

The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

A method for replacing a pseudonym certificate, comprising:

The first device acquires first information, where the first information is used to instruct the first device to change the pseudonym certificate, and the first information is associated with a first area where the first device is located and/or an operating state of the first device;

The first device controls the replacement of the pseudonym certificate according to the first information.
The method according to claim 1, wherein the first area includes a second area, the second area is an area associated with a location of interest to a user of the first device, and the first device acquires the first information, comprising:

When the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first device receives the first information from a first roadside device, which is a roadside device closest to the first device in the first area.
The method according to claim 1 or 2, wherein the first area includes a first signal light intersection, and the first device controls the replacement of the pseudonym certificate according to the first information, comprising:

When the driving speed of the first device in the first area is less than or equal to a preset speed threshold, the first device controls the replacement of the pseudonym certificate.
The method according to claim 1 or 2, characterized in that the first device controls the replacement of the pseudonym certificate according to the first information, comprising:

When the first device is started, the first device controls the replacement of the pseudonym certificate.
The method according to any one of claims 1 to 4, characterized in that the method further comprises:

The first device determines a replacement period of the pseudonym certificate, wherein the replacement period is associated with a real-time status parameter of the first device;

The first device controls the replacement of the pseudonym certificate when the replacement period arrives.
The method as claimed in claim 5 is characterized in that the real-time status parameters include at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.
A method for replacing a pseudonym certificate, comprising:

The second device generates first information, where the first information is used to instruct the first device to change the pseudonym certificate, and the first information is associated with a first area where the first device is located and/or an operating state of the first device;

The second device sends the first information to the first device.
The method according to claim 7, wherein the first area includes a second area, the second area is an area associated with a location of interest to a user of the first device, the second device is a roadside device closest to the first device in the first area, and the second device sends the first information to the first device, comprising:

When the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the second device sends the first information to the first device.
The method according to claim 7 or 8, wherein the first area includes a first signal light intersection, and the second device generates the first information, including:

When the second device obtains information that the traffic light at the first traffic light intersection turns red, the second device generates the first information.
The method according to any one of claims 7 to 9, wherein the second device sends the first information to the first device, comprising:

The second device sends the first information to the first device via a third device.
The method according to any one of claims 7 to 10, characterized in that the method further comprises:

The second device obtains information about the first area and/or information about the operating status of the first device.
The method according to any one of claims 7 to 11, characterized in that the method further comprises:

The second device obtains the real-time status parameter of the first device;

The second device determines a replacement period of the pseudonym certificate according to the real-time status parameter;

The second device sends the information of the replacement cycle to the first device.
The method as claimed in claim 12 is characterized in that the real-time status parameters include at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.
A device for replacing a pseudonym certificate, characterized in that it comprises an acquisition unit and a processing unit;

The acquisition unit is used to acquire first information, where the first information is used to instruct the first device to change the pseudonym certificate, and the first information is associated with the first area where the first device is located and/or the operating state of the first device;

The processing unit is used to control the replacement of the pseudonym certificate according to the first information.
The apparatus according to claim 14, wherein the first area includes a second area, the second area is an area associated with a location of interest to a user of the first device, and the acquiring unit is configured to:

When the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first information is received from a first roadside device, which is a roadside device closest to the first device in the first area.
The device according to claim 14 or 15, wherein the first area includes a first signal light intersection, and the processing unit is used to:

When the driving speed of the first device in the first area is less than or equal to a preset speed threshold, control is performed to replace the pseudonym certificate.
The device according to claim 14 or 15, characterized in that the processing unit is used to:

When the first device is started, the pseudonym certificate is replaced.
The device according to any one of claims 14 to 17, characterized in that the device further comprises a determining unit, configured to:

Determining a replacement period of the pseudonym certificate, wherein the replacement period is associated with a real-time status parameter of the first device;

The processing unit is further used for controlling the replacement of the pseudonym certificate when the replacement period arrives.
The device as described in claim 18 is characterized in that the real-time status parameter includes at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.
A device for replacing a pseudonym certificate, characterized in that it comprises a generating unit and a transceiver unit;

The generating unit is used to: generate first information, the first information is used to instruct the first device to change the pseudonym certificate, and the first information is associated with the first area where the first device is located and/or the operating state of the first device;

The transceiver unit is used to send the first information to the first device.
The apparatus according to claim 20, wherein the first area includes a second area, the second area is an area associated with a location of interest to a user of the first device, the second device is a roadside device closest to the first device in the first area, and the transceiver unit is used to:

When the distance between the first device and the center of the second area is less than or equal to a preset distance threshold, the first information is sent to the first device.
The device according to claim 20 or 21, characterized in that the first area includes a first signal light intersection, the device further includes an acquisition unit, and the generation unit is used to:

When the acquiring unit acquires information that the traffic light at the first traffic light intersection turns red, the first information is generated.
The device according to any one of claims 20 to 22, characterized in that the transceiver unit is used to:

The first information is sent to the first device via a third device.
The device according to any one of claims 20 to 23, characterized in that the device further comprises an acquisition unit, wherein the acquisition unit is used to:

Acquire information about the first area and/or information about the operating status of the first device.
The device according to any one of claims 20 to 24, characterized in that the device further comprises an acquisition unit and a determination unit, wherein the acquisition unit is used to:

Obtaining real-time status parameters of the first device;

The determining unit is used to: determine a replacement cycle of the pseudonym certificate according to the real-time status parameter;

The transceiver unit is further used to send information about the replacement cycle to the first device.
The device as described in claim 25 is characterized in that the real-time status parameters include at least one of the following: the speed of the first device, the traffic density around the first device, the privacy leakage of the first device, and the user demand level, wherein the user demand level is used to indicate the demand level of the user of the first device to change the pseudonym certificate.
A device for replacing a pseudonym certificate, comprising:

Memory for storing computer programs;

A processor, configured to execute a computer program stored in the memory, so that the apparatus performs the method according to any one of claims 1 to 6, or performs the method according to any one of claims 7 to 13.
An intelligent driving device, characterized in that it comprises the device as described in any one of claims 14 to 19.
A server, characterized by comprising the device as described in any one of claims 20 to 26.
A computer-readable storage medium, characterized in that instructions are stored thereon, and when the instructions are executed by a processor, the processor implements the method as claimed in any one of claims 1 to 6, or executes the method as claimed in any one of claims 7 to 13.