面向云服务的安全高效无证书聚合签名车联网认证密钥协商协议  

Secure and Efficient Authentication and Key Agreement Protocol Using Certificateless Aggregate Signature for Cloud Service Oriented VANET

作　　者：张文芳[1] 雷丽婷 王小敏[1] 王宇 ZHANG Wen-fang;LEI Li-ting;WANG Xiao-min;WANG Yu(School of Information Science and Technology,Southwest Jiaotong University,Chengdu,Sichuan 610031,China)

机构地区：[1]西南交通大学信息科学与技术学院,四川成都610031

出　　处：《电子学报》2020年第9期1814-1823,共10页Acta Electronica Sinica

基　　金：国家自然科学基金(No.61872302);四川省科技计划项目(No.2018GZ0195,No.2019YFH0097,No.2019YFG0502)。

摘　　要：针对目前车联网认证密钥协商协议效率低下以及车辆公私钥频繁更新的问题,提出一个基于无证书聚合签名的车联网匿名认证与密钥协商协议.本方案通过引入临时身份和预签名机制实现对车辆的隐私保护以及匿名认证,同时通过构建临时身份索引数据库,实现可信中心对可疑车辆的事后追查,满足车辆的条件匿名性要求.此外,本方案中车辆的公私钥不随其临时身份动态改变,有效避免了已有方案公私钥频繁更新带来的系统开销.同时,为了提供高效的批量认证,采用无双线性对的聚合签名技术,实现了车辆签名的动态聚合和转发,有效降低了签名传递的通信量和云服务器的验证开销.本文方案在eCK模型和CDH问题假设下被证明是形式化安全的.In order to solve low efficiency and frequent updates of vehicles’public keys and private keys,a certificateless aggregate signature authentication and key agreement scheme with anonymity in vehicular Ad-Hoc network(VANET)is proposed.In our scheme,by using temporary identity and pre-signature,vehicles’privacy protection and anonymity authentication can be realized.On the other hand,the suspected vehicles can be tracked by the trust authority with the index database of the temporary identity to satisfy conditional anonymity.Meantime,if the temporary identity is changed,it is not necessary to update vehicles’public keys and private keys in this scheme,so the cost of system can be reduced.Moreover,the pairing-free aggregate signature technology is used to improve the efficiency further,which makes the number of signatures and the verification cost of the server be decreased.It is shown that our protocol is provably secure in eCK model under the computational Diffie-Hellman(CDH)assumption.

关 键 词：车联网 云服务 认证密钥协商 无证书 聚合签名 条件匿名性 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]