V2G中基于PUF的轻量级匿名认证协议  

Lightweight PUF-based anonymous authentication protocol in V2G

作　　者：范馨月[1] 刘洁 何嘉辉 FAN Xinyue;LIU Jie;HE Jiahui(School of Communication and Information Engineering,Chongqing University of Posts and Telecommunications,Chongqing 400065,China)

机构地区：[1]重庆邮电大学通信与信息工程学院,重庆400065

出　　处：《通信学报》2024年第10期129-141,共13页Journal on Communications

基　　金：国家自然科学基金资助项目(No.62271096)。

摘　　要：针对现有车辆到电网(V2G)网络认证协议中功能不够完善、通信开销大、计算开销高等问题,提出了一种基于物理不可克隆函数(PUF)的轻量级匿名认证协议,可以抵抗机器学习建模攻击。所提协议采用哈希函数和ASCON密码算法,实现车辆、充电桩和能源提供商之间快速的三方认证与密钥协商。通过模糊提取器结合生物特征和用户密码,实现双因素验证、密码和生物特征更新功能,并通过密码学动态累加器提供有效的用户撤销策略。ROR模型和Scyther形式化验证工具证明了所提协议的安全性,非形式化安全分析表明所提协议能抵抗物理攻击、位置伪造攻击、特权内部攻击等多种安全攻击。与近几年协议的性能对比分析表明,所提协议平均减少了约35.9%的通信开销和29.9%的计算开销,高度适用于资源有限的V2G环境。To address the issues of incomplete functionality,high communication overhead,and high computational cost in existing vehicle-to-grid(V2G)network authentication protocols,a lightweight anonymous authentication protocol based on physical unclonable function(PUF)was proposed,which could resist machine learning modeling attacks.The proposed protocol employed Hash functions and the ASCON cryptographic algorithm to achieve rapid three-party authentication and key negotiation among vehicles,charging stations,and energy providers.By combining fuzzy extractors with biometric features and user passwords,two-factor authentication,password and biometric feature update functions were implemented.Additionally,an effective user revocation strategy was provided through a cryptographic dynamic accumulator.The ROR model and Scyther formal validation tool proved the security of the proposed protocol,and the informal security analysis showed that the proposed protocol was resistant to a variety of security attacks,such as physical attacks,location forgery attacks and privileged insider attacks.The performance comparison analysis with the protocols of recent years shows that the proposed protocol reduces the communication overhead by about 35.9%and the computational cost by 29.9%on average,which is highly suitable for resource-limited V2G environments.

关 键 词：匿名认证 用户撤销 物理不可克隆函数 轻量级 车辆到电网 

分 类 号：TN918.9[电子电信—通信与信息系统]