CN113094752B - A privacy protection method and system for automobile electronic identification - Google Patents

Abstract

The invention discloses a privacy protection method and a privacy protection system for an automobile electronic identifier, comprising the following steps: step 1: the road side identification unit acquires the electronic identification, encrypts the electronic identification through the security chip to acquire an encrypted identification, and generates a summary code according to the encrypted identification; step 2: transmitting the encrypted identifier, the abstract code and the unit identifier of the road side identification unit to a service platform; step 3: the service platform forwards the encrypted identifier, the abstract code and the unit identifier to the service platform; step 4: after verification and decryption, the service platform completes the payment process, or converts the electronic identifier into a fixed identifier and returns the fixed identifier to the service platform. The invention has the beneficial effects that: the security chip is arranged in the road side identification unit to generate different encryption identifications, so that an unauthorized third party is prevented from misusing the radio frequency device to collect user information, and user privacy is protected. And payment settlement and fixed identification tracking are carried out through the service platform, and normal operation of the service platform is ensured while no electronic identification is provided.

Description

A privacy protection method and system for automobile electronic identification

Technical Field

The present invention relates to the field of confidential communications, and in particular to a privacy protection method and system for automobile electronic identification.

Background technique

In recent years, radio frequency identification technology has been widely used in the field of automobile identification. It has the advantages of being less affected by the environment, fast identification speed, and high identification rate. Based on the above advantages, my country has formulated national standards for automobile electronic identification, promoted the localization and industrialization of ultra-high frequency RFID chips, and standardized and guided the application of automobile electronic identification in various places.

However, current automotive electronic identification generally uses the vehicle license plate number as the vehicle identification mark. Due to the inherent characteristics of RFID, it is very easy for third parties to set up external radio frequency devices on their own to obtain vehicle-related information, resulting in risks such as user privacy leakage and abuse of user data.

Summary of the invention

In view of the above problems existing in the prior art, a privacy protection method and system for automobile electronic identification are provided.

The specific technical solutions are as follows:

A privacy protection method for an automobile electronic identification, comprising:

Step S1: The roadside identification unit obtains the electronic identification of the vehicle through the radio frequency identification chip, encrypts the electronic identification of the vehicle through the security chip to obtain an encrypted identification, and generates a summary code according to the encrypted identification;

Step S2: the roadside identification unit sends the encrypted identifier, the summary code and the unit identifier of the roadside identification unit to a third-party service platform;

Step S3: the third-party service platform forwards the encrypted identifier, the summary code and the unit identifier to the automobile electronic identification service open platform;

Step S4: The automobile electronic identification service open platform receives the encrypted identification, the summary code and the unit identification forwarded by the third-party business platform, completes the payment process after verification and decryption, or converts the decrypted automobile electronic identification into a fixed identification and returns it to the third-party business platform.

Preferably, the encryption step comprises:

Step S11: Generate an encryption key and an integrity key according to the root key stored in the open platform for electronic vehicle identification services and the unit identifier of the roadside identification unit;

Step S12: Generate a random number;

Step S13: using the encryption key to encrypt the random number and the automobile electronic identification to generate the encrypted identification;

Step S14: Use the integrity key to perform a message digest on the encryption identifier to obtain the digest code.

Preferably, the verification and decryption steps of the automotive electronic identification service open platform include:

Step S41: Generate the same encryption key and integrity key through the root key and the unit identifier;

Step S42: Use the integrity key and the summary code to verify the encryption identifier to verify the message integrity;

Step S43: After the message integrity is verified, the encrypted identification is decrypted using the encryption key to obtain the vehicle electronic identification.

Preferably, the random number R changes automatically each time the roadside recognition unit acquires the vehicle electronic identification D.

Preferably, each time the third-party service platform obtains the same automobile electronic identification, it generates a different encrypted identification.

Preferably, after the automobile electronic identification service open platform performs review according to business requirements, the fixed identification returned to the third-party business platform is an identification summary generated based on the automobile electronic identification.

Preferably, the encryption key and the integrity key are set by the open platform for electronic vehicle identification services in a security chip of the roadside identification unit.

A privacy protection system for an electronic vehicle identification comprises: a roadside identification unit, the roadside identification unit having a security chip and a radio frequency identification chip, obtaining the electronic vehicle identification through the radio frequency identification chip, encrypting the electronic vehicle identification through the security chip to obtain the encrypted identification, and generating the summary code according to the encrypted identification; a third-party service platform, connected to the roadside identification unit, receiving and forwarding the encrypted identification and the summary code to an open platform for electronic vehicle identification services;

The automobile electronic identification service open platform is connected to the third-party business platform and an external payment gateway;

The automobile electronic identification service open platform receives the encrypted identification, the summary code and the unit identification forwarded by the third-party business platform, completes the payment process after verification and decryption, or converts the decrypted automobile electronic identification into a fixed identification and returns it to the third-party business platform.

Preferably, the encrypted identifier received by the third-party service platform is a random identifier.

Preferably, the third-party business platform identifies the user or performs the payment process through the automobile electronic identification service open platform.

The above technical solution has the following advantages or beneficial effects: a security chip is set in the roadside identification unit to generate different encrypted identifications, which prevents unauthorized third parties from abusing the radio frequency device to collect user information and protects user privacy. Payment settlement and fixed identification tracking are carried out through an automobile electronic identification service platform, which ensures the normal operation of the third-party business platform without providing the user's electronic identification.

BRIEF DESCRIPTION OF THE DRAWINGS

The embodiments of the present invention will be described more fully with reference to the attached drawings, which are only for illustration and description and are not intended to limit the scope of the present invention.

FIG1 is an overall schematic diagram of an embodiment of the present invention;

FIG2 is a schematic diagram of an encryption mechanism according to an embodiment of the present invention;

FIG3 is an encryption flow chart of an embodiment of the present invention;

FIG4 is a flow chart of verification and decryption according to an embodiment of the present invention;

FIG5 is a schematic diagram of a practical application of an embodiment of the present invention.

Detailed ways

The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

It should be noted that, in the absence of conflict, the embodiments of the present invention and the features in the embodiments may be combined with each other.

The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments, but they are not intended to limit the present invention.

The present invention includes a privacy protection method and system for automobile electronic identification, as shown in FIG1 , including:

Step S1: the roadside identification unit 102 obtains the vehicle electronic identification D (101) through radio frequency identification technology, encrypts the vehicle electronic identification D (101) through a security chip to obtain an encrypted identification S, and generates a summary code H according to the encrypted identification S;

Step S2: the roadside identification unit 102 sends the encrypted identifier S, the summary code H and the unit identifier RID of the roadside identification unit to the third-party service platform 103;

Step S3: the third-party service platform 103 forwards the encryption identifier S, the summary code H and the unit identifier RID to the automobile electronic identification service open platform 104;

Step S4: The automobile electronic identification service open platform 104 receives the encrypted identification S, summary code H and unit identification RID forwarded by the third-party business platform 103, and after verification and decryption, the payment process or converts the decrypted automobile electronic identification D (101) into a fixed identification and returns it to the third-party business platform.

Specifically, during the entire communication process, the third-party business platform only receives the encrypted identifier S, the summary code H, the unit identifier RID and the fixed identifier returned from the automobile electronic identification service open platform 104, and does not directly obtain the user's automobile electronic identification D (101). However, it can conduct business based on the fixed identifier, or make payment settlements through the automobile electronic identification service open platform 104, thereby ensuring the normal operation of the work while protecting the user's privacy.

Further, as shown in FIG. 2 , the security chip 205 in the roadside identification unit stores a root key 201.

In a preferred embodiment, as shown in FIG3 , the encryption step includes:

Step S11: Generate an encryption key CK based on the root key and unit identifier RID stored in the security chip

(202) and integrity IK (204);

Step S12: Generate a random number R;

Step S13: using the encryption key CK (202) to encrypt the random number R and the vehicle electronic identification D to generate an encrypted identification S;

Step S14: Use the integrity key IK (204) to perform a message digest on the encrypted identifier S to obtain a digest code H.

In a preferred embodiment, as shown in FIG4 , the verification and decryption steps of the open platform for automobile electronic identification services include:

Step S41: Generate the same encryption key CK (202) and integrity key IK (204) through the root key and the unit identifier RID;

Step S42: Use the integrity key IK (204) and the digest code H to verify the encryption identifier S to verify the message integrity;

Step S43: After the message integrity is verified, the encryption key CK (203) is used to encrypt the identifier S

Decrypt it and get the car electronic identification D.

In a preferred embodiment, the random number R automatically changes each time the roadside recognition unit acquires the vehicle electronic identification D.

In a preferred embodiment, the encryption identifier S is generated according to the national encryption algorithm SM2.

In a preferred embodiment, the summary code H is generated according to the national encryption algorithm SM3.

In a preferred embodiment, the encrypted identifier S obtained by the third-party service platform 103 each time is not a fixed value, that is, a different encrypted identifier S is generated each time the same automobile electronic identifier D is obtained.

In a preferred embodiment, the fixed identification returned by the automobile electronic identification service open platform 104 to the third-party business platform 103 is an identification summary generated based on the automobile electronic identification D.

Preferably, the encryption key CK and the integrity key IK are sent by the vehicle electronic identification service open platform 104 to the roadside identification unit 102 .

Furthermore, the encryption key CK and the integrity key IK are sent through the vehicle electronic identification service open platform 104, so that the roadside identification unit 102 does not need to calculate the encryption key CK and the integrity key IK locally, thereby reducing hardware investment.

A privacy protection system for automobile electronic identification, comprising:

A roadside identification unit 102, the roadside identification unit 102 is provided with a security chip 205 and a radio frequency identification chip, the vehicle electronic identification D is obtained through the radio frequency identification chip, and the vehicle electronic identification D is encrypted through the security chip 205 to obtain an encrypted identification S, and a summary code H is generated according to the encrypted identification S;

A third-party service platform 103, connected to the roadside identification unit 102, receives and forwards the encrypted identification S and the summary code H to an open automobile electronic identification service platform 104;

The automobile electronic identification service open platform 104 is connected to the third-party business platform 103 and an external payment gateway;

The automobile electronic identification service open platform 104 receives the encrypted identification S, summary code H and unit identification RID forwarded by the third-party business platform 103, completes the payment process after verification and decryption, or converts the decrypted automobile electronic identification D into a fixed identification and returns it to the third-party business platform 103.

Preferably, the encrypted identifier S received by the third-party service platform 103 is a random identifier.

Preferably, the third-party business platform 103 identifies the user or performs a payment process through the automobile electronic identification service open platform 104 .

Specifically, as shown in Figure 5, taking a gas station as an example, the roadside identification unit 102 detects the automobile electronic identification D and uploads the encrypted identification S, summary code H and unit identification RID to the gas station business platform. At the same time, the gas station information system records and uploads the fuel gun number and the refueling amount to the gas station business platform. The gas station business platform sends the refueling amount, encrypted identification S, summary code H, unit identification RID and deduction request to the automobile electronic identification service open platform. After the automobile electronic identification service open platform verifies and decrypts the encrypted identification S, it provides a deduction request to the payment gateway based on the decrypted automobile electronic identification D.

The above description is only a preferred embodiment of the present invention, and does not limit the implementation mode and protection scope of the present invention. For those skilled in the art, it should be aware that all solutions obtained by equivalent substitutions and obvious changes made using the description and illustrations of the present invention should be included in the protection scope of the present invention.

Claims (9)

1. A privacy protection method for automobile electronic identification, characterized by comprising: Step S1: The roadside identification unit obtains the electronic identification of the vehicle through the radio frequency identification chip, encrypts the electronic identification of the vehicle through the security chip to obtain an encrypted identification, and generates a summary code according to the encrypted identification; Step S2: the roadside identification unit sends the encrypted identifier, the summary code and the unit identifier of the roadside identification unit to a third-party service platform; Step S3: the third-party service platform forwards the encrypted identifier, the summary code and the unit identifier to the automobile electronic identification service open platform; Step S4: the automobile electronic identification service open platform receives the encrypted identification, the summary code and the unit identification forwarded by the third-party business platform, completes the payment process after verification and decryption, and converts the decrypted automobile electronic identification into a fixed identification and returns it to the third-party business platform; The third-party business platform provides business to the user corresponding to the automobile electronic identification according to the fixed identification; Each time the third-party service platform obtains the same automobile electronic identification, it generates a different encrypted identification. 2. The privacy protection method according to claim 1, characterized in that the encryption step of the roadside identification unit comprises: Step S11: generating an encryption key and an integrity key according to the root key stored in the automobile electronic identification service open platform and the unit identification; Step S12: Generate a random number; Step S13: using the encryption key to encrypt the random number and the automobile electronic identification to generate the encrypted identification; Step S14: Use the integrity key to perform a message digest on the encryption identifier to obtain the digest code. 3. The privacy protection method according to claim 2, characterized in that the verification and decryption steps of the automotive electronic identification service open platform include: Step S41: Generate the same encryption key and integrity key through the root key and the unit identifier; Step S42: Use the integrity key and the summary code to verify the encryption identifier to verify the message integrity; Step S43: After the message integrity is verified, the encrypted identifier is decrypted using the encryption key to obtain the vehicle electronic identifier. 4 . The privacy protection method according to claim 3 , wherein the random number is automatically changed each time the roadside recognition unit acquires the vehicle electronic identification. 5. The privacy protection method according to claim 1 is characterized in that the fixed identifier returned by the automobile electronic identifier service open platform to the third-party business platform is an identifier summary generated based on the automobile electronic identifier. 6. The privacy protection method according to claim 2 is characterized in that the encryption key and the integrity key are set by the automotive electronic identification service open platform in the security chip of the roadside identification unit. 7. A privacy protection system for an automobile electronic identification, characterized in that it is used to implement the privacy protection method for an automobile electronic identification according to any one of claims 1 to 6, specifically comprising: A roadside identification unit, the roadside identification unit is provided with a security chip and a radio frequency identification chip, the vehicle electronic identification is obtained through the radio frequency identification chip, the vehicle electronic identification is encrypted through the security chip to obtain the encrypted identification, and a summary code is generated according to the encrypted identification; a third-party service platform, connected to the roadside identification unit, receiving and forwarding the encrypted identification and the summary code to an open automobile electronic identification service platform; The automobile electronic identification service open platform is connected to the third-party business platform and an external payment gateway; The automobile electronic identification service open platform receives the encrypted identification, the summary code and the unit identification forwarded by the third-party business platform, completes the payment process after verification and decryption, and converts the decrypted automobile electronic identification into a fixed identification and returns it to the third-party business platform. 8. The privacy protection system according to claim 7 is characterized in that the third-party business platform identifies the user or performs the payment process through the automobile electronic identification service open platform. 9. The privacy protection system according to claim 7, characterized in that the encrypted identifier received by the third-party business platform is a random identifier.