WO2018218535A1 - 一种信息处理方法、装置及系统 - Google Patents

一种信息处理方法、装置及系统 Download PDF

Info

Publication number
WO2018218535A1
WO2018218535A1 PCT/CN2017/086673 CN2017086673W WO2018218535A1 WO 2018218535 A1 WO2018218535 A1 WO 2018218535A1 CN 2017086673 W CN2017086673 W CN 2017086673W WO 2018218535 A1 WO2018218535 A1 WO 2018218535A1
Authority
WO
WIPO (PCT)
Prior art keywords
information
user equipment
status information
user
type
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2017/086673
Other languages
English (en)
French (fr)
Inventor
肖飞龙
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to PCT/CN2017/086673 priority Critical patent/WO2018218535A1/zh
Priority to CN201780090438.5A priority patent/CN110603797A/zh
Priority to EP17911671.0A priority patent/EP3624472A4/en
Publication of WO2018218535A1 publication Critical patent/WO2018218535A1/zh
Priority to US16/696,861 priority patent/US20200099705A1/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60—Context-dependent security
    • H04W12/63—Location-dependent; Proximity-dependent
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/12—Applying verification of the received information
    • H04L63/123—Applying verification of the received information received data contents, e.g. message integrity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
    • H04L9/3268—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/10—Integrity
    • H04W12/108—Source integrity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/121—Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
    • H04W12/122—Counter-measures against attacks; Protection against rogue devices
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/30—Services specially adapted for particular environments, situations or purposes
    • H04W4/40—Services specially adapted for particular environments, situations or purposes for vehicles, e.g. vehicle-to-pedestrians [V2P]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/84—Vehicles

Definitions

  • the embodiments of the present invention relate to the field of communications technologies, and in particular, to an information processing method, apparatus, and system.
  • V2X Vehicle-to-vehicle
  • V2I Vehicle-to-Infrastructure
  • V2P Vehicles and Pedestrians
  • V2X communication can achieve road safety, improve traffic efficiency, and provide users with rich streaming services.
  • a vehicle (vehicle 1) is hacked and continuously sent to the outside world.
  • Hazard information such as emergency braking or vehicle out of control makes the surrounding vehicles or pedestrians take evasive or other measures because of malicious information, thereby affecting the normal traffic order, and even causing traffic accidents, causing traffic loss or embarrassment.
  • no specific solution has been given for how to avoid traffic safety problems caused by malicious information in a V2X communication scenario.
  • the embodiments of the present application provide an information processing method, apparatus, and system, which solve the traffic security problem caused by malicious information in the existing V2X communication scenario.
  • the first aspect provides an information processing method, where the method includes: the first device acquires V2X information of the user equipment; the first device verifies the V2X information, and if the V2X information fails to pass, the first device goes to the second device.
  • the device sends status information, where the status information is used to indicate the verification result of the V2X information by the first device.
  • the first device obtains the V2X information of the user equipment, and verifies the V2X information. If the V2X information verification fails, the first device sends the status information to the second device, so that the second device performs the status information according to the status information.
  • the user equipment performs monitoring and processing to avoid malicious users or hacked zombie users sending malicious information through the user equipment, thereby solving the traffic safety problem caused by sending malicious V2X information, thereby ensuring normal traffic. Order has improved the safety of traffic.
  • the V2X information includes at least one of the following information: a user equipment identifier, a user certificate, a user signature, and a message type.
  • a user equipment identifier e.g., a user equipment identifier
  • a user certificate e.g., a user certificate
  • a user signature e.g., a user signature
  • a message type e.g., a message type that specifies the security of the V2X information.
  • the first device is configured to verify the V2X information, including: if the V2X information includes a user certificate, the first device The user certificate is verified. If the user certificate is invalid, it is determined that the V2X information verification fails; and/or, if the V2X information includes the user signature, the first device verifies the user signature, and if the user signature is incorrect, And determining that the V2X information verification fails; and/or, if the V2X information includes a message type, the first device verifies the message type, and if the message type belongs to the preset message type, determining that the V2X information verification fails.
  • the security of the V2X information of the user equipment is determined by verifying the user certificate, and/or the user signature, and/or the message type included in the V2X information.
  • the status information further includes a report type, the report type is a preset report type, and the preset report type includes a certificate error.
  • the signature error and the emergency special information before the first device sends the status information to the second device, the method further includes: if the user certificate is invalid, the first device determines the report type in the status information as a certificate error; if the user signature is incorrect The first device determines the report type in the status information as a signature error; if the message type is the preset message type, the first device determines the report type in the status information as emergency special information.
  • the user certificate, and/or the user signature, and/or the message type included in the V2X information are verified to determine a report type in the status information, so that the second device performs the corresponding report type.
  • Monitoring and processing thereby improving the targeting of monitoring and processing, ensuring normal traffic order, and improving traffic safety.
  • the status information further includes at least one of the following information One: message type, location information of user equipment, detection time.
  • the second device can perform monitoring processing according to different information included in the status information, thereby improving the targeting of the monitoring process, ensuring normal traffic order, and improving traffic. safety.
  • the second aspect provides an information processing method, where the method includes: receiving, by the second device, status information sent by the first device, where the status information is used to indicate a verification result of the V2X information of the user equipment by the first device; The device performs monitoring processing on the user equipment according to the status information.
  • the second device may perform monitoring processing on the user device according to the status information, thereby avoiding malicious users or hacked zombie users and the like.
  • the device sends malicious information, which solves the traffic safety problem caused by sending malicious V2X information, thereby ensuring normal traffic order and improving traffic safety.
  • the status information further includes at least one of the following information: a user equipment identifier, a report type, a message type, a location information of the user equipment, and a detection time.
  • the report type is a preset report type, and the preset report type includes a certificate error, a signature error, and emergency special information.
  • the method further includes: if the statistic information corresponding to the user equipment identifier exists, the second device updates the statistic information corresponding to the user equipment identifier according to the status information; if the statistic information corresponding to the user equipment identifier does not exist, the second device adds the user equipment according to the status information. Identifies the corresponding statistics.
  • the second device may perform statistical analysis on the received status information, so as to perform judgment according to the statistical information corresponding to the user equipment identifier, so as to improve the rationality and accuracy of monitoring and processing the user equipment.
  • the second device performs monitoring processing on the user equipment according to the status information, including: if the reporting type is a certificate error Or the signature is incorrect, the second device sends the alarm information to the user equipment; or, if the report type is the emergency special information, the second device determines whether the statistical information corresponding to the user equipment identifier meets the preset alarm condition, and if the preset alarm condition is met, Send an alarm message to the user equipment.
  • the second device may perform different monitoring processing on the user equipment according to the reporting type included in the status information, thereby improving the rationality and accuracy of monitoring and processing the user equipment, thereby ensuring normal traffic order. Improve the safety of traffic.
  • the preset alarm condition is one of the following: the number of times the user equipment is reported within the specified time length meets the A preset threshold, the number of times the user equipment is reported in the specified area meets a second preset threshold.
  • the third aspect provides a device, where the device is a first device, including: a receiving unit, configured to acquire V2X information of the user equipment; a processing unit, configured to verify the V2X information; and a sending unit, if the V2X If the information verification fails, the status information is sent to the second device, where the status information is used to indicate the verification result of the V2X information by the first device.
  • a receiving unit configured to acquire V2X information of the user equipment
  • a processing unit configured to verify the V2X information
  • a sending unit if the V2X If the information verification fails, the status information is sent to the second device, where the status information is used to indicate the verification result of the V2X information by the first device.
  • the V2X information includes at least one of the following information: a user equipment identifier, a user certificate, a user signature, and a message type.
  • the processing unit is specifically configured to: if the V2X information includes a user certificate, verify the user certificate, if the user certificate If it is not legal, it is determined that the V2X information verification fails; and/or, if the V2X information includes a user signature, the user signature is verified, and if the user signature is incorrect, it is determined that the V2X information verification fails; and/or, if the V2X The information includes the message type, and the message type is verified. If the message type belongs to the preset message type, it is determined that the V2X information verification fails.
  • the status information further includes a report type, the report type is a preset report type, and the preset report type includes a certificate error.
  • the processing unit is further configured to: if the user certificate is invalid, determine the report type in the status information as a certificate error; if the user signature is incorrect, determine the report type in the status information as a signature error. If the message type is the preset message type, the report type in the status information is determined as emergency special information.
  • the status information further includes at least the following information One: message type, location information of user equipment, detection time.
  • the fourth aspect provides a device, where the device is a second device, including: a receiving unit, configured to receive status information sent by the first device, where the status information is used to indicate V2X information of the first device to the user device
  • the verification unit is configured to perform monitoring processing on the user equipment according to the status information.
  • the status information further includes At least one of the following information: the user equipment identifier, the report type, the message type, the location information of the user equipment, and the detection time.
  • the report type is a preset report type, and the preset report type includes a certificate error, a signature error, and an emergency special. information.
  • the processing unit is further configured to: if the user equipment identifier is corresponding to the statistics The information is updated according to the status information, and the statistical information corresponding to the user equipment identifier is added. If the statistical information corresponding to the user equipment identifier does not exist, the statistical information corresponding to the user equipment identifier is added according to the status information.
  • the processing unit is configured to: send the alarm information to the user equipment if the reporting type is a certificate error or a signature error; Or, if the reporting type is emergency special information, it is determined whether the statistical information corresponding to the user equipment identifier meets the preset alarm condition, and if the preset alarm condition is met, the alarm information is sent to the user equipment.
  • the preset alarm condition is one of the following: the number of times the user equipment is reported within the specified time length meets the A preset threshold, the number of times the user equipment is reported in the specified area meets a second preset threshold.
  • a device in a fifth aspect, is provided, the device being a first device, comprising a processor and a memory, wherein the code stores data and data, and the processor runs the code in the memory to cause the device to perform the first aspect to the first aspect
  • An information processing method provided by any of the four possible implementations.
  • a device in a sixth aspect, is provided, the device being a second device, comprising a processor and a memory, the code storing the code and the data, and the processor running the code in the memory to cause the device to perform the second aspect to the second aspect
  • An information processing method provided by any of the four possible implementations.
  • a seventh aspect a system is provided, the system includes a user equipment, a first device, and a second device, where the first device is a base station and/or a roadside unit; wherein the first device is the foregoing third aspect, the third aspect Any of the possible implementations, or the apparatus provided by the fifth aspect; and/or the second device is the fourth aspect, the possible implementation of the fourth aspect, or the sixth aspect device.
  • Yet another aspect of the present application provides a computer readable storage medium having stored therein instructions that, when executed on a computer, cause the computer to perform the information processing methods provided by the various aspects described above.
  • Yet another aspect of the present application provides a computer program product comprising instructions that, when run on a computer, cause the computer to perform the information processing methods provided by the various aspects described above.
  • FIG. 1 is a schematic diagram of sending malicious information in a V2X communication scenario
  • FIG. 2 is a system architecture diagram of a communication according to an embodiment of the present application.
  • FIG. 3 is a schematic structural diagram of a user equipment/roadside unit according to an embodiment of the present disclosure
  • FIG. 4 is a schematic structural diagram of a base station according to an embodiment of the present disclosure.
  • FIG. 5 is a schematic structural diagram of a server according to an embodiment of the present application.
  • FIG. 6 is a flowchart of an information processing method according to an embodiment of the present application.
  • FIG. 7 is a structural diagram of state information provided by an embodiment of the present application.
  • FIG. 8 is a flowchart of another information processing method according to an embodiment of the present application.
  • FIG. 9 is a schematic structural diagram of a first device according to an embodiment of the present disclosure.
  • FIG. 10 is a schematic structural diagram of another first device according to an embodiment of the present disclosure.
  • FIG. 11 is a schematic structural diagram of a second device according to an embodiment of the present disclosure.
  • FIG. 12 is a schematic structural diagram of another second device according to an embodiment of the present disclosure.
  • GSM Global System for Mobile Communication
  • CDMA Code Division Multiple Access
  • Wide-band Code Division Multiple Access Wide-band Code Division Multiple Access
  • LTE Long Term Evolution
  • 5G communication fifth-generation 5G communication system
  • future mobile communication systems future mobile communication systems.
  • the system architecture applied in the embodiment of the present application is as shown in FIG. 2, and the system architecture may include a User Equipment (UE) 101, a base station 102, a Road Side Unit (RSU) 103, and a server 104.
  • the user equipment 101 involved in the present application may include various handheld devices, in-vehicle devices, wearable devices or computing devices having wireless communication functions, and various forms of user equipment, terminals, and terminal equipment (Terminal Equipment). , Vehicle User Equipment (V_UE) and so on.
  • V_UE Vehicle User Equipment
  • the devices mentioned above are collectively referred to as user equipments or UEs.
  • the base station to which the present application relates is a device deployed in a radio access network for providing wireless communication functions to a UE.
  • the base station may include various forms of macro base stations, micro base stations, relay stations, access points, and the like.
  • the names of devices with base station functions may be different, for example, in an LTE network, called an evolved NodeB (eNB or eNodeB), in the third generation.
  • eNB evolved NodeB
  • 3G network it is called a Node B and so on.
  • eNB evolved NodeB
  • the above devices for providing wireless communication functions to the UE are collectively referred to as a base station.
  • the roadside unit 103 involved in the present application is a device installed on the road side for communicating with the user equipment 101, realizing the identity recognition of the user equipment, electronic deduction, and establishing a fast dedicated lane.
  • the server 104 may include various devices having service functions, and may be generally classified into a file server, a database server, an application server, and the like.
  • a computer or a computer system having a service function is collectively referred to as a server in the present application.
  • the user equipment 101 is a car-linked user equipment V_UE and includes V_UE A and V_UE B as an example.
  • V_UE A can exchange information with V_UE B.
  • the base station 102 can allocate the transmission resources used by the user equipment 101 when the information is exchanged, and communicate with the user equipment 101 and the server 104.
  • the server 104 can collect information of vehicles, roads, and environments based on communication with the base station 102 and the roadside unit 103 to manage and control the user equipment 101.
  • IOV Internet of Vehicle
  • vehicle networking refers to interaction between a vehicle and a vehicle, a vehicle and a road, a vehicle and a person, a vehicle, and a sensing device.
  • a dynamic mobile communication system in which a vehicle communicates with a public network. It can share information through vehicles and vehicles, vehicles and people, vehicles and roads, collect information on vehicles, roads and environment, and process, calculate, share and securely publish information collected from multiple sources on the information network platform. According to different functional requirements, the vehicle is effectively guided and supervised, and professional multimedia and mobile internet application services are provided.
  • FIG. 3 is a schematic structural diagram of a user equipment/roadside unit according to an embodiment of the present disclosure.
  • the user equipment/roadside unit means that the equipment may be a user equipment or a roadside unit. It may include components such as a memory, a processor, a radio frequency (RF) circuit, an input unit, and a display unit.
  • the memory can be used to store software programs and modules, and the processor executes various functional applications and data processing of the user equipment or the roadside unit by running software programs and modules stored in the memory.
  • the processor is the control center of the device, which connects various parts of the entire device using various interfaces and lines, executes the device by running or executing software programs and/or modules stored in the memory, and calling data stored in the memory.
  • the RF circuit can be used for signal reception and transmission; typically, the RF circuit includes, but is not limited to, an antenna, at least one amplifier, a transceiver, a coupler, a Low Noise Amplifier (LNA), a duplexer, and the like.
  • the input unit can be used to receive input data of the user; the display unit can be a display panel for providing a display function.
  • the device may further include a sensor module, an audio module, a Bluetooth module, and the like, and details are not described herein.
  • FIG. 4 is a schematic structural diagram of a base station according to an embodiment of the present application.
  • the base station includes a baseband subsystem, a medium radio frequency subsystem, an antenna feed subsystem, and some supporting structures (for example, a whole subsystem), wherein the baseband subsystem is used to implement operation and maintenance of the entire base station, and implement signaling processing.
  • the principle of radio resources, the transmission interface to the packet core network, realizes the LTE physical layer, the medium access control layer, the L3 signaling, the operation and maintenance main control function; the middle RF subsystem realizes the conversion between the baseband signal, the intermediate frequency signal and the radio frequency signal
  • the LTE wireless receiving signal is demodulated and the modulation and power amplification of the transmitting signal are implemented;
  • the antenna feeder subsystem comprises an antenna and a feeder connected to the base station radio frequency module and an antenna and a feeder of the GRS receiving card, which are used for receiving the wireless air interface signal and Transmit;
  • the whole subsystem is the supporting part of the baseband subsystem and the intermediate frequency subsystem, providing structure, power supply and environmental monitoring functions.
  • FIG. 5 is a schematic structural diagram of a server according to an embodiment of the present disclosure.
  • the server includes a memory, a processor, a system bus, a power component, an input/output interface, and a communication component.
  • the memory can be used for storing data, software programs and modules, and mainly includes a storage program area and a storage data area, the storage program area can store an operating system, an application required for at least one function, and the like, and the storage data area can store the use of the server. Created data, etc.
  • the processor performs various functions of the server and processes the data by running or executing software programs and/or modules stored in the memory, as well as invoking data stored in the memory.
  • the system bus includes an address bus, a data bus, a control bus for transmitting data and instructions, a power component for providing power to various components of the server, an input/output interface for providing an interface between the processor and the peripheral interface module, and a communication component for the communication component. For wired or wireless communication between the server and other devices.
  • the user equipment/roadside unit, the base station, and the server shown in FIG. 3 to FIG. 5 above are not limited thereto.
  • the user equipment/roadside unit, base station, and server may include more or fewer components than illustrated, or some components may be combined, or different component arrangements.
  • FIG. 6 is a flowchart of an information processing method according to an embodiment of the present application.
  • the method includes the following steps.
  • Step 201 The first device acquires V2X information of the user equipment.
  • the first device may be a base station or a roadside unit, and the V2X information of the user equipment refers to information sent by the user equipment to the outside world, and the V2X information may be a vehicle-to-vehicle (V2V), a vehicle and an infrastructure. (Vehicle-to-Infrastructure, V2I), or information between Vehicle-to-Pedestrian (V2P).
  • V2V vehicle-to-vehicle
  • V2I Vehicle-to-Infrastructure
  • V2P Vehicle-to-Pedestrian
  • the first device may obtain the V2X information of the user equipment.
  • Step 202 The first device verifies the V2X information.
  • the first device may verify the V2X information to determine whether the V2X information is security information; if the verification succeeds, the V2X information is a security information, if the verification is not By passing the V2X information may be unsafe information. Specifically, when the first device determines that the V2X information verification fails, the V2X information may be unsafe information, so that the first device may determine the status information of the user equipment according to the verification result.
  • the first device determines that the V2X information is verified to pass, it indicates that the V2X information is security information, so that the first device does not need to determine the status information of the user equipment, that is, when the first device determines that the V2X information is secure information, A device does not require any processing.
  • the V2X information may include one or more of a user equipment identifier, a user certificate, a user signature, and a message type.
  • a user certificate is a certificate used to indicate the legality of the user identity of the user equipment.
  • the user certificate may be a certificate issued by an authority, such as a certificate authority (CA) center.
  • a user signature refers to a signature used to indicate the identity of a user of a user device, which may be a digital signature.
  • the message type is used to indicate the type of the V2X information.
  • the type of V2X information sent by the special vehicle such as the ambulance or the fire-fighting vehicle for the surrounding vehicle to evade may be a special message, a V2X sent by the runaway vehicle or the like for notifying the surrounding vehicle.
  • the type of information can be an emergency message.
  • the first device may further determine status information of the user equipment, where the status information may be used to indicate a verification result of the V2X information by the first device.
  • the status information includes a user equipment identifier, where the user equipment identifier is used to uniquely identify the user equipment.
  • the user equipment identifier may be an identifier code, a sequence code, or a user identifier of the user equipment. This embodiment of the present application does not limit this.
  • the status information may further include a report type, and the report type belongs to a preset report type, and the preset report type includes a certificate error, a signature error, and emergency special information.
  • the certificate error refers to the type of report when the first device spoofs the V2X information when the user certificate is invalid.
  • the signature error refers to the incorrect signature of the user when the V2X information is verified by the first device.
  • the type of the report is the type of report when the type of the message included in the V2X information is the default message type.
  • the preset message type may be set in advance. For example, the preset message type may include an emergency message and a special message.
  • the first device may verify the user certificate. If the user certificate is invalid, the first device may determine that the V2X message verification fails, so that the first device may determine the user.
  • the report type in the status information of the device is a certificate error.
  • the V2X information includes the user signature
  • the first device may verify the user signature. If the user signature is incorrect, the first device may determine that the V2X message verification fails, so that the first device may determine the user equipment.
  • the report type in the status information is a signature error.
  • the V2X information includes a message type
  • the first device may verify the message type. If the message type belongs to the preset message type, the first device may determine that the V2X message verification fails, so that the first device may The report type in the status information of the user equipment is determined to be emergency special information.
  • the first device may separately verify each item included in the V2X information, if one of the If the item verification fails, it can be determined that the V2X information verification fails.
  • the first device may perform verification according to a preset sequence. For example, the first device may separately verify each item according to the user certificate, the user signature, and the message type. In the actual application, the preset order may also be other sequences, which is not specifically limited in the embodiment of the present application.
  • the status information may further include at least one of the following information: a message type, location information of the user equipment, and detection time.
  • the location information of the user equipment may be geographic information, for example, the geographic information may be latitude and longitude information.
  • the detection time refers to the time when the first device acquires the V2X information.
  • the message type is the same as the type of the message included in the V2X information, and is not described here.
  • the status information may also include other information, such as other information, such as the speed and direction of the vehicle.
  • other information such as the speed and direction of the vehicle.
  • the structure of the status information may be as shown in FIG.
  • the order of the information items shown in FIG. 7 is merely exemplary and does not constitute a limitation on the structure of the state information in the embodiment of the present application.
  • Step 203 If the V2X information verification fails, the first device sends status information to the second device, where the status information is used by the second device to perform monitoring processing on the user equipment.
  • the second device may be a server.
  • the first device may send status information including the user equipment identifier to the second device, so that the second device is in accordance with the status. The information is monitored and processed by the user equipment.
  • Step 204 The second device receives the status information sent by the first device, where the status information is used to indicate the verification result of the V2X information by the first device.
  • Step 205 The second device performs monitoring processing on the user equipment according to the status information.
  • the second device When the second device receives the status information sent by the first device, the second device may perform monitoring processing on the user device according to the status information, thereby preventing malicious users or hacked zombie users from sending through the user equipment.
  • the behavior of malicious information solves the traffic safety problem caused by sending malicious V2X information, thereby ensuring normal traffic order and improving traffic safety.
  • the method may further include: step 204a or step 204b.
  • Step 204a If the statistical information corresponding to the user equipment identifier exists, the second device updates the statistical information corresponding to the user equipment identifier according to the status information.
  • the statistical information is obtained by the second device according to the statistical analysis of the status information of the user equipment reported by the first device, and the second device may periodically analyze the status information of the user equipment received within the specified time length, or Statistically analyze the status information of the user equipment received in the specified area.
  • the statistics may include the number and frequency of the user equipment being reported, and the statistics of the information included in the status information of the second device.
  • the statistics information may also include the report type, the detection time, and the location information of the user equipment.
  • the statistical information corresponding to the user equipment identifier refers to the statistical information of the user equipment indicated by the user equipment identifier.
  • the statistical information in the second device may be as shown in Table 1 below.
  • the statistical information of each user equipment in Table 1 includes the reported times, detection time, and each check of the user equipment within a specified time length ⁇ T.
  • the position information (detection time: position information) corresponding to the measurement time will be described as an example. If the user equipment identifier in the status information received by the second device is ID1, the detection time is T13, and the location information of the user equipment is P13, the second device determines that the statistical information corresponding to the ID1 exists according to the following Table 1, so according to the status The information is updated with the statistical information corresponding to ID1, and the statistical information shown in Table 2 below is obtained.
  • Step 204b If the statistical information corresponding to the user equipment identifier does not exist, the second device adds the statistical information corresponding to the user equipment identifier according to the status information.
  • the second device can add the statistic information corresponding to the user equipment identifier according to the status information.
  • the statistical information is as shown in Table 1 above. If the user equipment identifier in the status information received by the second device is ID3, the detection time is T31, and the location information of the user equipment is P31, the second device determines according to Table 1 above. The statistical information corresponding to ID3 exists, and the statistical information corresponding to ID3 is added according to the status information, and the statistical information shown in Table 3 below is obtained.
  • the second device performs monitoring processing on the user equipment according to the status information, which may be: if the status information is If the report type is a certificate error or a signature error, the second device sends the alarm information to the user equipment; or if the report type in the status information is emergency special information, the second device determines whether the statistical information corresponding to the user equipment identifier is met.
  • the preset alarm condition is sent to the user equipment if the preset alarm condition is met.
  • the preset alarm condition can be set in advance.
  • the preset alarm condition may be one of the following conditions: the number of times the user equipment is reported in the specified time length meets the first preset threshold, and the number of times the user equipment is reported in the specified area meets the second preset threshold.
  • the specified time length and the designated area may be set in advance.
  • the specified time length may be a unit time
  • the designated area may be an area of a specified area, and the like, which is not specifically limited in this embodiment of the present application.
  • the first preset threshold and the second preset threshold may also be set in advance, and the embodiment of the present application also does not specifically limit the same.
  • the second device after the second device sends the alarm information to the user equipment, if the second device still receives the status information of the user equipment sent by the first device, the location information of the user equipment in the status information, and the vehicle may be used.
  • Other information such as speed and direction predicts the behavior of the user equipment, and performs on-site inspection processing according to the predicted result, so as to prevent malicious users or hacked zombie users from transmitting malicious information through the user equipment.
  • the first device verifies the V2X information by acquiring the V2X information of the user equipment, and if the V2X information verification fails, sending the status information to the second device, and
  • the status information monitors and processes the user equipment, which avoids the malicious user or the hacked zombie user sending malicious information through the user equipment, thereby solving the traffic safety problem caused by sending malicious V2X information, thereby ensuring the security problem.
  • Normal traffic order improves traffic safety.
  • each network element such as the first device and the second device, etc., in order to implement the above functions, includes corresponding hardware structures and/or software modules for performing the respective functions.
  • the present application can be implemented in a combination of hardware or hardware and computer software in conjunction with the apparatus and algorithm steps of the various examples described in the embodiments disclosed herein. Whether a function is implemented in hardware or computer software to drive hardware depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods to implement the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present application.
  • the embodiment of the present application may divide the function module by using the first device and the second device according to the foregoing method example.
  • each function module may be divided according to each function, or two or more functions may be integrated into one process.
  • the above integrated modules can be implemented in the form of hardware or in the form of software functional modules. It should be noted that the division of the module in the embodiment of the present application is schematic, and is only a logical function division, and the actual implementation may have another division manner.
  • FIG. 9 shows the above-mentioned embodiments.
  • the first device 300 includes: a receiving unit 301, a processing unit 302, and a sending unit 303.
  • the receiving unit 301 is configured to perform step 201 in FIG. 6 or FIG. 8;
  • the processing unit 302 is configured to perform step 202 in FIG. 6 or FIG. 8;
  • the sending unit 303 is configured to perform step 203 in FIG. 6 or FIG. All the related content of the steps involved in the foregoing method embodiments may be referred to the functional description of the corresponding functional modules, and details are not described herein again.
  • the processing unit 302 may be a processor
  • the receiving unit 301 may be a receiver
  • the sending unit 303 may be a transmitter
  • the receiver and the transmitter may constitute a transceiver.
  • the first device 310 includes a processor 312, a transceiver 313, a memory 311, and a bus 314.
  • the processor 312, the transceiver 313, and the memory 311 are connected to one another via a bus 314.
  • the processor 312 is configured to perform control management on the actions of the first device 310, for example, the processor 312 is configured to perform step 202 in FIG. 6 or FIG. 8, and/or used in the description herein. Other processes of technology.
  • the transceiver 313 is configured to support the first device 310 to communicate with the user equipment, the second device, and the like.
  • the memory 311 is configured to store program codes and data of the first device 310.
  • the processor 312 can be a central processing unit, a general purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. It is possible to implement or carry out the various illustrative logical blocks, modules and circuits described in connection with the present disclosure.
  • the processor may also be a combination of computing functions, for example, including one or more microprocessor combinations, combinations of digital signal processors and microprocessors, and the like.
  • the bus 314 can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus.
  • PCI peripheral component interconnect
  • EISA extended industry standard architecture
  • the bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in FIG. 10, but it does not mean that there is only one bus or one type of bus.
  • FIG. 11 is a schematic diagram showing a possible structure of the second device involved in the foregoing embodiment.
  • the second device 400 includes a receiving unit 401 and a processing unit 402.
  • the receiving unit 401 is configured to perform step 204 in FIG. 6 or FIG. 8;
  • the processing unit 402 is configured to perform step 205 in FIG. 6 or FIG. 8.
  • the processing unit 402 is further configured to perform step 204a or step 204b in FIG. 8. All the related content of the steps involved in the foregoing method embodiments may be referred to the functional description of the corresponding functional modules, and details are not described herein again.
  • the processing unit 402 may be a processor
  • the receiving unit 401 may be a receiver, which may form a communication interface with the transmitter.
  • FIG. 12 is a schematic diagram showing a possible logical structure of the second device 410 involved in the foregoing embodiment provided by the embodiment of the present application.
  • the second device 410 includes a processor 412, a communication interface 413, a memory 411, and a bus 414.
  • the processor 412, the communication interface 413, and the memory 411 are connected to one another via a bus 414.
  • the processor 412 is configured to perform control management on the action of the second device 410.
  • the processor 412 is configured to perform step 204, step 204a or step 204b in FIG. 8, and/or Other processes of the techniques described herein.
  • the communication interface 413 is configured to support the second device 410 to communicate with the user equipment, the base station, and the like.
  • the memory 411 is configured to store program codes and data of the second device 410.
  • the processor 412 can be a central processing unit, a general purpose processor, a digital signal processor, and dedicated An integrated circuit, field programmable gate array or other programmable logic device, transistor logic device, hardware component, or any combination thereof. It is possible to implement or carry out the various illustrative logical blocks, modules and circuits described in connection with the present disclosure.
  • the processor may also be a combination of computing functions, for example, including one or more microprocessor combinations, combinations of digital signal processors and microprocessors, and the like.
  • the bus 414 can be a PCI bus or an EISA bus or the like. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 12, but it does not mean that there is only one bus or one type of bus.
  • a computer readable storage medium having stored therein computer executed instructions, when the at least one processor of the device executes the computer to execute an instruction, the device executes FIG. 6 Or the step of the first device in the information processing method provided in FIG. 8, or the step of executing the second device in the information processing method provided in FIG. 6 or 8.
  • a computer program product comprising computer executed instructions stored in a computer readable storage medium; at least one processor of the device may be Reading the storage medium to read the computer execution instructions, the at least one processor executing the computer to execute the instructions such that the apparatus implements the steps of the first device in the information processing method provided in FIG. 6 or FIG. 8, or performs the steps provided in FIG. 6 or FIG. The step of the second device in the information processing method.
  • a system is further provided, where the system includes a user equipment, a first device, and a second device, where the first device may be a base station and/or a roadside unit; wherein the first device
  • the first device provided in FIG. 9 or FIG. 10 above is used to perform the steps of the first device in the information processing method provided in FIG. 6 or FIG. 8 above; and/or the second device is in the above-mentioned FIG. 11 or FIG.
  • the second device is provided for performing the steps of the second device in the information processing method provided in FIG. 6 or FIG. 8.
  • the first device verifies the V2X information by acquiring the V2X information of the user equipment, and if the V2X information verification fails, sending the status information to the second device, so that the second device is based on the status information.
  • the user equipment is monitored and processed to avoid malicious users or hacked zombie users sending malicious information through the user equipment, thereby solving the traffic safety problem caused by sending malicious V2X information, thereby ensuring normal operation. Traffic order has improved the safety of traffic.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Traffic Control Systems (AREA)

Abstract

一种信息处理方法、装置及系统，涉及通信技术领域，解决了V2X通信场景中因为恶意信息而造成的交通安全问题。所述方法包括：第一设备获取用户设备的V2X信息；所述第一设备对所述V2X信息进行验证，若所述V2X信息验证不通过，所述第一设备向第二设备发送状态信息；其中，所述状态信息用于指示所述第一设备对所述V2X信息的验证结果；当第二设备接收到所述第一设备发送的状态信息时，第二设备根据所述状态信息，对所述用户设备进行监控处理。

Description

一种信息处理方法、装置及系统 技术领域
本申请实施例涉及通信技术领域，尤其涉及一种信息处理方法、装置及系统。
背景技术
车与外界(Vehicle-to-Everything，V2X)的信息交换，是指车辆与车辆(Vehicle-to-vehicle，V2V)、车辆与基础设施(Vehicle-to-Infrastructure，V2I)、以及车辆与行人(Vehicle-to-Pedestrian，V2P)等之间的通信。通过V2X通信可以实现提高道路安全、提高交通效率、以及为用户提供丰富的流媒体服务的目的。
目前，在基于V2X的通信场景中，通常有一些恶意用户或者被黑客入侵的僵尸用户等会发送恶意信息，比如，如图1所示，某车辆(车辆1)被黑客入侵并向外界不断发送紧急刹车、或者车辆失控等危险信息，使得周边的车辆或者行人因为恶意信息而采取避让或其他措施，从而影响正常的交通秩序，甚至引发交通事故、造成交通失控或者瘫痪等。但是，现有技术中对于如何避免V2X通信场景中因为恶意信息而造成的交通安全问题尚未给出具体的解决方法。
发明内容
本申请的实施例提供一种信息处理方法、装置及系统，解决了现有V2X通信场景中因为恶意信息而造成的交通安全问题。
为达到上述目的，本申请的实施例采用如下技术方案：
第一方面，提供一种信息处理方法，该方法包括：第一设备获取用户设备的V2X信息；第一设备对该V2X信息进行验证，若该V2X信息验证不通过，则第一设备向第二设备发送状态信息；其中，该状态信息用于指示第一设备对该V2X信息的验证结果。上述技术方案中，第一设备通过获取用户设备的V2X信息，并对该V2X信息进行验证，若V2X信息验证不通过，则向第二设备发送状态信息，以使第二设备根据该状态信息对用户设备进行监控处理，避免了恶意用户或者被黑客入侵的僵尸用户等通过用户设备发送恶意信息的行为，从而解决了因为发送恶意的V2X信息，而造成的交通安全问题，进而保证了正常的交通秩序，提高了交通的安全性。
结合第一方面，在第一方面的第一种可能的实现方式中，该V2X信息包含以下信息中的至少一项：用户设备标识、用户证书、用户签名、消息类型。上述可能的实现方式中，提供几种可能的V2X信息，从而使得第一设备可以根据V2X信息包括的信息进行验证，以确定V2X信息的安全性。
结合第一方面的第一种可能的实现方式，在第一方面的第二种可能的实现方式中，第一设备对该V2X信息进行验证，包括：若该V2X信息包含用户证书，第一设备对用户证书进行验证，若用户证书不合法，则确定该V2X信息验证不通过；和/或，若该V2X信息包含用户签名，第一设备对用户签名进行验证，若用户签名错误， 则确定该V2X信息验证不通过；和/或，若该V2X信息包含消息类型，第一设备对消息类型进行验证，若消息类型属于预设消息类型，则确定V2X信息验证不通过。上述可能的实现方式中，通过对该V2X信息包含的用户证书、和/或用户签名、和/或消息类型进行验证，以确定用户设备的V2X信息的安全性。
结合第一方面的第二种可能的实现方式，在第一方面的第三种可能的实现方式中，该状态信息还包括上报类型，上报类型属于预设上报类型，预设上报类型包括证书错误、签名错误和紧急特殊信息，第一设备向第二设备发送状态信息之前，该方法还包括：若用户证书不合法，第一设备将状态信息中的上报类型确定为证书错误；若用户签名错误，第一设备将状态信息中的上报类型确定为签名错误；若消息类型为预设消息类型，第一设备将状态信息中的上报类型确定为紧急特殊信息。上述可能的实现方式中，通过对该V2X信息包含的用户证书、和/或用户签名、和/或消息类型进行验证，以确定状态信息中的上报类型，使得第二设备根据相应的上报类型进行监控处理，进而提高监控处理的针对性，保证正常的交通秩序，同时也提高交通的安全性。
结合第一方面至第一方面的第三种可能的实现方式中的任一种可能的实现方式，在第一方面的第四种可能的实现方式中，该状态信息还包括以下信息中的至少一项：消息类型、用户设备的位置信息、检测时间。上述可能的实现方式中，提供几种可能的状态信息，从而使得第二设备可以根据状态信息包括的不同信息进行监控处理，进而提高监控处理的针对性，保证正常的交通秩序，同时提高交通的安全性。
第二方面，提供一种信息处理方法，该方法包括：第二设备接收第一设备发送的状态信息；其中，该状态信息用于指示第一设备对用户设备的V2X信息的验证结果；第二设备根据该状态信息，对用户设备进行监控处理。上述技术方案中，当第二设备接收到第一设备发送的状态信息时，第二设备可以根据该状态信息，对用户设备进行监控处理，避免了恶意用户或者被黑客入侵的僵尸用户等通过用户设备发送恶意信息的行为，从而解决了因为发送恶意的V2X信息，而造成的交通安全问题，进而保证了正常的交通秩序，提高了交通的安全性。
结合第二方面，在第二方面的第一种可能的实现方式中，该状态信息还包括以下信息中的至少一项：用户设备标识、上报类型、消息类型、用户设备的位置信息、检测时间；其中，上报类型属于预设上报类型，预设上报类型包括证书错误、签名错误、紧急特殊信息。上述可能的实现方式中，提供几种可能的状态信息，从而使得第二设备可以根据状态信息包括的不同信息进行监控处理，从而保证正常的交通秩序，提高交通的安全性。
结合第二方面的第一种可能的实现方式，在第二方面的第二种可能的实现方式中，若该状态信息包括上报类型，第二设备接收第一设备发送的状态信息之后，该方法还包括：若存在用户设备标识对应的统计信息，第二设备根据状态信息对用户设备标识对应的统计信息进行更新；若不存在用户设备标识对应的统计信息，第二设备根据状态信息添加用户设备标识对应的统计信息。上述可能的实现方式中，第二设备可以对接收到的状态信息进行统计分析，从而根据用户设备标识对应的统计信息进行判断，以提高对用户设备进行监控处理的合理性和准确性。
结合第二方面的第二种可能的实现方式，在第二方面的第三种可能的实现方式中，第二设备根据该状态信息，对用户设备进行监控处理，包括：若上报类型为证书错误或者签名错误，第二设备向用户设备发送告警信息；或者，若上报类型为紧急特殊信息，第二设备判断用户设备标识对应的统计信息是否满足预设告警条件，若满足预设告警条件，则向用户设备发送告警信息。上述可能的实现方式中，第二设备可以根据状态信息中包括的上报类型对用户设备进行不同的监控处理，从而提高对用户设备进行监控处理的合理性和准确性，进而保证了正常的交通秩序，提高了交通的安全性。
结合第二方面的第三种可能的实现方式，在第二方面的第四种可能的实现方式中，预设告警条件为以下中的一个：用户设备在指定时间长度内的被上报次数满足第一预设阈值，用户设备在指定区域内的被上报次数满足第二预设阈值。上述可能的实现方式中，提供了几种可能的预设告警条件，使得第二设备在满足上述预设告警条件时，向用户设备发送告警信息，从而避免用户设备发送恶意信息的行为，保证了正常的交通秩序，提高了交通的安全性。
第三方面，提供一种设备，该设备为第一设备，包括：接收单元，用于获取用户设备的V2X信息；处理单元，用于对该V2X信息进行验证；发送单元，用于若该V2X信息验证不通过，向第二设备发送该状态信息；其中，该状态信息用于指示第一设备对该V2X信息的验证结果。
结合第三方面，在第三方面的第一种可能的实现方式中，该V2X信息包含以下信息中的至少一项：用户设备标识、用户证书、用户签名、消息类型。
结合第三方面的第一种可能的实现方式，在第三方面的第二种可能的实现方式中，处理单元具体用于：若该V2X信息包含用户证书，对用户证书进行验证，若用户证书不合法，则确定该V2X信息验证不通过；和/或，若该V2X信息包含用户签名，对用户签名进行验证，若用户签名错误，则确定V2X信息验证不通过；和/或，若该V2X信息包含消息类型，对消息类型进行验证，若消息类型属于预设消息类型，则确定该V2X信息验证不通过。
结合第三方面的第二种可能的实现方式，在第三方面的第三种可能的实现方式中，该状态信息还包括上报类型，上报类型属于预设上报类型，预设上报类型包括证书错误、签名错误和紧急特殊信息，处理单元还用于：若用户证书不合法，将该状态信息中的上报类型确定为证书错误；若用户签名错误，将该状态信息中的上报类型确定为签名错误；若消息类型为预设消息类型，将该状态信息中的上报类型确定为紧急特殊信息。
结合第三方面至第三方面的第三种可能的实现方式中的任一种可能的实现方式，在第三方面的第四种可能的实现方式中，该状态信息还包括以下信息中的至少一项：消息类型、用户设备的位置信息、检测时间。
第四方面，提供一种设备，该设备为第二设备，包括：接收单元，用于接收第一设备发送的状态信息；其中，该状态信息用于指示第一设备对用户设备的V2X信息的验证结果；处理单元，用于根据该状态信息，对用户设备进行监控处理。
结合第四方面，在第四方面的第一种可能的实现方式中，该状态信息还包括以 下信息中的至少一项：用户设备标识、上报类型、消息类型、用户设备的位置信息、检测时间；其中，上报类型属于预设上报类型，预设上报类型包括证书错误、签名错误、紧急特殊信息。
结合第四方面的第一种可能的实现方式，在第四方面的第二种可能的实现方式中，若该状态信息包括上报类型，处理单元，还用于：若存在用户设备标识对应的统计信息，根据状态信息对用户设备标识对应的统计信息进行更新；若不存在用户设备标识对应的统计信息，根据状态信息添加用户设备标识对应的统计信息。
结合第四方面的第二种可能的实现方式，在第四方面的第三种可能的实现方式中，处理单元具体用于：若上报类型为证书错误或者签名错误，向用户设备发送告警信息；或者，若上报类型为紧急特殊信息，判断用户设备标识对应的统计信息是否满足预设告警条件，若满足预设告警条件，则向用户设备发送告警信息。
结合第四方面的第三种可能的实现方式，在第四方面的第四种可能的实现方式中，预设告警条件为以下中的一个：用户设备在指定时间长度内的被上报次数满足第一预设阈值，用户设备在指定区域内的被上报次数满足第二预设阈值。
第五方面，提供一种设备，该设备为第一设备，包括处理器和存储器，存储器中存储代码和数据，处理器运行存储器中的代码使得该设备执行上述第一方面至第一方面的第四种可能的实现方式中的任一项所提供的信息处理方法。
第六方面，提供一种设备，该设备为第二设备，包括处理器和存储器，存储器中存储代码和数据，处理器运行存储器中的代码使得该设备执行上述第二方面至第二方面的第四种可能的实现方式中的任一项所提供的信息处理方法。
第七方面，提供一种系统，该系统包括用户设备、第一设备和第二设备，该第一设备为基站和/或路侧单元；其中，第一设备为上述第三方面、第三方面的任一种可能的实现方式、或者第五方面所提供的设备；和/或，第二设备为上述第四方面、第四方面的任一种可能的实现方式、或者第六方面所提供的设备。
本申请的又一方面提供了一种计算机可读存储介质，所述计算机可读存储介质中存储有指令，当其在计算机上运行时，使得计算机执行上述各方面所提供的信息处理方法。
本申请的又一方面提供了一种包含指令的计算机程序产品，当其在计算机上运行时，使得计算机执行上述各方面所提供的信息处理方法。
可以理解地，上述提供的任一种信息处理方法的装置、计算机存储介质或者计算机程序产品均用于执行上文所提供的对应的方法，因此，其所能达到的有益效果可参考上文所提供的对应的方法中的有益效果，此处不再赘述。
附图说明
图1为一种V2X通信场景中发送恶意信息的示意图；
图2为本申请实施例提供的一种通信的系统架构图；
图3为本申请实施例提供的一种用户设备/路侧单元的结构示意图；
图4为本申请实施例提供的一种基站的结构示意图；
图5为本申请实施例提供的一种服务器的结构示意图；
图6为本申请实施例提供的一种信息处理方法的流程图；
图7为本申请实施例提供的一种状态信息的结构图；
图8为本申请实施例提供的另一种信息处理方法的流程图；
图9为本申请实施例提供的一种第一设备的结构示意图；
图10为本申请实施例提供的另一种第一设备的结构示意图；
图11为本申请实施例提供的一种第二设备的结构示意图；
图12为本申请实施例提供的另一种第二设备的结构示意图。
具体实施方式
本申请描述的技术方案可以适用于全球移动通信系统(Global System for Mobile Communication，GSM)、码分多址(Code Division Multiple Access，CDMA)系统、宽带码分多址(Wide-band Code Division Multiple Access，WCDMA)、长期演进(Long Term Evolution，LTE)系统、第五代5G通信系统、以及未来的移动通信系统等。
本申请实施例所应用的系统架构如图2所示，该系统架构可以包括用户设备(User Equipment，UE)101、基站102、路侧单元(Road Side Unit，RSU)103和服务器104。本申请所涉及到的用户设备101可以包括各种具有无线通信功能的手持设备、车载设备、可穿戴设备或计算设备、以及各种形式的用户设备，终端(terminal)，终端设备(Terminal Equipment)、车联用户设备(Vehicle User Equipment，V_UE)等等。为方便描述，本申请中，上面提到的设备统称为用户设备或UE。本申请所涉及到的基站是一种部署在无线接入网中用于为UE提供无线通信功能的装置。该基站可以包括各种形式的宏基站，微基站，中继站，接入点等等。在采用不同的无线接入技术的系统中，具备基站功能的设备的名称可能会有所不同，例如在LTE网络中，称为演进的节点B(evolved NodeB，eNB或者eNodeB)，在第三代3G网络中，称为节点B(Node B)等等。为方便描述，本申请中，上述为UE提供无线通信功能的装置统称为基站。本申请所涉及的路侧单元103是一种安装在路侧用于与用户设备101进行通信，实现用户设备的身份识别、电子扣分、以及建立快速专用车道等功能的设备，为方便描述，本申请中将其统称为路侧单元。服务器104可以包括各种具有服务功能的设备，通常可以分为文件服务器、数据库服务器和应用程序服务器等，为便于描述，本申请中将具有服务功能的计算机或者计算机系统均统称为服务器。
图2中以用户设备101为车联用户设备V_UE且包括V_UE A和V_UE B为例进行说明，V_UE A可以与V_UE B之间进行信息交互。具体的，基站102可以为用户设备101分配信息交互时所使用的传输资源，与用户设备101和服务器104进行通信。服务器104可以根据与基站102和路侧单元103之间的通信，收集车辆、道路和环境的信息，以对用户设备101进行管理和控制。示例性的，图2所示的系统架构具体可以为车联网(Internet of Vehicle，IOV)系统，车联网是指车与车、车与路、车与人、车与传感设备等交互，实现车辆与公众网络通信的动态移动通信系统。它可以通过车与车、车与人、车与路互联互通实现信息共享，收集车辆、道路和环境的信息，并在信息网络平台上对多源采集的信息进行加工、计算、共享和安全发布，根据不同的功能需求对车辆进行有效的引导与监管，以及提供专业的多媒体与移动互联网应用服务。
图3为本申请实施例提供的一种用户设备/路侧单元的结构示意图，如图3所示，用户设备/路侧单元是指该设备可以是用户设备，也可以是路侧单元，具体可以包括：存储器、处理器、射频(Radio Frequency，RF)电路、输入单元以及显示单元等部件。其中，存储器可用于存储软件程序以及模块，处理器通过运行存储在存储器的软件程序以及模块，从而执行用户设备或路侧单元的各种功能应用以及数据处理。处理器是该设备的控制中心，利用各种接口和线路连接整个设备的各个部分，通过运行或执行存储在存储器内的软件程序和/或模块，以及调用存储在存储器内的数据，执行该设备的各种功能和处理数据。RF电路可用于信号的接收和发送；通常，RF电路包括但不限于天线、至少一个放大器、收发信机、耦合器、低噪声放大器(Low Noise Amplifier，LNA)、双工器等。输入单元可用于接收用户的输入数据；显示单元可以是显示面板，用于提供显示功能。尽管未示出，该设备还可以包括传感器模块、音频模块、蓝牙模块等等，在此不再赘述。
图4为本申请实施例提供的一种基站的结构示意图。参见图4，基站包括基带子系统、中射频子系统、天馈子系统和一些支撑结构(例如，整机子系统)，其中，基带子系统用于实现整个基站的操作维护，实现信令处理、无线资源原理、到分组核心网的传输接口，实现LTE物理层、介质访问控制层、L3信令、操作维护主控功能；中射频子系统实现基带信号、中频信号和射频信号之间的转换，实现LTE无线接收信号的解调和发送信号的调制和功率放大；天馈子系统包括连接到基站射频模块的天线和馈线以及GRS接收卡的天线和馈线，用于实现无线空口信号的接收和发送；整机子系统，是基带子系统和中频子系统的支撑部分，提供结构、供电和环境监控功能。
图5为本申请实施例提供的一种服务器的结构示意图，参见图5，服务器包括存储器、处理器、系统总线、电源组件、输入\输出接口和通信组件等。其中，存储器可用于存储数据、软件程序以及模块，主要包括存储程序区和存储数据区，存储程序区可存储操作系统、至少一个功能所需的应用程序等，存储数据区可存储服务器的使用所创建的数据等。处理器通过运行或执行存储在存储器内的软件程序和/或模块，以及调用存储在存储器内的数据，执行服务器的各种功能和处理数据。系统总线包括地址总线、数据总线、控制总线，用于传输数据和指令；电源组件用于为服务器的各个组件提供电源；输入\输出接口为处理器和外围接口模块之间提供接口；通信组件用于为服务器和其他设备之间进行有线或无线方式的通信。
本领域技术人员可以理解，上述图3-图5所示的用户设备/路侧单元、基站和服务器的结构并对其不构成限定。在实际应用中，用户设备/路侧单元、基站和服务器可以包括比图示更多或更少的部件，或者组合某些部件，或者不同的部件布置。
图6为本申请实施例提供的一种信息处理方法的流程图，应用于上述图2所示的通信系统中，参见图6，该方法包括以下几个步骤。
步骤201：第一设备获取用户设备的V2X信息。
其中，第一设备可以是基站或者路侧单元，用户设备的V2X信息是指用户设备向外界发送的信息，该V2X信息可以是车辆与车辆(Vehicle-to-vehicle，V2V)、车辆与基础设施(Vehicle-to-Infrastructure，V2I)、或者车辆与行人(Vehicle-to-Pedestrian，V2P)之间的信息。具体的，当用户设备向基站、路侧单元、或者其它的 用户设备发送V2X信息时，第一设备可以获取该用户设备的V2X信息。
步骤202：第一设备对该V2X信息进行验证。
当第一设备获取到用户设备的V2X信息时，第一设备可以对该V2X信息进行验证，以确定该V2X信息是否为安全的信息；若验证通过则该V2X信息为安全的信息，若验证不通过则该V2X信息可能为不安全的信息。具体的，当第一设备确定该V2X信息验证不通过时，则表示该V2X信息可能是不安全的信息，从而第一设备可以根据验证结果，确定用户设备的状态信息。当第一设备确定该V2X信息验证通过时，则表明该V2X信息为安全的信息，从而第一设备无需确定用户设备的状态信息，即在第一设备确定该V2X信息为安全的信息时，第一设备无需进行任何处理。
进一步的，该V2X信息可以包含用户设备标识、用户证书、用户签名以及消息类型中的一个或者多个。用户证书是指用于指示用户设备的用户身份合法性的证书，该用户证书可以是由权威机构签发的证书，比如由证书授权(Certificate Authority，CA)中心签发。用户签名是指用于指示用户设备的用户身份的签名，该签名可以是数字签名。消息类型用于指示V2X信息的类型，比如，救护车辆或者消防车辆等特殊车辆发送的用于周围车辆进行避让的V2X信息的类型可以是特殊消息，失控车辆等发送的用于通知周围车辆的V2X信息的类型可以是紧急消息。
具体的，当第一设备在该V2X信息验证不通过时，第一设备还可以确定该用户设备的状态信息，该状态信息可用于指示第一设备对该V2X信息的验证结果。其中，该状态信息包括用户设备标识，该用户设备标识用于唯一标识该用户设备，比如，该用户设备标识可以为该用户设备的标识码、序列码、或者使用该用户设备的用户标识等等，本申请实施例对此不作限定。
另外，该状态信息还可以包括上报类型，上报类型属于预设上报类型，预设上报类型包括证书错误、签名错误和紧急特殊信息。其中，证书错误是指第一设备对该V2X信息进行验证时其包含的用户证书不合法时的上报类型；签名错误是指第一设备对该V2X信息进行验证时其包含的用户签名不正确时的上报类型；紧急特殊信息是指第一设备对该V2X信息进行验证时其包含的消息类型属于预设消息类型时的上报类型。该预设消息类型可以事先进行设置，比如，该预设消息类型可以包括紧急消息和特殊消息。
具体的，当该V2X信息包含用户证书时，第一设备可以对该用户证书进行验证，若该用户证书不合法，则第一设备可以确定该V2X消息验证不通过，从而第一设备可以确定用户设备的状态信息中的上报类型为证书错误。或者，当该V2X信息包含用户签名时，第一设备可以对该用户签名进行验证，若该用户签名错误，则第一设备可以确定该V2X消息验证不通过，从而第一设备可以确定用户设备的状态信息中的上报类型为签名错误。或者，当该V2X信息包含消息类型时，第一设备可以对该消息类型进行验证，若该消息类型属于预设消息类型，则第一设备可以确定该V2X消息验证不通过，从而第一设备可以确定用户设备的状态信息中的上报类型为紧急特殊信息。
或者，当该V2X信息包含用户证书、用户签名和消息类型中的任意两个、或者全部时，第一设备可以对该V2X信息包含的每一项分别进行验证，若存在其中的一 项验证不通过，则可以确定该V2X信息验证不通过。可选的，当第一设备对每一项分别进行验证时，若存在一项验证不通过，则第一设备无需进行后续的验证。进一步的，第一设备对该V2X信息包含的每一项分别进行验证时，可以按照预设顺序分别进行验证。比如，第一设备可以按照依次检测用户证书、用户签名和消息类型对每一项进行分别验证。在实际应用中，预设顺序也可能为其他顺序，本申请实施例对此不作具体限定。
此外，该状态信息还可以包括以下信息中的至少一项：消息类型、用户设备的位置信息、检测时间。其中，用户设备的位置信息可以是地理信息，比如，该地理信息可以为经纬度信息。检测时间是指第一设备获取到该V2X信息的时间。消息类型与该V2X信息中包含的消息类型一致，本申请实施例在此不再赘述。
其中，该状态信息还可以包括其他信息，比如其他信息可以是车辆的速度和行驶方向等信息。当该状态信息包括以上所有信息时，该状态信息的结构可以如图7所示。图7中所示的信息项的顺序仅是示例性的，并不对本申请实施例中状态信息的结构构成限定。
步骤203：若该V2X信息验证不通过，第一设备向第二设备发送状态信息，该状态信息用于第二设备对用户设备进行监控处理。
其中，第二设备可以为服务器，当第一设备确定用户设备的V2X信息验证不通过时，第一设备可以向第二设备发送包含该用户设备标识的状态信息，以使第二设备根据该状态信息对用户设备进行监控处理。
步骤204：第二设备接收第一设备发送的状态信息，该状态信息用于指示第一设备对该V2X信息的验证结果。
步骤205：第二设备根据该状态信息，对用户设备进行监控处理。
其中，当第二设备接收到第一设备发送的状态信息时，第二设备可以根据该状态信息，对该用户设备进行监控处理，避免了恶意用户或者被黑客入侵的僵尸用户等通过用户设备发送恶意信息的行为，从而解决了因为发送恶意的V2X信息，而造成的交通安全问题，进而保证了正常的交通秩序，提高了交通的安全性。
进一步的，参见图8，当该状态信息包括上报类型时，在步骤204之后、步骤205之前，该方法还可以包括：步骤204a或者步骤204b。
步骤204a：若存在该用户设备标识对应的统计信息，第二设备根据该状态信息对该用户设备标识对应的统计信息进行更新。
其中，统计信息是指第二设备根据对第一设备上报的用户设备的状态信息进行统计分析后所得到的信息，第二设备可以统计分析指定时间长度内接收到的用户设备的状态信息，或者统计分析指定区域内接收到的用户设备的状态信息等。该统计信息可以包括用户设备被上报的次数和频率，以及包括第二设备对状态信息中包含的信息的统计，比如统计信息还可以包括上报类型、检测时间、以及用户设备的位置信息等等。用户设备标识对应的统计信息是指该统计信息为用户设备标识所指示的用户设备的统计信息。
比如，第二设备中的统计信息可以如下表1所示，表1中以每个用户设备的统计信息包括该用户设备在指定时间长度ΔT内的被上报次数、检测时间、以及每个检 测时间对应的位置信息(检测时间：位置信息)为例进行说明。若第二设备接收到的状态信息中的用户设备标识为ID1、检测时间为T13、用户设备的位置信息为P13，则第二设备根据如下表1确定存在ID1对应的统计信息，从而根据该状态信息对ID1对应的统计信息进行更新，得到如下表2所示的统计信息。
表1
Figure PCTCN2017086673-appb-000001
表2
Figure PCTCN2017086673-appb-000002
步骤204b：若不存在该用户设备标识对应的统计信息，第二设备根据该状态信息添加该用户设备标识对应的统计信息。
若不存在该用户设备标识对应的统计信息，则表示该用户设备是第一次被上报，从而第二设备可以根据该状态信息添加该用户设备标识对应的统计信息。比如，统计信息如上表1所示，若第二设备接收到的状态信息中的用户设备标识为ID3、检测时间为T31、用户设备的位置信息为P31，则第二设备根据如上表1确定不存在ID3对应的统计信息，从而根据该状态信息添加ID3对应的统计信息后，得到如下表3所示的统计信息。
表3
Figure PCTCN2017086673-appb-000003
需要说明的是，上述表1、表2和表3所示的第二设备中的用户设备标识对应的统计信息仅为示例性的，上述表1、表2和表3并不对本申请实施例构成限定。
进一步的，当第二设备根据上述步骤204a或者204b对状态信息进行统计分析之后，上述步骤205中第二设备根据该状态信息，对用户设备进行监控处理，具体可以为：若该状态信息中的上报类型为证书错误或者签名错误，则第二设备向用户设备发送告警信息；或者，若该状态信息中的上报类型为紧急特殊信息，则第二设备判断该用户设备标识对应的统计信息是否满足预设告警条件，若满足预设告警条件，则向用户设备发送告警信息。
其中，预设告警条件可以事先进行设置。比如，该预设告警条件可以为以下条件中的一个：用户设备在指定时间长度内的被上报次数满足第一预设阈值，用户设备在指定区域内的被上报次数满足第二预设阈值。
需要说明的是，该指定时间长度和指定区域可以事先进行设置，比如，指定时间长度可以为单位时间，指定区域可以为指定面积大小的区域等等，本申请实施例对此不作具体限定。第一预设阈值和第二预设阈值也可以事先进行设置，本申请实施例对此同样不作具体限定。
在实际应用中，当第二设备向用户设备发送告警信息之后，若第二设备仍接收到第一设备发送的该用户设备的状态信息，则可以根据状态信息中用户设备的位置信息、以及车辆的速度和方向等其他信息对该用户设备的行为进行预测，并根据预测的结果进行现场检查处理等，以避免恶意用户或者被黑客入侵的僵尸用户通过用户设备发送恶意信息。
在本申请实施例中，第一设备通过获取用户设备的V2X信息，对该V2X信息进行验证，若V2X信息验证不通过，则向第二设备发送状态信息，以及，以使第二设备根据该状态信息对用户设备进行监控处理，避免了恶意用户或者被黑客入侵的僵尸用户等通过用户设备发送恶意信息的行为，从而解决了因为发送恶意的V2X信息，而造成的交通安全问题，进而保证了正常的交通秩序，提高了交通的安全性。
上述主要从各个网元之间交互的角度对本申请实施例提供的方案进行了介绍。可以理解的是，各个网元，例如第一设备和第二设备等为了实现上述功能，其包含了执行各个功能相应的硬件结构和/或软件模块。本领域技术人员应该很容易意识到，结合本文中所公开的实施例描述的各示例的设备及算法步骤，本申请能够以硬件或硬件和计算机软件的结合形式来实现。某个功能究竟以硬件还是计算机软件驱动硬件的方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本申请的范围。
本申请实施例可以根据上述方法示例对第一设备和第二设备等进行功能模块的划分，例如，可以对应各个功能划分各个功能模块，也可以将两个或两个以上的功能集成在一个处理模块中。上述集成的模块既可以采用硬件的形式实现，也可以采用软件功能模块的形式实现。需要说明的是，本申请实施例中对模块的划分是示意性的，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式。
在采用对应各个功能划分各个功能模块的情况下，图9示出了上述实施例中所涉 及的第一设备的一种可能的结构示意图，第一设备300包括：接收单元301、处理单元302和发送单元303。其中，接收单元301用于执行图6或图8中的步骤201；处理单元302用于执行图6或图8中的步骤202；发送单元303用于执行图6或图8中的步骤203。上述方法实施例涉及的各步骤的所有相关内容均可以援引到对应功能模块的功能描述，在此不再赘述。
在硬件实现上，上述处理单元302可以为处理器，接收单元301可以为接收器，发送单元303可以为发送器，接收器与发送器可以构成收发器。
如图10所示，为本申请实施例提供的上述实施例中所涉及的第一设备310的一种可能的逻辑结构示意图。第一设备310包括：处理器312、收发器313、存储器311以及总线314。处理器312、收发器313以及存储器311通过总线314相互连接。在本申请实施例中，处理器312用于对第一设备310的动作进行控制管理，例如，处理器312用于执行图6或图8中的步骤202，和/或用于本文所描述的技术的其他过程。收发器313用于支持第一设备310与用户设备、第二设备等进行通信。存储器311，用于存储第一设备310的程序代码和数据。
其中，处理器312可以是中央处理器单元，通用处理器，数字信号处理器，专用集成电路，现场可编程门阵列或者其他可编程逻辑器件、晶体管逻辑器件、硬件部件或者其任意组合。其可以实现或执行结合本申请公开内容所描述的各种示例性的逻辑方框，模块和电路。所述处理器也可以是实现计算功能的组合，例如包含一个或多个微处理器组合，数字信号处理器和微处理器的组合等等。总线314可以是外设部件互连标准(peripheral component interconnect，PCI)总线或扩展工业标准结构(extended industry standard architecture，EISA)总线等。所述总线可以分为地址总线、数据总线、控制总线等。为便于表示，图10中仅用一条粗线表示，但并不表示仅有一根总线或一种类型的总线。
在采用对应各个功能划分各个功能模块的情况下，图11示出了上述实施例中所涉及的第二设备的一种可能的结构示意图，第二设备400包括：接收单元401和处理单元402。其中，接收单元401用于执行图6或图8中的步骤204；处理单元402用于执行图6或图8中的步骤205。进一步的，处理单元402，还用于执行图8中的步骤204a或者步骤204b。上述方法实施例涉及的各步骤的所有相关内容均可以援引到对应功能模块的功能描述，在此不再赘述。
在硬件实现上，上述处理单元402可以为处理器，接收单元401可以为接收器，其与发送器可以构成通信接口。
如图12所示，为本申请实施例提供的上述实施例中所涉及的第二设备410的一种可能的逻辑结构示意图。第二设备410包括：处理器412、通信接口413、存储器411以及总线414。处理器412、通信接口413以及存储器411通过总线414相互连接。在本申请实施例中，处理器412用于对第二设备410的动作进行控制管理，例如，处理器412用于执行图8中的步骤204、以及步骤204a或者步骤204b，和/或用于本文所描述的技术的其他过程。通信接口413用于支持第二设备410与用户设备、基站等进行通信。存储器411，用于存储第二设备410的程序代码和数据。
其中，处理器412可以是中央处理器单元，通用处理器，数字信号处理器，专用 集成电路，现场可编程门阵列或者其他可编程逻辑器件、晶体管逻辑器件、硬件部件或者其任意组合。其可以实现或执行结合本申请公开内容所描述的各种示例性的逻辑方框，模块和电路。所述处理器也可以是实现计算功能的组合，例如包含一个或多个微处理器组合，数字信号处理器和微处理器的组合等等。总线414可以是PCI总线或EISA总线等。所述总线可以分为地址总线、数据总线、控制总线等。为便于表示，图12中仅用一条粗线表示，但并不表示仅有一根总线或一种类型的总线。
在本申请的另一实施例中，还提供一种计算机可读存储介质，计算机可读存储介质中存储有计算机执行指令，当设备的至少一个处理器执行该计算机执行指令时，设备执行图6或图8所提供的信息处理方法中第一设备的步骤、或者执行图6或图8所提供的信息处理方法中第二设备的步骤。
在本申请的另一实施例中，还提供一种计算机程序产品，该计算机程序产品包括计算机执行指令，该计算机执行指令存储在计算机可读存储介质中；设备的至少一个处理器可以从计算机可读存储介质读取该计算机执行指令，至少一个处理器执行该计算机执行指令使得设备实施图6或图8所提供的信息处理方法中第一设备的步骤、或者执行图6或图8所提供的信息处理方法中第二设备的步骤。
在本申请的另一实施例中，还提供一种系统，该系统包括用户设备、第一设备和第二设备，该第一设备可以为基站和/或路侧单元；其中，该第一设备为上述图9或图10所提供的第一设备，用于执行上述图6或图8所提供的信息处理方法中第一设备的步骤；和/或，第二设备为上述图11或者图12所提供的第二设备，用于执行图6或图8所提供的信息处理方法中第二设备的步骤。
在本申请实施例中，第一设备通过获取用户设备的V2X信息，对该V2X信息进行验证，若V2X信息验证不通过，则向第二设备发送状态信息，以使第二设备根据该状态信息对用户设备进行监控处理，避免了恶意用户或者被黑客入侵的僵尸用户等通过用户设备发送恶意信息的行为，从而解决了因为发送恶意的V2X信息，而造成的交通安全问题，进而保证了正常的交通秩序，提高了交通的安全性。
最后应说明的是：以上所述，仅为本申请的具体实施方式，但本申请的保护范围并不局限于此，任何在本申请揭露的技术范围内的变化或替换，都应涵盖在本申请的保护范围之内。因此，本申请的保护范围应以所述权利要求的保护范围为准。

Claims (23)

  1. 一种信息处理方法，其特征在于，所述方法包括：
    第一设备获取用户设备的V2X信息；
    所述第一设备对所述V2X信息进行验证，若所述V2X信息验证不通过，所述第一设备向第二设备发送状态信息；其中，所述状态信息用于指示所述第一设备对所述V2X信息的验证结果。
  2. 根据权利要求1所述的方法，其特征在于，所述V2X信息包含以下信息中的至少一项：用户设备标识、用户证书、用户签名、消息类型。
  3. 根据权利要求2所述的方法，其特征在于，所述第一设备对所述V2X信息进行验证，包括：
    若所述V2X信息包含所述用户证书，所述第一设备对所述用户证书进行验证，若所述用户证书不合法，则确定所述V2X信息验证不通过；和/或，
    若所述V2X信息包含所述用户签名，所述第一设备对所述用户签名进行验证，若所述用户签名错误，则确定所述V2X信息验证不通过；和/或，
    若所述V2X信息包含所述消息类型，所述第一设备对所述消息类型进行验证，若所述消息类型属于预设消息类型，则确定所述V2X信息验证不通过。
  4. 根据权利要求3所述的方法，其特征在于，所述状态信息还包括上报类型，所述上报类型属于预设上报类型，所述预设上报类型包括证书错误、签名错误和紧急特殊信息，所述第一设备向第二设备发送状态信息之前，所述方法还包括：
    若所述用户证书不合法，所述第一设备将所述状态信息中的上报类型确定为所述证书错误；
    若所述用户签名错误，所述第一设备将所述状态信息中的上报类型确定为所述签名错误；
    若所述消息类型为预设消息类型，所述第一设备将所述状态信息中的上报类型确定为所述紧急特殊信息。
  5. 根据权利要求1-4任一项所述的方法，其特征在于，所述状态信息还包括以下信息中的至少一项：消息类型、用户设备的位置信息、检测时间。
  6. 一种信息处理方法，其特征在于，所述方法包括：
    第二设备接收第一设备发送的状态信息；其中，所述状态信息用于指示所述第一设备对用户设备的V2X信息的验证结果；
    所述第二设备根据所述状态信息，对所述用户设备进行监控处理。
  7. 根据权利要求6所述的方法，其特征在于，所述状态信息还包括以下信息中的至少一项：用户设备标识、上报类型、消息类型、用户设备的位置信息、检测时间；
    其中，所述上报类型属于预设上报类型，所述预设上报类型包括证书错误、签名错误、紧急特殊信息。
  8. 根据权利要求7所述的方法，其特征在于，若所述状态信息包括所述上报类型，所述第二设备接收第一设备发送的状态信息之后，所述方法还包括：
    若存在所述用户设备标识对应的统计信息，所述第二设备根据所述状态信息对所述用户设备标识对应的统计信息进行更新；
    若不存在所述用户设备标识对应的统计信息，所述第二设备根据所述状态信息添加所述用户设备标识对应的统计信息。
  9. 根据权利要求8所述的方法，其特征在于，所述第二设备根据所述状态信息，对所述用户设备进行监控处理，包括：
    若所述上报类型为所述证书错误或者所述签名错误，所述第二设备向所述用户设备发送告警信息；或者，
    若所述上报类型为所述紧急特殊信息，所述第二设备判断所述用户设备标识对应的统计信息是否满足预设告警条件，若满足所述预设告警条件，则向所述用户设备发送告警信息。
  10. 根据权利要求9所述的方法，其特征在于，所述预设告警条件为以下中的一个：所述用户设备在指定时间长度内的被上报次数满足第一预设阈值，所述用户设备在指定区域内的被上报次数满足第二预设阈值。
  11. 一种设备，其特征在于，所述设备为第一设备，包括：
    接收单元，用于获取用户设备的V2X信息；
    处理单元，用于对所述V2X信息进行验证；
    发送单元，用于若所述V2X信息验证不通过，向第二设备发送状态信息；其中，所述状态信息用于指示所述第一设备对所述V2X信息的验证结果。
  12. 根据权利要求11所述的设备，其特征在于，所述V2X信息包含以下信息中的至少一项：用户设备标识、用户证书、用户签名、消息类型。
  13. 根据权利要求12所述的设备，其特征在于，所述处理单元，具体用于：
    若所述V2X信息包含所述用户证书，对所述用户证书进行验证，若所述用户证书不合法，则确定所述V2X信息验证不通过；和/或，
    若所述V2X信息包含所述用户签名，对所述用户签名进行验证，若所述用户签名错误，则确定所述V2X信息验证不通过；和/或，
    若所述V2X信息包含所述消息类型，对所述消息类型进行验证，若所述消息类型属于预设消息类型，则确定所述V2X信息验证不通过。
  14. 根据权利要求13所述的设备，其特征在于，所述状态信息还包括上报类型，所述上报类型属于预设上报类型，所述预设上报类型包括证书错误、签名错误和紧急特殊信息，所述处理单元，还用于：
    若所述用户证书不合法，将所述状态信息中的上报类型确定为所述证书错误；
    若所述用户签名错误，将所述状态信息中的上报类型确定为所述签名错误；
    若所述消息类型为预设消息类型，将所述状态信息中的上报类型确定为所述紧急特殊信息。
  15. 根据权利要求11-14任一项所述的设备，其特征在于，所述状态信息还包括以下信息中的至少一项：消息类型、用户设备的位置信息、检测时间。
  16. 一种设备，其特征在于，所述设备为第二设备，包括：
    接收单元，用于接收第一设备发送的状态信息；其中，所述状态信息用于指示所述第一设备对用户设备的V2X信息的验证结果；
    处理单元，用于根据所述状态信息，对所述用户设备进行监控处理。
  17. 根据权利要求16所述的设备，其特征在于，所述状态信息还包括以下信息中的至少一项：用户设备标识、上报类型、消息类型、用户设备的位置信息、检测时间；
    其中，所述上报类型属于预设上报类型，所述预设上报类型包括证书错误、签名错误、紧急特殊信息。
  18. 根据权利要求17所述的设备，其特征在于，若所述状态信息包括所述上报类型，所述处理单元，还用于：
    若存在所述用户设备标识对应的统计信息，根据所述状态信息对所述用户设备标识对应的统计信息进行更新；
    若不存在所述用户设备标识对应的统计信息，根据所述状态信息添加所述用户设备标识对应的统计信息。
  19. 根据权利要求18所述的设备，其特征在于，所述处理单元，具体用于：
    若所述上报类型为所述证书错误或者所述签名错误，向所述用户设备发送告警信息；或者，
    若所述上报类型为所述紧急特殊信息，判断所述用户设备标识对应的统计信息是否满足预设告警条件，若满足所述预设告警条件，则向所述用户设备发送告警信息。
  20. 根据权利要求19所述的设备，其特征在于，所述预设告警条件为以下中的一个：所述用户设备在指定时间长度内的被上报次数满足第一预设阈值，所述用户设备在指定区域内的被上报次数满足第二预设阈值。
  21. 一种设备，其特征在于，所述设备为第一设备，包括处理器和存储器，所述存储器中存储代码和数据，所述处理器运行存储器中的代码使得所述设备执行上述权利要求1-5任一项所述的信息处理方法。
  22. 一种设备，其特征在于，所述设备为第二设备，包括处理器和存储器，所述存储器中存储代码和数据，所述处理器运行存储器中的代码使得所述设备执行上述权利要求6-10任一项所述的信息处理方法。
  23. 一种系统，其特征在于，所述系统包括用户设备、第一设备和第二设备，所述第一设备为基站和/或路侧单元；其中，所述第一设备为上述权利要求11-15任一项所述的设备、或者权利要求21所述的设备；和/或，所述第二设备为上述权利要求16-20任一项所述的设备、或者权利要求22所述的设备。
PCT/CN2017/086673 2017-05-31 2017-05-31 一种信息处理方法、装置及系统 Ceased WO2018218535A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
PCT/CN2017/086673 WO2018218535A1 (zh) 2017-05-31 2017-05-31 一种信息处理方法、装置及系统
CN201780090438.5A CN110603797A (zh) 2017-05-31 2017-05-31 一种信息处理方法、装置及系统
EP17911671.0A EP3624472A4 (en) 2017-05-31 2017-05-31 Information processing method, device and system
US16/696,861 US20200099705A1 (en) 2017-05-31 2019-11-26 Information processing method, apparatus, and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2017/086673 WO2018218535A1 (zh) 2017-05-31 2017-05-31 一种信息处理方法、装置及系统

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US16/696,861 Continuation US20200099705A1 (en) 2017-05-31 2019-11-26 Information processing method, apparatus, and system

Publications (1)

Publication Number Publication Date
WO2018218535A1 true WO2018218535A1 (zh) 2018-12-06

Family

ID=64455192

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/086673 Ceased WO2018218535A1 (zh) 2017-05-31 2017-05-31 一种信息处理方法、装置及系统

Country Status (4)

Country Link
US (1) US20200099705A1 (zh)
EP (1) EP3624472A4 (zh)
CN (1) CN110603797A (zh)
WO (1) WO2018218535A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111625942A (zh) * 2020-05-12 2020-09-04 重庆车辆检测研究院有限公司 基于综测仪的车路协同应用测评系统及方法

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11303458B2 (en) * 2018-04-09 2022-04-12 Blackberry Limited Method and system for reduced V2X receiver processing load using network based application layer message processing
US11252567B2 (en) * 2018-12-21 2022-02-15 Intel Corporation Methods and apparatus for detecting attacks in V2X networks
CN112055060B (zh) * 2020-08-20 2022-02-11 郑州信大捷安信息技术股份有限公司 一种v2x终端异常行为识别和告警方法、系统
CN112104610B (zh) * 2020-08-20 2022-02-11 郑州信大捷安信息技术股份有限公司 V2x终端异常行为识别和联合告警方法及系统
CN114339665B (zh) * 2021-12-31 2025-02-07 智道网联科技(北京)有限公司 V2x通信状态监控的方法、监听设备和运维设备

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103414567A (zh) * 2013-08-08 2013-11-27 天地融科技股份有限公司 信息监控方法及系统
US20160140842A1 (en) * 2014-11-19 2016-05-19 Hyundai Motor Company Method for handling misbehaving vehicle and v2x communicaton system performing the same
CN105812131A (zh) * 2014-12-30 2016-07-27 浙江高鸿电子技术有限公司 基于车载短距离通信网的车载节点证书更新方法
CN105827586A (zh) * 2015-01-27 2016-08-03 瑞萨电子株式会社 通信设备、lsi、程序和通信系统
CN105873137A (zh) * 2015-11-11 2016-08-17 乐卡汽车智能科技（北京）有限公司 V2x通信的基站集群系统、集群方法和集群服务器

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP5261614B2 (ja) * 2010-05-24 2013-08-14 ルネサスエレクトロニクス株式会社 通信システム、車載端末、路側装置
US8593253B2 (en) * 2010-06-09 2013-11-26 Gm Global Technology Operations, Inc. Systems and methods for efficient authentication
KR101584001B1 (ko) * 2014-10-22 2016-01-08 현대자동차주식회사 Ｖ２ｘ 통신을 위한 부정 행위 탐지 방법 및 시스템
US20180183826A1 (en) * 2015-08-21 2018-06-28 Renesas Electronics Europe Limited Design support system

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103414567A (zh) * 2013-08-08 2013-11-27 天地融科技股份有限公司 信息监控方法及系统
US20160140842A1 (en) * 2014-11-19 2016-05-19 Hyundai Motor Company Method for handling misbehaving vehicle and v2x communicaton system performing the same
CN105812131A (zh) * 2014-12-30 2016-07-27 浙江高鸿电子技术有限公司 基于车载短距离通信网的车载节点证书更新方法
CN105827586A (zh) * 2015-01-27 2016-08-03 瑞萨电子株式会社 通信设备、lsi、程序和通信系统
CN105873137A (zh) * 2015-11-11 2016-08-17 乐卡汽车智能科技（北京）有限公司 V2x通信的基站集群系统、集群方法和集群服务器

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3624472A4 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111625942A (zh) * 2020-05-12 2020-09-04 重庆车辆检测研究院有限公司 基于综测仪的车路协同应用测评系统及方法
CN111625942B (zh) * 2020-05-12 2023-09-01 招商局检测车辆技术研究院有限公司 基于综测仪的车路协同应用测评系统及方法

Also Published As

Publication number Publication date
EP3624472A1 (en) 2020-03-18
US20200099705A1 (en) 2020-03-26
EP3624472A4 (en) 2020-03-18
CN110603797A (zh) 2019-12-20

Similar Documents

Publication Publication Date Title
EP3622496B1 (en) System and method for trust parameters in vehicle warning messages
US12101702B2 (en) Flexible security rating and decision mechanism for machine type communications
US20200099705A1 (en) Information processing method, apparatus, and system
US10171953B2 (en) Vehicle event notification via cell broadcast
CN110351828B (zh) 一种定位方法及装置
US9742569B2 (en) System and method for filtering digital certificates
JP6669138B2 (ja) 攻撃監視システムおよび攻撃監視方法
EP3794791B1 (en) Misbehaviour warnings in intelligent transportation systems
US11751039B2 (en) V2X communication method, apparatus, and storage medium
CN108810155B (zh) 一种车联网车辆位置信息可信度评价方法及系统
US12063511B2 (en) Pathloss drop trusted agent misbehavior detection
RU2009126154A (ru) Обнаружение возможностей системы для определенной программными средствами радиосвязи
CN107645735A (zh) 一种V2X网络中sidelink的资源负载测量方法以及装置
JP2025066136A (ja) Ｅｄｇｅ Ｃｏｎｆｉｇｕｒａｔｉｏｎ Ｓｅｒｖｅｒ（ＥＣＳ）およびその方法
KR102217144B1 (ko) 신뢰성 있는 교통 기관에 의해 이전에 인가된 모바일 통신 네트워크에 대한 사용자 장비의 인가
JP7677398B2 (ja) 無線端末、Ｅｄｇｅ Ｅｎａｂｌｅｒ Ｓｅｒｖｅｒ（ＥＥＳ）、及びこれらにおける方法
EP3138090B1 (en) Pedestrian detection
US12495289B2 (en) Method and apparatus for improved capability exposure at edge enabler server
CN107306412B (zh) 用以实现消息可靠传输的方法、用户设备和基站
US20220038901A1 (en) Transmission apparatus, reception apparatus, communication system, communication method, and data processing method
CN109429565A (zh) 一种通信方法及装置
US20180331881A1 (en) Embedded Device Identification Information in Packetized Communications
WO2023151696A1 (zh) 通信方法、通信装置和系统
CN115811704A (zh) 一种位置服务方法、基站及存储介质
WO2023115348A1 (en) V2x security device, first vehicle, a v2x communication system and methods

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17911671

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2017911671

Country of ref document: EP

Effective date: 20191209