National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, USM, Gelugor 11800, Penang, Malaysia.
Sensors (Basel). 2022 Feb 22;22(5):1696. doi: 10.3390/s22051696.
Existing identity-based schemes utilized in Vehicular Ad hoc Networks (VANETs) rely on roadside units to offer conditional privacy-preservation authentication and are vulnerable to insider attacks. Achieving rapid message signing and verification for authentication is challenging due to complex operations, such as bilinear pairs. This paper proposes a secure pseudonym-based conditional privacy-persevering authentication scheme for communication security in VANETs. The Elliptic Curve Cryptography (ECC) and secure hash cryptographic function were used in the proposed scheme for signing and verifying messages. After a vehicle receives a significant amount of pseudo-IDs and the corresponding signature key from the Trusted Authority (TA), it uses them to sign a message during the broadcasting process. Thus, the proposed scheme requires each vehicle to check all the broadcasting messages received. Besides, in the proposed scheme, the TA can revoke misbehaving vehicles from continuously broadcasting signed messages, thus preventing insider attacks. The security analysis proved that the proposed scheme fulfilled the security requirements, including identity privacy-preservation, message integrity and authenticity, unlinkability, and traceability. The proposed scheme also withstood common security attacks such as man-in-the-middle, impersonation, modification, and replay attacks. Besides, our scheme was resistant against an adaptive chosen-message attack under the random oracle model. Furthermore, our scheme did not employ bilinear pairing operations; therefore, the performance analysis and comparison showed a lower resulting overhead than other identity-based schemes. The computation costs of the message signing, individual signature authentication, and batch signature authentication were reduced by 49%, 33.3%, and 90.2%, respectively.
现有的车联网(VANET)中基于身份的方案依赖于路侧单元提供条件隐私保护认证,并且容易受到内部攻击。由于复杂的操作,如双线性对,实现快速消息签名和验证对于认证来说是具有挑战性的。本文提出了一种安全的基于假名的条件隐私保护认证方案,用于 VANET 中的通信安全。椭圆曲线密码学(ECC)和安全散列密码函数被用于该方案中的消息签名和验证。车辆从可信权威(TA)接收到大量伪 ID 和相应的签名密钥后,它在广播过程中使用它们来签署消息。因此,该方案要求每辆车检查接收到的所有广播消息。此外,在提出的方案中,TA 可以从持续广播签名消息中撤销行为不当的车辆,从而防止内部攻击。安全分析证明了该方案满足了安全要求,包括身份隐私保护、消息完整性和真实性、不可链接性和可追溯性。该方案还抵御了中间人、模拟、修改和重播攻击等常见的安全攻击。此外,我们的方案在随机 oracle 模型下抵抗适应性选择消息攻击。此外,我们的方案不使用双线性配对操作;因此,性能分析和比较表明,与其他基于身份的方案相比,开销更低。消息签名、个体签名认证和批量签名认证的计算成本分别降低了 49%、33.3%和 90.2%。