Research On Anonymous Authentication Technology For VANETs

With the development of car ownership and Internet of Things,VANETs has been advanced extensively.As a type of Internet of Things,VANETs provides great prospect for application in many areas,such as traffic congestion alleviating,road planning,resource scheduling and so on.However,due to the openness of DSRC(Dedicated Short Range Communication)protocol of VANETs,the system is vulnerable to attack by various types of network,which leads to a series of security issues.The most important part in addressing the one of the most important issues is to protect the driver's privacy,especially their identity privacy.Generally,pseudonym mechanism is the main method used to protect the driver's privacy.and its main method is anonymous authentication.Therefore,this paper studies the privacy protection of VANETs from the perspective of anonymous authentication with the following main contents:Firstly,a secure analysis of P.Vijayakumar's CPAV(Computationally Efficient Privacy Preserving Anonymous Mutual Authentication Scheme for VANETs),and the security of ABV(Anonymous Batch Vehicle Authentication)were carried out.The results show that external attackers can conduct bogus attack and forgery attack successfully,which proves the scheme doesn't satisfy non-repudiation and conditional-privacy.Besides,the scheme cann't resist the associated attack because the unique pseudonym is showed in the scheme,thus the scheme cann't provide unlinkability.Furthurely,it is proved that their ABV scheme cann't resist forgery attack either.Secondly,a scheme of conditional privacy preserving anonymous authentication for VANETs is proposed in this paper.In the scheme,a vehicles needs to authenticate itself to the neighbouring RSU(Road Side Unit)and receives a temporary anonymous certificate,and then it can broadcast messages to others by using the themporary certificate.In the scheme,the temporary anonymous certificate does not need to update and revocate.Moreover,vehicles don't need to finish the time-consuming Certificate Revocation List(CRL)check in case of communication to revocated malicious vehicles.The major innovation of the scheme,compared with other similar schemes,is that it can resist the linkage attack from RSU,because no unique pseudonym is showed to RSUs during the anonymous authentication.At last,this paper gave a detail secure analysis as well as experiment of the proposed scheme.The secure analysis shows that the scheme satisfies anonymity,unlinkability,traceability,revocation and message integrity,and can resist forgery attack,bogus attack,replay attack,and RSU linkage attack.The result of experiment shows that the scheme is prior to other existing similar ones in computation overhead and communication overhead.