VANET中基于区块链的分布式匿名认证方案  

Distributed anonymous authentication scheme based on the blockchain in VANET

作　　者：冯霞[1] 崔凯平 谢晴晴 王良民 FENG Xia;CUI Kaiping;XIE Qingqing;WANG Liangmin(School of Automotive and Traffic Engineering,Jiangsu University,Zhenjiang 212013,China;School of Computer Science and Communication Engineering,Jiangsu University,Zhenjiang 212013,China;School of Cyber Science and Engineering,Southeast University,Nanjing 211110,China)

机构地区：[1]江苏大学汽车与交通工程学院,江苏镇江212013 [2]江苏大学计算机科学与通信工程学院,江苏镇江212013 [3]东南大学网络空间安全学院,江苏南京211110

出　　处：《通信学报》2022年第9期134-147,共14页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61902157,No.62002139)。

摘　　要：身份认证是阻止恶意车辆传播虚假交通信息的第一道防线。然而由于车载自组网(VANET)中网络带宽和计算能力有限,现有方案不能满足对车辆身份的高效认证需求,也无法实现对恶意车辆的快速匿名追溯。鉴于此,提出一种基于区块链的分布式匿名认证方案。该方案利用零知识证明对VANET中车辆进行快速匿名认证,并采用非线性对的聚合签名实现快速批量认证,有效减少认证过程中产生的计算量。另外,区域性可信机构(RTA)可以实现对恶意车辆身份的匿名追溯,并基于区块链对其身份进行快速撤销;还可以基于本地密钥对车辆的短期匿名身份进行及时更新,保证车辆的匿名性和签名的新鲜性。安全分析与仿真实验表明,所提方案能够满足匿名性、不可链接性等多种安全需求,并能有效降低计算与通信开销,比同类方案在性能上至少提升27.28%。Identity authentication is the first line of defense against malicious vehicles spreading false traffic information. However, due to the limited network bandwidth and computing power in the vehicle ad-hoc network(VANET),the existing schemes cannot meet the requirements of efficient authentication, nor can achieve fast and anonymous traceability of malicious vehicles. In view of this, a distributed anonymous authentication scheme based on the blockchain was proposed. The zero-knowledge proof was used to quickly and anonymously authenticate the identity of vehicles in VANET, and the pairing-free-based aggregating signature was used to provide fast batch verification, effectively reducing the computational burden generated during the authentication process. In addition, the regional trusted authority(RTA) could realize the anonymous traceability of malicious vehicle identities, and quickly revoke their identities by using the block chain. It could also update the short-term anonymous identities of vehicles based on local keys in time to ensure that vehicles anonymity and freshness of signatures. Security analysis and simulation show that the proposed scheme can satisfy various security requirements such as anonymity and unlinkability, and can effectively reduce computing and communication overhead, which is at least 27.28% higher in performance than similar schemes.

关 键 词：车载自组网 匿名认证 区块链 零知识证明 非线性对 

分 类 号：TN915.08[电子电信—通信与信息系统]