摘要：

车联网(IoV)中传输的消息处于开放的网络环境中，消息容易遭受攻击和隐私泄露。针对此问题，以基于身份的密码机制为基础，提出一种匿名可追溯消息认证方案。首先，设计基于身份的签名(IBS)算法，保证所传输消息的完整性，同时可以验证消息发送方身份的合法性及不可否认性；其次，方案采用匿名机制提供隐私保护，匿名身份由车辆生成并被用于获取私钥，由于真实身份不在网络中传输，除了车辆和权威机构，任何人都无法获得车辆的真实身份，此外，生成的私钥被加密，保证了私钥传输的机密性；最后，在随机预言机模型下证明，该签名方案能够实现自适应选择消息攻击下的不可伪造性，能满足IoV的安全需求。仿真结果表明，与同类方案相比，该方案具有更低的计算开销和通信开销。

关键词: 车联网, 消息认证, 匿名可追溯, 基于身份的签名, 随机预言机, 隐私保护

Abstract:

Messages transmitted through the Internet of Vehicle (IoV) are in an open network environment; therefore, they are vulnerable to attacks and privacy leakage. To address these problems, this paper proposes an anonymous traceable message authentication scheme based on an identity-based cryptographic mechanism. First, an Identity-Based Signature (IBS) algorithm is designed to ensure the integrity of the transmitted message, so that the legitimacy and non-repudiation of the message sender′s identity can be verified. Second, the scheme adopts an anonymous mechanism to provide privacy preservation, which is generated by the vehicle and is used to obtain the private key; because the real identity is not transmitted in the network, no one can obtain the real identity of the vehicle except the vehicle and the authority. In addition, the generated private key is encrypted to ensure the confidentiality of the private key transmission. Finally, this paper proves that this scheme has existential unforgeability against chosen-message attacks in the random oracle model, which can meet the security requirements of the IoV. The simulation results show that the scheme has lower computational and communication overheads than similar schemes.

Key words: Internet of Vehicle (IoV), message authentication, anonymous traceable, Identity-Based Signature (IBS), random oracle, privacy preservation