Method and system for issuing CSR certificate for vehicle-to-anything communication

Patent metadata

Field	Value
Publication number	US-9525556-B2
Application number	US-201414570912-A
Country	US
Kind code	B2
Filing date	Dec 15, 2014
Priority date	Sep 24, 2014
Publication date	Dec 20, 2016
Grant date	Dec 20, 2016

Abstract

A method for issuing a certificate signing request (CSR) certificate in a vehicle-to-anything (V2X) communication environment includes: receiving, at a first server, a certificate issuance request message including vehicle identification information transmitted from a communication module of the vehicle; determining, by a second server, whether a CSR certificate corresponding to the vehicle identification information has already been issued with reference to a database; and determining, by the second server, whether to issue the corresponding CSR certificate or whether to generate an error message, based on the determination of whether the corresponding CSR certificate has already been issued.

First claim

What is claimed is:

1. A certificate issuing method for issuing a certificate signing request (CSR) certificate to a vehicle for vehicle-to-anything (V2X) communication in a network, the certificate issuing method comprising:
receiving, at a first server, a certificate issuance request message including vehicle identification information transmitted from a communication module of the vehicle;
determining, by a second server, whether a CSR certificate corresponding to the vehicle identification information has already been issued with reference to a database;
issuing, by the second server, the corresponding CSR certificate or generating an error message, based on the determination of whether the corresponding CSR certificate has already been issued;
transmitting, by the second server, corresponding error notification information based on the error message to a previously registered e-mail address or mobile communication terminal number of a user via e-mail or short message service (SMS);
discarding, by the second server, the corresponding CSR certificate, which has already been issued, from the database, in response to a discard request from the user through a vehicle management system in the network, based on the error notification information; and
reissuing, by the second server, the corresponding CSR certificate according to the certificate issuance request message after discarding the corresponding CSR certificate.

2. The certificate issuing method according to claim 1 , wherein the communication module of the vehicle is a module supporting wireless access in vehicular environment (WAVE) communication.

3. The certificate issuing method according to claim 1 , wherein the first server is a registration authority (RA) server operated in a registration agency for relaying certification registration, and the second server is a certificate authority (CA) server of a certification agency for generating, issuing, and managing a certificate.

4. The certificate issuing method according to claim 1 , wherein the communication module of the vehicle i) receives the CSR certificate issued by the second server, ii) stores and manages the received CSR certificate in a memory according to a certificate management entity (CME) standard, and iii) uses the CSR certificate to request issuance of an anonymous certificate in the V2X communication.

5. The certificate issuing method according to claim 1 , wherein the determining of whether the corresponding CSR certificate has already been issued further comprises:
i) requesting a vehicle management system, which stores and manages identification information of each vehicle in the network, to verify whether the vehicle identification information is valid, before issuance of the CSR certificate, ii) receiving a corresponding verification result, and iii) when the verification is successful, issuing the CSR certificate.

6. The certificate issuing method according to claim 1 , wherein the determining of whether the corresponding CSR certificate has already been issued further comprises:
storing monitoring log information regarding the corresponding CSR certificate already issued to correspond to the vehicle identification information in the database and managing the same, before the error message is generated,
wherein a checking service of the corresponding monitoring log information is provided in response to a request through a vehicle management system in the network.

7. A certificate issuing system for issuing a certificate signing request (CSR) certificate to a vehicle for vehicle-to-anything (V2X) communication in a network, the certificate issuing system comprising:
a plurality of processors configured to control an operation of the certificate issuing system;
a certificate issuer embodied on one or more of the plurality of processors configured to: i) receive vehicle identification information transmitted from a communication module of the vehicle, ii) determine whether a CSR certificate corresponding to the received vehicle identification information has already been issued with reference to a database, and iii) issue the corresponding CSR certificate when there is no corresponding CSR certificate that has already been issued;
an error transmitter embodied on one or more of the plurality of processors configured to generate an error message when there is a corresponding CSR certificate that has already been issued;
an error processor embodied on one or more of the plurality of processors configured to transmit corresponding error notification information based on the error message transmitted from the error transmitter, to a previously registered e-mail address or mobile communication terminal number of a user via e-mail or short message service (SMS); and
a certificate discarding unit embodied on one or more of the plurality of processors configured to discard the corresponding CSR certificate, which has already been issued, from the database, in response to a discard request from the user through a vehicle management system in the network, based on the error notification information,
wherein the certificate issuer is further configured to reissue the corresponding CSR certificate according to a certificate issuance request message after discarding the corresponding CSR certificate.

8. The certificate issuing system according to claim 7 , wherein the communication module of the vehicle is a module supporting wireless access in vehicular environment (WAVE) communication.

9. The certificate issuing system according to claim 7 , further comprising:
a registration authority (RA) server operated in a registration agency for relaying certificate registration; and
a certificate authority (CA) server operated in a certification agency for generating, issuing, and managing a certificate, wherein
the RA server includes the error processor and a certificate processor configured to transmit the vehicle identification information transmitted by the communication module of the vehicle to the CA server and to transmit the CSR certificate issued by the CA server to the communication module of the vehicle, and
the CA server includes the certificate issuer, the error transmitter, and the certificate discarding unit.

10. The certificate issuing system according to claim 9 , wherein the CSR certificate received by the communication module of the vehicle through the RA server is stored and managed in a memory according to a certificate management entity (CME) standard, and used to request issuance of an anonymous certificate in the vehicle-to-anything (V2X) communication.

11. The certificate issuing system according to claim 7 , wherein, before issuing the CSR certificate, the certificate issuer i) requests a vehicle management system, in the network, which stores and manages identification information regarding each vehicle to verify whether the vehicle identification information is valid, ii) receives a corresponding verification result, and iii) when the verification is successful, the certificate issuer issues the CSR certificate.

12. The certificate issuing system according to claim 7 , wherein, before generating the error message, the error transmitter stores and manages monitoring log information regarding the corresponding CSR certificate which has already been issued to correspond to the vehicle identification information in the database, and a checking service of the corresponding monitoring log information is provided in response to a request through the vehicle management system in the network.

13. A non-transitory computer readable medium containing program instructions executable by at least one processor for issuing a

Assignees

• Hyundai Motor Co Ltd
• Penta Security System Inc

Inventors

• Park Jong Rok
• Ryu Cho Rong
• Hwang Dae Sung
• Sung Su Lyun
• Noh Dong Gyu
• Noh Hahk Rel
• Kim Duk Soo
• Sim Sang Gyoo
• Shin Eun Ho
• Kim Jung Bai
• Kim Byung Gwan
• Lee Seok Woo
• Lee You Sik

Classifications

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04W12/06

  Authentication · CPC title

• H04L2209/84

  Vehicles · CPC title

• H04L9/32 Primary

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title