An advanced security scheme based on clustering and key distribution in vehicular ad-hoc networks

Preservation of security is an essential requirement in vehicular ad hoc networks (VANETs) as vehicular communication is vulnerable to attacks. Attackers may exploit VANETs to send bogus information to deceive other vehicles which leads to serious issues. In this paper, we describe an advanced Secure scheme based on Clustering and Key Distribution (SCKD) among members and cluster-heads in VANET. The SCKD is a coordination based algorithm in which nodes are located within different clusters and their cluster heads are chosen from trusty nodes. For a secure end-to-end communication, our scheme deploys the proxy signature, blind proxy signature, hashed message authentication code, and symmetric cryptography. Results show that our scheme preserves security requirements including authentication, confidentiality, data-integrity, non-repudiation, and unforgeability. Since the cost and time computation of key generation and distribution decreases by SCKD compared with other algorithms, our algorithm will be applicable for VANETs.     

车联网中支持直接撤销的外包属性签名方案

数字签名在应对车联网中数据窜改威胁时扮演着重要作用,然而现有的签名方案面临着灵活性、效率、隐私保护、用户密钥管理等诸多问题,难以在车联网中释放潜力。针对这些问题,提出了一个面向车联网的直接可撤销外包属性签名方案。该方案使用了基于线性秘密分享的签名策略机制,赋予车联网用户在签名生成和验证方面的灵活性和隐私保护。此外,设计了一种高效的用户密钥直接撤销机制,以提供对用户的实时撤权。所提方案还构造了一种外包验证方法,从而显著降低了验证者的计算和存储开销。安全性分析结果表明,所提方案在选择消息攻击下具有不可伪造性,并且能够抵抗合谋攻击。实验结果表明了该方案相较于其他方案的优势及其在车联网中的实用性。     

F-Ant: an effective routing protocol for ant colony optimization based on fuzzy logic in vehicular ad hoc networks

Vehicular ad hoc networks (VANETs) are a subset of mobile ad hoc networks that provide communication services between nearby vehicles and also between vehicles and roadside infrastructure. These networks improve road safety and accident prevention and provide entertainment for passengers of vehicles. Due to the characteristics of VANET such as self-organization, dynamic nature and fast-moving vehicles, routing in this network is a considerable challenge. Swarm intelligence algorithms (nature-inspired) such as ant colony optimization (ACO) have been proposed for developing routing protocols in VANETs. In this paper, we propose an enhanced framework for ACO protocol based on fuzzy logic for VANETs. To indicate the effectiveness and performance of our proposed protocol, the network simulator NS-2 is used for simulation. The simulation results demonstrate that our proposed protocol achieves high data packet delivery ratio and low end-to-end delay compared to traditional routing algorithms such as ACO and ad hoc on-demand distance vector (AODV).

     

5G异构网络中基于群组的切换认证方案

随着5G网络的发展,各类网络服务质量极大提升的同时网络环境也愈加复杂,从而带来了一系列安全挑战。切换认证可以解决用户在不同类型网络间的接入认证问题,但现存方案仍存在一些不足,还需要解决如全局切换认证、密钥协商、隐私保护、抵抗伪装攻击、抵抗中间人攻击、抵抗重放攻击以及群组用户切换效率等问题。针对这些问题,提出了一个5G异构网络中基于群组的切换认证方案。在所提出的方案中,注册域服务器在区块链上为每个用户存入一个通行证,任何实体都可以利用该通行证对用户进行认证,从而实现全局切换认证。对于群组用户,各用户分别设置可聚合的认证参数,验证者通过验证聚合签名实现对群组用户的批量验证。新方案不仅提升了群组用户切换时的效率,同时还满足上述安全性要求。基于形式化分析软件AVISPA的分析结果表明,所提出的方案是安全的。性能分析表明,所提出的方案执行批量验证时的效率比现存方案至少提升了89.8%。     

Short signature scheme for multi-source network coding

It has been proven that network coding can provide significant benefits to networks. However, network coding is very vulnerable to pollution attacks. In recent years, many schemes have been designed to defend against these attacks, but as far as we know almost all of them are inapplicable for multi-source network coding system. This paper proposed a novel homomorphic signature scheme based on bilinear pairings to stand against pollution attacks for multi-source network coding, which has a broader application background than single-source network coding. Our signatures are publicly verifiable and the public keys are independent of the files so that our scheme can be used to authenticate multiple files without having to update public keys. The signature length of our proposed scheme is as short as the shortest signatures of a single-source network coding. The verification speed of our scheme is faster than those signature schemes based on elliptic curves in the single-source network.     

车联网中beacon消息传输频率研究

车联网(VANETs)提供车与车之间的车间通信(V2V)和车与路旁设施(V2I)间的通信.VANETs中存在两类消息:beacon消息和安全消息.车辆周期地交互车辆的beacon消息,仅在紧急情况下才广播安全消息;而beacon消息的传输频率受多个因素影响.为此,提出基于模糊逻辑的自适应beacon传输频率方案,利用模...     

一种适应于移动互连网的数字签名方案

本文描述了一种适用于移动互连网的数字签名方案。这种方案基于分布式计算体系,在签名者(或验证签名者)私有密钥和与通信对端共享的密钥不扩散的前提下实现签名方案。该方案解决了在只有弱计算能力的移动通信终端进行复杂签名和验证签名计算的问题。     

高效的分簇传感器网络广播认证方案*

广播是无线传感器网络的重要通信手段,广播消息的安全性应得到保障。在分簇传感器网络结构基础上提出了一种无线传感器网络广播认证方案,簇头节点对广播进行签名认证,簇内使用消息认证码进行消息认证,网关节点负责广播消息在簇间的传递。分析表明,与部分现有的传感器网络广播认证方案相比,该方案以较低的能耗提供了较高的安全性。     

车载自组织网中条件隐私保护认证方案

针对车载自组织网(VANET)中身份认证的隐私保护问题,提出了一种车载网中条件隐私保护认证方案.首先,引入短签名技术,构造了一个新的基于身份的短签名方案.与主流方案CPAS相比,该方案降低了签名和验证过程所需的计算开销,提高了通信效率; 其次,将签名者的私钥分成相互关联的两部分,有效地解决密钥托管问题,适合于车载自组织网环境; 进而基于新的签名方案,提出了一种车载网中条件隐私保护认证方案,实现了条件隐私保护的身份认证功能.经理论和效率分析表明,所提方案在签名过程只需3次点乘运算,而在验证过程只需1次点乘和2次配对运算,所耗计算量少.特别地,所提方案使用加入小系数检测的批认证方法,不仅提高了认证速度还降低了误接受率.     

An energy-efficient geographic routing protocol design in vehicular ad-hoc network

The combination of vehicles and wireless communication has resulted in a promising future for vehicular ad hoc networks (VANETs). The VANET is a kind of network that can be built randomly, quickly and temporarily without any infrastructure. The routing of data in a VANET is a challenging task due to the high dynamics, unstable connection environments and transfer direction limit (real road planning) involved. However, it has been discussed that radio obstacles, as found in urban areas, have a significant negative impact on the performance of location based routing. Therefore, the design of a suitable routing protocol for VANETs is an important issue, especially in regard to inter-vehicle communication applications. This paper proposes a energy-efficient geographic routing algorithm that uses the direction, density and distance between nodes in the crossroad routing strategy, to improve the link stability. We compare the novel scheme, ad hoc on-demand distance vector, and dynamic source routing (DSR) for packet loss rate and average end-to-end delay in VANETs to reduce the power consumptions. The simulation results are obtained which demonstrate the power effectiveness of our proposed routing strategy.     

基于演化图论的可靠的VANETs路由协议

车载网络（VANETs）属于移动无线网络的特例,具有鲜明的特性。传统无线网络的路由协议难以直接应用于VANETs。节点的高速移动,引起网络拓扑动态变化,导致VANETs的通信链路频繁断裂。高动态网络的链路可靠性问题引起广泛的关注。为此,针对高速公路VANETs的路由可靠性进行分析,对演化图论进行扩展,建立扩展后的演化图论模型（EEGM）,并利用EEGM获取VANETs拓扑的动态信息,从而预先获取可靠路由的信息。在此基础上,提出基于演化图论的可靠路由协议（EG-RAODV）。仿真结果表明,与同类的其他协议相比,提出的路由协议在分组传输率、端到端传输时延、路由请求消息率以及链路断裂数方面得到了提升。     

A social network approach to trust management in VANETs

In the past few years, vehicular ad hoc networks(VANETs) was studied extensively by researchers. VANETs is a type of P2P network, though it has some distinct characters (fast moving, short lived connection etc.). In this paper, we present several limitations of current trust management schemes in VANETs and propose ways to counter them. We first review several trust management techniques in VANETs and argue that the ephemeral nature of VANETs render them useless in practical situations. We identify that the problem of information cascading and oversampling, which commonly arise in social networks, also adversely affects trust management schemes in VANETs. To the best of our knowledge, we are the first to introduce information cascading and oversampling to VANETs. We show that simple voting for decision making leads to oversampling and gives incorrect results in VANETs. To overcome this problem, we propose a novel voting scheme. In our scheme, each vehicle has different voting weight according to its distance from the event. The vehicle which is more closer to the event possesses higher weight. Simulations show that our proposed algorithm performs better than simple voting, increasing the correctness of voting.     

LACAV: an energy-efficient channel assignment mechanism for vehicular ad hoc networks

Designing an efficient channel assignment system for Vehicular Ad hoc Networks (VANETs), which conserves energy, is a challenging task, primarily because of the high degrees of mobility of nodes in these networks. As the high mobility of nodes in vehicular networks leads to frequent handoffs, channel assignment in VANETs becomes a tedious task. In this paper, we propose a channel assignment mechanism using the concepts of learning automata (LA) and reusability. LA is used to optimize the performance of the proposed system by selecting suitable number of reserved channels for the handoff calls and reusability allows the channel to be reused by the different base stations (BSs) based on the reuse distance. The proposed system is designed to reduce the dropping probability. The proposed system is suitable for network architectures in which it is possible to arrange the BSs with different groups of channels sequentially in a particular order that helps in conserving energy. Our experiments clearly indicate that the system reduces the dropping probability and allows a continuous communication throughout the duration of the call. The performance of proposed algorithm is compared with the Vehicular Fast Handover Scheme (VFHS), and the Cooperative scheme for service channel reservation (CRaSCH) scheme in terms of handoff latency, and it is shown that the proposed algorithm performs better than VFHS and CRaSCH.     

延迟容忍网络的安全网络编码方案

当前针对污染攻击的解决方案需要公钥基础设施支持,但这对于移动Ad hoc网络而言并不可取,因此提出了无需公钥基础设施的网络编码方案。所提方案允许数据包相互验证,从而使中间节点可判断这些包是否可以未经源验证即可共同编码。分析和比较了其他签名方案,表明无需公钥的网络编码签名功能足以防止污染攻击。     

基于数字签名方案DSS/DSA的几种应用方案

随着计算机和网络通信技术的发展,数字签名技术得到了广泛的应用。文中以美国数字签名标准ＤＳＳ／ＤＳＡ为基础,设计了群体数字签名,数字签名的（ｔ,ｎ）共亨认证以及远程口令认证３种应用方案,即体数字允许多人分别签署同一份文件,然后所有的个体签名组成同一份群体签名。     

基于区块技术的权重标识的跨域认证方案

在分布式的网络环境中,多个企业机构之间有在某种共识下的共享资源.为预防未经授权的用户访问这些资源,将改进的基于权重的秘密共享签名方案用于联盟链中的共识过程,提出基于区块技术的权重标识的跨域认证模型.模型中不同CA机构作为联盟链中共识机制的验证节点,系统基于验证节点的权重采用改进的秘密共享方案生成拥有不同权重的私钥分配给...     

An adaptive approach for information dissemination in Vehicular Ad hoc Networks

Vehicular Ad hoc Networks (VANETs) appeared as a subclass of MANETs for inter-vehicle communication. However, VANETs have a relatively more dynamic nature as compared to MANETs concerning the network topology. The design and implementation of an efficient and scalable algorithm for information dissemination in VANETs constitutes a major issue that should be tackled. Indeed, in this dynamic environment, an increasing number of redundant broadcast messages will increase resource utilization, which would indirectly affect the network performance. In the past few years, several statistical-based broadcasting schemes, such as counter-based protocol, for information dissemination have been proposed in the context of MANETs. These schemes are based on various threshold parameters to help nodes to decide whether to rebroadcast or discard received messages. However, in dynamic networks, such as in VANETs, it is difficult even impossible to determine a priori these threshold values. Dynamically changing these values, to minimize the number of redundantly received messages while maintaining good latency and reachability, is a complex issue in the absence of centralized controllers or constant threshold parameters. This paper presents a decentralized and adaptive approach for information dissemination (AID) in VANETs. Simulations are conducted and results are presented to show that adaptive approaches have a better performance over statistical-based approaches.     

自组网匿名通信中的一个基于伪身份的签名方案

在自组网的匿名通信中，节点通常用伪身份来代替节点的真实身份进行通信并不断变更伪身份，从而达到隐藏节点真实身份的目的。由于一般的基于双线性映射的签名方案在匿名通信中，签名对私钥生成器(PKG)不是匿名的, 因为PKG可以生成任意伪身份对应的私钥。提出一个应用于自组网匿名通信的基于双线性映射和伪身份的签名方案解决上述问题。最后，对该方案进行了正确性、匿名性和安全性分析。     

关于VANETs路由协议的研究现状与进展

随着车载自组网络(VANETs)应用的不断深入,有关VANETs技术研究已成为众多学者关注的热点。由于VANETs节点的高速移动、不稳定的无线信道等显著特点,导致网络拓扑结构变化快、节点通信呈机会性、路径可用的持续时间短,因此,设计稳定可靠的消息路由方案成为VANETs应用的核心问题。阐述了路由协议研究的重要性,并对VANETs的各种路由协议的进行了比较,分析各自优缺点,同时将现有的VANETs路由协议根据其性质分为五类,并研究了每类协议的特点。最后分析了VANETs的未来研究方向。     

基于消息认证混合同态签名的无线网络抗污染攻击方案

为提高无线网络抗污染攻击性能,提出一种基于消息认证混合同态签名的无线网络抗污染攻击方案。首先,采用有向多重图的源节点、非源节点集和链路集对无线网络编码过程进行模型构建,并考虑数据污染攻击和标签污染攻击2种类型的污染攻击建立网络抗污染模型;其次,利用MACs和D-MACs以及Sign同态签名方案,建立混合型的同态签名方案,实现对抗污染攻击模型的消息验证过程的改进,保证了每个MAC编码数据包内容的完整性,并提升了算法的执行效率;最后,通过在基于ASNC机制的实验模拟环境下,对所提算法在被污染节点百分比、流量累积分布和计算效率3个指标中的实验对比,验证了所提算法的性能优势。