基于切比雪夫混沌映射的车联网高效认证方案

车联网在智能交通系统构建中发挥重要作用,消息认证方案能够为车联网的实际应用提供可靠性和安全性保障,但现有认证方案多数存在计算效率低下的问题,为此,提出一种基于切比雪夫混沌映射的车联网认证方案。利用切比雪夫多项式的半群性质构建对称密钥,以实现车辆节点与路边设施单元（RSU）的密钥协商。车辆节点使用由RSU分发的时效性共享密钥完成车辆间的匿名消息认证,无须为每个消息签名验证一个较大的撤销列表,车辆的撤销也不会影响群组性能。分析结果表明,该方案可以满足车联网的安全需求并抵御多种安全攻击,同时提供条件隐私保护,其密钥协商与消息认证阶段的计算效率较高,通信开销较低。     

基于代理车辆的车载网络消息认证技术

车载自组织网络(vehicular ad hoc network,VANET)的固有特性使其存在诸多安全问题.特别地,当路边单元(RSU)的覆盖区域中出现大量车辆时,现有认证方法难以确保RSU快速对每辆车进行签名认证.因此,提出一种新的基于代理车辆的消息认证方法.代理车辆对其他车辆的消息进行验证,将验证结果传输给附近的...     

基于身份聚合签名的车载自组网消息认证方案

车载自组网(VANET)能提高智能交通系统的安全性和道路通行效率,然而网络通信环境的开放性使其容易遭受攻击进而引发各种安全问题。针对VANET中的隐私泄露和签名验证效率较低等问题,结合基于身份的密码体制和聚合签名技术,设计一个面向VANET的消息认证方案,将多个消息的认证聚合为一个短签名,车辆只需对聚合后的签名进行验证,即可快速判断所有签名的有效性。分析结果表明,在随机预言模型下,该方案的安全性规约于计算Diffie-Hellman困难问题,且能有效缩短车辆对通信消息的认证响应时间。     

车载自组网中可撤销的聚合签名认证方案

为解决车载自组网(VANET)面临的通信安全和隐私保护方面的问题,提出了一种车载自组网中可撤销的聚合签名认证方案.该方案通过匿名认证保障用户隐私,通过使用防篡改设备和聚合签名技术提高认证效率.为实现车辆撤销,要求车辆使用路边单元发放的成员密钥生成签名,当车辆进入路边单元的通信范围时,路边单元实时审查车辆身份,拒绝为撤销...     

解决高度分割的车载自组网络连通性问题的路侧单元最优化调度方案

车载自组网络VANET是一种拥有高度动态拓扑结构的移动自组网络。为了解决其频繁的网络分割问题,最新研究提出使用一种特殊的称为路侧单元RSU的基础设施部署于道路两侧来提高VANET连通性。本文主要研究RSU调度中的节能降耗问题:给定一组路侧单元,我们的目标是寻找指定时段内打开或关闭RSU的最优调度,以确保RSU系统所消耗的总能量最小化,同时维持VANET系统网络连通性。我们将这一问题分解为两个子问题,即网络瞬像调度问题和网络瞬像选取问题。网络瞬像调度问题用于决定某时刻VANET网络瞬像中所需的连通状态RSU的最小值,而网络瞬像选取问题则用于决定系统需要在哪些时刻更新网络瞬像。通过对这两个子问题的研究,我们最终给出关于RSU调度问题的完全解,并通过理论分析与实验结果证明本文的算法可以在保持VANET连通性的同时明显地节能降耗。     

车载自组织网络中新颖的无加密匿名认证方案

针对车载自组织网(VANET)身份认证中的隐私信息保护问题,提出了一种新的基于线性方程组理论的匿名认证方案。该方案不使用传统的任何对称或非对称加密算法,而是利用线性方程组的求解理论,构建了一种匿名身份认证模型,在保证节点身份可认证的同时又防止了节点身份信息在非安全传输信道上泄露。此外,方案不仅满足了车辆单元节点(OBU)与路边单元节点(RSU)间的身份认证的需求,而且确保了车辆节点之间的身份认证。安全性和复杂性分析结果表明,所提方案安全可靠,且有较低的计算和通信开销。     

SEMD: Secure and efficient message dissemination with policy enforcement in VANET

Vehicular ad hoc network (VANET) is an increasing important paradigm, which not only provides safety enhancement but also improves roadway system efficiency. However, the security issues of data confidentiality, and access control over transmitted messages in VANET have remained to be solved. In this paper, we propose a secure and efficient message dissemination scheme (SEMD) with policy enforcement in VANET, and construct an outsourcing decryption of ciphertext-policy attribute-based encryption (CP-ABE) to provide differentiated access control services, which makes the vehicles delegate most of the decryption computation to nearest roadside unit (RSU). Performance evaluation demonstrates its efficiency in terms of computational complexity, space complexity, and decryption time. Security proof shows that it is secure against replayable choosen-ciphertext attacks (RCCA) in the standard model.     

车载自组织网络中基于身份的匿名认证方案

针对于车载自组织网络中的身份认证问题,提出一种新颖的基于身份的匿名认证方案,该方案在保护了车辆的身份隐私信息的同时不仅满足了车辆节点与路边单元节点间的身份认证的需求,而且确保了车辆节点之间的身份认证。该方案利用基于身份的密码技术,减少了系统管理公钥证书的工作量和对节点证书认证的代价。最后通过安全性和复杂性分析,结果表明该方案不仅易于实现,而且安全可靠并具有较低的计算复杂度及通信开销。     

车载自组网中基于无证书的密钥隔离批量消息认证方案

针对车载自组网(VANET)中匿名认证存在的安全性问题,提出了一种高效的车载自组网的匿名认证方案。该方案将无证书密码体制和密钥隔离技术结合应用在车载自组网的环境中,通过更新协助器RSU与车辆用户OBUi的密钥,使得某时间段的临时私钥的泄漏不会影响到前向和后向的安全性,并在随机预言模型下证明了该方案的安全性。最后,性能分析结果表明,该方案不仅提高了消息签名匿名认证的效率,而且降低了整个系统运算的开销,具有较好的理论意义与实用价值。     

VANET中基于RSU辅助签名环形成的方案

车辆自组织网络(Vehicular Ad-hoc Network,VANET)使交通系统更加智能和高效。信道的开放性以及车辆移动的高速性等特点,导致VANET存在诸如身份、传输数据以及位置等隐私信息泄露问题。目前,针对VANET的身份隐私泄露问题,越来越多的学者采用基于环签名的方案,但是车辆如何在行驶过程中与周围车辆组成签名环一直是一个难解决的问题。针对基础设施部署较完善地区,文中提出一种基于RSU(Road-Side Unit)辅助签名环形成的方案。该方案通过RSU收集覆盖区域内车辆的公钥并广播公钥集,从而确定区域内车辆的签名环,并利用双线性对映射实现RSU与车辆间消息传输的基于身份加密的过程。安全分析和实验证明,所提方案在基础设施较完善地区能够拥有较好的效率和安全性。     

A data distribution scheme for VANET based on fountain code

Data dissemination is one of the applications used to provide infotainment to the end-users in vehicular ad hoc networks (VANET). During this process, the vehicles receive the data broadcast by the RoadSide Unit (RSU). However, it is difficult for vehicles to collect the complete content within the communication range of one RSU when the vehicle moves at a high speed and the amount of broadcast data is large. To solve this problem, a multi-RSU cooperative data distribution scheme based on fountain code (MRFC) is proposed in this paper. The source data are encoded by fountain code and poured into the VANET by multiple cooperative RSUs, then the vehicles in the area share data packets through the V2V resource compensation method, so that all vehicles can obtain enough encoded packets to reconstruct the source data. To improve channel resource utilization and reduce delivery delays, the RSUs use fuzzy logic to determine the number of fountain code packets according to their locations, the speed and density of surrounding vehicles. The experimental results show that on the premise of ensuring the delivery rate, the proposed scheme can reduce the delivery delay by 30–50%, and achieve a significant improvement in performance.

     

基于报文哈希链的签名认证方法

针对TCP/IP协议缺乏内生安全机制引起的网络安全问题,以及IPSec等附加的安全增强技术存在效率低的问题,提出了一种基于报文哈希链的签名认证方法。该方法将所传输报文的哈希值通过迭代哈希形成一个关于报文序列的哈希链,通信双方通过报文哈希链确保报文序列的完整性;在进行报文签名认证时,通信双方只需按一定间隔对数据报文进行签名认证就能确保多个报文的完整性和不可抵赖性,并能显著提高报文安全传输的效率。通过实验证明,在相同网络环境以及通用软件实现方式下,基于报文哈希链的签名认证方法的平均比特率比IPSec逐包签名方法的平均比特率有显著提高,且这种签名认证方法能有效防范中间人攻击。     

A secure analysis of vehicular authentication security scheme of RSUs in VANET

The Vehicular Ad-Hoc Network (VANET) is a network to provide communication between nearby V2V (Vehicular to vehicular) and V2I(Vehicular to Infrastructure). In order to increase the network efficiency, it is required to have stability of transmission and security of reliability. In this paper, we propose a novel Vehicular Authentication Security Scheme (VASS) guaranteeing secure RSUs (Roadside Units) to OBUs(On-Board Units) in VANET on the basis of the ID-based authentication scheme using hi-pass card (or highway pass ticket) and license plate number. We show a usefulness and effectiveness of VASS after analyzed by the Petri nets.     

VANET中基于无证书环签密的可认证隐私保护方案

针对车载自组织网络(Vehicular ad-hoc Network,VANET)中车辆用户隐私信息保护和通信消息传输安全的问题,提出了一种可认证的无证书环签密方案。车辆通过可信机构生成的伪身份通信,有且仅有可信机构可以根据车辆节点的原始注册信息和追踪密钥确定消息发送车辆的真实身份,保证了通信的匿名性和对恶意车辆身份的可追踪性;消息发送车辆和接收车辆基于所构建的可认证环签密模型分别执行签密和解签密算法,实现了签密车辆身份和所发送消息的可认证;在随机预言模型下证明了所提方案具有机密性和不可伪造性。将所提的隐私保护方案与现有的VANET隐私保护方案进行安全性能的比较,证明了所提方案的机密性、可认证性和可追踪性等安全性较完善。通过列表比较了所提方案中环签密和解签密算法中各项运算的数量。将两种算法中双线性运算和标量乘运算的开销之和作为所提方案的计算开销,列表并进行数值分析。仿真实验基于Intel I7、3.07 GHz的硬件平台和MATLAB软件。结果表明,所提方案的计算开销远小于其余3个方案。当车辆数量增大到适用范围的上限100时,所提方案的计算开销仍小于150 ms。因此,该隐私保护方案满足了安全性和即时通信的要求,尤其适用于城市交通系统。     

车载自组网中可证明安全的无证书批认证方案

车载自组网(VANET)可以有效提高交通安全,但在其大量部署前必须解决安全和隐私问题。为此,提出一个VANET中有效的无证书批认证方案来解决传统基于身份的认证方案中存在的密钥托管问题。系统主密钥不预先装载到车辆的防窜改设备中,减少方案的安全性对防窜改设备的依赖;不采用计算量大的双线性对来减少计算开销;利用批认证算法提高认证效率。安全性分析表明,提出的方案在随机预言模型中是可证明安全的;与以往的方案相比,该方案在计算成本和通信成本方面具有较低的开销,适用于实际的VANET环境。     

基于无证书代理重签名的车载自组网消息认证方案

基于代理重签名和无证书公钥密码体制,提出了一个安全的车载自组网消息认证方案。认证中心利用代理重签名技术,可转换车载单元对消息的签名为路边单元的签名,从而降低了根据签名识别车辆身份的风险,实现通信消息的匿名性。采用无证书公钥密码体制将各实体的私钥分为两部分,有效解决了车载自组网中的证书管理与密钥托管问题。如果车辆发布虚假消息,认证中心能准确追溯到车辆的真实身份,并召回违法车辆。与Huang方案相比,新方案具有较高的安全性和较低的通信开销。     

基于双线性对的车载网络可靠消息认证机制

针对车载网络消息发布和认证中存在的车辆隐私性保护和消息可靠性问题,提出一个消息认证及签署机制。给出一种利用自产生伪名进行消息签名的方案,能够兼顾车辆隐私保护与有效身份认证,并通过多个用户的共同签署,提高发布消息的可靠性。同时对该方案的安全性和效率进行分析。     

An advanced security scheme based on clustering and key distribution in vehicular ad-hoc networks

Preservation of security is an essential requirement in vehicular ad hoc networks (VANETs) as vehicular communication is vulnerable to attacks. Attackers may exploit VANETs to send bogus information to deceive other vehicles which leads to serious issues. In this paper, we describe an advanced Secure scheme based on Clustering and Key Distribution (SCKD) among members and cluster-heads in VANET. The SCKD is a coordination based algorithm in which nodes are located within different clusters and their cluster heads are chosen from trusty nodes. For a secure end-to-end communication, our scheme deploys the proxy signature, blind proxy signature, hashed message authentication code, and symmetric cryptography. Results show that our scheme preserves security requirements including authentication, confidentiality, data-integrity, non-repudiation, and unforgeability. Since the cost and time computation of key generation and distribution decreases by SCKD compared with other algorithms, our algorithm will be applicable for VANETs.     

Restricted usage of anonymous credentials in vehicular ad hoc networks for misbehavior detection

The automobile industry is entering a new era of digitalization with major impact on human mobility and transportation infrastructures. A result of such a convergence between the automobile and information technologies is vehicular ad hoc network (VANET), a type of mobile ad hoc networks that has recently enjoyed a lot of attention from the industry, the research community, lawmakers and privacy activists. In VANET, vehicles frequently broadcast various types of messages, including location data. This enables innovative applications and improvements in safety and driving experience. As messages broadcasted in the VANET are digitally signed and the receiver must be able to verify the sender’s authentication and message integrity, there is a need to ensure broadcast authentication and protect driver’s anonymity. However, communication in VANETs takes place with high frequency, and malicious vehicles can hide behind anonymity in order to duplicate packets and get advantage over other vehicles in the network. Indeed, state-of-the-art approaches to privacy-preserving messages broadcast in the VANET typically ensure that each vehicle has a number of pseudonymous certificates that are changed regularly in order to thwart an automated tracing of its activities. However, the possibility of uncontrolled simultaneous use of pseudonyms by misbehaving vehicles remain unaddressed. This paper proposes a set of anonymous credential system based protocols for VANET that enables the detection and limitation of pseudonym/credential overspending. The revocation of the misbehaving vehicle can be also achieved through the proposed solutions. With the prototypical implementation of the proposed protocols, it has been shown that the successful detection of fraud, i.e., pseudonyms overspending and the subsequent revocation of credentials are possible in VANET.     

FBSS:一种基于公平盲签名和秘密共享的车载网隐私保护方案*

车载自组织网络是移动自组网络及无线传感器网络在交通领域的一种应用,由车辆节点,路侧单元,服务提供商等构成的一种新型移动自组织网络。车载自组网络利用无线信道进行数据传输,由于车载自组织网络本身的开放性和传输信息的敏感性,不可避免的面临信息的泄漏和攻击。如何保证车载自组织网络中的身份隐私和可信通信是亟待解决的关键问题。现有的工作通常采用认证机制,但在车辆认证的过程中不可避免地泄漏了用户的隐私,随后提出的匿名认证方案解决了隐私保护问题却忽略了匿名滥用的情况。针对上述问题,本文提出一种基于公平盲签名和秘密共享的匿名认证方案-FBSS。通过安全性分析和实验,该方案具有较高的匿名性和较高的效率。