Identity verification method and apparatus

Patent metadata

Field	Value
Publication number	US-11979413-B2
Application number	US-202117360360-A
Country	US
Kind code	B2
Filing date	Jun 28, 2021
Priority date	Aug 31, 2019
Publication date	May 7, 2024
Grant date	May 7, 2024

Abstract

A first apparatus sends a first random number to a second apparatus, where a vehicle carries the first apparatus and a first set. The second apparatus belongs to the first set. The first set further includes a third apparatus. The first apparatus communicates with the third apparatus using the second apparatus. The first apparatus receives a first message from the second apparatus. The first message includes first verification information to perform identity verification on the second apparatus. The first verification information is based on identity information of the second apparatus and the first random number. The first apparatus determines, based on the first verification information and the first random number, that the identity verification on the second apparatus has succeeded.

First claim

What is claimed is:

1. A method implemented by a first apparatus, wherein the method comprises:
sending a first random number to a second apparatus, wherein a vehicle comprises the first apparatus, the second apparatus, and a first set, wherein the first set comprises the second apparatus and a third apparatus, wherein the first apparatus is a primary authentication node in the vehicle and performs first identity verification on the second apparatus, and wherein the second apparatus is a secondary authentication node in the first set and performs second identity verification on the third apparatus;
receiving, from the second apparatus, a first message comprising first verification information, wherein the first verification information is for performing the first identity verification on the second apparatus, wherein the first verification information is based on first identity information of the second apparatus and the first random number, and wherein the first message further comprises third verification information of the third apparatus; and
determining, based on the first verification information and the first random number, whether the first identity verification on the second apparatus has succeeded and whether the second identity verification on the third apparatus succeeds.

2. The method of claim 1 , further comprising:
generating second verification information based on the first identity information and the first random number;
determining whether the first verification information is consistent with the second verification information; and
further determining that the first identity verification on the second apparatus has succeeded when the first verification information is consistent with the second verification information.

3. The method of claim 2 , wherein the third verification information is based on second identity information of the third apparatus.

4. The method of claim 3 , wherein the first message further comprises fourth verification information indicating whether the second identity verification on the third apparatus has succeeded.

5. The method of claim 4 , further comprising further generating the second verification information based on the fourth verification information.

6. The method of claim 4 , wherein the fourth verification information indicates that the second identity verification on the third apparatus has failed, and wherein after determining that the first identity verification on the second apparatus has succeeded, the method further comprises performing, based on the third verification information, the second identity verification on the third apparatus to determine whether the second identity verification on the third apparatus has succeeded.

7. The method of claim 1 , wherein the first message further comprises second verification information indicating that the second identity verification on the third apparatus in the vehicle has failed, and wherein the method further comprises:
sending, to the second apparatus, a second message requesting to obtain fifth verification information corresponding to the third apparatus;
receiving, from the second apparatus, a third message comprising the fifth verification information corresponding to the third apparatus; and
performing, based on the fifth verification information corresponding to the third apparatus, the second identity verification on the third apparatus to determine whether the second identity verification on the third apparatus has succeeded.

8. The method of claim 1 , further comprising:
determining that the first identity verification on the second apparatus has failed;
sending, to the second apparatus, a second message requesting to obtain second verification information corresponding to the third apparatus in the vehicle;
receiving, from the second apparatus, a third message comprising the second verification information corresponding to the third apparatus; and
performing, based on the second verification information corresponding to the third apparatus, the second identity verification on the third apparatus to determine whether the second identity verification on the third apparatus has succeeded.

9. A method implemented by a second apparatus, wherein the method comprises:
sending a second random number to a third apparatus, wherein a vehicle comprises a first apparatus, the second apparatus, the third apparatus, and a first set, wherein the first set comprises the second apparatus and the third apparatus, wherein the first apparatus is a primary authentication node in the vehicle and performs first identity verification on the second apparatus, and wherein the second apparatus is a secondary authentication node in the first set and performs second identity verification on the third apparatus;
receiving first verification information from the third apparatus, wherein the first verification information is based on first identity information of the third apparatus and the second random number;
determining, based on the second random number and the first verification information, whether the second identity verification on the third apparatus has succeeded;
generating second verification information based on second identity information of the second apparatus and a first random number from the first apparatus, wherein the second verification information indicates whether the second identity verification on the third apparatus succeeds; and
sending a first message to the first apparatus,
wherein the first message comprises the second verification information, and
wherein the second verification information performs the first identity verification on the second apparatus.

10. The method of claim 9 , further comprising:
generating second verification information based on the second random number and the first identity information; and
further determining, based on the second verification information, whether the second identity verification on the third apparatus has succeeded.

11. The method of claim 10 , further comprising:
determining that the second verification information is consistent with the first verification information; and
determining, in response to the second verification information is consistent with the first verification information, that the second identity verification on the third apparatus has succeeded.

12. The method of claim 9 , wherein the first message further comprises the first verification information indicating whether the second identity verification on the third apparatus has succeeded.

13. The method of claim 9 , further comprising:
identifying that the second random number and the first random number have a same length but different content;
obtaining the second random number by splicing the first random number and a third random number; or
identifying that the second random number is the same as the first random number.

14. A first apparatus in a vehicle, wherein the first apparatus comprises:
a transceiver configured to:
send a first random number to a second apparatus in the vehicle, wherein the vehicle further comprises a first set, wherein the first set comprises the second apparatus and a third apparatus, wherein the first apparatus is a primary authentication node in the vehicle and performs first identity verification on the second apparatus, and wherein the second apparatus is a secondary authentication node in the first set and performs second identity verification on the third apparatus; and
receive, from the second apparatus, a first message comprising first verification information, wherein the first verification information is for performing the first id

Assignees

• Huawei Tech Co Ltd

Inventors

• Yang Yanjiang
• Wei Zhuo
• Wu Shuang

Classifications

• H04L63/126 Primary

  the source of the received data · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• H04L9/3247 Primary

  involving digital signatures · CPC title

• H04L9/3242 Primary

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title