面向WAVE安全服务的车联网匿名批量消息认证方案

Anonymous Batch Authentication Scheme in Internet of Vehicles for WAVE Security Services

作为物联网的典型代表,车联网在智能交通中发挥着重要作用,不仅能为车辆提供多种在线服务,而且可降低驾驶员发生事故的风险。然而,车联网在通信过程中产生了车辆位置、路线等大量敏感信息,如何在安全服务中提高车辆身份的匿名性是车联网安全领域的研究热点。文中提出了一种基于批量验签算法的匿名身份认证方案,通过匿名凭证、零知识证明等技术为IEEE WAVE安全服务扩展匿名认证手段,并提供了通过可信第三方来恢复身份的方法。实验结果表明,当批量验证的签名数量超过11个时,所提方案的计算开销要优于部分对比方案。在此基础上,给出了方案在DSRC的BSM应用和车辆近场支付应用中批量验签的最佳周期。

As a typical representative of the Internet of Things,the Internet of Vehicles plays an important role in intelligent transportation,not only providing vehicles with a variety of online services,but also reducing the risk of accidents for drivers.However,a large number of sensitive information such as vehicle location and route are generated in the communication process of Internet of Vehicle networks.How to improve the anonymity of vehicle identity in the authentication service is a research hotspot in the field of Internet of Vehicles security.In this paper,an anonymous authentication scheme based on a batch authentication algorithm is proposed,which extends the anonymous authentication methods for IEEE WAVE security services through anonymous credentials,zero-knowledge proof and other technologies,and provides a method to recover identity through a trusted third party.Experimental results show that the computational cost of the scheme is better than that of the partial comparison scheme when the number of batch validated signatures exceeds 11.Besides,the optimal cycle of batch verification in BSM application of DSRC and vehicle near field payment application is also analyzed.