COMMUNICATION SYSTEM, VEHICLE-MOUNTED TERMINAL, ROADSIDE DEVICE

• US 20130067220A1
• Filed: 04/21/2011
• Published: 03/14/2013
• Est. Priority Date: 05/24/2010
• Status: Active Grant

• Current Assignee: Renesas Electronics Corporation
• Original Assignee: Renesas Electronics Corporation
• Inventors: Ando, Eriko, Naganuma, Ken, Owada, Toru
• Granted Patent: US 8,819,418 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G08G 1/096783 where the origin of the information is a roadside individual element
• CPC Class Codes: G08G 1/123 indicating the position of vehicles, e.g. scheduled vehicles; Managing passenger vehicles circulating according to a fixed timetable, e.g. buses, trains, tramstransmission of navigation instructions to vehicles G08G1/0968
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

There is a need to reduce the certificate verification time in a communication system.

A communication system (10) includes a certificate authority (100) for performing authentication, a roadside device (110), a vehicle-mounted terminal (120), a first server (130), and a second server (140). The vehicle-mounted terminal transmits its own position information to the first server. The certificate authority acquires information about a vehicle-mounted terminal highly likely to appear according to place and time from the first server. The certificate authority allows the second server to verify validity of a certificate for a vehicle-mounted terminal acquired from the first server. The certificate authority generates a first list of vehicle-mounted terminals having valid certificates and a second list of vehicle-mounted terminals having invalid certificates according to place and time based on a verification result. The certificate authority transmits the first list and the second list to the roadside device and the vehicle-mounted terminal. The roadside device and the vehicle-mounted terminal verify a certificate using the received first and second lists. Thus, the certificate verification time is reduced.

Claims

1. A communication system comprising:

a certificate authority that performs authentication;

a roadside device provided at a roadside;

a vehicle-mounted terminal mounted on a vehicle;

a first server that collects position information about the vehicle-mounted terminal; and

a second server that manages information about a roadside device and a vehicle-mounted terminal whose certificate is invalidated,

wherein the communication system transmits and receives information one of between the roadside device and the vehicle-mounted terminal and between the vehicle-mounted terminals,

wherein the vehicle-mounted terminal transmits its own position information to the first server,

wherein the certificate authority acquires information about a vehicle-mounted terminal highly likely to appear according to place and time from the first server, allows the second server to verify validity of a certificate for a vehicle-mounted terminal acquired from the first server, generates a first list of vehicle-mounted terminals having valid certificates and a second list of vehicle-mounted terminals having invalid certificates according to place and time based on a verification result, and transmits the first list and the second list to the roadside device and the vehicle-mounted terminal, and

wherein the roadside device and the vehicle-mounted terminal verify a certificate using the received first and second lists.

2. The communication system according to claim 1,

wherein, when receiving a message, the roadside device and the vehicle-mounted terminal perform:

omitting certificate verification and discarding a message if the second list comprises a message sender; and

omitting certificate verification and verifying a signature if the first list comprises a message sender.

3. The communication system according to claim 2,

wherein the roadside device transmits information needed for authentication and key sharing to the vehicle-mounted terminal and the nearby roadside device when the vehicle-mounted terminal acquires a common key needed to verify validity of the first list and the second list from the roadside device.

4. The communication system according to claim 3,

wherein the roadside device and the vehicle-mounted terminal confirm effective place and effective time in the first list and the second list, and if the roadside device and the vehicle-mounted terminal satisfy one of conditions of existing outside the effective place and exceeding the effective time, delete the first list and the second list.

5. The communication system according to claim 4,

wherein the roadside device or the vehicle-mounted terminal detects an invalidated certificate during one of vehicle-to-vehicle communication and road-to-vehicle communication, and notifies this information to a certificate authority, and

wherein the certificate authority generates the second list and transmits the second list to a roadside device and a vehicle-mounted terminal near a detection place.

6. A vehicle-mounted terminal that transmits and receives information from one of a roadside device and another vehicle-mounted terminal, the vehicle-mounted terminal comprising:

a storage portion that stores a first list of vehicle-mounted terminals having valid certificates according to place and time and a second list of vehicle-mounted terminals having invalidated certificates; and

a signature generation/verification portion that performs;

omitting certificate verification and discarding a received message if the second list comprises a message sender; and

omitting certificate verification and verifying a signature if the first list comprises a message sender.

7. The vehicle-mounted terminal according to claim 6, further comprising:

a processing portion that confirms effective place and effective time in the first list and the second list, and if the vehicle-mounted terminal satisfies one of conditions of existing outside the effective place and exceeding the effective time, deletes the first list and the second list.

8. A roadside device that transmits and receives information from a vehicle-mounted terminal, the roadside device comprising:

a storage portion that stores a first list of vehicle-mounted terminals having valid certificates according to place and time and a second list of vehicle-mounted terminals having invalidated certificates; and

a signature generation/verification portion that performs;

omitting certificate verification and discarding a message received from a vehicle-mounted terminal if the second list comprises a message sender; and

omitting certificate verification and verifying a signature if the first list comprises a message sender.

9. The roadside device according to claim 8, comprising:

a communication control processing portion that transmits information needed for authentication and key sharing to the vehicle-mounted terminal and the nearby roadside device when the vehicle-mounted terminal acquires a common key needed to verify validity of the first list and the second list from the roadside device.

10. The roadside device according to claim 9, comprising:

a processing portion that confirms effective time in the first list and the second list, and deletes the first list and the second list if the roadside device exceeds the effective time.