Security certificate management and misbehavior vehicle reporting in vehicle-to-everything (V2X) communication

Patent metadata

Field	Value
Publication number	US-11445362-B2
Application number	US-201916729077-A
Country	US
Kind code	B2
Filing date	Dec 27, 2019
Priority date	Mar 1, 2019
Publication date	Sep 13, 2022
Grant date	Sep 13, 2022

Abstract

Embodiments of the present disclosure describe methods, apparatuses, storage media, and systems for a device disposed at an edge of a vehicular communication network or vehicles within a coverage area of the device. The device is to generate a list of vehicle security data to be distributed to vehicles currently within a coverage area of the device, based at least in part on a context related to the vehicles. The device is further to announce, on a control channel communicatively coupling the device and the vehicles, that the list of vehicle security data are available and a service channel to receive the list of vehicle security data. The list of vehicle security data are to be provided to the vehicles via the service channel. Other embodiments may be described and claimed.

First claim

What is claimed is:

1. One or more non-transitory, computer-readable media having instructions that, when executed by a computer processor of a device disposed at an edge of a vehicular communication network, cause the device to:
monitor communication messages within a coverage area of the device through the device;
identify vehicles currently within the coverage area based on the monitored communication messages;
generate a list of vehicle security data to be distributed to the vehicles currently within the coverage area based at least in part on a context related to the vehicles, the vehicles currently within the coverage area, messages within the coverage area through the device, and information from a server in the vehicular communication network,
wherein the list of vehicle security data comprises a misbehavior report (MBR) including identities of one or more misbehaving vehicles, and wherein an identity of a misbehaving vehicle is included in the MBR when a report on misbehavior of the misbehaving vehicle has been received from another vehicle, and wherein the misbehaving vehicle is within the coverage area of the device or will be within the coverage area based on a prediction according to a trajectory of the misbehaving vehicle; and
announce, on a control channel communicatively coupling the device and the vehicles, that the list of vehicle security data are available and a service channel to receive the list of vehicle security data, wherein the list of vehicle security data are provided to the vehicles via the service channel.

2. The one or more non-transitory, computer-readable media of claim 1 , wherein:
the device is a roadside unit (RSU), and at least one of the control channel or the service channel is within a dedicated short range communications (DSRC) band; or
the device is a base station of a cellular network, and at least one of the control channel or the service channel is within a cellular band.

3. The one or more non-transitory, computer-readable media of claim 1 , wherein the control channel is a control channel of IEEE Wireless Access in Vehicular Environments (WAVE) at 5.9 Ghz band, and the service channel is a non-critical service channel of IEEE Wireless Access in Vehicular Environments (WAVE) at 5.9 Ghz band.

4. The one or more non-transitory, computer-readable media of claim 1 , wherein the list of vehicle security data includes a list of security certificates for verifying authenticity or integrity of messages sent or received by the vehicles, and the list of security certificates are collected by the device from message signatures being verified by the device.

5. The one or more non-transitory, computer-readable media of claim 1 , wherein the control channel is a control channel of cellular vehicle-to-everything (C-V2X) standard, and the service channel is a non-critical service channel of the C-V2X standard.

6. The one or more non-transitory, computer-readable media of claim 1 , wherein the list of vehicle security data comprises a certificate revocation list (CRL) including identities of vehicles whose security certificates are to be revoked, and the CRL is obtained by customizing a global CRL with respect to the vehicles, and wherein the global CRL is received by the device from the server or another server in the vehicular communication network.

7. The one or more non-transitory, computer-readable media of claim 1 , wherein, to announce on the control channel that the list of vehicle security data are available, execution of the instructions is to cause the device to:
cause broadcast on the control channel that the list of vehicle security data are available.

8. The one or more non-transitory, computer-readable media of claim 1 , wherein the instructions, when executed, further cause the device to:
cause distribution of the list of vehicle security data to the vehicles via the service channel.

9. The one or more non-transitory, computer-readable media of claim 8 , wherein, to cause distribution of the list of vehicle security data to the vehicles, execution of the instructions is to cause the device to:
cause broadcast the list of vehicle security data on the service channel.

10. The one or more non-transitory, computer-readable media of claim 8 , wherein the list of vehicle security data is distributed to the vehicles accordingly to a frequency adjustable according to one or more factors of a context of the device, and wherein the one or more factors includes a tolerance level for misbehavior vehicles, a size of a global CRL, a size of a localized CRL, a channel status, or a difference between a CRL at a first time instance and a CRL at a second time instance.

11. The one or more non-transitory, computer-readable media of claim 1 , wherein the instructions, when executed, further cause the device to:
receive information from the server, another server, or one of the vehicles, wherein the list of vehicle security data is generated at least partially based on the received information.

12. A method of operating a device at an edge of a vehicular communication network, the method comprising:
monitoring communication messages within a coverage area of the device through the device;
identifying vehicles currently within the coverage area based on the monitoring;
generating vehicle security data to be distributed to the identified vehicles based at least in part on a context related to the vehicles, the identified vehicles, the monitored messages, and information from a server in the vehicular communication network, wherein the vehicle security data includes a misbehavior report (MBR), the MBR includes identities of one or more misbehaving vehicles;
generating the MBR to include an identity of a misbehaving vehicle when a report on misbehavior of the misbehaving vehicle has been received from another vehicle, and the misbehaving vehicle is within the coverage area of the device or will be within the coverage area based on a prediction according to a trajectory of the misbehaving vehicle;
announcing, on a control channel communicatively coupling the device and the vehicles, that the vehicle security data is available and a service channel to receive the vehicle security data; and
distributing the vehicle security data to the vehicles via the service channel.

13. The method of claim 12 , wherein the device is a roadside unit (RSU), a cellular base station, or a wireless local area network (WLAN) access point.

14. The method of claim 12 , wherein:
the control channel is a control channel of cellular vehicle-to-everything (C-V2X) protocol, and the service channel is a non-critical service channel of the C-V2X protocol; or
the control channel is a control channel of IEEE Wireless Access in Vehicular Environments (WAVE) at 5.9 Ghz band, and the service channel is a non-critical service channel of IEEE Wireless Access in Vehicular Environments (WAVE) at 5.9 Ghz band.

15. The method of claim 12 , wherein the vehicle security data includes one or more of:
a list of security certificates for verifying authenticity or integrity of messages sent or received by the vehicles, wherein the list of security certificates are collected by the device from message signatures being verified by the device; and
a certificate revocation list (CRL) including identities of vehicles whose security certificates are to be revoked, wherein the CRL is obtained by customizing a global CRL with respect to the vehicles, and the global CRL is received by the device from the server or another server in the vehicular communication network.

16. The method of claim 12 , wherein the anno

Assignees

• Intel Corp

Inventors

• Liu Xiruo
• Yang Liuyang
• Gomes Baltar Leonardo
• Ambrosin Moreno
• Sastry Manoj R

Classifications

• H04W72/20

  Control channels or signalling for resource management · CPC title

• H04W12/009 Primary

  specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks · CPC title

• H04W12/64

  using geofenced areas · CPC title

• H04W4/20

  Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel · CPC title

• H04W12/069

  using certificates or pre-shared keys · CPC title