区块链架构下具有条件隐私的车辆编队跨信任域高效群组认证研究

doi:10.11959/j.issn.1000-436x.2023048

通信学报 ›› 2023, Vol. 44 ›› Issue (4): 111-123.doi: 10.11959/j.issn.1000-436x.2023048

区块链架构下具有条件隐私的车辆编队跨信任域高效群组认证研究

夏莹杰¹, 朱思雨¹, 刘雪娇²

¹ 浙江大学计算机科学与技术学院，浙江杭州 310027
² 杭州师范大学浙江省密码技术重点实验室，浙江杭州 311121

修回日期:2023-01-11 出版日期:2023-04-25 发布日期:2023-04-01
作者简介:夏莹杰（1982- ），男，浙江宁波人，博士，浙江大学研究员，主要研究方向为智能交通和信息安全
朱思雨（1998- ），女，湖南邵阳人，浙江大学硕士生，主要研究方向为车联网安全和区块链技术
刘雪娇（1984- ），女，河南安阳人，博士，杭州师范大学副教授，主要研究方向为网络安全和车联网安全
基金资助:
国家自然科学基金资助项目(61873232);浙江省自然科学基金资助项目(LZ22F030004)

Research on efficient cross trust-domain group authentication with conditional privacy of vehicle platoon under blockchian architecture

Yingjie XIA¹, Siyu ZHU¹, Xuejiao LIU²

¹ College of Computer Science and Technology, Zhejiang University, Hangzhou 310027, China
² Zhejiang Province Key Laboratory of Cryptography Technology, Hangzhou Normal University, Hangzhou 311121, China

Revised:2023-01-11 Online:2023-04-25 Published:2023-04-01
Supported by:
The National Natural Science Foundation of China(61873232);The Natural Science Foundation of Zhe-jiang Province(LZ22F030004)

摘要/Abstract

摘要：

为了均衡车辆编队跨信任域身份认证的安全和效率，提出了区块链架构下具有条件隐私的车辆编队跨信任域高效群组认证方案。设计了面向车辆编队身份认证的新型区块结构BM-Tree，通过多信任域间链上认证参数共享为跨信任域群组认证提供支撑；采用动态匿名进行车辆身份隐私保护，通过双线性映射进行信任域参数变换，实现了具有条件隐私的跨信任域群组认证；提出了基于 BM-Tree 的高效群组认证协议，实现了车辆编队批量身份认证和重认证。所提方案在安全性和计算开销方面明显优于现有跨信任域认证方法，相比BLA、MDPA和BBA，整体认证时延平均减少了29%、25%和53%。

关键词: 车辆编队, 跨信任域, 区块链, 隐私保护, 群组认证

Abstract:

In order to balance the security and efficiency of vehicle platoon cross trust-domain identity authentication, an efficient cross trust-domain group authentication scheme with conditional privacy of vehicle platoon under blockchian architecture was proposed.A novel block structure BM-Tree was designed for vehicle platoon identity authentication, which provided support for efficient cross trust-domain group authentication by sharing the group authentication parame-ters on the blockchain.Dynamic pseudonym was used for vehicle identity privacy-preserving and bilinear mapping was used to transform the trust-domain parameters, which realized cross trust-domain group authentication with conditional privacy.An efficient group authentication protocol based on BM-Tree was proposed, which realized batch identity au-thentication and re-authentication of vehicle platoon.The proposed scheme has better performance than existing cross trust-domain authentication methods in terms of security and computational overhead.Experimental result shows that the authentication delay is reduced by 29%, 25% and 53% on average, respectively compared with BLA, MDPA and BBA.

Key words: vehicle platoon, cross trust-domain, blockchain, privacy-preserving, group authentication

中图分类号:

TP393

夏莹杰, 朱思雨, 刘雪娇. 区块链架构下具有条件隐私的车辆编队跨信任域高效群组认证研究[J]. 通信学报, 2023, 44(4): 111-123.

Yingjie XIA, Siyu ZHU, Xuejiao LIU. Research on efficient cross trust-domain group authentication with conditional privacy of vehicle platoon under blockchian architecture[J]. Journal on Communications, 2023, 44(4): 111-123.

图/表 10

图1

图2

图3

图4

表1

表2

表3

各方案批量身份认证阶段的计算开销"

方案	请求端计算开销/ms	认证端计算开销/ms
方案	请求端计算开销/ms	同信任域	跨信任域
BLA	$4 T_{A} + 6 T_{M} \approx 10.064$	$N (2 T_{A} + 3 T_{M}) + 2 (T_{A} + T_{M}) \approx 5.032 N + 3.36$	$N (2 T_{A} + 3 T_{M}) + 2 (T_{A} + T_{M}) \approx 5.032 N + 3.36$
MDPA	≈0	$N (4 T_{A} + 3 T_{M}) \approx 5.048 N$	$N (4 T_{A} + 3 T_{M}) \approx 5.048 N$
BBA	$3 T_{A} + 5 T_{M} \approx 8.384$	$N (6 T_{A} + 5 T_{M}) + 3 T_{B} \approx 8.408 N + 4.614$	$N (6 T_{A} + 5 T_{M}) + 3 T_{B} + T_{M} \approx 8.408 N + 6.286$
本文方案	$3 T_{M} + T_{B} + T_{P} \approx 6.595$	$N (T_{A} + 2 T_{M}) + 2 T_{B} \approx 3.352 N + 3.076$	$N (T_{A} + 2 T_{M}) + 2 T_{B} \approx 3.352 N + 3.076$

表3

图5

图6

图7

参考文献 25

[1]	LESCH V , BREITBACH M , SEGATA M ,et al. An overview on approaches for coordination of platoons[J]. IEEE Transactions on Intelligent Transportation Systems, 2022,23(8): 10049-10065.
[2]	HOEF V D S , JOHANSSON K H , DIMAROGONAS D V . Fuel-efficient en route formation of truck platoons[J]. IEEE Transactions on Intelligent Transportation Systems, 2018,19(1): 102-112.
[3]	LI X H , CHEN T , CHENG Q F ,et al. Smart applications in edge computing:overview on authentication and data security[J]. IEEE Internet of Things Journal, 2021,8(6): 4063-4080.
[4]	NAKAMOTO S . Bitcoin:a peer-to-peer electronic cash system[R]. 2008.
[5]	LIU L , FENG J , PEI Q Q ,et al. Blockchain-enabled secure data sharing scheme in mobile-edge computing:an asynchronous advantage actor-critic learning approach[J]. IEEE Internet of Things Journal, 2021,8(4): 2342-2353.
[6]	XIAO T T , CHEN C , PEI Q Q ,et al. Consortium blockchain-based computation offloading using mobile edge platoon cloud in Internet of vehicles[J]. IEEE Transactions on Intelligent Transportation Systems, 2022,23(10): 17769-17783.
[7]	ZHOU H B , XU W C , CHEN J C ,et al. Evolutionary V2X technologies toward the Internet of vehicles:challenges and opportunities[J]. Proceedings of the IEEE, 2020,108(2): 308-323.
[8]	BOUALOUACHE A , SENOUCI S M , MOUSSAOUI S . A survey on pseudonym changing strategies for vehicular ad-hoc networks[J]. IEEE Communications Surveys ＆ Tutorials, 2018,20(1): 770-790.
[9]	汤永利, 李元鸿, 张晓航 ,等. 格上基于身份的群签名方案[J]. 计算机研究与发展, 2022,59(12): 2723-2734.
	TANG Y L , LI Y H , ZHANG X H ,et al. Identity-based group signatures scheme on lattice[J]. Journal of Computer Research and Development, 2022,59(12): 2723-2734
[10]	NEUMAN B C , TS’O T , . Kerberos:an authentication service for computer networks[J]. IEEE Communications Magazine, 1994,32(9): 33-38.
[11]	MOUSTAFA H , BOURDON G , GOURHANT Y . Providing authentication and access control in vehicular network environment[C]// Security and Privacy in Dynamic Environments. Berlin:Springer, 2006: 62-73.
[12]	杨小东, 安发英, 杨平 ,等. 云环境下基于代理重签名的跨域身份认证方案[J]. 计算机学报, 2019,42(4): 756-771.
	YANG X D , AN F Y , YANG P ,et al. Cross-domain authentication scheme based on proxy re-signature in cloud environment[J]. Chinese Journal of Computers, 2019,42(4): 756-771.
[13]	ZHANG J H . Improvement of ID-based proxy re-signature scheme with pairing-free[J]. Wireless Networks, 2019,25(7): 4319-4329.
[14]	LEI A , CRUICKSHANK H , CAO Y ,et al. Blockchain-based dynamic key management for heterogeneous intelligent transportation systems[J]. IEEE Internet of Things Journal, 2017,4(6): 1832-1843.
[15]	YAO Y Y , CHANG X L , MI?I? J , ,et al. BLA:blockchain-assisted lightweight anonymous authentication for distributed vehicular fog services[J]. IEEE Internet of Things Journal, 2019,6(2): 3775-3784.
[16]	魏松杰, 李莎莎, 王佳贺 . 基于身份密码系统和区块链的跨域认证协议[J]. 计算机学报, 2021,44(5): 908-920.
	WEI S J , LI S S , WANG J H . A cross-domain authentication protocol by identity-based cryptography on consortium blockchain[J]. Chinese Journal of Computers, 2021,44(5): 908-920.
[17]	YANG Y H , WEI L J , WU J ,et al. A blockchain-based multidomain authentication scheme for conditional privacy preserving in vehicular ad-hoc network[J]. IEEE Internet of Things Journal, 2022,9(11): 8078-8090.
[18]	LIU J , LI X H , JIANG Q ,et al. BUA:a blockchain-based unlinkable authentication in VANETs[C]// Proceedings of 2020 IEEE International Conference on Communications (ICC). Piscataway:IEEE Press, 2020: 1-6.
[19]	BAGGA P , SUTRALA A K , DAS A K ,et al. Blockchain-based batch authentication protocol for Internet of Vehicles[J]. Journal of Systems Architecture, 2021,113:101877.
[20]	CHAUM D , HEYST E . Group signatures[C]// Workshop on the Theory and Application of of Cryptographic Techniques. Berlin:Springer, 1991: 257-265.
[21]	WANG P , CHEN C M , KUMARI S ,et al. HDMA:hybrid D2D message authentication scheme for 5G-enabled VANETs[J]. IEEE Transactions on Intelligent Transportation Systems, 2021,22(8): 5071-5080.
[22]	WANG Q P , GAO D Y , FOH C H ,et al. Protocols design and area division for privacy-preserving delay-aware authentication in vehicular networks[J]. IEEE Transactions on Vehicular Technology, 2021,70(11): 11129-11144.
[23]	LIU J H , YU Y , JIA J W ,et al. Lattice-based double-authentication-preventing ring signature for security and privacy in vehicular ad-hoc networks[J]. Tsinghua Science and Technology, 2019,24(5): 575-584.
[24]	CAI Y , ZHANG H , FANG Y G . A conditional privacy protection scheme based on ring signcryption for vehicular ad hoc networks[J]. IEEE Internet of Things Journal, 2021,8(1): 647-656.
[25]	VIJAYAKUMAR P , AZEES M , KOZLOV S A ,et al. An anonymous batch authentication and key exchange protocols for 6G enabled VANETs[J]. IEEE Transactions on Intelligent Transportation Systems, 2022,23(2): 1630-1638.

方案	不可伪造性	不可仿冒性	抗重放攻击	条件匿名	不可链接性
文献[15]	Y	Y	N	Y	N
文献[17]	Y	Y	Y	Y	N
文献[19]	Y	Y	Y	N	N
文献[25]	Y	N	N	Y	N
本文方案	Y	Y	Y	Y	Y

区块链架构下具有条件隐私的车辆编队跨信任域高效群组认证研究

Research on efficient cross trust-domain group authentication with conditional privacy of vehicle platoon under blockchian architecture

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 10

参考文献 25

相关文章 15

Metrics

推荐阅读 0

[1]	马鑫迪, 李清华, 姜奇, 马卓, 高胜, 田有亮, 马建峰. 面向Non-IID数据的拜占庭鲁棒联邦学习[J]. 通信学报, 2023, 44(6): 138-153.
[2]	张海波, 曹钰坤, 刘开健, 王汝言. 车联网中基于区块链的分布式信任管理方案[J]. 通信学报, 2023, 44(5): 148-157.
[3]	刘雪娇, 钟强, 夏莹杰. 基于双层分片区块链的车联网跨信任域高效认证方案[J]. 通信学报, 2023, 44(5): 213-223.
[4]	冯涛, 陈李秋, 方君丽, 石建明. 基于本地化差分隐私和属性基可搜索加密的区块链数据共享方案[J]. 通信学报, 2023, 44(5): 224-233.
[5]	胡柏吉, 张晓娟, 李元诚, 赖荣鑫. 支持多功能的V2G网络隐私保护数据聚合方案[J]. 通信学报, 2023, 44(4): 187-200.
[6]	蒋丽, 谢胜利, 田辉. 面向数字孪生边缘网络的区块链分片及资源自适应优化机制[J]. 通信学报, 2023, 44(3): 12-23.
[7]	戴千一, 张斌, 郭松, 徐开勇. 基于多分类器集成的区块链网络层异常流量检测方法[J]. 通信学报, 2023, 44(3): 66-80.
[8]	经普杰, 王良民, 董学文, 张玉书, 王骞, Muhammad Sohail. 分层跨链结构：一种面向区块链系统监管的可行架构[J]. 通信学报, 2023, 44(3): 93-104.
[9]	徐明, 张保俊, 伍益明, 应晨铎, 郑宁. 面向网络攻击和隐私保护的多智能体系统分布式共识算法[J]. 通信学报, 2023, 44(3): 117-127.
[10]	刘雪娇, 曹天聪, 夏莹杰. 区块链架构下高效的车联网跨域数据安全共享研究[J]. 通信学报, 2023, 44(3): 186-197.
[11]	黄冬艳, 李琨. 多地址的时间型区块链隐蔽通信方法研究[J]. 通信学报, 2023, 44(2): 148-159.
[12]	余晟兴, 陈钟. 基于同态加密的高效安全联邦学习聚合框架[J]. 通信学报, 2023, 44(1): 14-28.
[13]	杨亚涛, 刘德莉, 刘培鹤, 曾萍, 肖嵩. BFV-Blockchainvoting：支持BFV全同态加密的区块链电子投票系统[J]. 通信学报, 2022, 43(9): 100-111.
[14]	冯霞, 崔凯平, 谢晴晴, 王良民. VANET中基于区块链的分布式匿名认证方案[J]. 通信学报, 2022, 43(9): 134-147.
[15]	李雷孝, 杜金泽, 林浩, 高昊昱, 杨艳艳, 高静. 区块链网络隐蔽信道研究进展[J]. 通信学报, 2022, 43(9): 209-223.