车联网中的无证书批量认证方案  

Certificateless batch authentication scheme in internet of vehicles

作　　者：冯霞[1] 崔凯平 李泽 龚玲 FENG Xia;CUI Kaiping;LI Ze;GONG Ling(School of Automotive and Traffic Engineering,Jiangsu University,Zhenjiang,Jiangsu 212013,China;Automotive Engineering Research Institute,Jiangsu University,Zhenjiang,Jiangsu 212013,China)

机构地区：[1]江苏大学汽车与交通工程学院,江苏镇江212013 [2]江苏大学汽车工程研究院,江苏镇江212013

出　　处：《江苏大学学报（自然科学版）》2024年第6期694-700,共7页Journal of Jiangsu University：Natural Science Edition

基　　金：国家自然科学基金资助项目(61902157,62002139)。

摘　　要：针对车联网中网络带宽和计算能力有限导致消息认证效率低的问题,提出一种车联网中的无证书批量认证方案.权威机构为每个注册车辆生成一个评估证明,并基于全部注册车辆计算一个全局承诺,车辆基于评估证明参与消息认证过程.在认证过程中,可信机构能够利用全局承诺通过双线性配对来检验车辆、评估证明的有效性,以实现认证消息的快速批量认证.在隐私安全方面,所提出方案在区块链架构的基础上引入零知识证明,为车辆提供匿名性、不可链接性等隐私保护属性,并通过区块链状态数据库实现对车辆身份的准确追溯与快速撤销.针对所提出方案进行了安全性分析、计算效率分析以及仿真试验.结果表明,所提出方案能够满足匿名性、不可链接性等多种安全需求,其平均认证时间为0.357 ms,至少优于现有同类方案12.46%.To solve the problem of low message authentication efficiency in the internet of vehicles(IoVs) caused by limited network bandwidth and computing power,the certificateless batch authentication scheme applied to the IoVs was proposed.The authority generated evaluation proof for each registered vehicle and calculated global commitment based on all registered vehicles.The vehicles participated in the message authentication process based on the evaluation proof.In the authentication process,the global commitment could be utilized by the trusted authorities to check the validity of vehicle evaluation proofs through bilinear pairing for realizing rapid batch authentication.For the privacy and security,the zero-knowledge proof was introduced by the proposed scheme based on the blockchain architecture,which provided privacy protection properties of anonymity and unlinkability for vehicles.The accurate traceability and fast revocation were realized through the blockchain state database.The security analysis,computational efficiency analysis and simulation experiments were conducted.The results show that the proposed scheme can satisfy various security requirements of anonymity and unlinkability,and the average authentication time is 0.357 ms,which is at least 12.46% better than those of existing schemes.

关 键 词：车联网 消息认证 无证书认证 区块链 批量认证 隐私保护 匿名追溯 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]