System and Method for Vehicle Messaging Using a Public Key Infrastructure

A vehicle messaging system comprising:

• an on-board equipment (OBE) configured to reside in a first vehicle, the OBE comprising:
• a processor;
• and
• a non-transitory computer readable medium;
• wherein initial trust information is stored in the non-transitory computer readable medium, the initial trust information comprising a root public key (RPK), and
• wherein programming for execution by the processor is stored in the non-transitory computer readable medium, the programming comprising instructions to:
• obtain a message authentication set comprising a first pool of group certificate (GC) sets and a first vehicle authentication certificate (VAC), wherein the first VAC comprises a first encrypted serial number (ESN) of the first vehicle;
• select a first GC set from the first pool, wherein the first GC set comprises a first GC and a first group private key (Gpk);
• determine a first signature in accordance with a first message and a digest function, wherein the first message comprises the first GC;
• send a first datagram comprising the first message and the first signature;
• receive a second datagram comprising a second GC and a second signature, wherein the second GC is a duplicate of a GC comprised in the first pool;
• receive a third datagram comprising a third GC and a third signature, wherein the third GC is not a duplicate of any GC comprised in the first pool;
• verify the second datagram in accordance with the digest function and the RPK;
• and
• verify the third datagram in accordance with the digest function and the RPK.

A cryptographic support system comprising:

• a registration authority (RA) node comprising at least one RA processor, an RA network interface, and an RA storage set;
• wherein the RA network interface comprises an upstream RA port;
• and
• wherein the RA storage set comprises at least one non-transitory computer readable medium storing RA programming for execution by the at least one RA processor, the RA programming comprising instructions to:
• send, at the upstream RA port, a first anonymous registration request comprising a first encrypted serial number (ESN) and an encrypted first vehicle authentication public key (VAPK);
• receive, at the upstream RA port, a first registration package comprising:
• an encrypted first pool of group certificates (GCs) that is encrypted in accordance with the first VAPK, wherein the first pool comprises a first GC;
• send, at the upstream RA port, a second anonymous registration request comprising a second ESN and an encrypted second VAPK;
• and
• receive, at the upstream RA port, a second registration package comprising:
• an encrypted second pool of GCs that is encrypted in accordance with the second VAPK, wherein the second pool comprises:
• the first GC;
• and
• a second GC that is not comprised in the first pool.