面向车联网车辆的轻量级持续身份认证协议

Lightweight Continuous Authentication Protocol for Vehicles in Vehicular Networks

基于云-边缘计算的车联网(Cloud-Edge computing for the Internet of Vehicle,CEIoV)能够支持大规模车辆的实时访问与服务请求,为了保证其内部资源的安全性,需要对车辆进行身份认证而后才能接入CEIoV;但是车辆本身处于运行状态且计算、存储和通信资源受限,给CEIoV车辆的身份认证带来挑战.本文基于具有简单密码操作的变色龙哈希函数,提出了一个连续轻量级身份认证协议(Lightweight Continuous identity Authentication,LCA),实现了对于资源受限车辆的认证和CEIoV内部资源的安全保障.本文在随机预言机模型下证明了LCA协议的语义安全性;并通过实验验证LCA协议在连续认证过程中具有较低的计算和通信成本.

Cloud-edge computing for the Internet of vehicle(CEIoV)can support real-time access and service requests of large-scale vehicles.In order to ensure the security of its internal resources,vehicle identity usually needs to be validated before it can access CEIoV.However,because the vehicle itself is in the running state and moreover its computing,storage and communication resources are limited,the existing identity authentication protocol cannot be directly applied to authenticate a running vehicle in CEIoV.Therefore,this paper proposes a lightweight continuous authentication(LCA)protocol to realize vehicle authentication and guarantee the security of CEIoV internal resources.LCA is designed based on chameleon Hash function,whose implementation requires simple cryptographic operations and is easy to be deployed on the resource-limited devices.By using random oracle model,the semantic security of LCA is proved strictly.At the same time,the experimental results show that LCA has lower computational and communication costs in the continuous authentication process compared with prior schemes.