一个改进的车载网安全认证方案

An improved safety certification scheme for vehicle network

车载自组网(Vehicular ad-hoc network,VANET)是一种基于车辆通信的移动自组网络。网络中的身份认证是保证通信安全的一个重要方法。2019年,Chen等人提出了一种用于车辆互联网的身份认证方案,并声称该方案可以抵抗各种攻击。通过对他们方案的研究,发现其方案中存在2个缺陷,一是无法抵抗智能卡丢失攻击。二是其认证方案中使用了安全通道,而这在现实情况中难以实现。为弥补这2个安全缺陷,笔者提出了一个改进的基于智能卡的用户匿名身份认证方案,并对改进方案进行了安全分析,其能够抵抗各种已知的攻击。与已有的方案进行比较,改进方案具有效率优势。

Vehicular ad-hoc network(VANET)is a mobile ad-hoc network based on vehicle communication.Identity authentication in network is an important method to ensure communication security.In 2019,Chen et al.proposed an identity authentication scheme for the Internet of vehicles and claimed that the scheme can resist various attacks.Through the study of their scheme,this article found that there are two flaws in their scheme.One is that they cannot resist the smart card loss attack.The second is the use of secure channels in its authentication scheme,which is difficult to achieve in reality.In order to make up for these two security deficiencies,this paper proposes an improved smart card-based user anonymous identity authentication scheme,and conducts a security analysis on the improved scheme,which can resist various known attacks.Compared with the existing scheme,the improved scheme has efficiency advantages.