Method, apparatus, and system for vehicle-to-vehicle communications
In a method for conducting communications, a first terminal device in a vehicle-to-vehicle (V2V) network sends a first request message to a server of the V2V network to request the server to allocate an encryption key corresponding to a first service. The first request message includes an identifier of the first service and an identifier of the first terminal device. The first terminal device receives from the server a first response message that includes an encryption key corresponding to the first service. The first terminal device uses the encryption key to encrypt first information related to the first terminal device in the V2V network, and broadcasts a broadcast message that includes the encrypted first information to the V2V network.
1 . A communication method performed by a first terminal device of a first vehicle in a vehicle-to-vehicle (V2V) network, comprising:
sending, by a first communications interface via a first spectrum band, a first request message to a server to request the server allocate an encryption key corresponding to a first V2V network service, the first request message comprising:
an identifier of the first V2V network service,
an identifier of the first terminal device, and
location information of the first terminal device;
receiving, by the first communications interface via the first spectrum band, a first response message from the server, wherein the first response message comprises the encryption key corresponding to the first V2V network service, wherein the encryption key is generated based on the identifier of the first V2V network service and a location tag, wherein the location tag is determined based on the location information of the first terminal device, and wherein the location tag determines a range within which the encryption key can be used;
encrypting, using the encryption key, coordinate data of the first vehicle; and
broadcasting, by a second communications interface to one or more additional terminal devices of one or more additional vehicles in the V2V network and via a second spectrum band, a first message comprising the encrypted coordinate data of the first vehicle,
wherein the one or more additional vehicles in the V2V network have been authenticated by the server.
2 . The method according to claim 1 , wherein the identifier of the first terminal device comprises an integrity measurement value of the first terminal device,
wherein the integrity measurement value is a standard metric value or a metric value obtained by the first terminal device by performing a trusted measurement, and
wherein the encryption key is generated based further on for-verifying, based on the integrity measurement value, that the first terminal device is authorized to receive the encryption key corresponding to the first V2V network service.
3 . The method according to claim 1 , further comprising:
receiving, from the server, an authorization code corresponding to the encryption key, wherein the authorization code is for obtaining the encryption key.
4 . The method according to claim 1 , further comprising:
storing the encryption key in a module of the first terminal device; and
updating a status of the first V2V network service to a first state, the first state indicating that the first V2V network service has the corresponding encryption key.
5 . The method according to claim 4 , further comprising:
obtaining, based on the identifier of the first V2V network service indicating the status of the first V2V network service being the first state, the encryption key from the module of the first terminal device storing the encryption key.
6 . The method according to claim 5 , wherein the step of obtaining the encryption key from the module of the first terminal device comprises:
generating a first authorization code based on an integrity measurement value; and
in response to the first authorization code being the same as the authorization code corresponding to the encryption key, obtaining, based on the identifier of the first V2V network service, the encryption key from the module of the first terminal device.
7 . The method according to claim 1 , wherein before the step of sending the first request message to the server, the method further comprises:
sending a prior request message to the server to request the server allocate the encryption key corresponding to the first V2V network service, the prior request message comprising the identifier of the first V2V network service and the identifier of the first terminal device;
receiving a prior response message from the server, wherein the prior response message indicates that the first V2V network service has the corresponding encryption key; and
updating, by the first terminal device, the status of the first V2V network service to the first state based on the prior response message, the first state indicating that the first V2V network service has the corresponding encryption key.
8 . The method according to claim 1 , the first message further comprising the identifier of the first V2V network service and the location tag.
9 . The method according to claim 1 , wherein the first communications interface and first spectrum band correspond to vehicle-to-network (V2N) communications, and wherein the second communications interface and second spectrum band correspond to vehicle-to-vehicle communications.
10 . The method according to claim 1 , wherein the second communications interface is a PC5 interface and the second spectrum band is a 5.9 gigahertz (GHz) spectrum band.
11 . The method according to claim 1 , wherein the first message is not valid outside the range determined by the location tag.
12 . The method according to claim 1 , further comprising:
receiving, by the first communications interface via the first spectrum band, a key update message from the server, the key update message comprising a key update seed and version number information,
generating, based on the key update seed, the encryption key corresponding to the first V2V network service, and a key derivation function (KDF), an updated encryption key,
determining, based on the version number information, a version number of the updated encryption key.
13 . The method according to claim 12 , wherein the encryption key corresponding to the first V2V network service corresponds to a first update period, and wherein the updated encryption key corresponds to a second update period.
14 . A method performed by a server, the method comprising:
receiving, via a first spectrum band, a first request message from a first terminal device in a vehicle-to-vehicle (V2V) network, wherein the first request message:
requests the server to allocate an encryption key, corresponding to a first V2V network service, for encrypting communications to be broadcast in the V2V network via a second spectrum band, and
comprises an identifier of the first V2V network service, an identifier of the first terminal device, and location information of the first terminal device;
generating an encryption key corresponding to the first V2V network service, wherein the encryption key is generated based on the identifier of the first V2V network service, the identifier of the first terminal device, and a location tag determined based on the location information of the first terminal device, wherein the location tag determines a range within which the encryption key can be used; and
sending, via the first spectrum band, a first response message to the first terminal device, the first response message comprising the encryption key corresponding to the first V2V network service.
15 . The method according to claim 14 , wherein the identifier of the first terminal device comprises an integrity measurement value of the first terminal device, wherein the integrity measurement value is a standard metric value or a metric value obtained by the first terminal device by performing a trusted measurement, the method further comprising:
determining, based on the integrity measurement value, that the first terminal device is authorized to receive the encryption key corresponding to the first V2V network service.
16 . The method according to claim 14 , further comprising:
sending an authorization code corresponding to the encryption key to the first terminal device.
17 . The method according to claim 14 , wherein before the step of receiving the first request message from the first terminal device, the method further comprises:
receiving a prior request message from the first terminal device, wherein the prior request message requests the server to allocate the corresponding encryption key to the first V2V network service, and comprises the identifier of the first V2V network service and the identifier of the first terminal device; and
sending a prior response message to the first terminal device, wherein the prior response message indicates that the first V2V network service has the corresponding encryption key.
18 . The method according to claim 17 , wherein the step of sending the encryption key corresponding to the first V2V network service to the first terminal device comprises:
receiving an integrity measurement value of the first terminal device from the first terminal device;
determining, based on the integrity measurement value of the first terminal device, that the first terminal device is authorized to receive the encryption key corresponding to the first V2V network service, and
sending the encryption key corresponding to the first V2V network service to the first terminal device.
19 . The method according to claim 17 , wherein the step of determining the encryption key corresponding to the first V2V network service comprises:
determining, based on the identifier of the first terminal device, that the first terminal device is capable of enabling the first V2V network service; and
determining, based on the identifier of the first V2V network service, the encryption key corresponding to the first V2V network service.
20 . A terminal device comprising:
a memory storing executable instructions;
a processor configured to execute the executable instructions to perform operations of:
sending, by a first communications interface via a first spectrum band, a first request message to a server to request the server allocate an encryption key corresponding to a first vehicle-to-vehicle (V2V) service, the first request message comprising an identifier of the first V2V network service, an identifier of the first terminal device, and location information of the first terminal device;
receiving, by the first communications interface via the first spectrum band, a first response message from the server, the first response message comprising the encryption key corresponding to the first V2V network service, wherein the encryption key is generated based on the identifier of the first V2V network service and a location tag, wherein the location tag is determined based on the location information of the first terminal device, and wherein the location tag determines a range within which the encryption key can be used;
encrypting, using the encryption key, coordinate data of a first vehicle corresponding to the first terminal device; and
broadcasting, by a second communications interface to one or more additional terminal devices of one or more additional vehicles in the V2V network and via a second spectrum band, a first message comprising the encrypted coordinate data of the first vehicle,
wherein the one or more additional vehicles in the V2V network have been authenticated by the server.
21 . The terminal device according to claim 20 , wherein the identifier of the first terminal device comprises an integrity measurement value of the first terminal device,
wherein the integrity measurement value is a standard metric value or a metric value obtained by the first terminal device by performing a trusted measurement, and
wherein the encryption key is generated based further on verifying, based on the integrity measurement value, that the first terminal device is authorized to receive the encryption key corresponding to the first V2V network service.
22 . The terminal device according to claim 20 , wherein the processor is further configured to perform an operation of:
receiving, from the server, an authorization code corresponding to the encryption key, wherein the authorization code is for obtaining the encryption key.