摘要： 分析一种基于身份的车载自组网匿名认证方案,指出该方案由于将盲化处理后的公钥和私钥作为认证信息在公开信道上传送,使攻击者能够利用截获的公私钥信息伪造认证信息。针对该问题,提出改进方案,利用一次性公钥构造时间戳的签名作为认证信息,阻止攻击者获得私钥信息。分析结果表明,改进方案在实现匿名认证的同时,能够有效抵抗伪造攻击。

关键词: 车载自组网, 匿名认证, 伪造攻击, 基于身份的密码体制, 一次性公钥

Abstract: An identity-based anonymous authentication scheme in Vehicle Ad Hoc Network(VANET) is analyzed.It is demonstrated that the attacker can forge authentication proof using the intercepted secret key and public key because of sending the blinded secret key and public key as authentication proof in the open channel.Aiming at this problem,an improved authentication scheme is proposed.It constructs the signature of timestamp using the one-off public key as authentication proof,so as to make the attacker cannot obtain the secret key.Analysis result shows that the improved scheme can resist forgery attack while realizing anonymous authentication.

Key words: Vehicle Ad Hoc Network(VANET), anonymous authentication, forgery attack, identity-based cryptography, one-off public key

中图分类号: 

• TP393