边缘计算环境下无证书车联网身份认证方案

Certificateless Identity Authentication Scheme for Internet of Vehicles in Edge Computing Environment

针对当前边缘计算环境下车联网身份认证中的隐私泄露问题,基于双线性对理论,提出了一种新型的车联网身份认证方案。该方案基于泰森多边形,划分区域路网并确定生成元坐标,依据车辆当前位置所属区域的生成元与边缘节点之间距离以及边缘节点当前负载为决策依据,选择最合适边缘节点认证,或通过"云-边协同"技术与云计算中心认证。该方案采用无证书的认证方式,实现车辆与边缘节点或云计算中心、车辆与车辆之间的双向匿名认证和共享密钥的生成。若认证过程出现异常,云计算中心可通过异常数据进行恶意节点的快速追溯和撤销。通过安全分析,证明所提方案能够满足匿名性、不可伪造性和可追溯性。仿真实验表明,所提方案在计算、通信开销和达到率方面具有一定的优势。

In order to solve the problem of privacy leakage in the internet of vehicles identity authentication in the current edge computing environment, a new type of internet of vehicles identity authentication scheme is proposed based on bilinear pairing theory. Based on Voronoi diagram, the scheme divides the regional road network and determines the generator coordinates. According to the distance between the generator and the edge node in the area where the vehicle is located and the current load of the edge node, the most suitable edge node is selected for authentication, or it is certified by the cloud edge collaboration technology and the cloud computing center. The scheme uses certificateless authentication method to realize two-way anonymous authentication, and share key generation between vehicles and edge nodes or cloud computing center, vehicles and vehicles. If the authentication process is abnormal, cloud computing center can trace and revoke malicious nodes quickly through the abnormal data. Security analysis verfies that the scheme can satisfy anonymity, unforgeability and traceability. Simulation results show that the proposed scheme can harvest performance in term of computation, communication overhead and rate of arrival.