5G-V2X中基于轨迹预测的安全高效群组切换认证协议

doi:10.11959/j.issn.1000-436x.2023136

通信学报 ›› 2023, Vol. 44 ›› Issue (8): 144-154.doi: 10.11959/j.issn.1000-436x.2023136

• 学术论文 • 上一篇

5G-V2X中基于轨迹预测的安全高效群组切换认证协议

张应辉¹^,², 钱佳乐¹^,², 曹进³, 郑东¹^,²

¹ 西安邮电大学网络空间安全学院，陕西西安 710121
² 西安邮电大学无线网络安全技术国家工程研究中心，陕西西安 710121
³ 西安电子科技大学网络与信息安全学院，陕西西安 710071

修回日期:2023-07-16 出版日期:2023-08-01 发布日期:2023-08-01
作者简介:张应辉（1985- ），男，陕西西安人，博士，西安邮电大学教授，主要研究方向为公钥密码学、云安全和无线网络安全等
钱佳乐（1997- ），男，河南周口人，西安邮电大学硕士生，主要研究方向为无线网络安全和5G安全
曹进（1985- ），男，陕西西安人，博士，西安电子科技大学教授，主要研究方向为应用密码学和5G、6G、天地一体化网络安全等
郑东（1964- ），男，山西临汾人，博士，西安邮电大学教授，主要研究方向为编码密码学和网络安全
基金资助:
国家自然科学基金资助项目(62072369);国家自然科学基金资助项目(62072371);陕西高校青年创新团队基金资助项目;陕西省特支计划青年拔尖人才支持计划基金资助项目;陕西省重点研发计划基金资助项目(2021ZDLGY06-02);陕西省重点研发计划基金资助项目(2020ZDLGY08-04);陕西省技术创新引导计划基金资助项目(2023-YD-CGZH-31)

Secure and efficient group handover authentication protocol based on trajectory prediction in 5G-V2X

Yinghui ZHANG¹^,², Jiale QIAN¹^,², Jin CAO³, Dong ZHENG¹^,²

¹ School of Cyberspace Security, Xi’an University of Posts and Telecommunications, Xi’an 710121, China
² National Engineering Research Center for Secured Wireless, Xi’an University of Posts and Telecommunications, Xi’an 710121, China
³ School of Cyber Engineering, Xidian University, Xi’an 710071, China

Revised:2023-07-16 Online:2023-08-01 Published:2023-08-01
Supported by:
The National Natural Science Foundation of China(62072369);The National Natural Science Foundation of China(62072371);The Youth Innovation Team of Shaanxi Universities Foundation;The Shaanxi Special Support Program Youth Top-notch Talent Program;The Key Research and Development Program of Shaanxi(2021ZDLGY06-02);The Key Research and Development Program of Shaanxi(2020ZDLGY08-04);The Technology Innovation Leading Program of Shaanxi(2023-YD-CGZH-31)

摘要/Abstract

摘要：

针对5G-V2X场景中大量车辆执行切换认证的效率问题，提出了一种基于轨迹预测的安全高效群组切换认证协议。首先，通过预测车辆轨迹，提前完成密钥协商协议。其次，通过用户分组算法将具有移动相关性的车辆视为同一群组，再采用无证书聚合签名技术批量验证群组内所有车辆。再次，针对聚合签名技术易遭受拒绝服务攻击的弊端，采用二分查找法快速定位恶意用户，提高群组切换认证协议的效率。最后，利用形式化验证工具Scyther对所提协议进行了安全性分析，与现有最优协议相比，所提协议的计算效率提高了30%。

关键词: 5G-V2X, 群组切换认证, 用户分组, 无证书聚合签名, Scyther

Abstract:

Aiming at the efficiency issue of handover authentication for a large number of vehicles in the 5G-V2X scenario, a secure and efficient group handover authentication protocol based on trajectory prediction was proposed.Firstly, the effect of completing key agreement protocol in advance was achieved by predicting vehicle trajectories.Secondly, vehicles with mobility relevance were treated as the same group through user grouping algorithms, and then all vehicles within the group were batch verified using certificateless aggregation signature technology.In addition, to address the vulnerability of aggregated signature technology to DoS attacks, a binary search method was used to quickly locate malicious users and improve the efficiency of group handover authentication protocol.Finally, the security analysis of the protocol was conducted using the formal verification tool Scyther, and compared with the existing optimal protocol, the computational efficiency is improved by 30%.

Key words: 5G-V2X, group handover authentication, user grouping, certificateless aggregation signature, Scyther

中图分类号:

TN918

张应辉, 钱佳乐, 曹进, 郑东. 5G-V2X中基于轨迹预测的安全高效群组切换认证协议[J]. 通信学报, 2023, 44(8): 144-154.

Yinghui ZHANG, Jiale QIAN, Jin CAO, Dong ZHENG. Secure and efficient group handover authentication protocol based on trajectory prediction in 5G-V2X[J]. Journal on Communications, 2023, 44(8): 144-154.

图/表 9

图1

表1

符号含义"

符号	含义
λ	系统主密钥
$K_{S E A F - i}$	车辆V_i访问SEAF的对称密钥
$K_{A M F - i}$	车辆V_i访问AMF的对称密钥
$K_{g N B - i}$	车辆V_i与基站gNB的会话密钥
SUPI_i	车辆V_i的永久身份标识符
SUCI_i	车辆V_i的SUPI _i 经加密后的身份标识符
TID_i	车辆V_i的临时身份标识符
NH_i	车辆V_i的下一跳参数值
NCC_i	车辆V_i的NH _i 链路计数器
GID	车辆群组的标识符
ID_gNB	基站gNB的身份标识符
PCI_gNB	基站gNB的物理单元标识符
ARFCN-DL_gNB	基站gNB的下行链路的绝对射频信道号
Sig_m	m的签名
{x}_K	用对称密钥K加密x
MAC	消息验证码
t	时间戳

表1

图2

图3

图4

表2

表3

表4

包含n辆车的车辆群组和基站的计算开销"

协议	车辆群组计算开销/μs	基站计算开销/μs
文献[19]协议1	$5 n T_{H} + T_{S}$	$5 n T_{H} + T_{S}$
文献[19]协议2	$3 n T_{M} + (3 n + 1) T_{H} + T_{S}$	$(2 n + 4) T_{M} + (4 n + 1) T_{H} + T_{S}$
文献[20]协议	$2 n T_{H} + (n + 2) T_{S}$	$2 n T_{H} + (n + 2) T_{S}$
文献[26]协议	$4 n T_{H}$	$4 n T_{H}$
本文协议	$2 n T_{H} + 3 T_{S}$	$2 n T_{H} + T_{S}$

表4

图5

参考文献 28

[1]	徐哲鑫, 高楷蒙, 贾文康 ,等. 负载约束的C-V2X车辆缓存节点选择算法[J]. 通信学报, 2021,42(3): 171-182.
	XU Z X , GAO K M , JIA W K ,et al. Vehicular cache nodes selection algorithm under load constraint in C-V2X[J]. Journal on Communications, 2021,42(3): 171-182.
[2]	SUN S H , HU J L , PENG Y ,et al. Support for vehicle-to-everything services based on LTE[J]. IEEE Wireless Communications, 2016,23(3): 4-8.
[3]	邵雯娟, 沈庆国 . 软件定义的D2D和V2X通信研究综述[J]. 通信学报, 2019,40(4): 179-194.
	SHAO W J , SHEN Q G . Survey of software defined D2D and V2X communication[J]. Journal on Communications, 2019,40(4): 179-194.
[4]	WIEST J , H?FFKEN M , KREBEL U ,et al. Probabilistic trajectory prediction with Gaussian mixture models[C]// Proceedings of 2012 IEEE Intelligent Vehicles Symposium. Piscataway:IEEE Press, 2012: 141-146.
[5]	HOUENOU A , BONNIFAIT P , CHERFAOUI V ,et al. Vehicle trajectory prediction based on motion model and maneuver recognition[C]// Proceedings of 2013 IEEE/RSJ International Conference on Intelligent Robots and Systems. Piscataway:IEEE Press, 2014: 4363-4369.
[6]	ALTCHé F , DE-LA-FORTELLE A . An LSTM network for highway trajectory prediction[C]// Proceedings of 2017 IEEE 20th International Conference on Intelligent Transportation Systems (ITSC). Piscataway:IEEE Press, 2018: 353-359.
[7]	MA Y X , ZHU X G , ZHANG S B ,et al. TrafficPredict:trajectory prediction for heterogeneous traffic-agents[J]. Proceedings of the AAAI Conference on Artificial Intelligence, 2019,33(1): 6120-6127.
[8]	张应辉, 胡凌云, 李艺昕 ,等. 空间信息网络中基于动态撤销机制的安全高效批量认证方案[J]. 通信学报, 2022,43(4): 164-176.
	ZHANG Y H , HU L Y , LI Y X ,et al. Secure and efficient batch authentication scheme based on dynamic revocation mechanism in space information network[J]. Journal on Communications, 2022,43(4): 164-176.
[9]	CHEN S , HU J , SHI Y ,et al. A vision of C-V2X:technologies,field testing and challenges with Chinese development[J]. arXiv Preprint,arXiv:2002.08736, 2020.
[10]	KENNEY J B . Dedicated short-range communications (DSRC) standards in the United States[J]. Proceedings of the IEEE, 2011,99(7): 1162-1182.
[11]	GHARSALLAH I , SMAOUI S , ZARAI F . An efficient authentication and key agreement protocol for a group of vehicles devices in 5G cellular networks[J]. IET Information Security, 2020,14(1): 21-29.
[12]	WANG P F , DI B Y , ZHANG H L ,et al. Platoon cooperation in cellular V2X networks for 5G and beyond[J]. IEEE Transactions on Wireless Communications, 2019,18(8): 3919-3932.
[13]	杨芫, 徐明伟, 陈浩 . 5G/后5G部署对互联网主干影响的分析与建模[J]. 通信学报, 2019,40(8): 36-44.
	YANG Y , XU M W , CHEN H . Analysis and modeling of Internet backbone traffic with 5G/B5G[J]. Journal on Communications, 2019,40(8): 36-44.
[14]	ZHANG Y H , DENG R H , BERTINO E ,et al. Robust and universal seamless handover authentication in 5G HetNets[J]. IEEE Transactions on Dependable and Secure Computing, 2021,18(2): 858-874.
[15]	CAO J , MA M D , LI H ,et al. A survey on security aspects for 3GPP 5G networks[J]. IEEE Communications Surveys ＆ Tutorials, 2020,22(1): 170-195.
[16]	SHARMA A , JAIN A , SHARMA I . Exposing the security weaknesses of fifth generation handover communication[C]// Proceedings of 2019 10th International Conference on Computing,Communication and Networking Technologies (ICCCNT). Piscataway:IEEE Press, 2019: 1-6.
[17]	LI G J , LAI C Z . Platoon handover authentication in 5G-V2X[C]// Proceedings of 2020 IEEE Conference on Communications and Network Security (CNS). Piscataway:IEEE Press, 2020: 1-2.
[18]	PAN M S , LIN T M , CHEN W T . An enhanced handover scheme for mobile relays in LTE-a high-speed rail networks[J]. IEEE Transactions on Vehicular Technology, 2015,64(2): 743-756.
[19]	MA R H , CAO J , FENG D G ,et al. FTGPHA:fixed-trajectory group pre-handover authentication mechanism for mobile relays in 5G high-speed rail networks[J]. IEEE Transactions on Vehicular Technology, 2020,69(2): 2126-2140.
[20]	YAN X B , MA M D , SU R . A certificateless efficient and secure group handover authentication protocol in 5G enabled vehicular networks[C]// Proceedings of IEEE International Conference on Communications. Piscataway:IEEE Press, 2022: 1678-1684.
[21]	LEE H J , KIM D , CHUNG B ,et al. Adaptive hysteresis using mobility correlation for fast handover[J]. IEEE Communications Letters, 2008,12(2): 152-154.
[22]	ZHANG L , QIN B , WU Q ,et al. Efficient many-to-one authentication with certificateless aggregate signatures[J]. Computer Networks, 2010,54(14): 2482-2491.
[23]	GARCIA M H C , MOLINA-GALAN A , BOBAN M T ,et al. A tutorial on 5G NR V2X communications[J]. IEEE Communications Surveys ＆Tutorials, 2021,23(3): 1972-2026.
[24]	3GPP. Architectural enhancements for 5G multicast-broadcast services (Release 17)[R]. 2021.
[25]	HAROUNABADI M , SOLEYMANI D M , BHADAURIA S ,et al. V2X in 3GPP standardization:NR sidelink in release-16 and beyond[J]. IEEE Communications Standards Magazine, 2021,5(1): 12-21.
[26]	3GPP. Security architecture and procedures for 5G system (Release 16):TS33.501[S]. 2022.
[27]	CREMERS C S . Scyther:semantics and verification of security protocols[D]. Eindhoven:Eindhoven University of Technology, 2006.
[28]	LOWE G . A hierarchy of authentication specifications[C]// Proceedings of the 10th Computer Security Foundations Workshop. Piscataway:IEEE Press, 2002: 31-43.

协议	轨迹不固定	组员无等待	隐私保护	双向认证	PFS/PBS	抗DoS攻击	抗重放攻击
文献[19]协议1	×	√	×	√	×	×	√
文献[19]协议2	×	√	√	√	√	×	√
文献[20]协议	√	×	√	√	√	√	√
文献[26]协议	×	×	×	×	×	×	×
本文协议	√	√	√	√	√	√	√

5G-V2X中基于轨迹预测的安全高效群组切换认证协议

Secure and efficient group handover authentication protocol based on trajectory prediction in 5G-V2X

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 9

参考文献 28

相关文章 4

Metrics

推荐阅读 0

协议	信令开销/个
文献[19]协议1	2n+12
文献[19]协议2	2n+12
文献[20]协议	n+11
文献[26]协议	8n
本文协议	n+11

[1]	李国权,林金朝,徐勇军,黄正文,刘挺. 无人机辅助的NOMA网络用户分组与功率分配算法[J]. 通信学报, 2020, 41(9): 21-28.
[2]	许芷岩,吴黎兵,李莉,何德彪. 新的无证书广义指定验证者聚合签名方案[J]. 通信学报, 2017, 38(11): 76-83.
[3]	冀保峰1,2，宋康1，黄永明1，杨绿溪1. 基于IEEE 802.11ac的多用户MIMO传输方案的优化设计及其性能分析[J]. 通信学报, 2013, 34(5): 11-106.
[4]	冀保峰,宋康,黄永明,杨绿溪. 基于IEEE 802.11ac的多用户MIMO传输方案的优化设计及其性能分析[J]. 通信学报, 2013, 34(5): 96-106.