车联网中基于证书的车辆身份认证方案

A Vehicular Identity Authentication Scheme Based on Certification in VANETs

基于隐私保护的车联网身份认证系统面临各种攻击的威胁,其中最普遍的一种攻击就是Sybil攻击。现有的Sybil攻击检测方案中,大都需要路边基础设施的协助来检测Sybil攻击,车辆无法独立检测Sybil攻击。同时,使用撤销列表来防止恶意车辆再次攻击,给基于群签名的方案带来了较大的额外计算开销。为了解决以上问题,本文提出一种基于证书的身份认证方案,车辆从区域服务器完成注册后获取证书,实现车辆身份匿名认证,并能够独立检测Sybil攻击。恶意车辆身份撤销由区域服务器完成,避免使用撤销列表,使得车辆省去查找撤销列表的开销。

The Sybil attack is one of the most general attacks in VANETs system based on identity authentication. In the existing Sybil attacks detection schemes,vehicles could not complete the attacks detection without the help of RSU. At the same time,it takes the group signature-based schemes additional computation cost using the certificate revocation list to avoid malicious vehicles launching Sybil attacks again. In this paper,we propose a certification-based identity authentication scheme to overcome these above problems,where vehicles can detect Sybil attacks independently and malicious vehicles identities revocation is completed by the local server. Moreover,vehicles no longer need to keep the revocation list.