Patent Grant
11177966
This application claims the benefit of priority to Korean Patent Application No. 10-2018-0146656, filed on Nov. 23, 2018 in the Korean Intellectual Property Office (KIPO), the entire contents of which are incorporated herein by reference.
The present disclosure relates generally to a security credential management system (SCMS) for V2X communication, and more specifically, to a method and an apparatus for efficiently managing an enrollment certificate in the SCMS.
Vehicle-to-Everything (V2X) communication is a key technology that assures the safety of the vehicle and facilitates autonomous driving by exchanging traffic information with traffic infrastructure such as roads, traffic lights, etc. and other vehicles through a wireless network.
Recently, as interests in the autonomous driving have increased, researches on the V2X communication, which carries out wireless communication between vehicle and everything by combining information communication technology (ICT) with automobiles, is actively under way.
The Institute of Electrical and Electronics Engineers (IEEE) 1609.2 has been proposed as a standard for solving security problems that may arise in the V2X communication. The IEEE 1609.2 is a security standard that a vehicle should adhere to in wireless communications with other vehicles or external systems, uses digital signatures and encryption techniques, and specifies the basis for ensuring secure communications based on certificates.
A security credential management system (SCMS) for V2X communication proposed in the IEEE 1609.2 manages an enrollment certificate, which is a certificate for determining an authority for requesting issuance of a security certificate for the V2X communication before issuing the security certificate.
In this case, there is a need for a method for enhancing security and smoothly performing a certification procedure by managing such the enrollment certificate more efficiently.
Accordingly, exemplary embodiments of the present disclosure provide a method for managing an enrollment certificate in a security credential management system (SCMS) for V2X communication by relaying between an enrollment certificate authority (ECA) and a device configuration manager (DCM).
Accordingly, exemplary embodiments of the present disclosure also provide an apparatus for managing an enrollment certificate in an SCMS for V2X communication by relaying between an ECA and a DCM.
According to the exemplary embodiments of the present disclosure, a method for managing an enrollment certificate in an SCMS for V2X communication may comprise receiving a message requesting an authority for generating a certificate signing request (CSR) from a device configuration manager (DCM); updating device certification data through a certification laboratory that manages performance and requirements of an end entity (EE), and verifying the EE that requested issuance of an enrollment certificate to the DCM by using the updated device certification data; transmitting response data indicating the authority for generating a CSR to the DCM based on a result of the verification; receiving a CSR generated according to the response data from the DCM; and verifying the received CSR, and requesting response data for the CSR to an enrollment certificate authority (ECA) based on a result of the verification.
The method may further comprise, before the receiving of the message, providing access information for requesting the authority to the DCM.
The access information for the ECA may be managed so as not to be exposed to the DCM.
The requesting of the response data for the CSR may further comprise performing verification on the CSR by verifying at least one of a manufacturer name of the EE, a model name of the EE, a responsible person name of the EE, contact information of the EE, and the number of times the EE has requested an enrollment certificate.
The method may further comprise receiving the response data for the CSR from the ECA.
The response data for the CSR may include at least one of a local policy file, a local certificate chain file, the enrollment certificate, and an infrastructure certificate used for secure transmission of data between entities involved in certification in the SCMS.
The receiving of the response data for the CSR may comprise storing the response data for the CSR, managing a history of receiving the CSR, and generating situational data for the request and issuance of the enrollment certificate.
The method may further comprise transmitting the response data for the CSR to the DCM.
In the transmitting of the response data for the CSR to the DCM, the response data for the CSR may be verified, and only the verified response data may be transmitted to the DCM.
In the transmitting of the response data for the CSR to the DCM, the response data for the CSR may be transmitted to the DCM as compressed.
Furthermore, according to the exemplary embodiments of the present disclosure, an apparatus for managing an enrollment certificate in an SCMS for V2X communication may comprise at least one processor, and a memory storing instructions configuring the at least one processor to perform at least one step. Also, the at least one step may comprise receiving a message requesting an authority for generating a CSR from a DCM; updating device certification data through a certification laboratory that manages performance and requirements of an EE, and verifying the EE that requested issuance of an enrollment certificate to the DCM by using the updated device certification data; transmitting response data indicating the authority for generating a CSR to the DCM based on a result of the verification; receiving a CSR generated according to the response data from the DCM; and verifying the received CSR, and requesting response data for the CSR to an ECA based on a result of the verification.
The at least one step may further comprise, before the receiving of the message, providing access information for requesting the authority to the DCM.
The access information for the ECA may be managed so as not to be exposed to the DCM.
The requesting of the response data for the CSR may further comprise performing verification on the CSR by verifying at least one of a manufacturer name of the EE, a model name of the EE, a responsible person name of the EE, contact information of the EE, and the number of times the EE has requested an enrollment certificate.
The at least one step may further comprise receiving the response data for the CSR from the ECA.
The response data for the CSR may include at least one of a local policy file, a local certificate chain file, the enrollment certificate, and an infrastructure certificate used for secure transmission of data between entities involved in certification in the SCMS.
The receiving of the response data for the CSR may comprise storing the response data for the CSR, managing a history of receiving the CSR, and generating situational data for the request and issuance of the enrollment certificate.
The at least one step may further comprise transmitting the response data for the CSR to the DCM.
In the transmitting of the response data for the CSR to the DCM, the response data for the CSR may be verified, and only the verified response data may be transmitted to the DCM.
In the transmitting of the response data for the CSR to the DCM, the response data for the CSR may be transmitted to the DCM as compressed.
In the SCMS for V2X communication according to the exemplary embodiments of the present disclosure, using the method and apparatus for managing an enrollment certificate, the load of the ECA can be remarkably reduced by distributing CSRs received from a plurality of DCMs.
In addition, the CSR response data including the enrollment certificate and the history of issuance of the enrollment certificates can be managed. Also, there is an advantage that the security can be enhanced by verifying the EE requesting the issuance of the enrollment certificate to the DCM, the CSR, and the CSR response data. Also, batching of the response data can be efficiently performed by compressing and transmitting the CSR response data. Further, by using the infrastructure certificate issued by the ICA, the certificate trust chain can be created between the respective certificate authorities, thereby assuring the trust of mutual data transmission.
Exemplary embodiments of the present disclosure will become more apparent by describing in detail exemplary embodiments of the present disclosure with reference to the accompanying drawings, in which:
It should be understood that the above-referenced drawings are not necessarily to scale, presenting a somewhat simplified representation of various features illustrative of the basic principles of the disclosure. The specific design features of the present disclosure, including, for example, specific dimensions, orientations, locations, and shapes, will be determined in part by the particular intended application and use environment.
Exemplary embodiments of the present disclosure are disclosed herein. However, specific structural and functional details disclosed herein are merely representative for purposes of describing exemplary embodiments of the present disclosure. Thus, embodiments of the present disclosure may be embodied in many alternate forms and should not be construed as limited to embodiments of the present disclosure set forth herein.
Accordingly, while the present disclosure is capable of various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that there is no intent to limit the present disclosure to the particular forms disclosed, but on the contrary, the present disclosure is to cover all modifications, equivalents, and alternatives falling within the spirit and scope of the present disclosure. Like numbers refer to like elements throughout the description of the figures.
It will be understood that, although the terms first, second, etc. may be used herein to describe various elements, these elements should not be limited by these terms. These terms are only used to distinguish one element from another. For example, a first element could be termed a second element, and, similarly, a second element could be termed a first element, without departing from the scope of the present disclosure. As used herein, the term “and/or” includes any and all combinations of one or more of the associated listed items.
It will be understood that when an element is referred to as being “connected” or “coupled” to another element, it can be directly connected or coupled to the other element or intervening elements may be present. In contrast, when an element is referred to as being “directly connected” or “directly coupled” to another element, there are no intervening elements present. Other words used to describe the relationship between elements should be interpreted in a like fashion (i.e., “between” versus “directly between,” “adjacent” versus “directly adjacent,” etc.).
The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the present disclosure. As used herein, the singular forms “a,” “an” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms “comprises,” “comprising,” “includes” and/or “including,” when used herein, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.
Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this present disclosure belongs. It will be further understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having a meaning that is consistent with their meaning in the context of the relevant art and will not be interpreted in an idealized or overly formal sense unless expressly so defined herein.
Hereinafter, exemplary embodiments of the present disclosure will be described in greater detail with reference to the accompanying drawings. To facilitate general understanding in describing the present disclosure, the same components in the drawings are denoted with the same reference signs, and repeated description thereof will be omitted.
Referring to
In
Here, the EE may work with a registration authority (RA) of the SCMS in order to receive a security certificate for transmitting messages for V2X communication. The RA may receive a certificate signing request (hereinafter referred to as ‘CSR’) from an EE, request a linkage value to a linkage authority (LA), receive the linkage value, ensure anonymity for the entity requesting the issuance of the security certificate by shuffling the CSRs, and request the security certificate to a pseudonym certificate authority (PCA). Also, the RA may be able to assign a security certificate to each EE (i.e., batching) and manage an enrollment blacklist.
Upon receipt of the security certificate request from the RA, the PCA may issue an anonymous certificate that is exchanged between vehicles in V2V communication and has a short validity period, an application certificate used in infrastructure devices including the RSE, and/or a real name certificate, and transmit the one or more issued certificates to the RA.
The LA may generate a linkage value used to generate the anonymous certificate, and may provide linkage values included in a certificate to revoke the certificate.
Meanwhile, before receiving the security certificate, the EE may receive an enrollment certificate to prove an authority for requesting the issuance of the security certificate. The enrollment certificate may be classified into an enrollment certificate for a vehicle (or, OBE) and an enrollment certificate for an RSE. The functions and issuance-related matters of the enrollment certificate for vehicle may be as shown in Table 1 below.
Also, the functions and issuance-related matter of the enrollment certificate for an RSE may be as shown in Table 2 below.
In order to receive an enrollment certificate, the EE may request issuance of an enrollment certificate to a device configuration manager (DCM). The DCM may provide the EE with information needed to request the enrollment certificate, and may provide new credit information to the EE. In addition, the DCM may transmit an issuance request for an enrollment certificate to an enrollment certificate authority (ECA).
The ECA may issue and manage an enrollment certificate, and transmit the issued enrollment certificate to the EE via the DCM.
A certification service may register information about devices (e.g., roadside units, vehicles, traffic lights, or EEs which perform V2X communication) that are subject to the issuance of the certificate issuance, and identify vehicle terminals qualified to receive the enrollment certificate during a bootstrap process. Further, the certification service may test batches for complying with performance and industry standards. Here, the certification service may also be referred to as a certification laboratory (i.e., certification lab).
A misbehavior authority (MA) may be a component that detects, searches, and manages the risks to the vehicle. At this time, the MA may include a repository on the network (which may be referred to as a ‘CRL Store’) so as to store a certificate revocation list (hereinafter referred to as a ‘CRL’) and distribute it on demand. The MA may include a CRL generator that generates and signs the CRL and manages linkage values of the misbehaving devices. In addition, if it is needed to detect a malfeasance in a system when messages exchanged between EEs are implausible and there is a potential malfunction, the MA may include a device (which may be referred to as a ‘misbehavior report store’ or ‘global detection’) that collects misbehavior reports from the EEs and determines revocation of the certification registration of the device for which an abnormal behavior has been detected.
The MA may include a CRL broadcast that broadcasts a current CRL to be downloaded by the OBE.
A policy generator may be a component that signs a global policy file to be applied to all the SCMS components.
A root certificate authority (CA) is a master component of all other certificate authorities (CAs), and may generate a self-signed certificate and provide the generated certificate to other components. Here, the root CA is a top-level certificate authority and may issue certificates to an intermediate CA (ICA), the MA, the CRL generator, and the policy generator.
An SCMS manager may be a component that manages security and certification policies for V2X communication and supports technical elements.
Referring to
Referring to the connection relationship for the request/issuance of the security certificate, the RA may perform a role of relaying between the EE and the PCA.
Unlike the request/issuance of the security certificate, referring to the connection relationship for the request/issuance of the enrollment certificate, the DCM may request the ECA managing the enrollment certificates to issue the enrollment certificate so that the issuance of the enrollment certificate may proceed. That is, since the enrollment certificate is issued through direct communication between the DCM and the ECA, there may be a problem that it is difficult to distribute issuance requests when there are many issuance requests. Also, if there is a CSR of an EE, an entity for examining such the CSR may be unclear. Also, since the DCM directly communicates with the certification service (or, certification lab) to identify the target of the certificate issuance, access information for the certification lab may be exposed to a plurality of DCMs. In addition, since there is no repository for storing response data for the CSR received from the ECA by the DCM, there is a problem that the issuance request is again received when the certificate issuance is needed again. Also, a method of transmitting the response data from the ECA to the DCM, a security thereof, and the like are unclear. Further, there is a problem that the ECA may be exposed to the outside through the DCM due to the direct communication between the DCM and the ECA. Also, the DCM may transmit the response data for the CSR by manually compressing it, or may transmit the response data for the CSR without compression.
Referring to
When the ERA for managing the enrollment certificate is used according to an exemplary embodiment of the present disclosure, the ERA may examine the CSR requested from the DCM, and thus the entity responsible for examination of the CSR may be clarified. Also, if there is a CSR of the DCM, the ERA may identify the certificate issuance target device through the certification lab, thereby solving the problem that the access information for the certification lab is exposed to a plurality of DCMs. Also, even when CSRs occur from a plurality of DCMs, the CSRs can be properly distributed. Also, the ERA may store the response data for the CSR received from the ECA, so that it can be downloaded at any time if there is an additional issuance request. Further, by using an infrastructure certificate received from the ICA, the DCM, the ECA, and the ERA can perform mutually-secure and reliability-guaranteed communications. Also, since the ECA communicates with the DCM through the ERA according to the present disclosure without directly communicating with the DCM, it is possible to prevent the ECA from being exposed to the outside. Further, the ERA according to the present disclosure can perform efficient batching by automatically compressing the response data for the CSR transmitted from the ECA and transmitting the compressed data to the DCM.
As a preliminary procedure for issuing an enrollment certificate, when an EE (or, information of the EE) to be certificated is submitted to the certification lab, the certification lab may determine whether the EE satisfies predefined requirements, and may perform certification for the EE satisfying the requirements. The certification lab may store certification documents and device information for the EE that has been certificated in a database.
When the preliminary procedure is completed, a procedure for issuing an enrollment certificate may be performed. Referring to
The ERA may receive updated device certification data from the certification lab, determine an authority for generating a CSR using the updated device certification data, and generate response data for the request of the authority for generating a CSR, which is received from the DCM based on the determination result (S402). Also, the ERA may transmit the generated response data to the DCM (S403). When the DCM determines that the DCM is eligible to generate a CSR by referring to the response data, the DCM may generate a CSR (S404). Also, the DCM may generate a CSR key pair (S405). The DCM may transmit the generated CSR to the ERA (S406), and the ERA may perform verification on the CSR received from the DCM (S407). Specifically, the ERA may verify the CSR by verifying a manufacturer's name of the EE, a model name of the EE, a responsible person's name, contact information, and the number of times the EE has requested an enrollment certificate to DCM. When the verification of the CSR is completed, the ERA may request the ECA to generate CSR response data (S408).
The ECA may generate an enrollment certificate including an identifier (ID), a validity period, a permission (i.e., area information, PSID, etc.), a signature (S409), and generate CSR response data including the generated enrollment certificate (S410). Here, the CSR response data may include at least one of a local policy file, a local certificate chain file, the enrollment certificate, an RA certificate, an ECA certificate, a Root CA certificate, and a Root.tls. Here, the RA certificate, the ECA certificate, and the Root CA certificate may be infrastructure certificates used for institutional certification for exchanging information between trust authorities (i.e., entities involved in issuance of the security certificate and the enrollment certificate except the EEs in
The ECA may transmit the generated CSR response data to the ERA (S411), and the ERA may transmit the received CSR response data to the DCM (S412). Here, the ERA may compress the CSR response data received from the ECA, and transmit it to the DCM (i.e., batching function for the response data). Also, the ERA may manage the request and issuance status of the enrollment certificate by storing the CSR response data and managing a history of receiving the CSR. Also, the ERA may verify the CSR response data (or the enrollment certificate included in the CSR response data), and may transmit only the verified CSR response data to the DCM.
The DCM may apply and configure bootstrap data to the EE using the received CSR response data (S413). In this case, the bootstrap data may include at least one of the local policy file, the local certificate chain file, the enrollment certificate, the RA certificate, the ECA certificate, the Root CA certificate, the Root.tls, a private key for the enrollment certificate, and a value obtained by reconstructing the private key.
Referring to
The method may further comprise, before the receiving of the message, a step of providing access information for requesting the authority to the DCM.
The access information for the ECA may be managed so as not to be exposed to the DCM.
The step of 140 of requesting of the response data for the CSR may further comprise a step of performing verification on the CSR by verifying at least one of a manufacturer name of the EE, a model name of the EE, a responsible person name of the EE, contact information of the EE, and the number of times the EE has requested an enrollment certificate.
The method may further comprise a step of receiving the response data for the CSR from the ECA.
The response data for the CSR includes at least one of a local policy file, a local certificate chain file, the enrollment certificate, and an infrastructure certificate used for secure transmission of data between entities involved in certification in the SCMS.
The step of receiving the response data for the CSR from the ECA may comprise a step of storing the response data for the CSR, managing a history of receiving the CSR, and generating situational data for the request and issuance of the enrollment certificate.
The method may further comprise a step of transmitting the response data for the CSR to the DCM.
In the transmitting of the response data for the CSR to the DCM, the response data for the CSR may be verified, and only the verified response data may be transmitted to the DCM.
In the transmitting of the response data for the CSR to the DCM, the response data for the CSR may be transmitted to the DCM as compressed.
Referring to
The at least one processor 110 may be a central processing unit (CPU), a graphics processing unit (GPU), or a dedicated processor on which methods in accordance with the exemplary embodiments of the present disclosure are performed. Each of the memory 120 and a storage device 160 may be constituted of at least one of a volatile storage medium and a nonvolatile storage medium. For example, the memory 120 may comprise at least one of a read only memory (ROM) and a random access memory (RAM).
Also, the apparatus 100 for managing an enrollment certificate may further comprise a transceiver 130 performing communications through a wired or wireless network. Also, the apparatus 100 for managing an enrollment certificate may further comprise an input interface device 140, an output interface device 150, the storage device 160, and the like. The respective components included in the apparatus 100 may be connected by a bus 170 and communicate with each other.
The at least one step may comprise a step of receiving a message requesting authority for generating a CSR from a DCM, a step of updating device certification data through a certification laboratory that manages performance and requirements of an end entity (EE), and verifying the EE that requested issuance of an enrollment certificate to the DCM by using the updated device certification data, a step of transmitting response data indicating the authority for generating a CSR to the DCM based on a result of the verification, a step of receiving a CSR generated according to the response data from the DCM, and a step of verifying the received CSR, and requesting response data for the CSR to an ECA based on a result of the verification.
The at least one step may further comprise, before the receiving of the message, a step of providing access information for requesting the authority to the DCM.
The access information for the ECA may be managed so as not to be exposed to the DCM.
The step of requesting of the response data for the CSR may further comprise a step of performing verification on the CSR by verifying at least one of a manufacturer name of the EE, a model name of the EE, a responsible person name of the EE, contact information of the EE, and the number of times the EE has requested an enrollment certificate.
The at least one step may further comprise a step of receiving the response data for the CSR from the ECA.
The response data for the CSR includes at least one of a local policy file, a local certificate chain file, the enrollment certificate, and an infrastructure certificate used for secure transmission of data between entities involved in certification in the SCMS.
The step of receiving the response data for the CSR from the ECA may comprise a step of storing the response data for the CSR, managing a history of receiving the CSR, and generating situational data for the request and issuance of the enrollment certificate.
The at least one step may further comprise a step of transmitting the response data for the CSR to the DCM.
In the transmitting of the response data for the CSR to the DCM, the response data for the CSR may be verified, and only the verified response data may be transmitted to the DCM.
In the transmitting of the response data for the CSR to the DCM, the response data for the CSR may be transmitted to the DCM as compressed.
The above-described apparatus 100 may be a desktop computer, a laptop computer, a notebook, a smart phone, a tablet PC, a mobile phone, a smart watch, a smart glass, an e-book reader, a portable multimedia player (PMP), a portable gaming machine, a navigation apparatus, a digital camera, a digital multimedia broadcasting (DMB) player, a digital audio recorder, a digital video recorder, a digital video player, a personal digital assistant (PDA), or the like which has communication capability.
The exemplary embodiments of the present disclosure may be implemented as program instructions executable by a variety of computers and recorded on non-transitory a computer readable medium. The non-transitory computer readable medium may include a program instruction, a data file, a data structure, or a combination thereof. The program instructions recorded on the non-transitory computer readable medium may be designed and configured specifically for the present disclosure or may be publicly known and available to those who are skilled in the field of computer software.
Examples of the non-transitory computer readable medium may include a hardware device such as ROM, RAM, and flash memory, which are specifically configured to store and execute the program instructions. Examples of the program instructions include machine codes made by, for example, a compiler, as well as high-level language codes executable by a computer, using an interpreter. The above exemplary hardware device may be configured to operate as at least one software module to perform the exemplary embodiments of the present disclosure, and vice versa.
While the exemplary embodiments of the present disclosure and their advantages have been described in detail, it should be understood that various changes, substitutions and alterations may be made herein without departing from the scope of the present disclosure.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10-2018-0146656 | Nov 2018 | KR | national |
| Number | Name | Date | Kind |
|---|---|---|---|
| 20130096943 | Carey | Apr 2013 | A1 |
| 20160087804 | Park | Mar 2016 | A1 |
| 20160119151 | Park | Apr 2016 | A1 |
| 20160352521 | Choi | Dec 2016 | A1 |
| 20190007484 | Chen | Jan 2019 | A1 |
| 20190053154 | Song | Feb 2019 | A1 |
| 20190297499 | Hawkes | Sep 2019 | A1 |
| 20190327618 | Li | Oct 2019 | A1 |
| 20190379548 | Barrett | Dec 2019 | A1 |
| 20200045552 | Kim | Feb 2020 | A1 |
| 20200252804 | Kim | Aug 2020 | A1 |
| 20200259820 | McCall | Aug 2020 | A1 |
| Number | Date | Country |
|---|---|---|
| 104054084 | Sep 2014 | CN |
| 101584001 | Jan 2016 | KR |
| 20200015005 | Feb 2020 | KR |
| WO-2017217070 | Dec 2017 | WO |
| WO-2018150546 | Aug 2018 | WO |
| WO-2018182198 | Oct 2018 | WO |
| WO-2018230833 | Dec 2018 | WO |
| WO-2020054079 | Mar 2020 | WO |
| Number | Date | Country | |
|---|---|---|---|
| 20200169420 A1 | May 2020 | US |
