车联网中可匿名的无证书聚合签名方案

doi:10.19678/j.issn.1000-3428.0068315

摘要/Abstract

摘要：

车联网(VANETs)是未来智能交通系统的交通基础, 可保障车辆的安全驾驶。然而, 在开放式无线通信模式和复杂的通信环境下, 车联网面临着车辆隐私泄露、通信带宽限制等一系列挑战。为此, 提出一种基于无证书聚合签名的匿名认证方案。该方案采用聚合技术实现了批量认证, 提高了认证效率, 并且通过协调可信中心和车辆来生成公/私钥对和伪身份, 一定程度上摆脱了对防篡改设备(TTPD)的依赖, 同时, 无证书机制避免了证书管理问题和密钥托管问题。当发生恶意事件时, 可信中心可以追踪车辆的真实身份, 并基于中国剩余定理实现车辆的跨域撤销。安全性证明和分析表明, 所提方案在随机谕言机模型下具有存在不可伪造性。效率比较结果表明, 该方案的计算成本和通信成本较低, 在车联网应用环境中具有实用价值, 与同类方案相比, 签名验证阶段计算成本减少了至少25%, 签名通信成本减少了至少6%, 并能满足更多的安全需求。

关键词: 车联网, 无证书聚合签名, 中国剩余定理, 批量验证, 条件隐私保护

Abstract:

Vehicle Ad-Hoc Networks(VANETs) serve as the foundational infrastructure for future intelligent traffic systems, which will help ensure the safe operation of vehicles. However, in an open wireless communication mode and complex communication environment, VANETs face a series of challenges including vehicle privacy leakage and communication bandwidth limitations. To address these issues, an authentication scheme that leverages a certificateless aggregate signature for enhanced anonymity is introduced. In this scheme, the authentication efficiency is enhanced through batch authentication, which is achieved using aggregation technology. Furthermore, with coordination between a trusted authority and vehicles, public/private key pairs and pseudonyms are generated, thereby partially reducing the reliance on Tamper-Proof Devices(TPDs). Furthermore, the problems of certificate management and key escrows can be avoided using a certificateless mechanism. When a malicious incident occurs, the trusted center can track the true identity of the vehicle and realize cross-domain revocation of the vehicle based on the Chinese Remainder Theorem(CRT). Security proofs and analyses demonstrate the unforgeability of the scheme under a random oracle model. In addition, a comparative analysis of the efficiency of the scheme with other relevant schemes indicates lower computation and communication costs, showing its practical value in the context of VANET applications. Compared with similar schemes, the calculation cost in the signature verification phase is reduced by at least 25% and the signature communication cost is reduced by at least 6%; therefore, the proposed scheme meets more security requirements.

Key words: Vehicle Ad-Hoc Networks(VANETs), certificateless aggregate signature, China Reminder Theorem(CRT), batch verification, conditional privacy protection

郭瑞, 胡国梁, 王俊茗. 车联网中可匿名的无证书聚合签名方案[J]. 计算机工程, 2024, 50(11): 207-222.

GUO Rui, HU Guoliang, WANG Junming. Anonymous Certificateless Aggregate Signature Scheme in VANETs[J]. Computer Engineering, 2024, 50(11): 207-222.

https://www.ecice06.com/CN/Y2024/V50/I11/207

图/表 10

图1 本文系统模型

Fig.1 System model in this paper

图2 单个签名生成和验证计算成本对比

Fig.2 Comparison of computational cost of individual signature generation and verification

图3 不同签名数量下验证计算成本对比

Fig.3 Comparison of computational cost of verification under different number of signature

图4 单个签名通信成本对比

Fig.4 Comparison of communication cost of individual signature

参考文献 34

1	CSEH C. Architecture of the Dedicated Short-Range Communications(DSRC) protocol[C]//Proceedings of the 48th IEEE Vehicular Technology Conference. Washington D. C., USA: IEEE Press, 1998: 2095-2099.
2	CHENG J J, CHENG J L, ZHOU M C, et al. Routing in Internet of vehicles: a review. IEEE Transactions on Intelligent Transportation Systems, 2015, 16 (5): 2339- 2352. doi: 10.1109/TITS.2015.2423667
3	SHEIKH M S, LIANG J. A comprehensive survey on VANET security services in traffic management system. Wireless Communications and Mobile Computing, 2019, 2019, 2423915. doi: 10.1155/2019/2423915
4	RAYA M, HUBAUX J P. Securing vehicular ad hoc networks. Journal of Computer Security, 2007, 15 (1): 39- 68. doi: 10.3233/JCS-2007-15103
5	SHAMIR A. Identity-based cryptosystems and signature schemes[C]//Proceedings of CRYPTO'84. Berlin, Germany: Springer, 1985: 47-53.
6	AL-RIYAMI S S, PATERSON K G. Certificateless public key cryptography[C]//Proceedings of International Conference on the Theory and Application of Cryptology and Information Security. Berlin, Germany: Springer, 2003: 452-473.
7	BONEH D, GENTRY C, LYNN B, et al. Aggregate and verifiably encrypted signatures from bilinear maps[C]//Proceedings of International Conference on the Theory and Applications of Cryptographic Techniques. Berlin, Germany: Springer, 2003: 416-432.
8	CASTRO R, DAHAB R. Efficient certificateless signatures-suitable for aggregation[EB/OL]. [2023-05-10]. http://eprint.iacr.org/2007/454.pdf.
9	HORNG S J, TZENG S F, HUANG P H, et al. An efficient certificateless aggregate signature with conditional privacy-preserving for vehicular sensor networks. Information Sciences, 2015, 317, 48- 66. doi: 10.1016/j.ins.2015.04.033
10	LI J, YUAN H, ZHANG Y. Cryptanalysis and improvement of certificateless aggregate signature with conditional privacy-preserving for vehicular sensor networks[EB/OL]. [2023-05-10]. https://eprint.iacr.org/2016/692.pdf.
11	ZHONG H, HAN S S, CUI J, et al. Privacy-preserving authentication scheme with full aggregation in VANET. Information Sciences, 2019, 476, 211- 221. doi: 10.1016/j.ins.2018.10.021
12	KAMIL I A, OGUNDOYIN S O. On the security of privacy-preserving authentication scheme with full aggregation in vehicular ad hoc network. Security and Privacy, 2020, 3 (3): e104. doi: 10.1002/spy2.104
13	MEI Q, XIONG H, CHEN J H, et al. Efficient certificateless aggregate signature with conditional privacy preservation in IoV. IEEE Systems Journal, 2021, 15 (1): 245- 256. doi: 10.1109/JSYST.2020.2966526
14	LIANG Y F, LIU Y N. Analysis and improvement of an efficient certificateless aggregate signature with conditional privacy preservation in VANETs. IEEE Systems Journal, 2023, 17 (1): 664- 672. doi: 10.1109/JSYST.2022.3180221
15	YE X, XU G C, CHENG X L, et al. Certificateless-based anonymous authentication and aggregate signature scheme for vehicular ad hoc networks. Wireless Communications and Mobile Computing, 2021, 2021, 1- 16. doi: 10.1155/2021/6677137
16	ZHANG J, CUI J, ZHONG H, et al. PA-CRT: Chinese remainder theorem based conditional privacy-preserving authentication scheme in vehicular ad-hoc networks. IEEE Transactions on Dependable and Secure Computing, 2021, 18 (2): 722- 735. doi: 10.1109/TDSC.2019.2904274
17	潘森杉, 王赛妃. 一种抗伪造攻击的车联网无证书聚合签密方案. 西安电子科技大学学报, 2023, 50 (2): 169- 177. doi: 10.19665/j.issn1001-2400.2023.02.017
	PAN S S, WANG S F. Certificateless aggregate signcryption scheme against forgery attacks for vehicular ad-hoc networks. Journal of Xidian University, 2023, 50 (2): 169- 177. doi: 10.19665/j.issn1001-2400.2023.02.017
18	SUN Y P, LU R X, LIN X D, et al. An efficient pseudonymous authentication scheme with strong privacy preservation for vehicular communications. IEEE Transactions on Vehicular Technology, 2010, 59 (7): 3589- 3603. doi: 10.1109/TVT.2010.2051468
19	SHIM K A. CPAS: an efficient conditional privacy-preserving authentication scheme for vehicular sensor networks. IEEE Transactions on Vehicular Technology, 2012, 61 (4): 1874- 1883. doi: 10.1109/TVT.2012.2186992
20	HE D, ZEADALLY S, XU B, et al. An efficient identity-based conditional privacy-preserving authentication scheme for vehicular ad hoc networks. IEEE Transactions on Information Forensics and Security, 2015, 10 (12): 2681- 2691. doi: 10.1109/TIFS.2015.2473820
21	AGUSTINA E R, HAKIM A R. Secure VANET protocol using hierarchical pseudonyms with blind signature[C]//Proceedings of the 11th International Conference on Telecommunication Systems Services and Applications(TSSA). Washington D. C., USA: IEEE Press, 2017: 1-4.
22	朱栋, 殷新春, 宁建廷. 车联网中具有强隐私保护的无证书签名方案. 计算机应用, 2022, 42 (10): 3091- 3101. URL
	ZHU D, YIN X C, NING J T. Certificateless signature scheme with strong privacy protection for Internet of vehicles. Journal of Computer Applications, 2022, 42 (10): 3091- 3101. URL
23	MAMUN M S I, MIYAJI A. An optimized signature verification system for vehicle ad hoc network[C]//Proceedings of the 8th International Conference on Wireless Communications, Networking and Mobile Computing. Washington D. C., USA: IEEE Press, 2012: 1-8.
24	SHAO J, LIN X D, LU R X, et al. A threshold anonymous authentication protocol for VANETs. IEEE Transactions on Vehicular Technology, 2016, 65 (3): 1711- 1720. doi: 10.1109/TVT.2015.2405853
25	赵臻, 陈杰, 张跃宇, 等. VANET中高效撤销的批量验证群签名方案. 密码学报, 2016, 3 (3): 292- 306. doi: 10.13868/j.cnki.jcr.000129
	ZHAO Z, CHEN J, ZHANG Y Y, et al. Efficient revocable group signature scheme with batch verification in VANET. Journal of Cryptologic Research, 2016, 3 (3): 292- 306. doi: 10.13868/j.cnki.jcr.000129
26	LU Y F, CAO S Z, HE Q Z, et al. Group signature authentication scheme with credit evaluation mechanism in VANET[C]//Proceedings of the 26th International Conference on Computer Supported Cooperative Work in Design(CSCWD). Washington D. C., USA: IEEE Press, 2023: 1703-1709.
27	HAN Y, XUE N N, WANG B Y, et al. Improved dual-protected ring signature for security and privacy of vehicular communications in vehicular ad-hoc networks. IEEE Access, 2018, 6, 20209- 20220. doi: 10.1109/ACCESS.2018.2822806
28	MUNDHE P, YADAV V K, VERMA S, et al. Efficient lattice-based ring signature for message authentication in VANETs. IEEE Systems Journal, 2020, 14 (4): 5463- 5474. doi: 10.1109/JSYST.2020.2980297
29	BOUAKKAZ S, SEMCHEDINE F. A certificateless ring signature scheme with batch verification for applications in VANET. Journal of Information Security and Applications, 2020, 55, 102669. doi: 10.1016/j.jisa.2020.102669
30	GUO R, XU L, LI X, et al. An efficient certificateless ring signcryption scheme with conditional privacy-preserving in VANETs. Journal of Systems Architecture, 2022, 129, 102633. doi: 10.1016/j.sysarc.2022.102633
31	XU Z Y, HE D B, KUMAR N, et al. Efficient certificateless aggregate signature scheme for performing secure routing in VANETs. Security and Communication Networks, 2020, 2020, 5276813. doi: 10.1155/2020/5276813
32	ALI I, GERVAIS M, AHENE E, et al. A blockchain-based certificateless public key signature scheme for vehicle-to-infrastructure communication in VANETs. Journal of Systems Architecture, 2019, 99, 101636. doi: 10.1016/j.sysarc.2019.101636
33	ZHOU X T, LUO M, VIJAYAKUMAR P, et al. Efficient certificateless conditional privacy-preserving authentication for VANETs. IEEE Transactions on Vehicular Technology, 2022, 71 (7): 7863- 7875. doi: 10.1109/TVT.2022.3169948
34	LYNN B. PBC(Pairing Based Cryptography) library[EB/OL]. [2023-05-10]. https://crypto.stanford.edu/pbc.

[1]	张冀, 龚雯雯, 朵春红, 齐国梁. 面向多智能体与双层卸载的车联网卸载算法[J]. 计算机工程, 2024, 50(8): 182-197.
[2]	杨小东, 李沐紫, 马国祖, 李松谕, 王彩芬. 车联网中支持非法签名定位的无证书匿名认证方案[J]. 计算机工程, 2024, 50(6): 157-165.
[3]	邢丹丹, 曹素珍, 赵晓, 周大伟, 王正. 车联网环境下多接收者匿名签密方案[J]. 计算机工程, 2024, 50(10): 205-215.
[4]	彭世明, 林士飏, 贾硕, 杨苗会. 基于负载预测的多目标优化任务卸载策略[J]. 计算机工程, 2024, 50(1): 206-215.
[5]	王翊丞, 郭瑞, 蒙彤, 刘颖菲. 智能电网中基于代理盲签密的隐私保护方案[J]. 计算机工程, 2023, 49(5): 150-164.
[6]	郑丽萍, 赵玉娟, 费选. 基于改进MOEA/D的车联网通信资源分配算法[J]. 计算机工程, 2023, 49(5): 191-197.
[7]	孙扬威, 戚湧. 基于聚类混合采样与PSO-Stacking的车载CAN入侵检测方法[J]. 计算机工程, 2023, 49(1): 138-145.
[8]	牛淑芬, 闫森, 吕锐曦, 周思玮, 张美玲. V2V车联网中隐私保护性异构聚合签密方案[J]. 计算机工程, 2022, 48(9): 20-27,36.
[9]	陈凯, 徐成, 刘宏哲, 代松银. 基于区块链的危险驾驶地图数据评估模型[J]. 计算机工程, 2022, 48(8): 160-165,172.
[10]	吴茂强, 黄旭民, 康嘉文, 余荣. 面向车路协同推断的差分隐私保护研究[J]. 计算机工程, 2022, 48(7): 29-35.
[11]	于晶, 鲁凌云, 李翔. 车联网中基于DDQN的边云协作任务卸载机制[J]. 计算机工程, 2022, 48(12): 156-164.
[12]	冯浩, 郭彩丽. 车联网中视频内容理解任务的计算卸载决策研究[J]. 计算机工程, 2022, 48(1): 135-141,148.
[13]	黄煜梵, 彭诺蘅, 林艳, 范建存, 张一晋, 余妍秋. 基于SAC强化学习的车联网频谱资源动态分配[J]. 计算机工程, 2021, 47(9): 34-43.
[14]	林峰, 丁鹏举, 梁吉申, 罗铖文, 蒋建春. 车联网中协作数据分发方案研究[J]. 计算机工程, 2021, 47(8): 29-36,44.
[15]	吴甜甜, 杨亚芳, 赵运磊. 一种面向车联网通信的条件隐私保护认证协议[J]. 计算机工程, 2021, 47(6): 14-22.

选择文件类型/文献管理软件名称

选择包含的内容