Authentication key negotiation method with anti-key exposure characteristic in Internet of Vehicles environment

Abstract

The invention discloses an authentication key negotiation method with a key exposure resistance characteristic in an Internet of Vehicles environment, which is named as a KERAKA method. In the invention, the vehicle can establish the session key with any edge node only by registering once, and the difference between the method and the traditional scheme is that a main public key of an Internet of Vehicles system does not need to be set in an initialization stage, so that the storage overhead is reduced and the security is improved. In addition, the method has an anti-key exposure function. Specifically, in each time period, the private key of the user can be periodically updated with the help of the authorization server, so that even if the private key of the user in the current time period is exposed, the security of the private key in the previous or later time period cannot be influenced. Compared with an existing scheme, the method has obvious advantages in the aspects of safety performance and calculation overhead, and is more suitable for a complex and changeable car networking environment.

Description

technical field [0001] The technical field of the present invention is research on an efficient and secure authentication key agreement mechanism in the Internet of Vehicles environment, more specifically, the present invention is an authentication key agreement method based on edge computing with anti-key exposure characteristics in the Internet of Vehicles environment . Background technique [0002] In the connected car environment, security and privacy are the two main issues that need to be solved urgently. On the one hand, due to the openness of wireless networks, communication channels are vulnerable to illegal attacks, such as replay attacks, forgery attacks, impersonation attacks, and so on. On the other hand, with the improvement of people's safety awareness, they also pay more and more attention to privacy protection. It should be ensured that the personal sensitive information of car owners, such as identity information and form and route, will not be leaked. To...

AI Technical Summary

Problems solved by technology

However, the document "Security-enhanced three-partypairwise secret key agreement protocol for fog-based vehicular ad-hoccommunications" pointed out that there are some security attacks in Ma et al.'s scheme, such as internal attacks, smart card stolen attacks, known temporary information of specific sessions attacks, etc., and proposed an improved three-party key agreement scheme based on fog in the communication environment of the Internet of Vehicles

[0005] However, in the proposed authentication key agreement schemes in the Internet of Vehicles environment, the problem of user key exposure is hardly considered. In fact, due to low security settings or shallow security awareness of users, the user's key is very may be leaked

Once the user's key is known by the adversary, all security objectives will be destroyed, and the entire Internet of Vehicles system will be destroyed

Moreover, in most cases, it is difficult for users to notice that the key has been exposed. In this way, the duration of the damage caused by the key exposure may be very long, causing serious and irreversible consequences

Images