交叉口场景下基于区块链技术的匿名车辆身份认证方案

doi:10.11959/j.issn.2096-109x.2020057

摘要/Abstract

摘要：

随着智能交通系统的不断发展，未来车辆在进出交叉口时，将不再受传统信号灯控制，而是通过与交叉口附近的区域服务器进行信息交互，接受区域服务器的统一调度。保证车辆在交叉口通信安全的基础是网络节点的身份认证。基于此，提出一种基于区块链技术的匿名车辆认证方案，在认证中采用基于身份和哈希消息认证码的混合密码认证机制，并将认证结果记录在区块链中。通过仿真测试和结果分析表明，该方案具有匿名性、保护隐私等特性。与其他方案相比，该方案有效降低了通信开销。

关键词: 智能交通系统, 身份认证, 隐私保护, 区块链

Abstract:

With the development of intelligent transportation system,the vehicles will no longer be controlled by the traditional traffic light when they enter or leave the intersection.Instead,they will interact with the local server (LS) near the intersection and accept the regulation of LS.The basic of the security vehicle communication at intersections is authentication of network node.Based on this,an anonymous vehicle authentication scheme based on blockchain technology was proposed.The scheme employed a hybrid cryptography based on identity and hash message authentication code,and recorded the authentication results in blockchains.According to simulation testing and result analysis,the scheme ensures the anonymity and privacy-preserving,with less communication overhead compared to other methods.

Key words: intelligent transportation system, identity authentication, privacy preserving, blockchain

中图分类号:

TP309

王昊,吴天昊,朱孔林,张琳. 交叉口场景下基于区块链技术的匿名车辆身份认证方案[J]. 网络与信息安全学报, 2020, 6(5): 27-35.

Hao WANG,Tianhao WU,Konglin ZHU,Lin ZHANG. Anonymous vehicle authentication scheme based on blockchain technology in the intersection scenario[J]. Chinese Journal of Network and Information Security, 2020, 6(5): 27-35.

图/表 13

图1

图2

表1

表2

图3

表3

表4

表5

表6

表7

表8

图4

表9

参考文献 24

[1]	李克强, 戴一凡, 李升波 ,等. 智能网联汽车（ICV）技术的发展现状及趋势[J]. 汽车安全与节能学报, 2017,8(1): 1-14.
	LI K Q , DAI Y F , LI S B ,et al. State-of-the-art and technical trends of intelligent and connected vehicles[J]. Journal of Automotive Safety and Energy, 2017,8(1): 1-14.
[2]	孟震 . 智能网联汽车信息共享安全机制的研究与实现[D]. 北京:北京邮电大学, 2016.
	MENG Z . Research and implementation of security communication mechanism in intelligent-cyber vehicles[D]. Beijing:Beijing Uni-versity of Posts and Telecommunications, 2016.
[3]	戴婕 . 基于密钥管理和无中心化加密的网联汽车信息安全的设计与实现[D]. 北京:北京邮电大学, 2018.
	DAI J . Design and implementation of vehicular information security based on key management and decentralized encryption[D]. Beijing:Beijing University of Posts and Telecommunications, 2018.
[4]	JIANG T G , FANG H , WANG H G . Blockchain-based internet of vehicles:distributed network architecture and performance analysis[J]. IEEE Internet of Things Journal, 2018 ( Early Access ).
[5]	BISWAS S,MI?I? J . A cross-layer approach to privacy-preserving authentication in WAVE-enabled VANETs[J]. IEEE Transactions on Vehicular Technology, 2013,62(5): 2182-2192.
[6]	SHEN W , LIU L , CAO X . Cooperative message authentication in vehicular cyber-physical systems[J]. IEEE Trans Emerging Topics Comput, 2013,1(1): 2182-2192.
[7]	GUO J H , BAUGH J P , WANG S Q . A group signature based secure and privacy-preserving vehicular communication framework[C]// Mobile Networking for Vehicular Environments. 2007.
[8]	ISLAM S H , OBAIDAT M S , VIJAYAKUMAR P ,et al. A robust and efficient password-based conditional privacy preserving authentication and group-key agreement protocol for VANETs[J]. Future Generation Computer Systems, 2018,84(1): 216-227.
[9]	AZEES M , VIJAYAKUMAR P , DEBOARH L J . EAAP:efficient anonymous authentication with conditional privacy-preserving scheme for vehicular ad hoc networks[J]. IEEE Transactions on Intelligent Transportation Systems, 2017,(18): 2467-2476.
[10]	KARATI A , ISLAM S H , BISWAS G P ,et al. Provably secure identitybased signcryption scheme for crowdsourced industrial internet of things environments[J]. IEEE Internet of Things Journal, 2018,5(4): 2904-2914.
[11]	YUAN Y , WANG F Y . Towards blockchain-based intelligent transportation systems[C]// 2016 IEEE 19th International Conference on Intelligent Transportation Systems (ITSC). 2016: 2663-2668.
[12]	CROSBY M , PATTANAYAK P , VERMA S ,et al. Blockchain technology:beyond bitcoin[J]. Applied Innovation, 2016(2): 6-10.
[13]	张勖, 马欣 . 基于区块链的轻量化移动自组网认证方案[J]. 网络与信息安全学报, 2020,6(4): 14-22.
	ZHANG X , MA X . Light weight mobile Ad Hoc network authenti-cation scheme based on blockchain[J]. Chinese Journal of Network and Information Security, 2020,6(4): 14-22.
[14]	LEI A , CRUICKSHANK H , CAO Y ,et al. Blockchain-based dynamic key management for heterogeneous intelligent transportation systems[J]. IEEE Internet of Things Journal, 2017,4(16): 1832-1843.
[15]	WANG W T , HU N , LIU X . BlockCAM:a blockchain-based cross-domain authentication model[C]// 2018 IEEE Third International Conference on Data Science in Cyberspace (DSC). 2018: 896-901.
[16]	黄泽源, 孔勇平, 张会炎 . 基于区块链的物联网安全技术研究[J]. 移动通信, 2018,42(12): 8-13.
	HUANG Z Y , KONG Y P , ZHANG H Y . Research on security technology of internet of things based on blockchain[J]. Mobile Communications, 2018,42(12): 8-13.
[17]	VIJAYAKUMAR P , AZEES M , KANNAN A ,et al. Dual authentication and key management techniques for secure data transmission in vehicular ad hoc networks[J]. IEEE Trans Intell Transp Syst, 2016,17(4): 1015-1028.
[18]	AZEES M , VIJAYAKUMAR P , DEBORAH L J . Comprehensive survey on security services in vehicular Ad-Hoc networks[J]. IET Intell Transp Syst, 2016,10(6): 379-388.
[19]	SHIM K . CPAS:an efficient conditional privacy-preserving authentication scheme for vehicular sensor networks[J]. IEEE Transactions on Vehicular Technology, 2012,61(4): 1874-1883.
[20]	ZHU X , JIANG S , WANG L ,et al. Efficient privacy-preserving authentication for vehicular Ad Hoc networks[J]. IEEE Transactions on Vehicular Technology, 2014,63(2): 907-919.
[21]	IEEE trial-use standard for wireless access in vehicular environments (WAVE)-security services for applications and management messages[S]. 2006.
[22]	LO N , TSAI J . An efficient conditional privacy-preserving authentication scheme for vehicular sensor networks without pairings[J]. IEEE Trans Intell Transp Syst, 2016,17(5): 1319-1328.
[23]	BAYAT M , BARMSHOORY M , RAHIMI M ,et al. A secure authentication scheme for VANETs with batch verification[J]. Wireless Netw, 2015,21(5): 1733-1743.
[24]	HORNG S , TZENG S , PAN Y ,et al. b-SPECS+:batch verification for secure pseudonymous authentication in VANET[J]. IEEE Trans Inf Forensics Security, 2013,8(11): 1860-1875.

符号	含义
RID_TA	TA真实ID
PrK_TA	TA的私钥
PuK_TA	TA的公钥
Srk_TA	TA生成的密钥
RID_LS	LS真实ID
PrK_LS	LS的私钥
PuK_LS	LS的公钥
RID_V	车辆真实ID
PrK_V	车辆的私钥
PuK_V	车辆的公钥
PsID_V	车辆的假名
VTP_PsID	车辆假名的有效时间
TS	时间戳
HC_V	车辆计算的HMAC
BS_V	车辆信标信号
HC′	LS计算的HMAC
SafeMsg_V	车辆生成的安全消息

有效字节数	HMAC	签名	假名长度	时间戳
67 B	20 B	64 B	6B	4B

认证方案	匿名性	可追溯性	抗DDoS攻击	区块链
认证方案	匿名性	可追溯性	抗DDoS攻击	共识算法	最大恶意节点数占比
PKI-Certi^[21]	√	—	—	—	—
文献[2]	√	—	—	—	—
文献[3]	√		√	PoS	51%
文献[14]	√	√	√	PoW	51%
本文方案	√	√	√	PBFT	33%

参数	数值
车辆数	100
车辆速度	20~60 km/h
交叉口数	12
网络协议	LTE-V2X
仿真步长	1s
仿真时间	14 400 s

包含信息	有效信息	证书	签名
字节大小	67 B	125 B	56 B