Department of Computer Science, Electrical & Space Engineering, Luleå University of Technology, 97187 Luleå, Sweden.
Department of Computer Science (DIDA), Blekinge Institute of Technology, 37179 Karlskrona, Sweden.
Sensors (Basel). 2021 Sep 8;21(18):6018. doi: 10.3390/s21186018.
Continuous and emerging advances in Information and Communication Technology (ICT) have enabled Internet-of-Things (IoT)-to-Cloud applications to be induced by data pipelines and Edge Intelligence-based architectures. Advanced vehicular networks greatly benefit from these architectures due to the implicit functionalities that are focused on realizing the Internet of Vehicle (IoV) vision. However, IoV is susceptible to attacks, where adversaries can easily exploit existing vulnerabilities. Several attacks may succeed due to inadequate or ineffective authentication techniques. Hence, there is a timely need for hardening the authentication process through cutting-edge access control mechanisms. This paper proposes a Blockchain-based Multi-Factor authentication model that uses an embedded Digital Signature (MFBC_eDS) for vehicular clouds and Cloud-enabled IoV. Our proposed MFBC_eDS model consists of a scheme that integrates the Security Assertion Mark-up Language (SAML) to the Single Sign-On (SSO) capabilities for a connected edge to cloud ecosystem. MFBC_eDS draws an essential comparison with the baseline authentication scheme suggested by Karla and Sood. Based on the foundations of Karla and Sood's scheme, an embedded Probabilistic Polynomial-Time Algorithm (ePPTA) and an additional Hash function for the Pi generated during Karla and Sood's authentication were proposed and discussed. The preliminary analysis of the proposition shows that the approach is more suitable to counter major adversarial attacks in an IoV-centered environment based on the Dolev-Yao adversarial model while satisfying aspects of the Confidentiality, Integrity, and Availability (CIA) triad.
信息技术和通信技术(ICT)的持续和新兴进展使得物联网(IoT)到云应用程序能够通过数据管道和基于边缘智能的架构来诱导。先进的车辆网络由于侧重于实现车联网(IoV)愿景的隐含功能,因此从这些架构中受益匪浅。然而,IoV 容易受到攻击,攻击者可以轻松利用现有漏洞。由于身份验证技术不足或无效,可能会有几种攻击成功。因此,迫切需要通过先进的访问控制机制来加强身份验证过程。本文提出了一种基于区块链的多因素认证模型,该模型使用嵌入式数字签名(MFBC_eDS)对车辆云及启用云的 IoV 进行认证。我们提出的 MFBC_eDS 模型包括一种方案,该方案将安全断言标记语言(SAML)集成到用于连接边缘到云生态系统的单点登录(SSO)功能中。MFBC_eDS 与 Karla 和 Sood 提出的基准身份验证方案进行了重要比较。在 Karla 和 Sood 方案的基础上,提出并讨论了用于 Karla 和 Sood 身份验证期间生成的 Pi 的嵌入式概率多项式时间算法(ePPTA)和附加哈希函数。该提议的初步分析表明,该方法在基于 Dolev-Yao 对抗模型的以 IoV 为中心的环境中更适合抵御主要的对抗性攻击,同时满足机密性、完整性和可用性(CIA)三重的要求。