GB/T 37374-2019Intelligent transport—Digital certificate application interface (English PDF)

3.1 Intelligent transport system

In the more improved transport infrastructure, effectively and comprehensively use the advanced science and technology (information technology, computer technology, data communication technology, sensor technology, electronic control technology, automatic control theory, operations research, artificial intelligence, etc.) into the fields of transportation, service control, and vehicle manufacturing; strengthen the contact among the vehicle, road and users; so that form a comprehensive transport system that guarantees safety, increases efficiency, improved environment, and saves energy.

3.2 Cooperative ITS

An intelligent transport system that realizes intelligent coordination and cooperation between vehicle and infrastructure, between vehicle and vehicle, between vehicle and user through the information interaction of user, vehicle and road.

3.3 Digital certificate

A digital file containing public key owner information, public key, issuer information, expiration date, and some extended information signed by the certification authority. [GB/T 20518-2006, definition 3.7]

3.4 SM2 algorithm

An elliptic curve cryptographic algorithm with a key length of 256 bits.

3.5 Algorithm identifier

Digital information used to identify algorithmic mechanism.

5.1 Overview

Digital certification application interface includes message signature and verification, Description: verification of message digital signature Parameters: plain [IN] signature original data buffer area pointer. plainLen [IN] signature original data length. signer [IN] encoded byte data buffer area pointer for the signer certificate. signerLen [IN] signature certificate data length. pk [IN] verification public key in the signature certificate. sign [IN] signature value. Return value: 0 - success; other - verification failure.

5.5 Message asymmetric encryption

The message asymmetric encryption interface is defined as follows:

Description: conduct the data encryption on the message Parameters: plain [IN] original text to be encrypted. plainLen [IN] original text length. symAlg [IN] symmetric encryption algorithm, defined as follows: pk [IN] encrypted public key from the certificate or signature message. kek [OUT] the result of encrypting a randomly generated symmetric key using an encrypted public key. cipherText [OUT] symmetric encryption result. Return value: 0 - encryption success; other - error. Prototype:

The security message syntax structure can be divided into two types:

a) When the application certificate type indicates organization certificate, civil service certificate, social public certificate, device certificate, the security message syntax structure shall follow GM/T 0010;

b) When the application certificate type indicates ITS device certificate, the security message syntax structure shall follow the definition of this Clause.

6.2 Description of basic elements

6.2.1 Encoding rules

The security message syntax consists of several types of basic elements. The following basic element data structure and message syntax are described by using ASN.1; and use OER to encode each information in the signature message and encrypted message.

6.2.2 Basic data type

The basic data type is defined as follows:

6.2.3 3-byte hash value The 3-byte hash value is defined as the Hashedld3 type; its structure is as follows:

Instruction: this hash value is used to identify the data such as certificates. Firstly, calculate the hash value of the input data; taking the lower 3 bytes of the 32-byte hash value.

6.2.4 8-byte hash value The 8-byte hash value is defined as the Hashedld8 type; its structure is as follows:

Instruction: this hash value is used to identify the data such as certificates. Firstly, Instruction: this structure represents a public key for asymmetric encryption calculation and its supported symmetric cryptographic algorithm.

6.2.9 Encrypted symmetric key

The symmetric key for encryption is defined as EciesEncryptedKey type; its structure is as follows:

Instruction: eccCurve indicates the elliptic curve used for asymmetric cryptographic calculation;

Vector v: the temporary key used by the sender for encryption. This temporary key v is used only once; each encryption shall generate new key; Vector c: contains the encrypted symmetric key;

Vector t: when the public key encryption algorithm is the Chinese cipher algorithm, it corresponds to the M in the Chinese cipher algorithm. When the public key encryption algorithm is the international algorithm, it contains 16-byte authentication token, which is placed in the first 16 bytes; the last 16 bytes are zero.

6.2.10 Signer information

The certificate signer information is defined as SignerInfo type, its structure is as follows:

When not self-signing, it indicates the encoding content of the signer certificate.

6.2.13 32-bit time The 32-bit time information is defined as Time32 type; its structure is as follows:

Instruction: Time32 is a 32-bit unsigned integer; in big-endian encoding format; starting from UTC 00.00:00 on January 01, 2004; giving the number of seconds in the international atomic time; the cycle of 232 seconds lasts for 136 years until 2140.

6.2.14 64-bit time The 64-bit time information is defined as Time64 type; its structure is as follows:

Instruction: Time64 is a 64-bit unsigned integer; in big-endian encoding format; starting from UTC00.00:00 on January 01, 2004; giving the number of micro-seconds in international atomic time.

6.2.15 3D location information The 3D location information is defined as ThreeDLocation type; its structure is as follows:

Instruction: Elevation indicates the height above the sea level; in dm; value range is

6.2.16 Latitude

The latitude information is defined as Latitude type; its structure is as follows: […]