Method and device for acquiring message certificate in vehicle networking system

A method for obtaining a message certificate in an internet of vehicles system, comprising:

• sending, by an On-Board Unit (OBU), first request to a Background Control Center (BCC), wherein the first request requests the BCC to transmit a privilege certificate to the OBU via a first data transmission link, the privilege certificate specifying a level of privilege for movement on a road, wherein the OBU comprises a transceiver;
• requesting, by the BCC, the privilege certificate from a Certificate Authority (CA);
• receiving, by the BCC, the privilege certificate from the CA;
• generating, by the BCC, a key pair for secure communication using the privilege certificate, the key pair including a public key and a private key;
• receiving, by the OBU, a write control instruction sent by the BCC via the first data transmission link,
• storing, by the OBU, the privilege certificate and the key pair carried in the write control instruction;
• if the OBU needs to issue a message using the privilege certificate, then sending a second request to the BCC, wherein the second request requests the BCC to authorize the OBU to use the privilege certificate;
• upon reception of an application control instruction sent by the BCC, issuing, by the OBU according to the application control instruction, the message using the privilege certificate in a valid time period specified by the BCC;
• and
• broadcasting, by the OBU, the issued message to other OBUs than the OBU.

An On-Board Unit (OBU), comprising:

• a processor;
• a transceiver;
• a memory storing at least one instruction, wherein the processor is configured to execute the at least one instruction to:
• send a first request to a Background Control Center (BCC), wherein the first request requests the BCC to transmit a privilege certificate to the OBU via a first data transmission link, the privilege certificate specifying a level of privilege for movement on a road;
• request, by the BCC, the privilege certificate from a Certificate Authority (CA);
• receive, by the BCC, the privilege certificate from the CA;
• generate, by the BCC, a key pair for secure communication using the privilege certificate, the key pair including a public key and a private key;
• receive a write control instruction sent by the BCC via the first data transmission link,
• store the privilege certificate and the key pair carried in the write control instruction;
• if the OBU needs to issue a message using the privilege certificate, send a second request to a BCC, wherein the second request requests the BCC to authorize the OBU to use the privilege certificate;
• receive an application control instruction sent by the BCC;
• after receiving the application control instruction sent by the BCC, issue the message using the privilege certificate in a valid time period specified by the BCC according to the application control instruction;
• and
• broadcast the issued message to other OBUs than the OBU.