车联网环境下基于多策略访问树的安全访问控制算法  

Security access control algorithm based on multi-strategy access tree for VANET

作　　者：张迪 曹利[1] 李原帅 Zhang Di;Cao Li;Li Yuanshuai(College of Information Science&Technology,Nantong University,Nantong Jiangsu 226001,China)

机构地区：[1]南通大学信息科学技术学院,江苏南通226001

出　　处：《计算机应用研究》2023年第11期3394-3401,共8页Application Research of Computers

基　　金：南通市科技项目(JC22022036,JC2021128)。

摘　　要：车联网环境下传统的资源访问控制技术效率较低且存在安全隐患。因此,提出了一种创新性多策略访问树算法的资源访问控制方案。该方案将传统的单策略访问树改进为多策略访问树,实现多级策略制定,有效提高策略访问效率,实现对资源的细粒度访问。同时,通过引入拉格朗日多项式秘密值恢复机制,将秘密值与授权令牌结合,解决了车联网访问控制授权的安全性问题。通过安全性分析证明了所提方案具有身份匿名性和消息不可否认性;性能分析的结果表明,与其他方案相比,该方案采用了多策略访问树存储策略,在策略执行系统中的存储开销较小;且随着该方案的策略匹配效率提高,计算开销明显变小,说明了该方案适用于在车联网环境下的安全、高效的资源访问控制。In the context of the Internet of Vehicles,traditional resource access control techniques are inefficient and present security risks.Therefore,this paper proposed an innovative resource access control solution based on a multi-strategy access tree algorithm.This solution improved the traditional single-strategy access tree by transforming it into a multi-strategy access tree,achieving multi-level strategy formulation and effectively enhancing the efficiency of policy access and fine-grained access to resources.In addition,the solution solved the security issue of access control authorization in the Internet of Vehicles by introducing the Lagrange polynomial secret value recovery mechanism,which combined the secret value with the authorization token.through security analysis,it have proved that the solution has identity anonymity and message non-repudiation.Performance analysis reveals that,in comparison to other solutions,the scheme has lower storage overhead in the policy execution system by utilizing the multi-strategy access tree to store policies.Moreover,as the efficiency of policy matching increases,the computational overhead significantly diminishes,indicating that the solution is well-suited for secure and efficient resource access control in the context of the Internet of Vehicles.

关 键 词：车联网 访问控制模型 多策略访问树 拉格朗日插值 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]