车联网中基于环的匿名高效批量认证与组密钥协商协议

doi:10.11959/j.issn.1000-436x.2023055

通信学报 ›› 2023, Vol. 44 ›› Issue (6): 103-116.doi: 10.11959/j.issn.1000-436x.2023055

车联网中基于环的匿名高效批量认证与组密钥协商协议

张海波¹^,², 兰凯¹^,², 陈舟¹^,², 王汝言¹^,², 邹灿³, 王明月¹^,⁴

¹ 重庆邮电大学通信与信息工程学院，重庆 400065
² 先进网络与智能互联技术重庆市高校重点实验室，重庆 400065
³ 三六零数字安全科技集团有限公司，北京 100015
⁴ 丹麦奥尔堡大学，奥尔堡 9220

修回日期:2023-02-06 出版日期:2023-06-25 发布日期:2023-06-01
作者简介:张海波（1979- ），男，重庆人，博士，重庆邮电大学副教授、硕士生导师，主要研究方向为车联网、安全认证、密钥协商等
兰凯（1998- ），男，重庆人，重庆邮电大学硕士生，主要研究方向为车联网、安全认证、密钥协商
陈舟（1999- ），男，四川遂宁人，重庆邮电大学硕士生，主要研究方向为车联网、认证协议、密钥协商
王汝言（1969- ），男，湖北浠水人，博士，重庆邮电大学教授、博士生导师，主要研究方向为泛在网络、多媒体信息处理等
邹灿（1982- ），男，重庆人，三六零数字安全科技集团有限公司工程师，主要研究方向为大数据、信息安全、数字经济
王明月（1990- ），女，重庆人，重庆邮电大学博士生，主要研究方向为移动通信安全技术
基金资助:
国家自然科学基金资助项目(61901071);国家自然科学基金资助项目(61801065);长江学者和创新团队发展计划基金资助项目(IRT16R72);重庆市留创计划创新类基金资助项目(cx2020059)

Ring-based efficient batch authentication and group key agreement protocol with anonymity in Internet of vehicles

Haibo ZHANG¹^,², Kai LAN¹^,², Zhou CHEN¹^,², Ruyan WANG¹^,², Can ZOU³, Mingyue WANG¹^,⁴

¹ School of Communication and Information Engineering, Chongqing University of Posts and Telecommunications, Chongqing 400065, China
² Advanced Network and Intelligent Connection Technology Key Laboratory of Chongqing Education Commission of China, Chongqing 400065, China
³ 360 Digital Security Technology Group Co., Ltd., Beijing 100015, China
⁴ Aalborg University, Aalborg 9220, Denmark

Revised:2023-02-06 Online:2023-06-25 Published:2023-06-01
Supported by:
The National Natural Science Foundation of China(61901071);The National Natural Science Foundation of China(61801065);The Program for Changjiang Scholars and Innovative Research Team in University(IRT16R72);Chongqing Innovation and Entrepreneurship Program for the Returned Overseas Chinese Scholars(cx2020059)

摘要/Abstract

摘要：

针对当前批量认证与密钥协商协议依赖于半可信路边单元（RSU）且不适用于大规模车联网（IoV）场景下密钥更新的问题，提出了IoV中基于环的匿名高效批量认证与组密钥协商协议。通过假名机制确保匿名性，利用混沌映射安全构建认证密钥对，并通过少量双线性映射快速完成对大批车辆的批量认证。充分考虑大规模IoV场景下车辆加入与离开情况，利用混沌映射半群性高效构建环状会话组，设计了适用于大规模车辆的组密钥建立与更新机制。此外，该协议设定了假名更新与匿名追溯机制确保更安全的会话过程，同时利用 BAN 逻辑模型证明了协议语义安全性。安全性分析与仿真结果表明，所提协议具备多重安全属性且拥有一定的效率优势。

关键词: 车联网, 批量认证, 组密钥协商, 混沌映射, 密钥更新机制

Abstract:

Aiming at the problem that the current batch authentication and key agreement protocol were relied on semi-trusted road side unit (RSU) and were not suitable for key update in large-scale Internet of vehicles (IoV), a ring-based efficient batch authentication and group key agreement protocol with anonymity in IoV was proposed.The anonymity was ensured by the pseudonym mechanism.The authentication key pairs were constructed by the chaotic map, and the batch authentication for many vehicles was quickly completed by a small number of bilinear maps.The joining and leaving of vehicles in large-scale IoV scenario were fully considered, a ring session group was efficiently constructed by using the semi-group property of chaotic maps, and a group key establishment and update mechanism suitable for large-scale vehicles was designed.In addition, a pseudonym update mechanism and an anonymous tracing mechanism were designed to ensure a more secure session process.At the same time, the BAN logic model was used to prove the semantic security of the protocol.The security analysis and simulation results show that the proposed protocol has multiple security attributes and certain efficiency advantages.

Key words: IoV, batch authentication, group key agreement, chaotic mapping, key update mechanism

中图分类号:

TN915.08

张海波, 兰凯, 陈舟, 王汝言, 邹灿, 王明月. 车联网中基于环的匿名高效批量认证与组密钥协商协议[J]. 通信学报, 2023, 44(6): 103-116.

Haibo ZHANG, Kai LAN, Zhou CHEN, Ruyan WANG, Can ZOU, Mingyue WANG. Ring-based efficient batch authentication and group key agreement protocol with anonymity in Internet of vehicles[J]. Journal on Communications, 2023, 44(6): 103-116.

图/表 14

图1

表1

系统参数及其含义"

参数	含义
n	大素数
h	哈希运算
s	系统私钥
V_i	车辆节点
RSU _j	第 j个RSU
${FID}_{V}_{_{i}}$ , ${FID}_{R}_{_{j}}$	V_i与RSU _j 的假名
${SK}_{V_{i}}$ , $\begin{array}{l} {SK}_{R_{j}} \end{array}$	V_i与RSU _j 的长期会话密钥
B_i,D_j	V_i与RSU _j 的公钥
T_i,t_i	时间戳
E_k,D_k	使用密钥k进行对称加密/解密
⊕	异或加密
SK_z	组密钥

表1

图2

图3

图4

表2

图5

图6

表3

场景1中各协议下的计算开销对比"

协议	V_i/ms	RSU/ms	TA/ms	总计算开销/ms
文献[8]	$3 k T_{bm} + 5 k T_{h} + 4 k T_{mo} \approx 4.495 1 k$	$\begin{array}{l} (k + 3) T_{bm} + (k + 5) T_{h} + (k + 5) T_{mo} \approx \\ 4.321 9 k \end{array}$	—	8.817 0k
文献[12]	$2 k T_{bm} + 2 k T_{h} + k T_{se} \approx 2.542 5 k$	$\begin{array}{l} 2 k T_{bm} + 2 k T_{h} + k T_{se} + k T_{sd} \approx \\ 2.560 7 k \end{array}$	$k T_{bm} + 3 k T_{h} + k T_{sd} \approx 1.296 3 k$	6.399 5k
文献[15]	$\begin{array}{l} (3.5 k + 0.5 k^{2}) T_{ecc} + (4 k + k^{2}) T_{h} \approx \\ 0.211 9 k + 0.033 7 k^{2} \end{array}$	$\begin{array}{l} 4 k T_{h} + (2 k + 1) T_{ecc} \approx \\ 0.134 8 k + 0.051 4 \end{array}$	$k T_{ecc} + 7 k T_{h} \approx 0.107 4 k$	0.033 7k ²+0.4541k+0.051 4
本文所提协议	$\begin{array}{l} 5 k T_{cm} + 7 k T_{h} + k T_{mo} + k T_{sd} \approx \\ 0.415 4 k \end{array}$	$\begin{array}{l} (k + 4) T_{cm} + (6 + 3 k) T_{h} + k T_{se} \approx \\ 0.075 9 k + 0.182 4 \end{array}$	$\begin{array}{l} (4 + 2 k) T_{h} + (2 k + 1) T_{cm} + (k + 1) \cdot \\ T_{mo} + T_{bm} \approx 0.256 4 k + 1.492 9 \end{array}$	0.747 7k+1.675 3

表3

图7

图8

表4

图9

图10

参考文献 20

[3]	KHAN F , REHMAN A U , ZHANG Y L ,et al. A secured and reliable continuous transmission scheme in cognitive HARQ-aided Internet of things[J]. IEEE Internet of Things Journal, 2021,8(19): 14835-14844.
[4]	ZOU Y L , ZHU J , WANG X B ,et al. A survey on wireless security:technical challenges,recent advances,and future trends[J]. Proceedings of the IEEE, 2016,104(9): 1727-1765.
[5]	JIANG S R , ZHU X Y , WANG L M . An efficient anonymous batch authentication scheme based on HMAC for VANETs[J]. IEEE Transactions on Intelligent Transportation Systems, 2016,17(8): 2193-2204.
[6]	SUTRALA A K , BAGGA P , DAS A K ,et al. On the design of conditional privacy preserving batch verification-based authentication scheme for Internet of vehicles deployment[J]. IEEE Transactions on Vehicular Technology, 2020,69(5): 5535-5548.
[1]	SHARMA S , KAUSHIK B . A survey on Internet of vehicles:applications,security issues ＆ solutions[J]. Vehicular Communications, 2019,20:100182.
[2]	JAN M A , KHAN F , MASTORAKIS S ,et al. LightIoT:lightweight and secure communication for energy-efficient IoT in health informatics[J]. IEEE Transactions on Green Communications and Networking, 2021,5(3): 1202-1211.
[7]	TZENG S F , HORNG S J , LI T R ,et al. Enhancing security and privacy for identity-based batch verification scheme in VANETs[J]. IEEE Transactions on Vehicular Technology, 2017,66(4): 3235-3248.
[8]	VIJAYAKUMAR P , AZEES M , KOZLOV S A ,et al. An anonymous batch authentication and key exchange protocols for 6G enabled VANETs[J]. IEEE Transactions on Intelligent Transportation Systems, 2022,23(2): 1630-1638.
[9]	GAYATHRI N B , THUMBUR G , REDDY P V ,et al. Efficient pairing-free certificateless authentication scheme with batch verification for vehicular ad-hoc networks[J]. IEEE Access, 2018,6: 31808-31819.
[10]	HUANG J L , YEH L Y , CHIEN H Y . ABAKA:an anonymous batch authenticated and key agreement scheme for value-added services in vehicular ad hoc networks[J]. IEEE Transactions on Vehicular Technology, 2011,60(1): 248-262.
[11]	ZHANG J , ZHONG H , CUI J ,et al. SMAKA:secure many-to-many authentication and key agreement scheme for vehicular networks[J]. IEEE Transactions on Information Forensics and Security, 2021,16: 1810-1824.
[12]	LIU Y B , WANG Y H , CHANG G H . Efficient privacy-preserving dual authentication and key agreement scheme for secure V2V communications in an IoV paradigm[J]. IEEE Transactions on Intelligent Transportation Systems, 2017,18(10): 2740-2749.
[13]	XU G Q , LI X T , JIAO L T ,et al. BAGKD:a batch authentication and group key distribution protocol for VANETs[J]. IEEE Communications Magazine, 2020,58(7): 35-41.
[14]	KIM Y , PERRIG A , TSUDIK G . Tree-based group key agreement[J]. ACM Transactions on Information and System Security, 2004,7(1): 60-96.
[15]	WEI L , CUI J , ZHONG H ,et al. Proven secure tree-based authenticated key agreement for securing V2V and V2I communications in VANETs[J]. IEEE Transactions on Mobile Computing, 2022,21(9): 3280-3297.
[16]	BURROWS M , ABADI M , NEEDHAM R . A logic of authentication[J]. ACM Transactions on Computer Systems, 1990,8(1): 18-36.
[17]	BAGGA P , DAS A K , WAZID M ,et al. Authentication protocols in Internet of vehicles:taxonomy,analysis,and challenges[J]. IEEE Access, 2020,8: 54314-54344.
[18]	杨小东, 陈春霖, 杨平 ,等. 可证安全的部分盲代理重签名方案[J]. 通信学报, 2018,39(2): 65-72.
	YANG X D , CHEN C L , YANG P ,et al. Partially blind proxy re-signature scheme with proven security[J. Journal on Communications, 2018,39(2): 65-72.
[19]	LAI C Z , ZHANG M , CAO J ,et al. SPIR:a secure and privacy-preserving incentive scheme for reliable real-time map updates[J]. IEEE Internet of Things Journal, 2020,7(1): 416-428.
[20]	JIA X Y , HE D B , KUMAR N ,et al. A provably secure and efficient identity-based anonymous authentication scheme for mobile edge computing[J]. IEEE Systems Journal, 2020,14(1): 560-571.

密码学运算	执行时间/ms
T_h(SHA256)	0.008 0
T_se(DES/E)	0.018 3
T_sd(DES/D)	0.018 2
T_ecc	0.051 4
T_cm	0.033 6
T_bm	1.2541
T_mo	0.173 2

车联网中基于环的匿名高效批量认证与组密钥协商协议

Ring-based efficient batch authentication and group key agreement protocol with anonymity in Internet of vehicles

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 14

参考文献 20

相关文章 15

Metrics

推荐阅读 0

协议	通信开销/bit
文献[8]	4 416 k
文献[12]	9 504 k
文献[15]	5 568 k
本文所提协议	5 376 k+2 624

[1]	张海波, 曹钰坤, 刘开健, 王汝言. 车联网中基于区块链的分布式信任管理方案[J]. 通信学报, 2023, 44(5): 148-157.
[2]	刘雪娇, 钟强, 夏莹杰. 基于双层分片区块链的车联网跨信任域高效认证方案[J]. 通信学报, 2023, 44(5): 213-223.
[3]	刘雪娇, 曹天聪, 夏莹杰. 区块链架构下高效的车联网跨域数据安全共享研究[J]. 通信学报, 2023, 44(3): 186-197.
[4]	张雷, 王玉, 田建杰, 张琳, 章天骄. 基于IRS辅助的MIMO车联网系统联合波束成形设计[J]. 通信学报, 2023, 44(2): 59-69.
[5]	闫文浩, 姜子敬, 黄欣, 朱淑娟, 丁群. 广义二维多项式混沌映射及其在信息传输中的应用[J]. 通信学报, 2022, 43(9): 80-89.
[6]	曾嵘, 杭潇. 车联网环境下可重构智能反射面辅助无线信道估计算法[J]. 通信学报, 2022, 43(8): 142-150.
[7]	程翔, 张浩天, 杨宗辉, 黄子蔚, 李思江, 余安澜. 车联网通信感知一体化研究：现状与发展趋势[J]. 通信学报, 2022, 43(8): 188-202.
[8]	秦鹏, 和昊婷, 赵雄文, 伏阳, 张钰, 王淼, 王硕, 武雪. 基于停放车辆路边单元环境感知的车联网资源高效分配[J]. 通信学报, 2022, 43(7): 113-125.
[9]	朱思峰, 蔡江昊, 柴争义, 孙恩林. 车联网云边协同计算场景下的多目标优化卸载决策[J]. 通信学报, 2022, 43(6): 223-234.
[10]	孙雁飞, 尹嘉峥, 亓晋, 胡筱旋, 陈梦婷, 董振江. 基于动态图嵌入的车联网拓扑控制[J]. 通信学报, 2022, 43(6): 133-142.
[11]	亓伟敬, 宋清洋, 郭磊. 面向软件定义多模态车联网的双时间尺度RAN切片资源分配[J]. 通信学报, 2022, 43(4): 60-70.
[12]	莫梓嘉, 高志鹏, 杨杨, 林怡静, 孙山, 赵晨. 面向车联网数据隐私保护的高效分布式模型共享策略[J]. 通信学报, 2022, 43(4): 83-94.
[13]	张应辉, 胡凌云, 李艺昕, 宁建廷, 郑东. 空间信息网络中基于动态撤销机制的安全高效批量认证方案[J]. 通信学报, 2022, 43(4): 164-176.
[14]	丛玉良, 孙闻晞, 薛科, 钱志鸿, 陈绵书. 基于改进的混合遗传算法的车联网任务卸载策略研究[J]. 通信学报, 2022, 43(10): 77-85.
[15]	陈九九, 冯春燕, 郭彩丽, 杨洋, 孙启政, 朱美逸. 车联网中视频语义驱动的资源分配算法[J]. 通信学报, 2021, 42(7): 1-11.