分布式智能车载网联系统的匿名认证与密钥协商协议

张晓均; 唐浩宇; 张楠; 王文琛; 薛婧婷

doi:10.11999/JEIT230394

分布式智能车载网联系统的匿名认证与密钥协商协议

doi: 10.11999/JEIT230394

张晓均^{1, 2, 3, 4, ,},
唐浩宇^{1, 2},
张楠^{1, 2},
王文琛^{1, 2},
薛婧婷^{1, 2}

1.
西南石油大学计算机与软件学院成都 610500
2.
西南石油大学网络空间安全研究中心成都 610500
3.
中国石油集团东方地球物理勘探有限责任公司涿州 072751
4.
中国石油集团油气勘探计算机软件国家工程研究中心涿州 072751

基金项目: 国家自然科学基金(61902327)，四川省自然科学基金(2023NSFSC1398)，中国博士后科学基金(2020M681316)

详细信息

作者简介:
张晓均：男，副教授，研究方向为密码学与信息安全、车联网安全、云计算安全

唐浩宇：男，硕士生，研究方向为车联网安全

张楠：男，硕士生，研究方向为车联网安全

王文琛：男，硕士生，研究方向为车联网安全

薛婧婷：女，讲师，研究方向为密码学与信息安全、车联网安全、云计算安全

通讯作者:
张晓均　zhangxjdzkd2012@163.com

中图分类号: TN915
计量
- 文章访问数: 304
- HTML全文浏览量: 71
- PDF下载量: 64
- 被引次数: 0
出版历程
- 收稿日期: 2023-05-09
- 修回日期: 2024-01-31
- 网络出版日期: 2024-03-08
- 刊出日期: 2024-04-24

Anonymous Authentication and Key Agreement Protocol Based on Distributed Intelligent Vehicle Networking System

ZHANG Xiaojun^{1, 2, 3, 4
, ,},
TANG Haoyu^{1, 2},
ZHANG Nan^{1, 2},
WANG Wenchen^{1, 2},
XUE Jingting^{1, 2}

1.
School of Computer Science and Software Engineering, Research Center for Cyber Security, Chengdu 610500, China
2.
Southwest Petroleum University, Research Center for Cyber Security, Chengdu 610500, China
3.
BGP Inc., China National Petroleum Corporation, ZhuoZhou 072751, China
4.
National Engineering Research Center of Oil & Gas Exploration Computer Software, China National Petroleum Corporation, Zhuozhou 072751, China

Funds: The National Natural Science Foundation (61902327), The Natural Science Foundation of Sichuan Province (2023NSFSC1398), China Postdoctoral Science Foundation (2020M681316)

摘要

摘要: 智能车载网联系统作为智慧城市建设的重要组成部分，近年来受到学术界与工业界越来越多的关注。智能车载网联系统中提升了智能车辆的行驶安全性与出行效率，但在开放的环境下数据传输容易被截取，造成敏感信息泄漏。因此需要实现匿名认证并且协商正确的会话密钥，来确保智能车载网联系统敏感信息的安全。该文提出面向分布式智能车载网联系统架构的匿名认证与密钥协商协议。该协议基于中国剩余定理秘密分享技术来保护认证标识符，智能车辆能够以线性的计算开销在不同的区域恢复出对应的标识符，该标识符能够长期安全使用且智能车辆能够在不使用防篡改设备的情况下完成安全认证，路侧通信基站能够检测信息的匿名性和完整性，并与智能车辆协商到后续安全通信的会话密钥，同时实现双向认证。此外，协议能够在复杂的分布式智能车载网联系统中拓展批量匿名认证、域密钥更新、车对车的匿名认证、匿名身份可追踪等实用性功能。安全性与性能分析表明该协议能够安全高效地部署在分布式智能车载网联环境。
- 智能车载网联系统 /
- 匿名认证 /
- 中国剩余定理 /
- 密钥协商 /
- 身份追踪
Abstract: As an important component of smart city construction, intelligent vehicle networking system has received increasing attention from academia and industry in recent years. In the intelligent vehicle networking system, the vehicle communication module transmits real-time data through the wireless sensor networks, improving the driving safety and travel efficiency of intelligent vehicles. The intelligent vehicle networking system is prone to data transmission interception in an open environment, causing sensitive information leakage, and even malicious attackers can anonymously forge the real identity of the intelligent vehicle to disrupt traffic order. Therefore, the intelligent vehicle networking system needs to achieve anonymous authentication and negotiate the correct session key to ensure the confidentiality of sensitive information. In this paper, an anonymous authentication and key agreement protocol is proposed for distributed intelligent vehicle networking system architecture. The protocol protects the authentication identifier based on the secret sharing technology of the Chinese Remainder Theorem. The intelligent vehicle can recover the corresponding identifier in different regions with linear computing overhead. The identifier can be used safely for a long time, and the intelligent vehicle can complete security authentication without using tamper proof devices. The roadside communication base station can check the anonymity and integrity of information, and negotiate the session key for subsequent secure communication with the intelligent vehicle, while achieving bidirectional authentication. In addition, the protocol can expand practical functions such as batch anonymous authentication, domain key update, vehicle to vehicle anonymous authentication, and anonymous identity traceability in complex distributed intelligent vehicle networking system. The security and performance analysis shows that the protocol can be safely and efficiently deployed in a distributed intelligent vehicle networking environment.
- Intelligent vehicle networking system /
- Anonymous authentication /
- Chinese remainder theorem /
- Key Agreement /
- Identity tracking

HTML全文

图 1 分布式智能网联车载系统模型

下载: 全尺寸图片幻灯片

图 2 计算开销对比

下载: 全尺寸图片幻灯片

图 3 通信开销对比

下载: 全尺寸图片幻灯片

参考文献(24)

[1]	YU Miao. Construction of regional intelligent transportation system in smart city road network via 5G network[J]. IEEE Transactions on Intelligent Transportation Systems, 2023, 24(2): 2208–2216. doi: 10.1109/TITS.2022.3141731.
[2]	BALKUS S V, WANG Honggang, CORNET B D, et al. A survey of collaborative machine learning using 5G vehicular communications[J]. IEEE Communications Surveys & Tutorials, 2022, 24(2): 1280–1303. doi: 10.1109/COMST.2022.3149714.
[3]	DEBBABI F, JMAL R, FOURATI L C, et al. An overview of interslice and intraslice resource allocation in B5G telecommunication networks[J]. IEEE Transactions on Network and Service Management, 2022, 19(4): 5120–5132. doi: 10.1109/TNSM.2022.3189925.
[4]	KHUJAMATOV H, LAZAREV A, AKHMEDOV N, et al. Overview of vanet network security[C]. Proceedings of 2022 International Conference on Information Science and Communications Technologies, Tashkent, Uzbekistan, 2022: 1–6,doi: 10.1109/ICISCT55600.2022.10146946.
[5]	KELARESTAGHI K B, FORUHANDEH M, HEASLIP K, et al. Intelligent transportation system security: Impact-oriented risk assessment of in-vehicle networks[J]. IEEE Intelligent Transportation Systems Magazine, 2021, 13(2): 91–104. doi: 10.1109/MITS.2018.2889714.
[6]	KIELA K, BARZDENAS V, JURGO M, et al. Review of V2X–IoT standards and frameworks for ITS applications[J]. Applied Sciences, 2020, 10(12): 4314. doi: 10.3390/app10124314.
[7]	KHELIFI H, LUO Senlin, NOUR B, et al. Named data networking in vehicular Ad Hoc networks: State-of-the-art and challenges[J]. IEEE Communications Surveys & Tutorials, 2020, 22(1): 320–351. doi: 10.1109/COMST.2019.2894816.
[8]	JIANG Xiantao, YU F R, SONG Tian, et al. Resource allocation of video streaming over vehicular networks: A survey, some research issues and challenges[J]. IEEE Transactions on Intelligent Transportation Systems, 2022, 23(7): 5955–5975. doi: 10.1109/TITS.2021.3065209.
[9]	NAYAK B P, HOTA L, KUMAR A, et al. Autonomous vehicles: Resource allocation, security, and data privacy[J]. IEEE Transactions on Green Communications and Networking, 2022, 6(1): 117–131. doi: 10.1109/TGCN.2021.3110822.
[10]	JU Zhiyang, ZHANG Hui, LI Xiang, et al. A survey on attack detection and resilience for connected and automated vehicles: From vehicle dynamics and control perspective[J]. IEEE Transactions on Intelligent Vehicles, 2022, 7(4): 815–837. doi: 10.1109/TIV.2022.3186897.
[11]	RAYA M and HUBAUX J P. Securing vehicular ad hoc networks[J]. Journal of Computer Security, 2007, 15(1): 39–68. doi: 10.3233/JCS-2007-15103.
[12]	LU Huang, LI Jie, and GUIZANI M. A novel ID-based authentication framework with adaptive privacy preservation for VANETs[C]. Proceedings of 2012 Computing, Communications and Applications Conference, Hong Kong, China, 2012: 345–350. doi: 10.1109/ComComAp.2012.6154869.
[13]	LIN Xiaodong, SUN Xiaoting, HO P H, et al. GSIS: A secure and privacy-preserving protocol for vehicular communications[J]. IEEE Transactions on Vehicular Technology, 2007, 56(6): 3442–3456. doi: 10.1109/TVT.2007.906878.
[14]	ZENG Shengke, HUANG Yuan, and LIU Xingwei. Privacy-preserving communication for VANETs with conditionally anonymous ring signature[J]. International Journal of Network Security, 2015, 17(2): 135–141.
[15]	TZENG S F, HORNG S J, LI Tianrui, et al. Enhancing security and privacy for identity-based batch verification scheme in VANETs[J]. IEEE Transactions on Vehicular Technology, 2017, 66(4): 3235–3248. doi: 10.1109/TVT.2015.2406877.
[16]	WEI Lu, CUI Jie, XU Yan, et al. Secure and lightweight conditional privacy-preserving authentication for securing traffic emergency messages in VANETs[J]. IEEE Transactions on Information Forensics and Security, 2021, 16: 1681–1695. doi: 10.1109/TIFS.2020.3040876.
[17]	张晓均, 王文琛, 付红, 等. 智能车载自组织网络中匿名在线注册与安全认证协议[J]. 电子与信息学报, 2022, 44(10): 3618–3626. doi: 10.11999/JEIT210882. ZHANG Xiaojun, WANG Wenchen, FU Hong, et al. Anonymous online registration and secure authentication protocol in intelligent vehicular Ad-hoc networks[J]. Journal of Electronics & Information Technology, 2022, 44(10): 3618–3626. doi: 10.11999/JEIT210882.
[18]	ZHANG Jing, CUI Jie, ZHONG Hong, et al. PA-CRT: Chinese Remainder theorem based conditional privacy-preserving authentication scheme in vehicular Ad-Hoc networks[J]. IEEE Transactions on Dependable and Secure Computing, 2021, 18(2): 722–735. doi: 10.1109/TDSC.2019.2904274.
[19]	CHUANG M C and LEE J F. TEAM: Trust-extended authentication mechanism for vehicular Ad Hoc networks[J]. IEEE Systems Journal, 2014, 8(3): 749–758. doi: 10.1109/JSYST.2012.2231792.
[20]	张海波, 兰凯, 黄宏武, 等. 车联网中可证安全的分布式匿名高效边缘认证协议[J]. 电子与信息学报, 2023, 45(8): 2902–2910. doi: 10.11999/JEIT220846. ZHANG Haibo, LAN Kai, HUANG Hongwu, et al. Provably secure distributed efficient edge authentication protocol with anonymity in internet of vehicles[J]. Journal of Electronics & Information Technology, 2023, 45(8): 2902–2910. doi: 10.11999/JEIT220846.
[21]	XIONG Wanjun, WANG Ruomei, WANG Yujue, et al. CPPA-D: Efficient conditional privacy-preserving authentication scheme with double-insurance in VANETs[J]. IEEE Transactions on Vehicular Technology, 2021, 70(4): 3456–3468. doi: 10.1109/TVT.2021.3064337.
[22]	JIANG Shuo, CHEN Xue, CAO Yibo, et al. APKI: An anonymous authentication scheme based on PKI for VANET[C]. Proceedings of 2022 7th International Conference on Computer and Communication Systems, Wuhan, China, 2022: 530–536. doi: 10.1109/ICCCS55155.2022.9845923.
[23]	ZHANG Xiaoyu, ZHONG Hong, CUI Jie, et al. LBVP: A lightweight batch verification protocol for fog-based vehicular networks using self-certified public key cryptography[J]. IEEE Transactions on Vehicular Technology, 2022, 71(5): 5519–5533. doi: 10.1109/TVT.2022.3157960.
[24]	XIE Qi, DING Zixuan, and ZHENG Panpan. Provably secure and anonymous V2I and V2V authentication protocol for VANETs[J]. IEEE Transactions on Intelligent Transportation Systems, 2023, 24(7): 7318–7327. doi: 10.1109/TITS.2023.3253710.