边缘计算场景下车联网身份隐私保护方案研究  

Research on the Identity Privacy Protection Scheme of Internet of Vehicles in Edge Computing Scenario

作　　者：彭维平[1] 熊长可 贺军义[1] 宋成[1] PENG Wei-ping;XIONG Chang-ke;HE Jun-yi;SONG Cheng(School of Computer Science and Technology,Henan Polytechnic University,Jiaozuo 454003,China)

机构地区：[1]河南理工大学计算机科学与技术学院,河南焦作454003

出　　处：《小型微型计算机系统》2020年第11期2399-2406,共8页Journal of Chinese Computer Systems

基　　金：河南省科技攻关项目(182102110333)资助;河南理工大学博士基金项目(B2012-050)资助;河南省高校青年骨干教师计划(2019GGJS061)资助.

摘　　要：针对车联网(Internet of Vehicles,IoV)环境中身份隐私信息易泄漏问题,基于椭圆曲线上的双线性对性质,提出一个隐私保护认证方案.该方案通过选取覆盖区域内某一移动边缘计算(Mobile Edge Computing,MEC)服务器作为可信中心(Trust Agency,TA),对车载终端(On Board Unit,OBU)和路侧单元(Road Side Unit,RSU)进行匿名化处理,实现终端用户身份隐私保护;采用单个及批量消息签名验证和去匿名化技术,实现终端车辆和路侧单元的可追溯性.分析表明,方案不仅满足正确性、不可链接性、不可伪造性、可追溯性、前/后向安全性和抵抗重放攻击等安全特性,而且在通信复杂度和时间复杂度方面具有一定的优势.实验结果显示,方案降低了消息丢失率、缩短了消息延迟.Aiming at the problem of easy leakage of identity and privacy information in the Internet of Vehicles,a privacy protection authentication scheme based on the nature of bilinear pairs on elliptic curves was proposed.This paper uses the Trust Agency that Mobile Edge Computing Server in the coverage area,to anonymise the On Board Unit and the Road Side Unit.Anonymization is performed to protect the privacy of terminal equipment.Meanwhile,this paper provide verification for single and batch message,and de-anonymization technologies,which are used to achieve traceability of OBU and RSU.The theoretical analysis proves the correctness of the scheme,and also shows that the scheme has un-linkability,unforgeability,forward security,backward security and resistance to replay attack.Besides,it has lower communication space complexity and time complexity.Simulation experiments show that the scheme has a lower average message loss rate and a shorter average message delay.

关 键 词：移动边缘计算 车联网 隐私保护 匿名化 批量验证 追溯 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]