Granted Patent B2

US 12,316,780 · App. 17/506,549 · Granted May 27, 2025

Inventors: Nicholas James Russell (Newbury, GB); Jonathon Brookfield (Great Cambourne, GB); Stephen John Barrett (Haywards Heath, GB)

Assignee: Malikie Innovations Limited

H04L9/3268H04L9/321H04L63/0823H04L63/107H04L63/108H04L67/12H04L67/52H04W4/40H04L65/1104H04L2101/654

Abstract

Claims (44)

1. A method at a first Intelligent Transportation System (ITS) station, the method comprising:

detecting an occurrence of a trigger event associated with a time limit or a geographical area limit of a previously received certificate revocation list (CRL) that has been exceeded or expired;

upon the occurrence of the trigger event being detected, determining one or more addresses for a CRL provisioning server to which to connect;

composing a CRL request message, the CRL request message including tailoring information for the first ITS station and intended journey details for the first ITS station;

sending the CRL request message to the CRL provisioning server;

in response to the CRL request message, receiving, from the CRL provisioning server, a tailored CRL;

receiving a CRL response message from a second ITS station, the CRL response message including (1) application message content, (2) a signature of the CRL request message, and (3) a certificate signed by a certificate authority;

checking the tailored CRL to determine whether the certificate included in the CRL response message is on the tailored CRL; and

when the certificate included in the CRL response message is not on the tailored CRL, extracting a public verification key from the certificate included in the CRL response message to verify the signature.

2. The method of claim 1 , wherein the tailored CRL includes expiration information.

3. The method of claim 2 , wherein the expiration information is an absolute or relative time that the tailored CRL will expire.

4. The method of claim 2 , wherein the expiration information is an absolute or relative geographic boundary, which, when crossed by the first ITS station, causes the tailored CRL to expire.

5. A first Intelligent Transportation System (ITS) station comprising:

a processor; and

a communications subsystem operably coupled with the processor and configured to:

detect an occurrence of a trigger event associated with a time limit or a geographical area limit of a previously received certificate revocation list (CRL) that has been exceeded or expired;

upon the occurrence of the trigger event being detected, determine one or more addresses for a CRL provisioning server to which to connect;

compose a CRL request message, the CRL request message including tailoring information for the first ITS station and intended journey details for the first ITS station;

send the CRL request message to the CRL provisioning server;

in response to the CRL request message, receive, from the CRL provisioning server, a tailored CRL;

receive a CRL response message from a second ITS station, the CRL response message including (1) application message content, (2) a signature of the CRL request message, and (3) a certificate signed by a certificate authority;

check the tailored CRL to determine whether the certificate included in the CRL response message is on the tailored CRL; and

when the certificate included in the CRL response message is not on the tailored CRL, extract a public verification key from the certificate included in the CRL response message to verify the signature.

6. The first ITS station of claim 5 , wherein the tailored CRL includes expiration information.

7. The first ITS station of claim 6 , wherein the expiration information is an absolute or relative time that the tailored CRL will expire.

8. The first ITS station of claim 6 , wherein the expiration information is an absolute or relative geographic boundary, which, when crossed by the first ITS station, causes the tailored CRL to expire.

9. The method of claim 1 , wherein the first ITS station is either a vehicle ITS station or a pedestrian ITS station.

10. The method of claim 1 , wherein the CRL response message is a vehicle-to-anything (V2X) message.

11. The method of claim 1 , wherein the certificate included in the CRL response message is an elliptic curve Qu-Vanstone (ECQV) certificate.

12. The method of claim 1 , wherein the intended journey details comprise a route the first ITS station intends to follow.

13. The method of claim 12 , wherein the tailoring information comprises one or more of:

location information for the first ITS station;

one or more identifiers belonging to the first ITS station; or

one or more certificates or identities of ITS stations that have communicated with the first ITS station within a threshold time period.

14. The method of claim 13 , wherein the one or more identifiers belonging to the first ITS station include one or more of: certificates or fields of certificates associated with the first ITS station; International Mobile Subscriber Identities, Temporary Mobile Subscriber Identities, Packet-Temporary Mobile Subscriber Identities, Globally Unique Temporary User Equipment Identities, or Fifth Generation Globally Unique Temporary User Equipment Identities; equipment identities; Mobile Station International Subscriber Directory Numbers; Internet Protocol addresses or portions of Internet Protocol addresses; Medium Access Control addresses; Session Initiation Protocol Universal Resource Identifiers; or Telephone Universal Resource Identifiers.

15. A non-transitory computer readable medium for storing instruction code, which, when executed by a processor of a first Intelligent Transportation System (ITS) station, causes the first ITS station to:

detect an occurrence of a trigger event associated with a time limit or a geographical area limit of a previously received certificate revocation list (CRL) has been exceeded or expired;

upon the occurrence of the trigger event being detected, determine one or more addresses for a CRL provisioning server to which to connect;

compose a CRL request message, the CRL request message including tailoring information for the first ITS station and intended journey details for the first ITS station;

send the CRL request message to the CRL provisioning server;

in response to the CRL request message, receive, from the CRL provisioning server, a tailored CRL;

receive a CRL response message from a second ITS station, the CRL response message including (1) application message content, (2) a signature of the CRL request message, and (3) a certificate signed by a certificate authority;

check the tailored CRL to determine whether the certificate included in the CRL response message is on the tailored CRL; and

when the certificate included in the CRL response message is not on the tailored CRL, extract a public verification key from the certificate included in the CRL response message to verify the signature.

Assignments (6)

Continuity (2)

References Cited (64)