车载网络中基于密钥驱动信任机制的身份认证协议

doi:10.13229/j.cnki.jdxbgxb.20240599

摘要/Abstract

摘要：

首先，针对车载自组网（VANET）中的安全和隐私问题，提出了一种基于密钥协商的身份认证和安全信任方案。其次，采用基于椭圆曲线密码体制生成签名，提出了一种低消耗的密钥分配方案，通信双方交换参数以相互验证并安全地生成会话密钥。最后，通过三向双路认证方式对通信实体进行身份认证。经安全性和性能分析，表明本文方案可提高身份认证效率，降低系统开销，具有较好的理论和应用价值，系统结合网络安全等级保护第三级要求标准进行部署，能够解决车载自组网中身份隐私保护和安全信任问题。

关键词: 网络安全与通信安全, 车联网, 椭圆双曲线密码体制, 密钥协商, 身份认证

Abstract:

Firstly，a key negotiation based authentication and security trust scheme is proposed for security and privacy issues in vehicular ad-hoc network （VANET）. Secondly， an elliptic curve cryptosystem based signature generation is used， and a low-consumption key distribution scheme is proposed， where the communicating parties exchange parameters to mutually authenticate and securely generate session keys. Finally， the communicating entities are authenticated by three-way two-way authentication. After security and performance analysis， it shows that the scheme can improve the efficiency of identity authentication and reduce the system overhead， which has good theoretical and application value， and the system is deployed in conjunction with the Network Security Level Protection level 3 requirements standard， which can solve the identity privacy protection and security trust problems in the in-vehicle self-organizing network.

Key words: network security and communication security, vehicular ad hoc-network, elliptic hyperbolic signature, key agreement, identity authentication

中图分类号:

TP393.08

戴银飞,周秀贞,范子尧,刘镕源,刘志远,王绍强,杜伟. 车载网络中基于密钥驱动信任机制的身份认证协议[J]. 吉林大学学报(工学版), 2025, 55(5): 1788-1797.

Yin-fei DAI,Xiu-zhen ZHOU,Zi-yao FAN,Rong-yuan LIU,Zhi-yuan LIU,Shao-qiang WANG,Wei DU. Key-driven trust mechanisms for identity authentication in vehicular networks[J]. Journal of Jilin University(Engineering and Technology Edition), 2025, 55(5): 1788-1797.

图/表 9

图1

表1

方案的部分符号说明"

符号	含义
sk， Q	系统私钥及其对应公钥
G	基点
a， b	椭圆曲线方程的参数
UserId	签名者标识符
len	UserId的长度
AC	认证证书
SK	会话密钥
m	待签名的消息
$x \| \| ? y$	x与y的拼接，其中x、 y可以是比特串或字节串
［k］P	椭圆曲线上点P的k倍点

表1

图2

表2

表3

图3

图4

表4

图5

参考文献 22

[1]	Cheng T, Wu Z, Wang C, et al. Research on vehicle-to-cloud communication based on lightweight authentication and extended quantum key distribution[J]. IEEE Transactions on Vehicular Technology, 2024, 73(8): 12082-12095.
[2]	Di X, Sun Y, Lu J, et al. Blockchain-based authentication scheme for vehicle network nodes[C]∥2023 International Conference on Blockchain Technology and Information Security (ICBCTIS), Xi'an, China, 2023: 204-210.
[3]	叶卫明,常贺.基于智能网联汽车的通信和信息安全研究[J].电信工程技术与标准化, 2022,35(1):93-97.
	Ye Wei-ming, Chang He. Research on communication and information security based on intelligent connected vehicles[J]. Telecommunications Engineering Technology and Standardization, 2022, 35 (1): 93-97.
[4]	曾晟珂,陈勇,夏梅宸.车载自组网的隐私保护问题[J].西华大学学报:自然科学版,2015, 34(4):1-7.
	Zeng Sheng-ke, Chen Yong, Xia Mei-chen. Privacy protection issues in vehicle ad hoc networks[J]. Journal of Xihua University (Natural Science Edition), 2015, 34 (4): 1-7.
[5]	邓雨康, 张磊, 李晶. 车联网隐私保护研究综述[J].计算机应用研究, 2022, 39 (10): 2891-2906.
	Deng Yu-kang, Zhang Lei, Li Jing. A review of research on privacy protection in telematics[J]. Computer Application Research, 2022, 39 (10): 2891-2906.
[6]	朱栋, 殷新春, 宁建廷. 车联网中具有强隐私保护的无证书签名方案[J]. 计算机应用, 2022, 42(10): 3091-3101.
	Zhu Dong, Yin Xin-chun, Ning Jian-ting. A certificate-less signature scheme with strong privacy preservation in telematics[J]. Computer Applications, 2022, 42(10): 3091-3101.
[7]	Chen Y, Chen J. CPP-CLAS: efficient and conditional privacy preserving certificateless aggregate signature scheme for VANETs[J]. IEEE Internet of Things Journal, 2022, 9 (12): 10354-10365.
[8]	Liang Y, Luo E, Liu Y. Physically secure and conditional-privacy authenticated key agreement for VANETs[J]. IEEE Transactions on Vehicular Technology, 2023, 72 (6): 7914-7925.
[9]	Azees M, Vijayakumar P, Deboarh L J. EAAP: efficient anonymous authentication with conditional privacy-preserving scheme for vehicular ad hoc networks[J]. IEEE Transactions on Intelligent Transportation Systems, 2017, 18(9): 2467-2476.
[10]	杨晓东, 裴喜祯, 安发英, 等. 基于身份聚合签名的车载自组网消息认证方案[J]. 计算机工程, 2020, 46(2): 171-182.
	Yang Xiao-dong, Pei Xi-zhen, An Fa-ying, et al. A message authentication scheme for vehicle ad hoc networks based on identity aggregation signature[J]. Computer Engineering, 2020,46 (2): 171-182.
[11]	Han M, Yin Z K, Cheng P Z, et al. Zero-knowledge identity authentication for internet of vehicles: improvement and application[J]. PLoS ONE, 2020, 9:No. 0239043.
[12]	陈葳葳, 曹利, 邵长虹. 基于区块链技术的车联网高效匿名认证方案[J]. 计算机应用, 2020, 40(10): 2992-2999.
	Chen Wei-wei, Cao Li, Shao Chang-hong. An efficient anonymous authentication scheme for Telematics based on blockchain technology[J]. Computer Applications, 2020, 40(10): 2992-2999.
[13]	Pournaghi S M, Zahednejad B, Bayat M, et al. NECPPA: a novel and efficient conditional privacy-preserving authentication scheme for VANET[J]. Computer Networks, 2018, 134:78-92.
[14]	Wang H, Wang L, Zhang K, et al. A conditional privacy-preserving certificateless aggregate signature scheme in the standard model for VANETs[J]. IEEE Access, 2022, 10: 15605-15618.
[15]	Xu Z Y, He D B, Kumar N, et al. Efficient certificateless aggregate signature scheme for performing secure routing in VANETs[J]. Security and Communication Networks,2020, 12(3): 53-68.
[16]	杨宜青. 车联网安全通信的密钥管理研究[D]. 成都: 成都电子科技大学信息通信与工程学院, 2021.
	Yang Yi-qing. Research on key management for secure communication of internet of vehicles[D]. Chengdu: School of Information Communication and Engineering, Chengdu University of Electronic Science and Technology, 2021.
[17]	王冠, 张倩倩. 基于SGX的车联网身份认证方案研究[J].计算机技术与发展,2023,33(11):99-105.
	Wang Guan, Zhang Qian-qian. Research on SGX-based identity authentication scheme for telematics[J]. Computer Technology and Development,2023,33(11):99-105.
[18]	Jiang S, Zhu X, Wang L. An efficient anonymous batch authentication scheme based on hmac for VANETs[J].IEEE Transactions on Intelligent Transportation Systems,2016, 17(8):2193-2204.
[19]	陈虹, 刘雨朦, 肖成龙, 等.基于椭圆曲线的改进RC4算法[J].计算机应用, 2019, 39(8):2339-2345.
	Chen Hong, Liu Yu-meng, Xiao Cheng-long, et al. Improved RC4 algorithm based on elliptic curves[J]. Computer Applications, 2019, 39(8):2339-2345.
[20]	北京数字认证股份有限公司. 证书吊销列表分发方法、设备及存储介质、服务器、车联网设[P]. 中国: CN202111458608.5,2021-04-21.
[21]	张晓均, 唐浩宇, 张楠, 等. 分布式智能车载网联系统的匿名认证与密钥协商协议[J]. 电子与信息学报, 2024,46(4):1333-1342.
	Zhang Xiao-jun, Tang Hao-yu, Zhang Nan, et al. An anonymous authentication and key negotiation protocol for distributed intelligent in-vehicle networked systems[J]. Journal of Electronics and Information, 2024,46(4):1333-1342.
[22]	于斌斌, 胡亮, 迟令. 可抵抗内外部攻击的无线传感器网络数字签名方案[J]. 吉林大学学报: 工学版, 2019, 49(5): 1666-1681.
	Yu Bin-bin, Hu Liang, Chi Ling. A digital signature scheme for wireless sensor networks that can resist internal and external attacks[J]. Journal of Jilin University(Engineering and Technology Edition), 2019, 49 (5): 1666-1681.

Metrics

Viewed

Full text

Abstract

Cited

Shared

Discussed

运算类别	执行时间/ms
双线性对上的加法运算（Tbpa）	0.05
双线性配对运算（Tbp）	6.05
映射到点的哈希运算（Tmtp）	22.8
双线性配对中的标量乘（Tbpm）	9.85
椭圆曲线上标量乘（Teccm）	0.9
椭圆曲线上点加运算（Tecca）	0.002
哈希函数运算（Th）	0.001

方案	运算次数	计算开销/ms
文献［13］	4Tbpm+Tbpa+2Th+Tmtp	62.25
文献［14］	4Tbpm+Th+Tbpa	39.4
文献［15］	3Teccm+Tecca+2Tmtp	48.3
本文	10Teccm+2Tecca+13Th	9.02

方案	单条消息/B	n条消息/B
文献［13］	296	296
文献［14］	408	408
文献［15］	469	469
本文	160	160