Communication system, vehicle-mounted terminal, roadside device

• US 8,819,418 B2
• Filed: 04/21/2011
• Issued: 08/26/2014
• Est. Priority Date: 05/24/2010
• Status: Active Grant

• Current Assignee: Renesas Electronics Corporation
• Original Assignee: Renesas Electronics Corporation
• Inventors: Ando, Eriko, Naganuma, Ken, Owada, Toru
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): An, Wayne
• Application Number:
  US13/698,359
• Publication Number:
  US 20130067220A1
• Time in Patent Office: 1,223 Days
• Field of Search: 713/158
• US Class Current: 713/156
• CPC Class Codes: G08G 1/096783 where the origin of the information is a roadside individual element
• CPC Class Codes: G08G 1/123 indicating the position of vehicles, e.g. scheduled vehicles; Managing passenger vehicles circulating according to a fixed timetable, e.g. buses, trains, tramstransmission of navigation instructions to vehicles G08G1/0968
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]

Abstract

A communication system includes a certificate authority for performing authentication, a roadside device, a vehicle-mounted terminal, a first server, and a second server. The vehicle-mounted terminal transmits position information to the first server. The certificate authority acquires information about a vehicle-mounted terminal likely to appear according to place and time from the first server. The certificate authority allows the second server to verify validity of a certificate for a vehicle-mounted terminal acquired from the first server. The certificate authority generates a first list of vehicle-mounted terminals having valid certificates and a second list of vehicle-mounted terminals having invalid certificates according to place and time based on a verification result. The certificate authority transmits the first and second lists to the roadside device and the vehicle-mounted terminal. The roadside device and the vehicle-mounted terminal verify a certificate using the received first and second lists thereby reducing the certificate verification time.

Claims

1. A communication system comprising:

a certificate authority configured to perform authentication;

a roadside device configured to be provided at a roadside;

a plurality of vehicle-mounted terminals each having a certificate;

a first server configured to collect position information about the vehicle-mounted terminals; and

a second server configured to manage information about the roadside device and vehicle-mounted terminals whose certificate is invalidated,

wherein the communication system is configured to transmit and receive information between the roadside device and the vehicle-mounted terminals and between the vehicle-mounted terminals,

wherein the vehicle-mounted terminals are each configured to transmit its own position information to the first server,

wherein the certificate authority is configured to;

acquire appearance information about vehicle-mounted terminals whose likelihood of appearing is greater than a predetermined threshold, the certificate authority acquires the appearance information according to place and time from the first server;

allow the second server to verify the validity of a certificate of a vehicle-mounted terminal that is acquired from the first server;

generate a first list of vehicle-mounted terminals having valid certificates and a second list of vehicle-mounted terminals having invalid certificates according to place and time based on a verification result; and

transmit the first list and the second list to the roadside device and the vehicle-mounted terminals; and

wherein the roadside device and the vehicle-mounted terminals are configured to verify a certificate using the received first and second lists.

2. The communication system according to claim 1,

wherein, in response to receiving a message from a message sender on the second list, the roadside device and the vehicle-mounted terminal that received the message omit certificate verification and discard the message, and

in response to receiving a message from a message sender on the first list, the roadside device and the vehicle-mounted terminal that received the message omit certificate verification and verify a signature.

3. The communication system according to claim 2,

wherein, in response to a certain vehicle-mounted terminal acquiring a common key needed to verify a validity of the first list and the second list from the roadside device, the roadside device transmits information needed for authentication and key sharing to the certain vehicle-mounted terminal and another roadside device.

4. The communication system according to claim 3,

wherein the roadside device and the certain vehicle-mounted terminal confirm an effective place and an effective time in the first list and the second list, and if the roadside device and the vehicle-mounted terminal satisfy one of conditions of existing outside the effective place and exceeding the effective time, the first list and the second list are deleted.

5. The communication system according to claim 4,

wherein the roadside device or the certain vehicle-mounted terminal detects an invalidated certificate during one of vehicle-to-vehicle communication and road-to-vehicle communication, and notifies this information to the certificate authority, and

wherein the certificate authority generates the second list and transmits the second list to the roadside device and at least one of the vehicle-mounted terminals.

6. A vehicle-mounted terminal that transmits and receives information from one of a roadside device and another vehicle-mounted terminal, the vehicle-mounted terminal comprising:

a storage portion configured to store a first list of vehicle-mounted terminals having valid certificates according to place and time and a second list of vehicle-mounted terminals having invalidated certificates; and

a signature generation/verification portion configured to;

omit certificate verification and discard a received message in response to receiving the message from a sender on the second list;

omit certificate verification and verify a signature in response to receiving a message from a sender on the first list; and

a processing portion configured to;

confirm an effective place and an effective time in the first list and the second list, and in response to the vehicle-mounted terminal existing outside the effective place and/or exceeding the effective time, delete the first list and the second list.

7. A roadside device that transmits and receives information from a vehicle-mounted terminal, the roadside device comprising:

a storage portion configured to store a first list of vehicle-mounted terminals having valid certificates according to place and time and a second list of vehicle-mounted terminals having invalidated certificates;

a signature generation/verification portion configured to;

omit certificate verification and discard a message received from a certain vehicle-mounted terminal in response to the second list listing the certain vehicle-mounted terminal; and

omit certificate verification and verify a signature in response to receiving a message from a sender on the first list; and

a processing portion configured to confirm an effective time in the first list and the second list, and delete the first list and the second list in response to the roadside device exceeding the effective time.

8. The roadside device according to claim 7, comprising:

a communication control processing portion configured to transmit, to a vehicle-mounted terminal and another roadside device, information needed for authentication and key sharing in response to the vehicle-mounted terminal acquiring a common key needed to verify a validity of the first list and the second list from the roadside device.