METHOD AND APPARATUS FOR MANAGING ENROLLMENT CERTIFICATE IN SECURITY CREDENTIAL MANAGEMENT SYSTEM FOR V2X COMMUNICATION BY RELAYING BETWEEN ECA AND DCM

• Main Authors: SEO SANG-WON, RI AME, KIN GISHAKU, KIM DUK-SOO, LEE JONG-KOOG, SIM SANG GYOO, LEE SEUNG-HOON, KI JEONG EUN, KIM JUNG OOK, KO DONG HOON
• Format: Patent
• Language: English; Japanese
• Published: 04.06.2020
• Subjects: ELECTRIC COMMUNICATION TECHNIQUE; ELECTRICITY; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

To provide a method for enhancing security and smoothly performing a certification procedure, in a security credential management system for V2X communication proposed in the IEEE 1609.2.SOLUTION: A device (ERA) for managing an enrollment certificate by relaying between an ECA and a DCM performs a procedure including the steps of: receiving a message requesting an authority for generating a CSR from a DCM; updating device certification data through a certification laboratory that manages performance and requirements of an end entity, and verifying the end entity that requests issuance of an enrollment certificate to the DCM by using the updated device certification data; transmitting response data indicating the authority for generating a CSR to the DCM based on a result of the verification; receiving, from the DCM, a CSR generated according to the response data by the DCM; and verifying the received CSR, and requesting response data for the CSR to an ECA based on a result of the verification.SELECTED DRAWING: Figure 5 【課題】ＩＥＥＥ１６０９．２で提案されたＶ２Ｘ通信のためのセキュリティ認証管理システムにおいて、セキュリティをさらに強化し、認証手続きを円滑に遂行できる方法を提供する。【解決手段】ＥＣＡとＤＣＭ間を中継して登録証明書を管理するための装置（ＥＲＡ）は、ＤＣＭからＣＳＲを生成できる権限を要請するメッセージを受信する段階、末端機器の性能と要求事項を管理する認証ラボラトリーを通じて装置認証データを更新し、更新した装置認証データを利用してＤＣＭに登録証明書の発給を要請した末端機器を検証する段階、検証結果に基づいてＤＣＭにＣＳＲを生成できる権限を示す応答データを伝送する段階、ＤＣＭで応答データによって生成されたＣＳＲを、ＤＣＭから受信する段階、および受信したＣＳＲを検証し、検証結果に基づいてＥＣＡにＣＳＲに対する応答データを要請する段階を含む手続きを遂行する。【選択図】図５