METHOD AND SYSTEM FOR ISSUING CSR CERTIFICATE FOR VEHICLE-TO-ANYTHING COMMUNICATION

• US 20160087804A1
• Filed: 12/15/2014
• Published: 03/24/2016
• Est. Priority Date: 09/24/2014
• Status: Active Grant

• Current Assignee: AutoCrypt Co., Ltd., Hyundai Motor Company (Hyundai Motor Group)
• Original Assignee: Hyundai Motor Company (Hyundai Motor Group), Penta Security Systems Incorporated
• Inventors: Park, Jong Rok, Ryu, Cho Rong, Sung, Su Lyun, Noh, Dong Gyu, Noh, Hahk Rel, Kim, Duk Soo, Lee, Seok Woo, Hwang, Dae Sung, Sim, Sang Gyoo, Shin, Eun Ho, Kim, Jung Bai, Kim, Byung Gwan, Lee, You Sik
• Granted Patent: US 9,525,556 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]

Abstract

A method for issuing a certificate signing request (CSR) certificate in a vehicle-to-anything (V2X) communication environment includes: receiving, at a first server, a certificate issuance request message including vehicle identification information transmitted from a communication module of the vehicle; determining, by a second server, whether a CSR certificate corresponding to the vehicle identification information has already been issued with reference to a database; and determining, by the second server, whether to issue the corresponding CSR certificate or whether to generate an error message, based on the determination of whether the corresponding CSR certificate has already been issued.

Claims

1. A certificate issuing method for issuing a certificate signing request (CSR) certificate to a vehicle for vehicle-to-anything (V2X) communication, the certificate issuing method comprising:

receiving, at a first server, a certificate issuance request message including vehicle identification information transmitted from a communication module of the vehicle;

determining, by a second server, whether a CSR certificate corresponding to the vehicle identification information has already been issued with reference to a database; and

determining, by the second server, whether to issue the corresponding CSR certificate or whether to generate an error message, based on the determination of whether the corresponding CSR certificate has already been issued.

2. The certificate issuing method according to claim 1, wherein the communication module of the vehicle is a module supporting wireless access in vehicular environment (WAVE) communication.

3. The certificate issuing method according to claim 1, wherein the first server is a registration authority (RA) server operated in a registration agency for relaying certification registration, and the second server is a certificate authority (CA) server of a certification agency for generating, issuing, and managing a certificate.

4. The certificate issuing method according to claim 1, wherein the communication module of the vehicle i) receives the CSR certificate issued by the second server, ii) stores and manages the received CSR certificate in a memory according to a certificate management entity (CME) standard, and iii) uses the CSR certificate to request issuance of an anonymous certificate in the V2X communication.

5. The certificate issuing method according to claim 1, wherein the determining of whether the corresponding CSR certificate has already been issued further comprises:

i) requesting a vehicle management system, which stores and manages identification information of each vehicle in a network, to verify whether the vehicle identification information is valid, before issuance of the CSR certificate,

ii) receiving a corresponding verification result, and iii) when the verification is successful, issuing the CSR certificate.

6. The certificate issuing method according to claim 1, wherein the determining of whether the corresponding CSR certificate has already been issued further comprises:

storing monitoring log information regarding the corresponding CSR certificate already issued to correspond to the vehicle identification information in the database and managing the same, before the error message is generated,

wherein a checking service of the corresponding monitoring log information is provided in response to a request through a vehicle management system in the network.

7. The certificate issuing method according to claim 1, wherein the determining of whether the corresponding CSR certificate has already been issued further comprises:

transmitting corresponding error notification information based on the error message to a previously registered e-mail address or mobile communication terminal number of a user via an e-mail or short message service (SMS).

8. The certificate issuing method according to claim 7, further comprising:

discarding the corresponding CSR certificate, which has already been issued, from the database, in response to a discard request from the user through a vehicle management system in the network.

9. A certificate issuing system for issuing a certificate signing request (CSR) certificate to a vehicle for vehicle-to-anything (V2X) communication, the certificate issuing system comprising:

a certificate issuer configured to;

i) receive vehicle identification information transmitted from a communication module of the vehicle, ii) determine whether a CSR certificate corresponding to the received vehicle identification information has already been issued with reference to a database, and iii) issue the corresponding CSR certificate when there is no corresponding CSR certificate that has already been issued; and

an error transmitter configured to generate an error message when there is a corresponding CSR certificate that has already been issued.

10. The certificate issuing system according to claim 9, wherein the communication module of the vehicle is a module supporting wireless access in vehicular environment (WAVE) communication.

11. The certificate issuing system according to claim 9, further comprising:

a registration authority (RA) server operated in a registration agency for relaying certificate registration, wherein

the RA server includes a certificate processor configured to transmit the vehicle identification information transmitted by the communication module of the vehicle to the CA server and to transmit the CSR certificate issued by the CA server to the communication module of the vehicle, and

the certificate issuer and the error transmitter are included in a certificate authority (CA) server of a certification agency for generating, issuing, and managing a certificate.

12. The certificate issuing system according to claim 11, wherein the CSR certificate received by the communication module of the vehicle through the RA server is stored and managed in a memory according to a certificate management entity (CME) standard, and used to request issuance of an anonymous certificate in the vehicle-to-anything (V2X) communication.

13. The certificate issuing system according to claim 9, wherein, before issuing the CSR certificate, the certificate issuer i) requests a vehicle management system, in the network, which stores and manages identification information regarding each vehicle to verify whether the vehicle identification information is valid, ii) receives a corresponding verification result, and iii) when the verification is successful, the certificate issuer issues the CSR certificate.

14. The certificate issuing system according to claim 9, wherein, before generating the error message, the error transmitter stores and manages monitoring log information regarding the corresponding CSR certificate which has already been issued to correspond to the vehicle identification information in the database, and a checking service of the corresponding monitoring log information is provided in response to a request through the vehicle management system in a network.

15. The certificate issuing system according to claim 9, further comprising:

an error processor configured to transmit corresponding error notification information based on the error message transmitted from the error transmitter, to a previously registered e-mail address or a mobile communication terminal number of a user via an e-mail or short message service (SMS).

16. The certificate issuing system according to claim 15, further comprising:

a certificate discarding unit configured to discard the corresponding CSR certificate which has already been issued from the database in response to a discard request from the user through a vehicle management system in a network.

17. A non-transitory computer readable medium containing program instructions for issuing a certificate signing request (CSR) certificate to a vehicle for vehicle-to-anything (V2X) communication, the computer readable medium comprising:

program instructions that receive a certificate issuance request message including vehicle identification information transmitted from a communication module of the vehicle;

program instructions that determine whether a CSR certificate corresponding to the vehicle identification information has already been issued with reference to a database; and

program instructions that determine whether to issue the corresponding CSR certificate or whether to generate an error message, based on the determination of whether the corresponding CSR certificate has already been issued.