一种抗伪造攻击的车联网无证书聚合签密方案

doi:10.19665/j.issn1001-2400.2023.02.017

西安电子科技大学学报 ›› 2023, Vol. 50 ›› Issue (2): 169-177.doi: 10.19665/j.issn1001-2400.2023.02.017

一种抗伪造攻击的车联网无证书聚合签密方案

潘森杉^1,²(),王赛妃²()

1.江苏大学江苏省工业网络安全技术重点实验室,江苏镇江 212013
2.江苏大学计算机科学与通信工程学院,江苏镇江 212013

收稿日期:2022-08-15 出版日期:2023-04-20 发布日期:2023-05-12
作者简介:潘森杉(1986—),男,副教授,E-mail:sspan@ujs.edu.cn;|王赛妃(1997—),女,江苏大学硕士研究生,E-mail:2212008036@stmail.ujs.edu.cn
基金资助:
国家重点研发计划基金(2020YFB1005500);国家自然科学基金青年基金(61702230);国家自然科学基金青年基金(61902156);国家自然科学基金青年基金(61802154);中国博士后科学基金(2019M651738);江苏省前沿引领技术基础研究专项(BK20202001)

Certificateless aggregate signcryption scheme against forgery attacks for vehicular ad-hoc networks

PAN Senshan^1,²(),WANG Saifei²()

1. Jiangsu Key Laboratory for Industrial Network Security Technology,Jiangsu University,Zhenjiang 212013,China
2. College of Computer and Communication Engineering,Jiangsu University,Zhenjiang 212013,China

Received:2022-08-15 Online:2023-04-20 Published:2023-05-12

摘要/Abstract

摘要：

车联网给现代交通系统带来了极大的便利并受到人们的广泛关注。在车联网中,车辆访问控制的身份认证和发送消息的隐私性是两个关键问题。同时,由于有限的带宽以及车辆的高移动特性,验证效率也至关重要。聚合签密方案可以有效解决上述问题。但现有部分基于Schnorr签名的聚合签密方案未对密钥进行正确的哈希绑定,而无法抵御两类公钥替换攻击;且在进行聚合签密时,用户间交换部分签密信息生成的单个无效签密仍能通过聚合签密验证,故无法抵御合谋攻击。基于上述问题提出了一种新的面向车联网的无证书聚合签密方案。该方案利用密钥原像保护技术抵御公钥替换攻击,利用哈希抗碰撞特性抵御合谋攻击。在随机预言机模型下,证明了该方案的机密性与不可伪造性。与现有方案相比,该方案增强安全性的同时并未增加计算开销,整个验证阶段仍只需要6n+1次点乘操作。性能分析表明,该方案完全适用于车联网。

关键词: 无证书聚合签密, 身份认证, 车联网, 公钥替换攻击

Abstract:

Vehicular ad-hoc networks (VANETs) have received substantial attention on account of great convenience to modern transportation systems.In VANETs,the authentication of the vehicular access control and the privacy of the messages are two crucial criteria.At the same time,verification efficiency is still critical due to the limited bandwidth and high mobility characteristics of vehicles.Aggregate signcryption schemes can effectively solve the above issues.However,some of the state-of-art schemes based on the Schnorr signature are unable to resist two types of signature forgery attacks due to incorrect hash binding.In addition,two vehicles can maliciously exchange their signcryption information which can be verified successfully.A new certificateless aggregate signcryption scheme for VANETs is presented.Secret key preimage protection technology is used to prevent signature forgery attacks and hash collision resistance is utilized to resist coalition attack.The confidentiality and unforgeability of the scheme are proved under the random oracle model.Furthermore,in comparison with the state-of-art schemes,the proposed scheme which requires 6n+1 point multiplication operations during the whole authentication process enhances security without increasing computational overhead.Performance analysis shows that the scheme is suitable for VANETs.

Key words: certificateless aggregate signcryption, authentication, vehicular ad hoc networks, signature forgery attack

中图分类号:

TP309

潘森杉,王赛妃. 一种抗伪造攻击的车联网无证书聚合签密方案[J]. 西安电子科技大学学报, 2023, 50(2): 169-177.

PAN Senshan,WANG Saifei. Certificateless aggregate signcryption scheme against forgery attacks for vehicular ad-hoc networks[J]. Journal of Xidian University, 2023, 50(2): 169-177.

图/表 4

参考文献 15

[1]	ALI I, CHEN Y, FAISAL M, et al. ECCHSC:Computationally and Bandwidth Efficient ECC-Based Hybrid Signcryption Protocol for Secure Heterogeneous Vehicle-to-Infrastructure Communications[J]. IEEE Internet of Things Journal, 2021, 9(6):4435-4450. doi: 10.1109/JIOT.2021.3104010
[2]	THUMBUR G, RAO G S, REDDY P V, et al. Efficient and Secure Certificateless Aggregate Signature-Based Authentication Scheme for Vehicular Ad Hoc Networks[J]. IEEE Internet of Things Journal, 2020, 8(3):1908-1920. doi: 10.1109/JIoT.6488907
[3]	杨颜博, 张嘉伟, 马建峰. 一种使用区块链保护车联网数据隐私的方法[J]. 西安电子科技大学学报, 2021, 48(3):21-30.
	YANG Yanbo, ZHANG Jiawei, MA Jianfeng. Method for Using the Blockchain to Protect Data Privacy of IoV[J]. Journal of Xidian University, 2021, 48(3):21-30.
[4]	LIU Z Q, MA J F, WENG J, et al. LPPTE:a Lightweight Privacy-Preserving Trust Evaluation Scheme for Facilitating Distributed Data Fusion in Cooperative Vehicular Safety Applications[J]. Information Fusion, 2021, 73:144-156. doi: 10.1016/j.inffus.2021.03.003
[5]	ARIF M, WANG G, BHUIYAN M Z A, et al. A Survey on Security Attacks in VANETs:Communication,Applications and Challenges[J]. Vehicular Communications, 2019, 19:100179. doi: 10.1016/j.vehcom.2019.100179
[6]	LIU Y L, WANG L M, CHEN H H. Message Authentication Using Proxy Vehicles in Vehicular Ad Hoc Networks[J]. IEEE Transactions on Vehicular Technology, 2014, 64(8):3697-3710. doi: 10.1109/TVT.2014.2358633
[7]	ZHENG Y L. Digital Signryption or how to Achieve Cost(Signature & Encryption)<<Cost(Signature)+Cost(Encryption)[C]//Annual International Cryptology Conference. Heidelberg:Springer, 1997:165-179.
[8]	XU Z Y, LUO M, KHAN M K, et al. Analysis and Improvement of a Certificateless Signature Scheme for Resource-Constrained Scenarios[J]. IEEE Communications Letters, 2020, 25(4):1074-1078. doi: 10.1109/COML.4234
[9]	BONEH D, GENTYR C, LYNN B, et al. Aggregate and Verifiably Encrypted Signatures from Bilinear Maps[C]//International Conference on the Theory and Applications of Cryptographic Techniques. Heidelberg:Springer, 2003:382-391.
[10]	牛淑芬, 李振彬, 王彩芬. 适用于车载网的匿名异构聚合签密方案[J]. 计算机工程与科学, 2019, 41(1):80-87.
	NIU Shufeng, LI Zhenbin, WANG Caifen. An Anonymous Heterogeneous Aggregate Signcryption Scheme for Vehicular Networks[J]. Computer Engineering & Science, 2019, 41(1):80-87.
[11]	KIM T H, KUMAR G, SAHA R, et al. CASCF:Certificateless Aggregated Sign Cryption Framework for Internet-of-Things Infrastructure[J]. IEEE Access, 2020, 8:94748-94756. doi: 10.1109/Access.6287639
[12]	YU H F, REN R. Certificateless Elliptic Curve Aggregate SignCryption Scheme[J]. IEEE Systems Journal, 2022, 16(2):2347-2354. doi: 10.1109/JSYST.2021.3096531
[13]	陈虹, 周沫, 侯宇婷, 等. 可公开验证无对运算的无证书聚合签密方案[J]. 计算机科学与探索, 2021, 16(19):2519-2530.
	CHEN Hong, ZHOU Mo, HOU Yuting, et al. Certificateless Aggregate Signcryption Scheme with Publicly Verifiable Pairless Operation[J]. Journal of Frontiers of Computer Science and Technology, 2021, 16(19):2519-2530.
[14]	GONG B, WU Y, WANG Q, et al. A Secure and Lightweight Certificateless Hybrid Signcryption Scheme for Internet of Things[J]. Future Generation Computer Systems, 2022, 127:23-30. doi: 10.1016/j.future.2021.08.027
[15]	YANG Y F, ZHANG L, ZHAO Y L, et al. Privacy-Preserving Aggregation-Authentication Scheme for Safety Warning System in Fog-Cloud Based VANET[J]. IEEE Transactions on Information Forensics and Security, 2022, 17:317-331. doi: 10.1109/TIFS.2022.3140657

方案	签密计算开销	解签密计算开销	总开销	消息真实性	批验证	不可伪造性	可追踪性
文献[10]	2T_M+T_P	2T_P	2nT_M+3nT_P	√	√	√	√
文献[11]	6T_M+T_P	T_M+T_P	7nT_M+2nT_P	√	√	√	√
文献[12]	3T_M	3T_M	(6n+1)T_M	×	√	×	√
文献[13]	3T_M	3T_M	(6n+1)T_M	×	√	×	√
文献[14]	T_M	2T_M+T_P	3nT_M+nT_P	√	×	√	√
文献[15]	6T_M	3T_M+5T_P	9nT_M+5T_P	√	√	√	√
文中方案	3T_M	3T_M	(6n+1)T_M	√	√	√	√

一种抗伪造攻击的车联网无证书聚合签密方案

Certificateless aggregate signcryption scheme against forgery attacks for vehicular ad-hoc networks

RichHTML

PDF (PC)

赞

可视化

摘要/Abstract

引用本文

使用本文

图/表 4

参考文献 15

相关文章 6

Metrics

本文评价

推荐阅读 10

[1]	赖成喆,陈瑶,郭奇立,郑东. 车联网中基于博弈论的合作下载激励方案[J]. 西安电子科技大学学报, 2021, 48(3): 9-20.
[2]	凌敏,罗影,袁亮,靳传学. 一种面向智慧交通的车联网网络流量估计方法[J]. 西安电子科技大学学报, 2021, 48(3): 40-48.
[3]	柴艳娜,李坤伦,宋焕生. 智能汽车的入侵检测系统安全研究[J]. 西安电子科技大学学报, 2021, 48(3): 31-39.
[4]	李晓伟,杨邓奇,曾新,朱兴文,陈本辉,张玉清. 车联网环境下跨域间认证与密钥协商协议[J]. 西安电子科技大学学报, 2021, 48(1): 141-148.
[5]	王明伟;胡予濮. 一种前向-后向安全的数字签名方案[J]. J4, 2014, 41(2): 71-78.
[6]	李新国1;2;葛建华1;赵春明1. IBE公钥加密系统的用户私钥分发方案[J]. J4, 2004, 31(4): 569-573.