CN118890148A - A method for Internet of Vehicles authentication key negotiation supporting conditional privacy protection - Google Patents

Abstract

The present invention discloses a vehicle network authentication key negotiation method supporting conditional privacy protection, and relates to the field of information security technology. The method of the present invention includes initialization, registration, authentication and parameter update, and involves three entities: vehicles, roadside units, and trusted centers. Compared with the authentication key negotiation scheme of the prior art, the present invention can ensure the conditional privacy of the vehicle user's identity; it can ensure the security of communication information after the vehicle and the roadside unit are registered at the trusted center, and the trusted center does not participate in the subsequent authentication key negotiation process; it can achieve point-to-point mutual authentication without relying on the trusted center; it can also achieve forward and backward privacy protection under the premise of current key leakage.

Description

A method for Internet of Vehicles authentication key negotiation supporting conditional privacy protection

Technical Field

The present invention relates to the field of information security technology, and in particular to a vehicle networking authentication key negotiation method supporting conditional privacy protection.

Background Art

In order to promote the digital transformation of traditional transportation, advance the development of national smart transportation, and meet people's needs for travel efficiency and traffic safety, the Internet of Vehicles (IoV) came into being. The Internet of Vehicles refers to connecting vehicles to the network through on-board sensors, controllers, actuators, communication modules and other devices to achieve various interaction modes such as vehicle-to-vehicle (Vehicle 2Vehicle), vehicle-to-infrastructure (Vehicle 2Infrastructure), vehicle-to-network (Vehicle 2Network), and vehicle-to-pedestrian (Vehicle 2Pedestrian). This technology aims to improve traffic safety, travel efficiency, provide value-added services, and promote the development of intelligent transportation systems through information sharing and collaborative processing. my country is also actively promoting the research and development and industrial application of intelligent connected vehicle technology. As the core function and key element of the Internet of Vehicles, information sharing has attracted much attention, but it also faces challenges in security and privacy. In traditional IoV solutions, although intelligent processing and real-time response in smart transportation can be improved, the public communication of V2V and V2I makes the IoV system vulnerable to various attacks such as data tampering, camouflage, and man-in-the-middle attacks. At the same time, the identity of the vehicle user is also public, and the anonymity of the identity is not considered, which damages the user's privacy. In summary, there is room for improvement in communication information security and user privacy. Therefore, this work proposes a secure communication method for IoV with conditional privacy attributes.

In order to ensure the information security during the communication process, some existing literature uses bilinear mapping and secure computing to ensure communication security, but such schemes have problems such as high computational overhead and low operating efficiency. This work proposes a lightweight authentication key agreement method implemented using elliptic curves to ensure the security of information during the authentication process.

In order to achieve conditional privacy of user identity, many secure and effective conditional privacy protection schemes have been proposed, such as conditional privacy protection achieved by combining public key infrastructure (PKI), certificates and digital signatures. However, these schemes only focus on conditional anonymity and do not consider the storage and management of public key certificates as the number of vehicles increases. This work proposes an authentication method of authenticated key agreement (AKA) and a key derivation algorithm to achieve conditional anonymity of vehicle identity.

Summary of the invention

The purpose of the present invention is to overcome the deficiencies of the prior art and provide a vehicle networking authentication key negotiation method that supports conditional privacy protection.

The objective of the present invention is achieved through the following technical solutions:

A vehicle network authentication key negotiation method supporting conditional privacy protection, comprising:

System initialization phase: Build a connected vehicle system including three entities: the trusted center TA, roadside units, and vehicles. Initialize the connected vehicle system and generate public parameters.

Vehicle registration phase: After receiving the vehicle registration request, the trusted center TA generates registration data for the vehicle, and the vehicle calculates the vehicle registration information and the vehicle public and private key pair based on the registration data;

Roadside unit registration phase: After receiving the roadside unit application request, the trusted center TA generates registration data for the roadside unit. The roadside unit calculates the roadside unit registration information and the roadside unit public and private key pair based on the registration data;

Key negotiation phase: The vehicle and the roadside unit authenticate each other and establish a session key;

Parameter update phase: Update the initial registration information of the vehicle and the roadside unit saved during the registration phase.

Furthermore, the system initialization phase is performed by the trusted center TA, including:

Determining the elliptic curve group based on the finite field GF(p) Its generator is P and its order is q;

Random Selection As the master private key, calculate the master public key PK _TA = SK _TA · P;

Select a secure hash function H and disclose system parameters

Furthermore, the vehicle registration phase is completed by the interaction between the vehicle V _i and the trusted center TA, where i=1, 2, ..., n, and n represents the total number of vehicles. The vehicle registration phase specifically includes:

Vehicle V _i will Send to the trusted center TA through a secure channel;

After receiving the registration request, the trusted center TA selects a random number x _i , Calculate _Xi = _xi ·P, _li =H( _PKTA )· _xi +H( _Xi )· _SKTA (mod q), and send ( _Vseedi , _Xi , _li ) to vehicle _Vi ;

After the trusted center TA responds, vehicle V _i first calculates h _l ||h _r ←H(Vseed _i ), in represents the root derived key of vehicle V _i , Represents the root derived information of vehicle V _i ; then select a random number As the private key, generate the public key pk _Vi = sk _Vi · P; calculate Vehicle V _i is saved locally And make {pk _Vi ,X _i } public.

Furthermore, the roadside unit registration phase is completed by the interaction between the roadside unit RSU _j and the trusted center TA, where j=1, 2, ..., m, m represents the total number of roadside units, and the roadside unit registration phase specifically includes:

Roadside Unit RSU _j Send to the trusted center TA through a secure channel;

After receiving the registration request, the trusted center TA selects a random number _yj , Calculate Y _j =y _j ·P, l _j =H(PK _TA )·y _j +H(Y _j || ID _j )·SK _TA (modq), and send (Rseed _j ,Y _j ,l _j ) to the roadside unit RSU _j ;

After the trusted center TA responds, the roadside unit RSU _j first calculates h _l || h _r =H(Rseed _j ), in represents the root derived key of roadside unit RSU _j , Represents the root derived information of the roadside unit RSU _j ; then select As the private key, generate the public key pk _RSUj = sk _RSUj · P; finally calculate The roadside unit RSU _j is stored locally And make {pk _RSUj ,Y _j } public.

Furthermore, the key negotiation phase is completed by the interaction between the vehicle V _i and the roadside unit RSU _j , and specifically includes:

Vehicle V _i selects a random number calculate R _i =H(PID _i ‖X _i ‖m _{i ‖ri} ‖T _i )·P, where T _i is the timestamp, and {PID _i ,R _i ,T _i } is sent to the roadside unit RSU _j ;

Roadside Unit RSU _j Verification in represents the timestamp when the roadside unit RSU _j receives the message, Δt represents the maximum transmission delay;

Roadside unit RSU _j selects a random number And read the current timestamp T _j and calculate:

R _j =H(r _j ‖T _j ‖m _j )·P,

B _j = l _j · R _i ,

F _j,1 =f _j,1 ·P,

F _j,2 = f _j,2 ·P+f _j,1 ·pk _Vi ,

w _j,2 =f _j,2 -sk _RSUj ·C _j (mod q),

in represents the kth derived key of roadside unit RSU _j , and finally Sent to vehicle V _i ;

Vehicle V _i first verifies Then calculate:

And verify whether it is established;

If the above equation holds true, vehicle V _i first randomly And read the current timestamp T' _i , and then calculate:

_Bi ＝ _li · _Rj ，

F _i,1 =f _i,1 ·P,

F _i,2 = f _i,2 ·P+f _i,1 ·pk _RSUj ,

w _i,2 = f _i,2 -sk _Vi ·C _i (modq),

in represents the kth derived key of vehicle V _i , and vehicle V _i generates the session key Finally Send to roadside unit RSU _j ;

The roadside unit RSU _j first verifies Then calculate:

And verify Is it true? If the equality is true, calculate the session key

Furthermore, the parameter update phase is completed by the vehicle V _i and the roadside unit RSU _j , and specifically includes:

Vehicle V _i performs the kth parameter update, and the k-1th derived key and k-1th derived information of vehicle V _i are expressed as and The update process includes:

Then Replace the previously saved in the vehicle V _i

The roadside unit RSU _j performs the kth parameter update, and the k-1th derived key and k-1th derived information of the roadside unit RSU _j are expressed as and The update process includes:

Then Replace the original data stored in the roadside unit RSU _j

The beneficial effects of the present invention are:

Compared with the existing Internet of Vehicles privacy protection schemes, this scheme overcomes several major difficulties in achieving privacy protection in traditional Internet of Vehicles: 1) Many Internet of Vehicles schemes do not verify each other's identities before communication, making it difficult to ensure the security and reliability of communication content; 2) The schemes based on bilinear mapping to achieve privacy protection have high computational overhead and perform poorly in terms of real-time performance during the communication process; 3) Many schemes usually do not guarantee the privacy of vehicle user identities or are directly completely anonymized. Considering the privacy and traceability of vehicle user identities, it is necessary to anonymize vehicle identity conditions.

Compared with the existing Internet of Vehicles authentication schemes that support privacy protection, the present invention 1) can ensure the conditional privacy of vehicle identity; 2) can ensure the security of communication information after the vehicle and roadside unit are registered at the trusted center, without the trusted center participating in the subsequent authentication key negotiation process; 3) can achieve point-to-point mutual authentication without relying on the trusted center; 4) can also achieve forward and backward privacy protection under the premise of current key leakage.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a system model diagram of a method for Internet of Vehicles authentication key negotiation supporting conditional privacy protection provided by an embodiment of the present invention;

FIG2 is a flow chart of a method for Internet of Vehicles authentication key negotiation supporting conditional privacy protection provided by an embodiment of the present invention.

DETAILED DESCRIPTION

The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

Referring to Figures 1 and 2, the present invention provides a technical solution:

A vehicle network authentication key negotiation method supporting conditional privacy protection, comprising:

System initialization phase: Build a connected vehicle system including three entities: the trusted center TA, roadside units, and vehicles. Initialize the connected vehicle system and generate public parameters.

Vehicle registration phase: After receiving the vehicle registration request, the trusted center TA generates registration data for the vehicle, and the vehicle calculates the vehicle registration information and the vehicle public and private key pair based on the registration data;

Roadside unit registration phase: After receiving the roadside unit application request, the trusted center TA generates registration data for the roadside unit. The roadside unit calculates the roadside unit registration information and the roadside unit public and private key pair based on the registration data;

Key negotiation phase: The vehicle and the roadside unit authenticate each other and establish a session key;

Parameter update phase: Update the initial registration information of the vehicle and the roadside unit saved during the registration phase.

In this embodiment, the structure diagram of the Internet of Vehicles system including three entities, namely, a trusted center TA, a roadside unit and a vehicle, is shown in FIG1 .

In this embodiment, the system initialization phase is performed by the trusted center TA, including:

Determining the elliptic curve group based on the finite field GF(p) Its generator is P and its order is q;

Random Selection As the master private key, calculate the master public key PK _TA = SK _TA · P;

Select a secure hash function H and disclose system parameters

In this embodiment, the vehicle registration phase is completed by the interaction between the vehicle V _i and the trusted center TA, where i=1, 2, ..., n, and n represents the total number of vehicles. The vehicle registration phase specifically includes:

Vehicle V _i will Send to the trusted center TA through a secure channel;

After receiving the registration request, the trusted center TA selects a random number x _i , Calculate _Xi = _xi ·P, _li =H( _PKTA )· _xi +H( _Xi )· _SKTA (modq), and send ( _Vseedi , _Xi , _li ) to vehicle _Vi ;

After the trusted center TA responds, the vehicle V _i first calculates in represents the root derived key of vehicle _Vi , Represents the root derived information of vehicle V _i ; then select a random number As the private key, generate the public key pk _Vi = sk _Vi · P; calculate Vehicle V _i is saved locally And make {pk _Vi ,X _i } public.

In this embodiment, the roadside unit registration stage is completed by the interaction between the roadside unit RSU _j and the trusted center TA, where j=1, 2, ..., m, m represents the total number of roadside units, and the roadside unit registration stage specifically includes:

Roadside Unit RSU _j Send to the trusted center TA through a secure channel;

After receiving the registration request, the trusted center TA selects a random number _yj , Calculate Y _j =y _j ·P, l _j =H(PK _TA )·y _j +H(Y _j || ID _j )·SK _TA (mod q), and send (Rseed _j ,Y _j ,l _j ) to the roadside unit RSU _j ;

After the trusted center TA responds, the roadside unit RSU _j first calculates h _l || h _r =H(Rseed _j ), in represents the root derived key of roadside unit RSU _j , Represents the root derived information of the roadside unit RSU _j ; then select As the private key, generate the public key pk _RSUj = sk _RSUj · P; finally calculate The roadside unit RSU _j is stored locally And make {pk _RSUj ,Y _j } public.

The key negotiation phase is completed by the interaction between the vehicle V _i and the roadside unit RSU _j , and specifically includes:

Vehicle V _i selects a random number calculate R _i =H(PID _i ‖X _i ‖m _{i ‖ri} ‖T _i )·P, where T _i is the timestamp, and {PID _i ,R _i ,T _i } is sent to the roadside unit RSU _j ;

Roadside Unit RSU _j Verification in represents the timestamp when the roadside unit RSU _j receives the message, Δt represents the maximum transmission delay;

Roadside unit RSU _j selects a random number And read the current timestamp T _j and calculate:

R _j =H(r _j ‖T _j ‖m _j )·P,

B _j = l _j · R _i ,

F _j,1 =f _j,1 ·P,

F _j,2 = f _j,2 ·P+f _j,1 ·pk _Vi ,

w _j,2 = f _j,2 -sk _RSUj ·C _j (modq),

in represents the kth derived key of roadside unit RSU _j , and finally Sent to vehicle V _i ;

Vehicle V _i first verifies Then calculate:

And verify whether it is established;

If the above equation holds true, vehicle V _i first randomly And read the current timestamp T' _i , and then calculate:

_Bi ＝ _li · _Rj ，

F _i,1 =f _i,1 ·P,

F _i,2 = f _i,2 ·P+f _i,1 ·pk _RSUj ,

w _i,2 = f _i,2 -sk _Vi ·C _i (mod q),

in represents the kth derived key of vehicle V _i , and vehicle V _i generates the session key Finally Send to roadside unit RSU _j ;

Roadside unit RSU _j first verifies Then calculate:

And verify Is it true? If the equality is true, calculate the session key

In this embodiment, the parameter update phase is completed by the vehicle V _i and the roadside unit RSU _j , and specifically includes:

Vehicle V _i performs the kth parameter update, and the k-1th derived key and k-1th derived information of vehicle V _i are expressed as and The update process includes:

Then Replace the previously saved in the vehicle V _i

The roadside unit RSU _j performs the kth parameter update, and the k-1th derived key and k-1th derived information of the roadside unit RSU _j are expressed as and The update process includes:

Then Replace the original data stored in the roadside unit RSU _j

The interaction between the various entities of the Internet of Vehicles of the present invention is shown in Figure 2. Compared with the existing Internet of Vehicles privacy protection scheme, the present invention overcomes several major difficulties in achieving privacy protection in traditional Internet of Vehicles: 1) Many Internet of Vehicles schemes do not verify each other's identities before communication, making it difficult to ensure the security and reliability of communication content; 2) The schemes based on bilinear mapping to achieve privacy protection have a large computational overhead and perform poorly in terms of real-time performance during the communication process; 3) Many schemes usually do not guarantee the privacy of the vehicle user's identity or are directly completely anonymous. Considering the privacy and traceability of the vehicle user's identity, the vehicle identity conditions need to be anonymized.

Compared with the existing Internet of Vehicles authentication schemes that support privacy protection, the present invention 1) can ensure the conditional privacy of vehicle identity; 2) can ensure the security of communication information after the vehicle and roadside unit are registered at the trusted center, without the trusted center participating in the subsequent authentication key negotiation process; 3) can achieve point-to-point mutual authentication without relying on the trusted center; 4) can also achieve forward and backward privacy protection under the premise of current key leakage.

The above is only a preferred embodiment of the present invention. It should be understood that the present invention is not limited to the form disclosed herein, and should not be regarded as excluding other embodiments, but can be used in various other combinations, modifications and environments, and can be modified within the scope of the concept described herein through the above teachings or the technology or knowledge of the relevant field. The changes and modifications made by those skilled in the art shall not deviate from the spirit and scope of the present invention, and shall be within the scope of protection of the claims attached to the present invention.

Claims (6)

1. A method for vehicle network authentication key negotiation supporting conditional privacy protection, characterized by comprising: System initialization phase: Build a connected vehicle system including three entities: the trusted center TA, roadside units, and vehicles. Initialize the connected vehicle system and generate public parameters. Vehicle registration phase: After receiving the vehicle registration request, the trusted center TA generates registration data for the vehicle, and the vehicle calculates the vehicle registration information and the vehicle public and private key pair based on the registration data; Roadside unit registration phase: After receiving the roadside unit application request, the trusted center TA generates registration data for the roadside unit. The roadside unit calculates the roadside unit registration information and the roadside unit public and private key pair based on the registration data; Key negotiation phase: The vehicle and the roadside unit authenticate each other and establish a session key; Parameter update phase: Update the initial registration information of the vehicle and the roadside unit saved during the registration phase. 2. A method for Internet of Vehicles authentication key negotiation supporting conditional privacy protection according to claim 1, characterized in that: the system initialization phase is performed by a trusted center TA, including: Determining the elliptic curve group based on the finite field GF(p) Its generator is P and its order is q; Random Selection As the master private key, calculate the master public key PK _TA = SK _TA · P; Select a secure hash function H and disclose system parameters 3. A method for vehicle network authentication key negotiation supporting conditional privacy protection according to claim 2, characterized in that: the vehicle registration phase is completed by the interaction between the vehicle V _i and the trusted center TA, where i = 1, 2, ..., n, n represents the total number of vehicles, and the vehicle registration phase specifically includes: Vehicle V _i will Send to the trusted center TA through a secure channel; After receiving the registration request, the trusted center TA selects a random number Calculate _Xi = _xi ·P, _li =H( _PKTA )· _xi +H( _Xi )· _SKTA (mod q), and send ( _Vseedi , _Xi , _li ) to vehicle _Vi . After the trusted center TA responds, vehicle _Vi first calculates in represents the root derived key of vehicle V _i , Represents the root derived information of vehicle V _i ; then select a random number As the private key, generate the public key pk _Vi = sk _Vi · P; calculate Vehicle V _i is saved locally And make {pk _Vi ,X _i } public. 4. A method for vehicle network authentication key negotiation supporting conditional privacy protection according to claim 3, characterized in that: the roadside unit registration stage is completed by the interaction between the roadside unit RSU _j and the trusted center TA, where j=1,2,...,m, m represents the total number of roadside units, and the roadside unit registration stage specifically includes: Roadside Unit RSU _j Send to the trusted center TA through a secure channel; After receiving the registration request, the trusted center TA selects a random number Calculate Y _j =y _j ·P, l _j =H(PK _TA )·y _j +H(Y _j || ID _j )·SK _TA (mod q), and send (Rseed _j ,Y _j ,l _j ) to the roadside unit RSU _j ; After the trusted center TA responds, the roadside unit RSU _j first calculates in represents the root derived key of roadside unit RSU _j , Represents the root derived information of the roadside unit RSU _j ; then select As the private key, generate the public key pk _RSUj = sk _RSUj · P; finally calculate The roadside unit RSU _j is stored locally And make {pk _RSUj ,Y _j } public. 5. A vehicle network authentication key negotiation method supporting conditional privacy protection according to claim 4, characterized in that: the key negotiation phase is completed by the interaction between the vehicle V _i and the roadside unit RSU _j , specifically comprising: Vehicle V _i selects a random number calculate R _i =H(PID _i ‖X _i ‖m _{i ‖ri} ‖T _i )·P, where T _i is the timestamp, and {PID _i ,R _i ,T _i } is sent to the roadside unit RSU _j ; Roadside Unit RSU _j Verification in represents the timestamp when the roadside unit RSU _j receives the message, Δt represents the maximum transmission delay; Roadside unit RSU _j selects a random number And read the current timestamp T _j and calculate: R _j =H(r _j ||T _j ||m _j )·P, B _j = l _j · R _i , F _j,1 =f _j,1 ·P, F _j,2 =f _j,2 ·P+f _j,1 ·pk _Vi , w _j,2 = f _{j, 2} -sk _RSUj ·C _j (mod q), in represents the kth derived key of roadside unit RSU _j , and finally Sent to vehicle V _i ; Vehicle V _i first verifies Then calculate: And verify whether it is established; If the above equation holds true, vehicle V _i first randomly And read the current timestamp T′ _i , and then calculate: _Bi ＝ _li · _Rj ， F _i,1 =f _i,1 ·P, F _i,2 = f _i,2 ·P+f _i,1 ·pk _RSUj, in represents the kth derived key of vehicle V _i , and vehicle V _i generates the session key Finally Send to roadside unit RSU _j ; Roadside unit RSU _j first verifies Then calculate: And verify Is it true? If the equality is true, calculate the session key 6. A method for vehicle network authentication key negotiation supporting conditional privacy protection according to claim 5, characterized in that: the parameter update phase is completed by vehicle V _i and roadside unit RSU _j , specifically comprising: Vehicle V _i performs the kth parameter update, and the k-1th derived key and k-1th derived information of vehicle V _i are expressed as and The update process includes: Then Replace the previously saved in the vehicle V _i The roadside unit RSU _j performs the kth parameter update, and the k-1th derived key and k-1th derived information of the roadside unit RSU _j are expressed as and The update process includes: Then Replace the original data stored in the roadside unit RSU _j