Message Verification Protocol Based on Bilinear Pairings and Elliptic Curves for Enhanced Security in Vehicular Ad Hoc Networks

Vehicular ad hoc networks(VANETs)provide intelligent navigation and efficient route management,resulting in time savings and cost reductions in the transportation sector.However,the exchange of beacons and messages over public channels among vehicles and roadside units renders these networks vulnerable to numerous attacks and privacy violations.To address these challenges,several privacy and security preservation protocols based on blockchain and public key cryptography have been proposed recently.However,most of these schemes are limited by a long execution time and massive communication costs,which make them inefficient for on-board units(OBUs).Additionally,some of them are still susceptible to many attacks.As such,this study presents a novel protocol based on the fusion of elliptic curve cryptography(ECC)and bilinear pairing(BP)operations.The formal security analysis is accomplished using the Burrows–Abadi–Needham(BAN)logic,demonstrating that our scheme is verifiably secure.The proposed scheme’s informal security assessment also shows that it provides salient security features,such as non-repudiation,anonymity,and unlinkability.Moreover,the scheme is shown to be resilient against attacks,such as packet replays,forgeries,message falsifications,and impersonations.From the performance perspective,this protocol yields a 37.88%reduction in communication overheads and a 44.44%improvement in the supported security features.Therefore,the proposed scheme can be deployed in VANETs to provide robust security at low overheads.

Cybersecurity and Privacy Protection in Vehicular Networks (VANETs)

As Vehicular ad hoc networks (VANETs) become more sophisticated, the importance of integrating data protection and cybersecurity is increasingly evident. This paper offers a comprehensive investigation into the challenges and solutions associated with the privacy implications within VANETs, rooted in an intricate landscape of cross-jurisdictional data protection regulations. Our examination underscores the unique nature of VANETs, which, unlike other ad-hoc networks, demand heightened security and privacy considerations due to their exposure to sensitive data such as vehicle identifiers, routes, and more. Through a rigorous exploration of pseudonymization schemes, with a notable emphasis on the Density-based Location Privacy (DLP) method, we elucidate the potential to mitigate and sometimes sidestep the heavy compliance burdens associated with data protection laws. Furthermore, this paper illuminates the cybersecurity vulnerabilities inherent to VANETs, proposing robust countermeasures, including secure data transmission protocols. In synthesizing our findings, we advocate for the proactive adoption of protective mechanisms to facilitate the broader acceptance of VANET technology while concurrently addressing regulatory and cybersecurity hurdles.

A Scalable Privacy Preserving Scheme in Vehicular Network

Vehicles enlisted with computing, sensing and communicating devices can create vehicular networks, a subset of cooperative systems in heterogeneous environments, aiming at improving safety and entertainment in traffic. In vehicular networks, a vehicle＇s identity is associated to its owner＇s identity as a unique linkage. Therefore, it is of importance to protect privacy of vehicles from being possibly tracked. Obviously, the privacy protection must be scalable because of the high mobility and large population of vehicles. In this work, we take a non-trivial step towards protecting privacy of vehicles. As privacy draws public concerns, we firstly present privacy implications of operational challenges from the public policy perspective. Additionally, we envision vehicular networks as geographically partitioned subnetworks （cells）. Each subnetwork maintains a list of pseudonyms. Each pseudonym includes the cell＇s geographic id and a random number as host id. Before starting communication, vehicles need to request a pseudonym on demand from pseudonym server. In order to improve utilization of pseudonyms, we address a stochastic model with time-varying arrival and departure rates. Our main contribution includes： 1） proposing a scalable and effective algorithm to protect privacy; 2） providing analytical results of probability, variance and expected number of requests on pseudonym servers. The empirical results confirm the accuracy of our analytical predictions.

Lattice-Based Double-Authentication-Preventing Ring Signature for Security and Privacy in Vehicular Ad-Hoc Networks

Amidst the rapid development of the Internet of Things (loT), Vehicular Ad-Hoc NETwork (VANET), a typical loT application, are bringing an ever-larger number of intelligent and convenient services to the daily lives of individuals. However, there remain challenges for VANETs in preserving privacy and security. In this paper, we propose the first lattice-based Double-Authentication-Preventing Ring Signature (DAPRS) and adopt it to propose a novel privacy-preserving authentication scheme for VANETs, offering the potential for security against quantum computers. The new construction is proven secure against chosen message attacks. Our scheme is more efficient than other ring signature in terms of the time cost of the message signing phase and verification phase, and also in terms of signature length. Analyses of security and efficiency demonstrate that our proposed scheme is provably secure and efficient in the application.

A Systematic Approach for Cyber Security in Vehicular Networks

Vehicular Networks (VANET) are the largest real-life paradigm of ad hoc networks which aim to ensure road safety and enhance drivers’ comfort. In VANET, the vehicles communicate or collaborate with each other and with adjacent infrastructure by exchanging significant messages, such as road accident warnings, steep-curve ahead warnings or traffic jam warnings. However, this communication and other assets involved are subject to major threats and provide numerous opportunities for attackers to launch several attacks and compromise security and privacy of vehicular users. This paper reviews the cyber security in VANET and proposes an asset-based approach for VANET security. Firstly, it identifies relevant assets in VANET. Secondly, it provides a detailed taxonomy of vulnerabilities and threats on these assets, and, lastly, it classifies the possible attacks in VANET and critically evaluates them.

车联网中格上基于身份的隐私保护协议

为了解决车载自组织网络(vehicular ad hoc network, VANET)上的通信协议可能存在的节点冒充、数据伪造、真实身份泄露等问题,同时考虑到现有隐私保护认证协议存在身份管理成本大、协议性能与用户数量呈负相关、签名长度长等不足,提出一种车联网中格上基于身份的隐私保护协议。通过数字签名实现身份认证和数据鉴别,基于环上容错学习(ring learning with errors, RLWE)困难问题对用户身份进行匿名化保护,基于小整数解(small integer solution, SIS)困难问题和拒绝采样技术对消息进行数字签名认证。理论分析证明,提出的协议具有抗量子攻击的特性,满足车联网中的安全需求,在提高计算和通信效率的同时减小了签名长度。仿真结果表明,提出的协议性能满足国内车联网通信相关指标要求。

支持虚拟车辆辅助假名更新的混合区位置隐私保护方案

在车载通信系统中,车辆的位置信息泄露会危及驾驶员的隐私安全,而基于混合区中,车辆的假名更新是实现位置隐私保护的一种有效方法。然而,现有的一些混合区方案忽略了车辆密度变化对位置隐私保护效果的影响。针对此问题,提出了一种支持虚拟车辆辅助假名更新的混合区位置隐私保护方案。该方案旨在根据周围合作车辆的密度不同来动态调整生成所需的虚拟车辆,并广播它们的踪迹,使攻击者无法区分虚拟车辆和真实车辆,从而实现车辆的位置隐私保护。仿真实验结果表明,该方案通过引入虚拟车辆信息,使攻击者无法区分虚拟车辆和真实车辆,有效降低了车辆真实位置或轨迹泄露的可能性,同时提高了交通密度较低情况下的位置隐私保护效果。

车联网隐私保护自主管理身份方案

针对车联网(VANETs)环境下车辆用户数字身份管理问题,该文提出基于区块链的去中心化可撤销隐私保护自主管理身份(SSI)方案。经可信机构(TA)授权后,路侧单元(RSU)组成委员会负责车辆用户身份注册、数字身份凭证颁发及维护。基于门限BLS签名和实用拜占庭容错(PBFT)共识机制实现数字身份凭证创建,解决凭证颁发机构去中心化问题;集成秘密共享和零知识证明技术,解决数字身份凭证颁发和验证过程中隐私保护问题;基于密码学累加器技术,解决分布式存储环境数字身份凭证撤销问题。最后,对该方案安全属性进行了详细分析,证明方案能够满足所提出的安全目标,同时基于本地以太坊私有链平台使用智能合约对所提方案进行了实现及性能分析,实验结果表明了设计的可靠性、可行性和有效性。

车载自组织网络中格基签密的可认证隐私保护方案

针对车载自组织网络(VANET)中用户的隐私泄露和信息传输过程中的安全认证问题,提出一种VANET中格基签密的可认证隐私保护方案。首先,消息发送方利用接收方的公钥对消息进行签密,只有拥有私钥的接收车辆才能解密出消息,以保证消息内容在传输过程中只对授权用户可见;其次,车辆接收方解密出消息后,利用单向安全的哈希函数计算消息的哈希值,并判断是否与签密过程中的哈希值相等,实现对消息的认证;最后,采用快速数论变换(NTT)算法降低格中环上多项式乘法的计算开销,提高方案的计算效率。在随机预言机模型下证明了所提方案在适应性选择密文攻击下具有不可区分性,在适应性选择消息攻击(IND-CCA2)下具有强不可伪造性。此外,所提方案的安全性基于格上困难问题,可以抵抗量子算法攻击。仿真实验结果表明,与同类具有消息认证功能的隐私保护方案以及基于格上困难问题的签名方案相比,所提方案的通信时延至少减少了10.01%,消息丢失率至少减小了31.79%,通信开销至少减少了31.25%。因此,所提方案更适用于资源有限的VANET环境。

VANET中隐私保护的格基异构签密方案

针对车载自组织网络(Vehicular Ad hoc Network,VANET)中车辆跨密码系统通信过程中的隐私泄露问题,提出了一种格基异构签密方案.首先,方案实现了无证书密码系统(Certificateless Cryptosystem,CLC)的车辆与基于身份密码系统(Identity-Based Cryptosystem,IBC)的车辆相互通信;其次利用签密的机密性和可认证性防止车辆用户在跨密码系统通信过程中发生隐私泄露,并实现了接收方对消息完整性以及发送方身份合法性的认证;最后在随机预言机模型下证明了方案在适应性选择密文攻击下具有不可区分性(Indistinguishability against adaptive Chosen Cipher Text Attack,IND-CCA2),在适应性选择消息攻击下具有存在性不可伪造性(Existential Unforgeability against adaptive Chosen Messages Attack,EUF-CMA).性能分析表明,与其他方案相比,本文方案在计算开销、通信开销和安全性方面具有一定优势,适用于车辆跨密码系统通信的场景.

基于链路预测的VANET路由算法

在车载自组织网络(VANET)中,AODV路由算法存在控制开销大、路由发现和修复时间长等不足。为此,对AODV算法进行局部优化,提出一种改进的路由算法,利用节点位置、运动速度等信息预测链路失效时间。在路由发现阶段,将链路失效时间最大的路径作为传输路径;在路由维护阶段,设置定时器并提前触发路由寻路,减少路径搜寻时间。仿真结果表明,与AODV算法相比,该算法在数据包端到端延迟、传输吞吐率及报文投递率等方面性能较好。

面向车联网的多服务器架构的匿名双向认证与密钥协商协议

车联网(vehicular ad hoc networks,VANETs)是一种依据特定通信协议,实现车-X(X:车、路、行人及互联网等)之间的无线通讯和信息交换的大型网络.随着云计算的发展,越来越丰富的车联网云服务将涌现并服务于车辆.但这些服务往往由不同的服务器提供,车辆(用户)则不得不在各个服务器上注册并记住大量的用户名与密码.为了实现用户一次注册即可与多个服务器相互认证的目标,多服务器架构的认证协议已被提出并应用于众多领域,但尚未有面向车联网的相关研究.车间通信的瞬时性对认证协议提出了更高的要求,然而已有的多服务器架构的认证协议使用了复杂的双线性密码,在通信与认证开销方面无法满足车联网的要求.为此,首次提出了一个面向车联网的多服务器架构下的新型匿名双向认证与密钥协商协议,该协议采用非奇异椭圆曲线构造了简易的认证方法,降低了认证的计算复杂性.随机匿名机制能有效地保护车辆的隐私,且可与服务器进行双向认证与密钥协商.在随机预言机模型下证明了协议的安全性.性能分析表明:与最近的匿名双向认证协议相比,该协议在认证与密钥协商阶段的计算开销与通信开销分别减少了61%与62%,可更好地满足车联网对计算与通信开销的要求.

车联网匿名认证方案研究

针对当前车联网匿名认证方案安全性和效率的问题,利用椭圆曲线密码体制密钥短、速度快和安全性能高等优越性,提出一个安全高效的车联网批量匿名认证方案.通过路侧单元(RSU)与车辆共同生成签名,从而进一步减轻可信中心的负担.通过分析表明:该方案不仅能解决隐私保护、不可链接性、抗中间人攻击、抗合谋攻击、前向和后向安全、抗重放攻击等多种安全问题,而且在计算复杂度和通信复杂度方面也存在明显优势,具有更高的认证效率.因此,该方案在计算性能受限的物联网环境中,具有重要的理论意义与应用价值.

VANET安全技术综述

随着车载自组织网络技术的不断发展,研究者对车载自组织网络系统安全进行了深入研究.论文阐述了车载自组织网络领域中安全研究的重要性;介绍了该领域中目前最新研究进展和存在的主要问题;讨论并比较了各种安全协议应用于车载自组织网络的优缺点;分析总结了系统中安全协议的设计要素;最后展望了车载自组织网络安全技术的未来研究方向.

基于速度向量的VANET位置预测路由协议

针对车辆自组网(VANET)中车辆快速移动引起的网络拓扑快速变化及路由路径频繁切换引起的网络性能下降问题,提出一种适用于城市环境的基于速度向量的位置预测路由协议(VPRP)。该协议根据行驶方向将车辆分组,根据速度和当前位置预测下一步位置,选择路径中所有节点总的方向差异最小且总的距离变化最小的路径作为路由路径。仿真实验结果表明,VPRP比AODV和VHRP在吞吐量、分组投递率、平均传输延迟、控制开销等方面均有改进。

车载自组织网络中基于身份的匿名认证方案

针对于车载自组织网络中的身份认证问题,提出一种新颖的基于身份的匿名认证方案,该方案在保护了车辆的身份隐私信息的同时不仅满足了车辆节点与路边单元节点间的身份认证的需求,而且确保了车辆节点之间的身份认证。该方案利用基于身份的密码技术,减少了系统管理公钥证书的工作量和对节点证书认证的代价。最后通过安全性和复杂性分析,结果表明该方案不仅易于实现,而且安全可靠并具有较低的计算复杂度及通信开销。

VANETs中保护隐私的认证协议研究与进展

认证性和隐私性是车辆自组织网络(VANETs)中影响安全通信和个人隐私的关键问题:既要保证车辆之间和车辆与路边设施之间的安全认证通信,又要适当保护与车辆相关的信息的隐私性。文章将围绕隐私保护前提下的认证理论和核心技术问题,分析现有研究进展与成果,提出一些适合VANETs特点的研究方法和值得进一步研究的问题与方向,以期获得VANETs中保护隐私的认证新概念、新模型;探索保护用户隐私的安全匿名新方法,平衡认证与隐私保护中的矛盾对立,为VANETs的安全服务奠定理论基础、提供技术储备。

基于联盟链的车联网位置隐私保护方案

为了保障车辆行驶过程中上下文信息的隐私性,并满足基于位置服务的去中心化需求,提出了一种基于联盟链的车联网位置隐私保护CSLPP方案。该机制设计了基于联盟链的分布式系统,通过访问控制和轻量级共识机制,允许多个互不信任的实体间合作。智能合约自动执行不同实体间的链上加密数据,同态加密和基于上下文信息的访问控制技术可以使每个分布式站点实时生成并返回查询路线,使车辆的行驶轨迹和位置隐私得到了有效的保护,并具有防路线篡改和强抗共谋攻击的能力。最后通过分析和实验验证了CSLPP的安全性和高效性能。

一种高效可审计的VANET隐私保护协议

车载自组网(VANET)因其开放、动态、规模性等特点而受到严重的安全和隐私泄露威胁。为此,提出一种新的隐私保护协议。利用路边单元(RSU)和临近车载单元形成临时隐私保护通信组,将RSU作为组内通信中枢,负责维护组参数信息,同时对组员身份进行认证,转发组员发出的消息,并记录该消息审计信息,在RSU的协助下通过有争议的消息准确、快速地追溯定位到肇事者。分析结果表明,与GSB,ECPP,DCS和WDG协议相比,该协议的复杂度较低,负载开销较小,并且具有可审计性。

车载自组网的隐私保护问题

车载自组网是一种基于车辆通信的移动自组网络,是智能交通的发展方向。认证过程中的隐私保护问题是其面临的核心问题。文章对车载自组网面临的隐私威胁进行分析,对面向车辆身份保护和面向车辆位置保护方面所采用的关键技术进行讨论,指出未来车载自组网隐私保护问题应从建立车辆信用评价机制、使用密码学算法进行位置隐私保护和应用可否认的密码学等方面加强研究。