Patent Application
20160119151
This application is based on and claims the benefit of priority to Korean Patent Application No. 10-2014-0143496, filed on Oct. 22, 2014 in the Korean Intellectual Property Office, the disclosure of which is incorporated herein in its entirety by reference.
The present disclosure relates to a method and system for detecting misbehavior for a vehicle-to-anything (V2X) communication, and more particularly, to a method and system for actively validating an anonymous certificate issue request in a server and detecting the misbehavior such as an attack by other vehicles, etc. in a V2X communication using a wireless access in vehicular environment (WAVE) communication method.
IEEE 1609.2 among IEEE 1609 series is the standard for a wireless access in vehicular environment (WAVE), which defines for a security framework. In order to detect misbehavior of an anonymous certificate issue, a protocol exchanging a misbehavior report has been somewhat discussed, but details for determining what is misbehavior in central validation for a certificate request and the like have not been defined. Currently, since a V2X communication using the WAVE has not been commercialized, there is no clear related art available.
Thus, a stable method for defining detailed items for an active anonymous certificate issue and misbehavior, etc. in a server and issuing a certificate to a lawful entity is required.
An aspect of the present inventive concept provides a method and system for actively validating an anonymous certificate issue request by central validation and detecting misbehavior such as being attacked by other vehicles, and the like, in a V2X communication environment in which on board unit (OBU) based on WAVE abiding by IEEE 1609.2 and public key infrastructure (PKI) system based on an infra are established.
Another aspect of the present inventive concept provides a method and system for detecting misbehavior capable of providing a stable V2X communication environment, so that an anonymous certificate issue request, an anonymous certificate reception and a misbehavior report, etc. in a vehicle are transmitted to a server through a road-side unit (RSU) and a certificate can be issued to a lawful entity by determining whether the request is normal and detecting misbehavior such as the attack by other vehicle, etc. in the server.
According to an exemplary embodiment of the present inventive concept, a method for issuing a reliable certificate to a vehicle for a vehicle-to-anything (V2X) communication in a server on a network comprises receiving a certificate issue request including vehicle identification information and road-side unit (RSU) identification information from an RSU. Log information for the certificate issue request is extracted from a database. Normality or abnormality is determined according to whether a predetermined certificate issue criteria is satisfied by analyzing the certificate issue request and the log information. The certificate is issued, and the certificate is transmitted to a vehicle communication module according to determination of normality, or certificate revocation information is registered according to determination of abnormality.
The RSU may receive the vehicle identification information for requesting the certificate issue request from the vehicle communication module supporting wireless access in a vehicular environment (WAVE) communication.
The log information may include whether a certificate signing request (CSR) certificate corresponding to the vehicle identification information is issued or certificate of the log information, an RSU position for the certificate issue request, or a certificate issue request time.
The certificate issue criteria may include whether the corresponding issue request is correct, whether an RSU position is suitable, or whether a certificate issue request time in a corresponding RSU position is adequate.
The step of determining may include determining whether the RSU identification information is registered in the database.
The step of determining may include determining whether a previously issued CSR certificate corresponding to the vehicle identification information exists or it is issued in the log information and verifying whether it is valid.
The step of determining may include determining whether the certificate issue request is an issue request after a predetermined time or more is elapsed since a previous issue request time by referring to the log information.
The step of determining may include determining whether a corresponding RSU position for the certificate issue request is suitable by referring to the log information.
The step of determining may include determining whether a certificate issue request time in a corresponding RSU position for the certificate issue request is adequate.
According to another aspect of the present inventive concept, a system for issuing a reliable certificate to a vehicle for a V2X communication comprises a misbehavior processor configured to receive a certificate issue request including vehicle identification information and RSU identification information from an RSU and to extract log information for the certificate issue request from a database. A misbehavior detection engine is configured to determine normality or abnormality according to whether a predetermined certificate issue criteria is satisfied by analyzing the certificate issue request and the log information. The system issues the certificate and transmits the certificate to a vehicle communication module according to determination of normality, or registers certificate revocation information according to determination of abnormality.
The RSU may receive the vehicle identification information for requesting the certificate issue request from the vehicle communication module supporting a WAVE communication.
The log information may include whether a CSR certificate corresponding to the vehicle identification information is issued or a certificate of the log information, an RSU position requesting the certificate issue, or a certificate issue request time.
The certificate issue criteria may include whether the corresponding issue request is correct, whether an RSU position is suitable, or whether a certificate issue request time is adequate.
The misbehavior detection engine may determine whether the RSU identification information is registered in the database.
The misbehavior detection engine may determine whether a previously issued CSR certificate corresponding to the vehicle identification information exists or it is issued in the log information and verifying whether it is valid.
The misbehavior detection engine may determine whether the certificate issue request is the issue request after a predetermined time or more is elapsed since a previous issue request time by referring to the log information.
The misbehavior detection engine may determine whether a corresponding RSU position for the certificate issue request is suitable by referring to the log information.
The misbehavior detection engine may determine whether a certificate issue request time in a corresponding RSU position for the certificate issue request is adequate.
The system may issue the certificate or register the certificate revocation information in a certificate authority (CA) server of a certificate authority for generating, issuing, and managing the certificate, and transmit the certificate issued from a registration authority (RA) server operated by a registration authority for relaying a certification registration to the vehicle communication module through the RSU.
According to a method and system for detecting misbehavior for a V2X communication, except the function for detecting and reporting misbehavior in a vehicle (local validation), by providing a method for actively detecting an attack in a server, a safe communication environment can be provided. In addition, by introducing a pattern recognition technique of items, such as a request time, a place, and the like, for an anonymous certification issue to misbehavior detection engine (MDE), active and smart attack detection is possible.
The above and other objects, features and advantages of the present disclosure will be more apparent from the following detailed description taken in conjunction with the accompanying drawings.
Hereinafter, the present disclosure will be described in detail with reference to the drawings. At this time, in each of the drawings, the same components are denoted by the same reference symbols, if possible. Further, detailed descriptions for the previously known features and/or configurations are omitted. In the description below, parts required to understand operations in accordance with various embodiments will be explained in priority, the descriptions for elements, which may obscure the gist of the descriptions, are omitted. It can also be shown schematically some of the elements in the figures are exaggerated or omitted. Not utterly reflect an actual size to the size of each element, so that they are not intended to limit the content that is specified here by the relative size and spacing of the elements drawn in the figure, respectively.
Referring to
First, the RA sever 110 may be a registrar server such as a financial company (for example, a bank, securities company, and the like) for relaying registration such as generation and issue of a certificate, etc., and CA server 120 may be a server of a certificate authority (for example, Koscom Corp., Korea Information Certificate Authority, Incorporated (KICA), and the like) for generating, issuing, and managing the certificate in order to issue the certificate for each vehicle. However, it is not limited to the above description, in some cases, it may be operated as a server in which the RA sever 110 and the CA server 130 are integrated on a network such as a mobile communication network, Internet, and the like. That is, the system 100 for detecting misbehavior may be formed in one server type.
Further, in the present disclosure, a vehicle comprises a communication module for supporting a vehicle-to-anything (V2X) wireless communication. The vehicle communication module may support mobile communication for such as WCDMA, LTE, WiFi, etc., particularly, through a wireless access in vehicular environment (WAVE) wireless communication method and may support the V2X communication between vehicles with a server on Internet, or with other system or terminal and the like. A WAVE communication protocol, which can be applied to the vehicle communication module, is a combination of IEEE 802.11p standard and IEEE P1609 standard and is used to establish various next-generation intelligent transport systems by supporting inter-vehicle high speed communication and the communication between a vehicle and infrastructure. The WAVE communication method can use the relay of the RSU 10, but it can also support direct communication between vehicles (V2V). The vehicle communication module supporting the WAVE communication method includes a physical layer and a media access control (MAC) layer for supporting communication delay less than 10 msec at a maximum vehicle speed of 200 km/h, a communication radius of 1 km, a maximum transmission speed of 54 Mbps, a frequency of 5.850 - 5.925 GHz, a channel bandwidth of 10 Mhz, a channel number of 7, etc., and ensures high speed mobility.
In the V2X communication environment of the present disclosure, the vehicle communication module can transmit and receive required information by communicating with the RSU 10, the server 110/120, etc. depending on a required signal generation by operation of a user such as driver or other methods. In addition, the vehicle communication module is connected to various human-machine interface (HMI) electronic devices such as a mobile communication terminal (for example, a smart phone, PDA, PMA, etc.), in-vehicle navigation terminal and the like which are utilized by the user, and can transmit and receive the required information by communicating with the RSU 10, the server 110/120, etc. depending on the required signal generation by the operation of the HMI or other methods. Further, it can transmit and receive the required information by communicating with the RSU 10, the server 110/120, etc. depending on the required signal generation by the operation of the user through a user interface which can be provided in the vehicle communication module as requested or other method. The RSU 10 and the server 110/120 can be also interoperated by network such as a mobile communication network or Internet and the like, and as occasion demands, the vehicle communication module can be also interoperated with the RSU 10, the server 110/120, etc. through the network such as a mobile communication network, Internet, or the like.
Generally, a vehicle is manufactured with the vehicle communication module for storing and managing the vehicle identification information such as vehicle identification number (VIN) in a predetermined memory. In order to support the V2X communication by the vehicle communication module, a certificate signing request (CSR) certificate issue (for example, issued annually) issued via the RA server 110, the CA server 120 of the certificate authority must be stored and managed in a memory with management of the above vehicle VIN. A CSR certificate is a certificate for assigning an issue request authority of an anonymous certificate, and the anonymous certificate maintains security such an encryption, etc. and can be issued for authentication, i.e., for every 5 minutes.
For example, when the system detecting misbehavior for V2X communication of a vehicle is booted, the vehicle communication module requests the issue of the anonymous certificate to the RSU 10. At this time, the RSU 10 transmits the issue request of the anonymous certificate including the vehicle identification information (VIN) and RSU identification information (RSU ID) received from the vehicle communication module to the RA server 110, and the RA server 110 transmits the issue request of the anonymous certification to the misbehavior processor 130 (see S110 of
The RSU information storage 150 stores log information which is previous behavior collecting information, such as the RSU information (an identifier such as ID, a position, and the like), whether the CSR certificate is issued for the vehicle identification information (VIN) of each vehicle or its certificate, the RSU position requesting the certificate issue, a time requesting the certificate issue, and the like, and in response to the anonymous certificate issue request. Then, the misbehavior processor 130 extracts the previous behavior collecting information, i.e., search information such as the log information, etc. corresponding to the vehicle identification information (VIN) from the RSU information storage 150 and transmits it to the misbehavior detection engine 140 with the anonymous certificate issue request (see S120 of
The misbehavior detection engine 140 analyzes the anonymous certificate issue request and the search information, determines whether the criteria of the certificate issue is satisfied, such as whether the request is right, whether the RSU position is suitable, whether the time requesting the certificate issue in the RSU position is proper, etc., and transmits the determination result for normality or abnormality to the misbehavior processor 130 (see S130 of
The misbehavior processor 130 transmits the above determination result for the normality or abnormality to the RA server 110, and for the normal determination result, enables the anonymous certificate issue between the RA server 110 and CA server 120 to be performed, and for the abnormal determination result, registers it to a certificate revocation list (CRL) in the CA server 120 by the interoperation between the RA server 110 and the CA server 120 and enables the revocation of the CSR certificate to be performed (see S140 of
For example, with respect to the normal determination result, the RA server 110 is the registrar server such as a financial company (for example, a bank, securities company, and the like), etc. for relaying the registration such as generation and issue of a certificate, etc. of a certificate authority, and enables the CA server 120 to issue and return the corresponding certificate by transmitting a issue request message including the received vehicle identification information (VIN) to the CA server 120. The CA server 120 is a server of the certificate authority (for example, Koscom Corp., KICA Inc., and the like) which processes the request of the certificate issue for each vehicle and manages the issued certificates, and if there is the previously issued CSR certificate corresponding to the vehicle identification information (VIN) of the received issue request message, it issues the corresponding anonymous certificate and transmits it to the RA server 110. The RA server 110 may enable the anonymous certificate to be transmitted to the vehicle communication module via the RSU 10.
With respect to an abnormal determination result, the RA server 110 enables the CA server 120 to revoke a corresponding certificate by transmitting a revocation request message including the received vehicle identification information (VIN) to the CA server 120. The CA server 120 revokes the previously issued CSR certificate corresponding to the vehicle identification information (VIN) of the received revocation message in the database and may register and manage the certificate revocation information such as the vehicle identification information, etc. in the certificate revocation list (CRL).
Hereinafter, referring to
The method for analyzing whether the certificate issue request is correct in the misbehavior detection engine 140 may be various as follows.
For example, the misbehavior detection engine 140 may determine whether the received RSU identification information (RSU ID) is the registered ID or not. That is, whether the RSU identification information (RSU ID) is registered can be requested, to the misbehavior processor 130, and the misbehavior processor 130 may determine whether it matches the RSU information stored in the RSU information storage 150 and provide a result to the misbehavior detection engine 140.
The misbehavior detection engine 140 may determine the existence of the CSR certificate or whether it is issued corresponding to the received vehicle identification information (VIN) in the log information received from the misbehavior processor 130 and may verify whether it is valid.
In addition, the misbehavior detection engine 140 may determine whether it is the issue request after a predetermined time (for example, 1 second) or more is elapsed since a previous issue request time by referring to the log information such as the certificate issue request time, etc. corresponding to the vehicle identification information (VIN) received from the misbehavior processor 130.
As shown in
For example, the misbehavior detection engine 140 may determine whether the RSU position (RA server jurisdiction) is suitable for the certificate issue request by referring to the log information such as the RSU position requesting the certificate issue received from the misbehavior processor 130. That is, as shown in
The misbehavior detection engine 140 may determine whether the certificate issue request time in the corresponding RSU position for the certificate issue request is suitable by referring to the log information such as the certificate issue request time, etc. corresponding to the vehicle identification information (VIN) received form the misbehavior processor 130.
If the anonymous certificate can be issued over each of a predetermined time interval while the vehicle is moving and an interval of issue request times (Δti−ti−1) and a distance between issue request RSUs (Δd=di−di−1) conflicts, it is determined that the attacker attacks by stealing the ID of the other RSU.
For example, as shown in
In the above description, the present inventive concept has been described through specific elements, embodiments, and drawings, it is only provided to assist in a comprehensive understanding of the present disclosure, the present inventive concept is not limited to the embodiments, and it will be understood by those skilled in the art that the present disclosure may be implemented as various modifications and variations without departing from the spirit of the present inventive concept. Accordingly, the scope of the present disclosure is recited in the appended claims, not the above descriptions, and all differences within the equivalent scope of the present disclosure will be construed as being included in the present disclosure.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10-2014-0143496 | Oct 2014 | KR | national |
