Internet of vehicles identity authentication method based on block chain and certificateless

Abstract

The invention relates to the field of Internet of Vehicles identity authentication, in particular to an Internet of Vehicles identity authentication method based on a block chain and certificateless. A traditional Internet of Vehicles identity authentication protocol generally has a single-point fault problem, and an enemy easily tracks real information of a vehicle by linking messages broadcasted by the same vehicle. In order to realize decentration and message non-linkability of an Internet of Vehicles identity authentication process, behavior records of a central mechanism and public key information of Internet of Vehicles nodes are uploaded to a block chain based on the decentration characteristic of the block chain, so that distributed authentication is realized. Secondly, an efficient certificateless signcryption algorithm is designed to ensure that only a legal roadside unit can judge a message source and an enemy cannot associate information broadcasted by the same vehicle in the identity authentication process of the vehicle, so that the non-linkability between messages is realized, and the authentication efficiency is improved. And compared with some traditional Internet of Vehicles authentication methods, the method provided by the invention has lower calculation overhead and communication overhead.

Description

Technical Field

[0001] The present invention relates to the fields of Internet of Vehicles and cryptography, and in particular to an Internet of Vehicles identity authentication method based on blockchain and without a certificate. Background Art

[0002] In the Internet of Vehicles environment, due to the frequent interaction between vehicles and infrastructure, and the wireless transmission communication method, the Internet of Vehicles system is vulnerable to multiple security threats such as impersonation attacks, replay attacks, and public key replacement attacks. Attackers can forge vehicle identity information, impersonate legitimate vehicles to spread false data, and thus damage traffic safety. In addition, the Internet of Vehicles system involves a large amount of sensitive information such as user personal data and vehicle driving data. If this data is obtained by unauthorized persons, it will have a serious impact on the user's privacy and may even endanger personal safety.

[0003] A common solution to this problem is to adopt an identity authentication scheme. Before joining the Internet of Vehicles system, users need to register with a central agency to obtain a legal identity. When two entities in the Internet of Vehicles communicate, they need to first authenticate the legality of the other party's identity to decide whether to receive the information sent by the other party. The central agency can take certain punitive measures against vehicles with malicious behavior, so it can effectively reduce the spread of false information in the Internet of Vehicles system. However, in traditional Internet of Vehicles identity authentication schemes, the authentication between two entities usually requires the participation of a central agency, which has a serious single point failure problem. Once the central agency fails, the entire authentication system will be shut down. In order to solve this problem, some scholars have proposed to use the decentralized characteristics of blockchain technology to upload the necessary information such as the public key required to prove the legal identity of the Internet of Vehicles entity to the blockchain to achieve distributed authentication. The central agency only participates in the user's identity registration and revocation process. Even if a failure occurs accidentally, it will not affect the authentication process between legal nodes. However, in the existing distributed authentication methods for Internet of Vehicles, in order to achieve the unlinkability between two adjacent messages sent by the same vehicle, attribute-based encryption technology is usually introduced, or the public key is changed every time the vehicle sends a message. This brings high computational overhead, making it difficult to apply these methods to resource-constrained Internet of Vehicles devices. Summary of the invention

[0004] In view of the defects of the above-mentioned Internet of Vehicles identity authentication method, the present invention provides a blockchain-based and certificate-free Internet of Vehicles identity authentication method.

[0005] The present invention utilizes the decentralized characteristics of blockchain technology to enable vehicles and roadside units to complete two-way distributed authentication without the participation of a central agency, solving the single point failure problem existing in traditional vehicle network identity authentication methods. On this basis, by cleverly combining the elliptic curve cryptography algorithm with the certificateless signcryption technology in the vehicle network identity authentication process, the unlinkability of the messages broadcast by the vehicle is achieved, avoiding the high overhead caused by cryptographic operations such as bilinear mapping and attribute-based encryption, and effectively protecting the identity privacy of the message sender.

[0006] The blockchain-based and certificateless Internet of Vehicles authentication method in the present invention involves three entities: a central agency, a vehicle, and a roadside unit. BRIEF DESCRIPTION OF THE DRAWINGS

[0007] Figure 1 The overall architecture of the Internet of Vehicles authentication method based on blockchain.

[0008] Figure 2 Comparison of computational overhead of different methods at different stages.

[0009] Figure 3 Comparison of communication overhead of different methods. DETAILED DESCRIPTION

[0010] (1) System initialization;

[0011] (a) Choose a large prime number and ;

[0012] (b) Select one The order and generator are The additive cyclic group of ;

[0013] (c) Select one Elliptic curve of order ,in and meet ;

[0014] (d) Select a random number As the system master private key, calculate As the system master public key;

[0015] (e) Choose a collision-resistant one-way hash function ;

[0016] (f) Publication of system parameters ;

[0017] (2) RSU registration;

[0018] (a) The central agency TA generates a unique identity for the RSU based on its geographic location information. ;

[0019] (b) TA random selection As its private key, calculate the corresponding public key ,pseudonym ;

[0020] (c)TA signs the relevant transaction information with the system master private key and uploads it to the blockchain. Sent to RSU via a secure channel;

[0021] (3) Vehicle registration;

[0022] (a) Random selection of vehicles As its own secret value, calculate As your public parameter, identify your and Send it to TA through a secure channel;

[0023] (b) TA random selection , respectively calculated , , , , ,in, is the partial private key of the vehicle, is the partial public key of the vehicle, is the pseudonym of the vehicle, and then TA will Sent to the vehicle via a secure channel;

[0024] (c) TA broadcasts the vehicle registration transaction. After consensus among the RSU nodes, the vehicle’s pseudonym and the public key Uploaded to the blockchain;

[0025] (d) The vehicle will have its private key and the public key Stored locally in a tamper-proof device;

[0026] (4) Message signature;

[0027] (a) Vehicle random number ;

[0028] (b) Calculation , , , , ;

[0029] (c) Sent to RSU, where is the ciphertext after signing. is the current timestamp, To request authentication information;

[0030] (5) Single message verification;

[0031] (a) RSU checks the timestamp and discards the information if it is not fresh;

[0032] (b) Calculation , ;

[0033] (c) Through a pseudonym Retrieve relevant information on the blockchain and obtain the corresponding vehicle public key ;

[0034] (d) Calculation ;

[0035] (e) Determine the equation Is it true? If the equation is true, RSU completes the identity authentication of the vehicle;

[0036] (5) Batch message verification;

[0037] (a) RSU receives authentication information from different vehicles , , , , ;

[0038] (b) Check the timestamp and discard the information if it is not fresh, and keep the rest of the information;

[0039] (c) Calculate vehicle pseudonym ,get ;

[0040] (d) Through a pseudonym Retrieve relevant information on the blockchain and obtain the corresponding vehicle public key ;

[0041] (e) Randomly select a set of small integers , judge the equation Is it true? If the equation is true, it means that the vehicle sending the message has the private key corresponding to the legitimate public key recorded on the blockchain. RSU can receive this information and complete batch identity authentication of vehicles.

Claims

1. A blockchain-based and certificate-free vehicle networking identity authentication method, characterized by: (1) Allowing vehicles and roadside unit nodes to complete identity authentication without the participation of a central agency, solving the single point failure problem in traditional IoV identity authentication methods. In addition, the actions of the central agency will be permanently recorded on the blockchain and subject to joint supervision by IoV nodes. (2) During the vehicle registration phase, we use a certificateless public key management model based on elliptic curves to enable the vehicle's key to be jointly calculated and generated by the user and the central agency, thus achieving partial key escrow. During the vehicle identity authentication phase, a certificateless signcryption algorithm is used to ensure that only the roadside unit can obtain the source of the message, thus achieving the unlinkability of the messages broadcast by the vehicle. (3) The proposed scheme is based on the elliptic curve cryptography algorithm and does not introduce high-overhead cryptographic operations such as bilinear mapping and attribute-based encryption. Its performance is significantly better than traditional Internet of Vehicles authentication methods.

2. A blockchain-based and certificate-free vehicle networking identity authentication method, comprising the following steps: (1) System initialization; (a) Choose a large prime number and ; (b) Select one The order and generator are The additive cyclic group of ; (c) Select one Elliptic curve of order ,in and meet ; (d) Select a random number As the system master private key, calculate As the system master public key; (e) Choose a collision-resistant one-way hash function ; (f) Publication of system parameters ; (2) RSU registration; (a) The central agency TA generates a unique identity for the RSU based on its geographic location information. ; (b) TA random selection As its private key, calculate the corresponding public key ,pseudonym ; (c)TA signs the relevant transaction information with the system master private key and uploads it to the blockchain. Sent to RSU via a secure channel; (3) Vehicle registration; (a) Random selection of vehicles As its own secret value, calculate As your public parameter, identify your and Send it to TA through a secure channel; (b) TA random selection , respectively calculated , , , , ,in, is the partial private key of the vehicle, is the partial public key of the vehicle, is the pseudonym of the vehicle, and then TA will Sent to the vehicle via a secure channel; (c) TA broadcasts the vehicle registration transaction. After consensus among the RSU nodes, the vehicle’s pseudonym and the public key Uploaded to the blockchain; (d) The vehicle will have its private key and the public key Stored locally in a tamper-proof device; (4) Message signature; (a) Vehicle random number ; (b) Calculation , , , , ; (c) Sent to RSU, where is the ciphertext after signing. is the current timestamp, To request authentication information; (5) Single message verification; (a) RSU checks the timestamp and discards the information if it is not fresh; (b) Calculation , ; (c) Through a pseudonym Retrieve relevant information on the blockchain and obtain the corresponding vehicle public key ; (d) Calculation ; (e) Determine the equation Is it true? If the equation is true, RSU completes the identity authentication of the vehicle; (5) Batch message verification; (a) RSU receives authentication information from different vehicles , , , , ; (b) Check the timestamp and discard the information if it is not fresh, and keep the rest of the information; (c) Calculate vehicle pseudonym ,get ; (d) Through a pseudonym Retrieve relevant information on the blockchain and obtain the corresponding vehicle public key ; (e) Randomly select a set of small integers , judge the equation Is it true? If the equation is true, it means that the vehicle sending the message has the private key corresponding to the legitimate public key recorded on the blockchain. RSU can receive this information and complete batch identity authentication of vehicles.

Images