Security certificate management method for a vehicular network node and vehicular network node applying the same

A vehicle network node used in a vehicle network, the vehicle network node including:

• a communication circuitry to receive a message;
• a processing circuitry to check whether a certificate of the message has been revoked,
• wherein if the certificate has been revoked, then the processing circuitry generates or updates a regional certificate revocation list according to the certificate and transmits the updated regional certificate revocation list within a communication range;
• and
• a storage circuitry to store the regional certificate revocation list,
• wherein
• the processing circuitry accesses the regional certificate revocation list from the storage circuitry of the vehicle network node and compares the certificate of the message with the regional certificate revocation list to determine whether the certificate of the message has been revoked;
• and
• the processing circuitry generates or updates the regional certificate revocation list stored in the storage circuitry according to the certificate and the processing circuitry controlling the communication circuitry to transmit the updated regional certificate revocation list within the communication range if the certificate has been revoked,
• the vehicle network node is an on-board circuitry equipped on a vehicle and the regional certificate revocation list is applied to the communication range of the vehicle network node,
• if the processing circuitry determines that the certificate of the message has not been revoked, then the processing circuitry checks whether a slave vehicle network node having sent the message newly enters into the communication range,
• if the slave vehicle network node having sent the message newly enters into the communication range, then the processing circuitry transmits the regional certificate revocation list through the communication circuitry to the slave vehicle network node having sent the message and records a relevant identification information of the slave vehicle network node having sent the message,
• wherein the processing circuitry checks whether a neighbor table comprises the relevant identification information of the slave vehicle network node having sent the message to determine whether the slave vehicle network node having sent the message newly enters into the communication range, and
• the relevant identification information includes a Media Access Control (MAC) address or a vehicle identification number (VIN).