基于可信交换别名的VANET混合认证方案  

Hybrid Authentication Scheme for VANET Based on Trusted Exchange Pseudonym

作　　者：汪自旺 徐洋[1] 谢晓尧[1] 张帅[1] 陈燚[1] 

机构地区：[1]贵州师范大学贵州省信息与计算科学重点实验室,贵阳550001

出　　处：《计算机工程》2016年第12期145-150,共6页Computer Engineering

基　　金：国家自然科学基金重点项目(61332019);国家"973"计划项目(2014CB340600);贵州省基础研究重大项目(黔科合JZ字[2014]2001号);贵州省科技创新人才团队项目(黔科合人才团队(2012)4009)

摘　　要：对比分析基于别名认证和基于群签名认证2种方案,提出一种混合认证方案。构建一个用于相邻节点间互换别名的交换协议,节点向可信权威(TA)申请与附近节点进行交换的密钥。TA利用非对称密钥实现交换双方的交换主体和别名的不可伪造性。该交换协议能够有效抵御合谋攻击,交换后的别名仍可用于可信节点的签名与认证,并引入群签名作为身份属性标签,群签名标签保证了消息的不可伪造性和可审计性。理论和效率分析表明,该方案引入了针对别名的白名单机制,此机制下单个报文的验证效率明显提高,同时可以有效抵御利用别名的回放攻击。Two types of schemes based on pseudonym authentication and group signature authentication are compared and analyzed. This paper proposes a hybrid authentication scheme. The model builds an exchange protocol for exchanging pseudonym between adjacent nodes. The node can apply for the exchange key from the Trusted Authority （TA） with the nearby nodes. TA uses asymmetric key to realize the unforgeability of exchange identity and pseudonym. The proposed protocol can effectively resist the collusion attack. The exchanged pseudonym also can be used to signature and authentication between trusted nodes. And the group signature is introduced as the identity attribute label, The group signature label ensures the message unforgeable and auditable. The theoretical and efficiency analysis shows that the proposed scheme introduces the white list mechanism for pseudonym. Under this mechanism, the verification efficiency of a single message is improved obviously. At the same time, the white list mechanism can effectively resist the replay attacks using pseudonym.

关 键 词：车载自组织网 隐私保护 混合认证协议 交换别名 群签名 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]