Anonymous authentication method for certificateless group of Internet of Vehicles

Abstract

The invention discloses an anonymous authentication method for a certificateless group of the Internet of Vehicles, and the method comprises the steps: 1) system initialization: system parameter generation, road side unit registration and vehicle registration; 2) communication authentication between the vehicle and the infrastructure, including bidirectional identity authentication and security key negotiation; 3) communication authentication between vehicles, including generation of pseudonyms and signatures, signature authentication and efficient batch authentication; and 4) a malicious vehicle revocation mechanism based on group key updating, which comprises the steps of malicious vehicle identity disclosure, group key updating and distribution, legal vehicle key recovery and malicious vehicle isolation. The method not only has more efficient processing capability in the aspects of guaranteeing the data security, privacy protection and Sybil attack defense of the Internet of Vehicles system, but also meets the requirements of the Internet of Vehicles for efficient identity verification and revocation in a resource-constrained environment, and provides a safe, low-cost and efficient overall solution for the Internet of Vehicles system.

Description

Technical Field

[0001] The present invention relates to the field of security and privacy protection in a vehicle networking system, and in particular to an improved certificateless group anonymous authentication method used in vehicle networking communications, which supports batch authentication and improves authentication efficiency and security. Background Art

[0002] Vehicular Ad Hoc Network (VANET) has gradually become an important part of the intelligent transportation system due to its dynamic networking capabilities and efficient information interaction characteristics. As a product of the integration of vehicle-mounted communication technology and wireless network technology, VANET has shown broad application prospects in many fields such as intelligent driving, traffic scheduling, fleet management and emergency response. Through V2V (Vehicle-to-Vehicle) and V2I (Vehicle-to-Infrastructure) communications, vehicles can share road conditions information in real time during driving, improving driving safety and traffic efficiency. However, since VANET communications use open wireless channels, their security faces severe challenges, and effective authentication and privacy protection mechanisms are needed to ensure data security.

[0003] As the core of data transmission and identity authentication, information in VANET is highly sensitive and vulnerable. The wireless communication environment makes it vulnerable to information theft, forgery, tampering and replay attacks, affecting the integrity and traceability of data. Although existing authentication schemes can provide identity authentication and communication security to a certain extent, they still have obvious defects. Some schemes rely on bilinear pairing operations, which leads to excessively high computational and communication costs and increases the network burden. Many schemes do not support batch authentication, resulting in low authentication efficiency in large-scale vehicle communication scenarios. In addition, some schemes cannot effectively resist Sybil attacks, allowing attackers to forge multiple false identities to interfere with network operations. Moreover, most schemes lack an efficient malicious vehicle revocation mechanism, making it difficult to accurately track and remove untrusted vehicles, affecting the security and manageability of the system.

[0004] In order to solve the data security and privacy protection issues in VANET systems, researchers have proposed a variety of authentication schemes based on certificateless signatures in recent years to reduce key management costs and improve privacy protection capabilities. However, these schemes still have shortcomings in terms of computational overhead, communication costs, and security, making it difficult to operate efficiently in a resource-constrained VANET environment. Summary of the invention

[0005] In order to solve the problems of high computational overhead, high communication cost, lack of batch authentication and malicious vehicle revocation mechanism in the existing VANET authentication scheme, the present invention proposes an anonymous authentication method for certificateless groups in VANET, in order to ensure data security and privacy protection while realizing an authentication mechanism with low computational cost and high communication efficiency, thereby improving the security and feasibility in the VANET environment.

[0006] In order to achieve the above-mentioned purpose, the present invention adopts the following technical scheme:

[0007] The anonymous authentication method of a certificateless group in a vehicle network of the present invention is characterized in that it is applied to a vehicle network system composed of a key generation center KGC, a roadside unit group, and a vehicle group, and includes the following steps:

[0008] Step 1: Initialization of the vehicle network system, including: generation of system parameters, registration of roadside units and registration of vehicles;

[0009] Step 2: The jth vehicle V in the Internet of Vehicles system j With the i-th roadside unit RSU i Communication authentication between parties, including: two-way identity authentication and security key negotiation;

[0010] Step 3: When the jth vehicle V j and the kth vehicle V k Appears at the same time at the i-th roadside unit RSU i When within the range of the Internet of Vehicles, communication authentication is performed between vehicles in the Internet of Vehicles system, including: pseudonym and signature generation, signature authentication;

[0011] Step 4: Malicious vehicle revocation based on group key update, including: malicious vehicle identity disclosure, group key update and distribution, and legitimate vehicle key update and malicious vehicle isolation.

[0012] The improved certificateless group anonymous authentication method for Internet of Vehicles of the present invention is also characterized in that step 1 comprises:

[0013] Step 1.1, Generation of system parameters:

[0014] Step 1.1.1, the key generation center KGC selects the elliptic curve group G and the basic parameter q, and * q Select two random numbers as the i-th roadside unit RSU i Master Key and the jth vehicle V j Master Key , and calculate the i-th roadside unit RSU i System public key and the jth vehicle V j System public key , where P is a base point on the elliptic curve group G, i=1…n, n is the number of roadside units in the vehicle network system, j=1…m, m is the number of vehicles in the vehicle network system;

[0015] Step 1.1.2, select 7 secure hash functions H, H1, H2, H3, H4, H5, H6, which are used to convert binary strings {0, 1} of arbitrary length into * Mapping to Z * q In this way, the system parameters {G,P,q, , ,H,H1,H2,H3,H4,H5,H6};

[0016] Step 1.2: The i-th roadside unit RSU i Registration:

[0017] Step 1.2.1, the i-th roadside unit RSU i In Z * q Generate the first private key and the first public key , and the i-th roadside unit RSU i Identity and Submit to KGC for registration;

[0018] Step 1.2.2, the key generation center KGC is at Z * q Select a random number r from the equation and calculate the i-th roadside unit RSU i The second public key and the second private key After that, the i-th RSU key pair ( , )Sent to RSU i , where h1 represents the first hash value, and h1=H1(GK, , , ), GK is the public key of the roadside unit group;

[0019] Step 1.2.3: The i-th roadside unit RSU i Verify the i-th RSU key pair ( , ) after completing the i-th roadside unit RSU i Registration;

[0020] Step 1.3, the jth vehicle Vj Registration:

[0021] Step 1.3.1, the jth vehicle V j In Z * q Pick a random number As the first private key, and calculate the first public key Then, the jth vehicle V j Identity and Submit to KGC for registration;

[0022] Step 1.3.2, the key generation center KGC is at Z * q Select a random number v from the , and calculate the jth car V j The second public key and the second private key After that, the jth OBU key pair ( , ) is sent to the jth vehicle V j , where h2 represents the second hash value, and h2=H1(GK, , , );

[0023] Step 1.3.3, the jth vehicle V j Verify the jth OBU key pair ( , ) after completing the jth vehicle V j Registration.

[0024] Furthermore, the step 2 comprises:

[0025] Step 2.1, two-way identity authentication:

[0026] Step 2.1.1, the i-th roadside unit RSU i In Z * q A number t1 is randomly selected and the first temporary public key T1=t1P is calculated, and the third hash value h b =H( , ,tt i ,GK), the fourth hash value h3=H2(T1,T r ), then RSU i Send broadcast messages to the connected car system ={T1,tt i ,T r , ,RIRL, ,}; where T r Is to calculate RSU i The timestamp of the fourth hash value, Yes RSU i The signature of , RIRL is the RSU revocation list, tt i Is to calculate RSU i The timestamp of the third hash value;

[0027] Step 2.1.2: When the i-th roadside unit RSU i The jth vehicle V in the range j Receive broadcast message , the jth vehicle V j Check T r After the freshness is verified =T1+h b GK+h3( + +h1 ) is true, if so, execute step 2.1.3, otherwise, return to step 2.1.2 and wait for RSU i Send a new broadcast message;

[0028] Step 2.1.3, query RIRL, if RSU i In the revocation list, the jth vehicle V j Reject the i-th roadside unit RSU i communication, return to step 2.1.2, wait for receiving the broadcast message sent by other roadside units for two-way identity authentication, otherwise, execute step 2.1.4;

[0029] Step 2.1.4, V j In Z * q Randomly select two numbers t2 and d, and calculate the second temporary public key T2=t2P to generate the first combined pseudonym ={ , },in, is the first pseudonym of the car-road, and =dP, is the second pseudonym of the car-road, and = H(d( + )),in, It is an XOR calculation;

[0030] Step 2.1.5: Calculate the jth vehicle V j Authentication message =( ,tt i ,T2,T v ) and V j Signature =t2+h d gk+h4( + ), thus the message signature group { , }Send to RSU i ; Among them, T v is the current timestamp, h d is the public key hash value, and h d =H( , ,tt i ,GK), h4 is the fifth hash value, and h4=H3( ,T2,T v ), gk is the private key of the RSU group;

[0031] Step 2.1.6, RSU i Receive the jth vehicle V j The message signature group { , }, check T v If the timeout is exceeded, the jth vehicle V is rejected. j communication, return to step 2.1.6 and wait for the message signature group to be received again, otherwise, calculate = H(( + ) ), the jth vehicle V j The third temporary public key = + +H1( , , ) , thus verifying P=T2+h d GK+h4 Is it true? If so, then RSU i Allow V j Join the Internet of Vehicles system and execute step 2.2; otherwise, return to step 2.1.6 and wait for receiving the message signature group again;

[0032] Step 2.2, security key negotiation:

[0033] Step 2.2.1. RSU i In Z *q Randomly select four random numbers {z i ,r1,r2,m}, and calculate the fourth temporary public key Z i =z i P, fifth temporary public key R1=r1P, sixth temporary public key R2=r2P, public public key P pub =mP,RSU i The first identity binding value y i =z i +mH5( ), the first vehicle identity hash value C=r1( + )+P pub H1( , , ), session key N = H(C) ( ||gk||y i ||R2), the sixth hash value h6=H4(N,P pub ,Z i ,R1,R2,T r ), RSU i The authentication message M i ={N,P pub ,Z i ,R1,h6,T r}, RSU i Message signature =r2+h4( + ), and then RSU i The authentication message {M i , }Sent to the jth vehicle V j ; Among them, P pub Yes RSU i The local master key of

[0034] Step 2.2.2, V j Upon receiving RSU i The authentication message {M i , }, and verify that T r After the freshness is calculated, the second vehicle identity hash value is calculated =R1( + )+P pub H1( , , ), identity key authentication parameters ||gk||y|| =H( ) N, the seventh hash value h7=H4(N,P pub ,Z i ,R1, ,T r ), and store the unknown number set {y i ,Z i};

[0035] Step 2.2.3, V j Calculating RSUs i The identity binding value = + +H1( , , ) and verify P= +h7 Is it true? If true, it means RSU i Authentication successful, RSU i With V j Use N as the session key for encrypted communication; otherwise, return to step 2.2.2 and wait for re-authentication.

[0036] Furthermore, step 3 includes:

[0037] Step 3.1, Pseudonym and signature generation:

[0038] Step 3.1.1, the jth vehicle V j In Z * q Randomly select a number , and calculate the second combination of kana =( , ),in, is the first pseudonym of car-car, and , is the second pseudonym of car-car, and = H( ), calculate the identity binding public key Z * i =Z i + , k=1,2,…,m, m is the number of vehicles in the vehicle network system;

[0039] Step 3.1.2, V j Calculate the authentication signature +h8 , where h8 is the eighth hash value, and h8=H6( ,GK, ,T m ), and then the identity authentication information { , , ,Z * i ,T m}Sent to the jth vehicle V j ;in, It is information related to traffic safety. m is the timestamp when the authentication signature is calculated, For RSU i The second identity binding value, and =y i + ;

[0040] Step 3.2, Signature Verification:

[0041] When V k Receive V j The authentication message { , , ,Z * i ,T m}, verify T m After the freshness, calculate V j The ninth hash value h 9,j =H6( ,GK, ,T m ), =Z * i -Z i , thus verifying = +h9(Z * i +H(P pub H5( )) is true, if true, then V k Accept V j If the vehicle is a trusted vehicle, then return to step 3.2, receive a new vehicle identity authentication message, and perform signature authentication;

[0042] When V k Receive the i-th roadside unit RSU i When multiple vehicles are within range of the authentication message, verify +P pub H5( ) Is it true? If it is true, it means that the batch authentication is successful and all vehicles have passed the authentication. Otherwise, return to step 3.2, receive a new vehicle identity authentication message again, and perform signature authentication; where a represents the i-th roadside unit RSU i The number of vehicles within the range.

[0043] Furthermore, step 4 includes:

[0044] Step 4.1: Malicious vehicle identity disclosure:

[0045] KGC H( )= Calculating the identity of the malicious vehicle , thereby transmitting Sent to the roadside units in the area to reveal the identity of the malicious vehicle;

[0046] Step 4.2: Key update and distribution:

[0047] The roadside unit in the area where the malicious vehicle is located receives After that, in Z * q Randomly select a number As the new private key of the roadside unit group, calculate the new public key of the roadside unit group , collect the public keys of all legal vehicles within its range { |l=1,2,…,a}, and define a new key update function ; Where x is the key recovery value; thereby updating the key of the roadside unit group;

[0048] The roadside unit in the area where the malicious vehicle is located broadcasts the update message to all legitimate vehicles within its range. };in, is the timestamp of the broadcast;

[0049] Step 4.3: Legitimate vehicle key update and isolation from malicious vehicles:

[0050] The first legal vehicle When receiving an update message, verify After the freshness, calculate and enter In, solve , to update the legal vehicle The key is , and isolate malicious vehicles.

[0051] Furthermore, the i-th roadside unit RSU in step 1.2 i verify Is it true? If true, it means the verification is successful. Otherwise, the i-th roadside unit RSU i Wait for KGC to resend RSU i The key pair is used for authentication.

[0052] Furthermore, the j-th on-board unit OBU in step 1.3 j verify Is it true? If true, it means the verification is passed. Otherwise, the jth on-board unit OBU j Wait for KGC to resend OBU j The key pair is used for authentication.

[0053] An electronic device of the present invention includes a memory and a processor, wherein the memory is used to store a program that supports the processor to execute the anonymous authentication method, and the processor is configured to execute the program stored in the memory.

[0054] The present invention provides a computer-readable storage medium, wherein a computer program is stored on the computer-readable storage medium, and the computer program executes the steps of the anonymous authentication method when the computer program is executed by a processor.

[0055] Compared with the prior art, the present invention has the following beneficial effects:

[0056] 1. This paper proposes an authentication scheme based on elliptic curve cryptography (ECC) and group key update mechanism, which provides a secure authentication method for VANET and solves the data security and privacy protection issues in the Internet of Vehicles system.

[0057] 2. The present invention proposes an authentication method that supports batch authentication and efficient malicious vehicle revocation. Compared with the traditional authentication scheme based on bilinear pairings, the present invention significantly reduces the computing and communication costs and improves the authentication efficiency while ensuring data security.

[0058] 3. The present invention proposes an authentication mechanism based on dynamic anonymous identity and group key update, which provides an efficient identity authentication and revocation process in the resource-constrained environment of the VANET system, meeting the requirements of the VANET system for data security, privacy protection and efficient communication.

[0059] 4. The present invention proposes an optimized anonymous identity generation method, which dynamically generates and binds random numbers in V2V communication, ensures the anonymity of vehicle identity, effectively defends against Sybil attacks, and improves the security of the Internet of Vehicles system.

[0060] 5. The present invention proposes a group key update mechanism based on polynomial functions, which can quickly revoke the access rights of malicious vehicles after they are discovered, while reducing storage and computing overheads and improving revocation efficiency.

[0061] 6. The present invention proposes an authentication scheme with low communication overhead. By optimizing the message structure and authentication process, the amount of data exchange during single identity authentication and batch authentication is reduced, thereby improving the overall performance of the Internet of Vehicles system. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] Figure 1 This is a system model diagram of the present invention. DETAILED DESCRIPTION

[0063] In this embodiment, Figure 1 As shown in the figure, an anonymous authentication method for certificateless groups in an Internet of Vehicles is applied to a vehicle network system composed of a key generation center KGC, a roadside unit group, and a vehicle group. The key generation center KGC serves as the registration center of each participant in the Internet of Vehicles system, is responsible for completing the identity registration and key distribution of the entire system, and after detecting a malicious node, tracks its true identity and notifies the relevant entities to revoke it to ensure overall security; one function of the roadside unit group is to receive the encrypted information sent by the vehicle during the authentication phase and verify the RSU i The authentication value is legal, and the updated group key is calculated and broadcasted to the vehicle to ensure the security of information transmission; and one of the functions of the vehicle group is that the vehicle sends authentication information to the RSU through its own equipment to complete login and identity authentication, and generates a vehicle session key to complete the session key establishment, and uses batch signature authentication technology to achieve fast signature verification between vehicles, thereby ensuring the real-time and confidentiality of inter-vehicle communication. Specifically, the method includes the following steps:

[0064] Step 1: Initialization of the vehicle network system, including: generation of system parameters, registration of roadside units and registration of vehicles;

[0065] Step 1.1, Generation of system parameters:

[0066] Step 1.1.1, the key generation center KGC selects the elliptic curve group G and a large prime number as the basic parameter q, and * q Select two random numbers as the i-th roadside unit RSU i Master Key and the jth vehicle V j Master Key , and calculate the i-th roadside unit RSU i System public key and the jth vehicle V j System public key , where P is a base point on the elliptic curve group G, i=1…n, n is the number of roadside units in the vehicle network system, j=1…m, m is the number of vehicles in the vehicle network system;

[0067] Step 1.1.2, select 7 secure hash functions H, H1, H2, H3, H4, H5, H6, which are used to convert binary strings {0, 1} of arbitrary length into * Mapping to Z * q In this way, the system parameters {G,P,q, , ,H,H1,H2,H3,H4,H5,H6}.

[0068] Step 1.2: The i-th roadside unit RSU i Registration:

[0069] Step 1.2.1, the i-th roadside unit RSU i In Z * q Generate the first private key and the first public key , and the i-th roadside unit RSU i Identity and Submit to KGC for registration;

[0070] Step 1.2.2, the key generation center KGC is at Z * q Select a random number r from the equation and calculate the i-th roadside unit RSU i The second public key and the second private key After that, the i-th RSU key pair ( , )Sent to RSU i , where h1 represents the first hash value, and h1=H1(GK, , , ), GK is the public key of the roadside unit group;

[0071] Step 1.2.3: The i-th roadside unit RSU i Verify the i-th RSU key pair ( , ) and verify Is it true? If true, it means the verification is successful. Otherwise, the i-th roadside unit RSU i Wait for KGC to resend RSU i The key pair is used for authentication.

[0072] Step 1.3, the jth vehicle V j Registration:

[0073] Step 1.3.1, the jth vehicle V j In Z * q Pick a random number As the first private key, and calculate the first public key Then, the jth vehicle V j Identity and Register at KGC;

[0074] Step 1.3.2, the key generation center KGC is at Z * q Select a random number v from the , and calculate the jth car V j The second public key and the second private key After that, the jth OBU key pair ( , ) is sent to the jth vehicle V j , where h2 represents the second hash value, and h2=H1(GK, , , );

[0075] Step 1.3.3, the jth vehicle V j Verify the jth OBU key pair ( , ) and verify Is it true? If so, it means the verification is successful. Otherwise, the jth on-board unit OBU j Wait for KGC to resend OBU j The key pair is used for authentication.

[0076] Step 2: The jth vehicle V in the Internet of Vehicles system j With the i-th roadside unit RSU i Communication authentication between parties, including: two-way identity authentication and security key negotiation;

[0077] Step 2.1, two-way identity authentication:

[0078] Step 2.1.1, the i-th roadside unit RSU i In Z * q A number t1 is randomly selected and the first temporary public key T1=t1P is calculated, and the third hash value h b =H( , ,tt i ,GK), the fourth hash value h3=H2(T1,T r ), then RSU i Send broadcast messages to the connected car system ={T1,tt i ,T r , ,RIRL, , }; where T r Is to calculate RSU i The timestamp of the fourth hash value, Yes RSU i The signature of , RIRL is the RSU revocation list, tt i Is to calculate RSU i The timestamp of the third hash value;

[0079] Step 2.1.2: When the i-th roadside unit RSU i The jth vehicle V in the range j Receive broadcast message , the jth vehicle V j Check T r After the freshness is verified =T1+h b GK+h3( + +h1 ) is true, if so, execute step 2.1.3, otherwise, return to step 2.1.2 and wait for RSU i Send a new broadcast message.

[0080] Step 2.1.3, query RIRL, if RSU i In the revocation list, the jth vehicle V j Reject the i-th roadside unit RSU i communication, return to step 2.1.2, wait for receiving the broadcast message sent by other roadside units for two-way identity authentication, otherwise, execute step 2.1.4;

[0081] Step 2.1.4, V j In Z * q Randomly select two numbers t2 and d, and calculate the second temporary public key T2=t2P to generate the first combined pseudonym ={ , },in, is the first pseudonym of the car-road, and =dP, is the second pseudonym of the car-road, and = H(d( + )),in, It is an XOR calculation.

[0082] Step 2.1.5: Calculate the jth vehicle V j Authentication message =( ,tt i ,T2,T v ) and V j Signature =t2+h d gk+h4( + ), thus the message signature group { , }Send to RSU i ; Among them, T v is the current timestamp, h d is the public key hash value, and h d =H( , ,tt i ,GK), h4 is the fifth hash value, and h4=H3( ,T2,T v ), gk is the private key of the RSU group;

[0083] Step 2.1.6, RSU i Receive the jth vehicle V j The message signature group { , }, check T v If the timeout is exceeded, the jth vehicle V is rejected. j communication, return to step 2.1.6 and wait for the message signature group to be received again, otherwise, calculate = H(( + ) ), the jth vehicle V j The third temporary public key = + +H1( , , ) , thus verifying P=T2+h d GK+h4 Is it true? If so, then RSUi Allow V j Join the Internet of Vehicles system and execute step 2.2; otherwise, return to step 2.1.6 and wait for receiving the message signature group again.

[0084] Step 2.2, security key negotiation:

[0085] Step 2.2.1. RSU i In Z * q Randomly select four random numbers {z i ,r1,r2,m}, and calculate the fourth temporary public key Z i =z i P, fifth temporary public key R1=r1P, sixth temporary public key R2=r2P, public public key P pub =mP,RSU i The first identity binding value y i =z i +mH5( ), the first vehicle identity hash value C=r1( + )+P pub H1( , , ), session key N = H(C) ( ||gk||y i ||R2), the sixth hash value h6=H4(N,P pub ,Z i ,R1,R2,T r ), RSU i The authentication message M i ={N,P pub ,Z i ,R1,h6,T r}, RSU i Message signature =r2+h4( + ), and then RSU i The authentication message {M i , }Sent to the jth vehicle V j ; Among them, P pub Yes RSU i The local master key of the

[0086] Step 2.2.2, V j Upon receiving RSU i The authentication message {M i , }, and verify that T r After the freshness is calculated, the second vehicle identity hash value is calculated =R1( + )+P pub H1( , , ), identity key authentication parameters ||gk||y|| =H( ) N, the seventh hash value h7=H4(N,P pub ,Z i ,R1, ,T r ), and store the unknown number set {y i ,Z i};

[0087] Step 2.2.3, V j Calculating RSUs i The identity binding value = + +H1( , , ) and verify P= +h7 Is it true? If true, it means RSU i Authentication successful, RSU i With V j Use N as the session key for encrypted communication; otherwise, return to step 2.2.2 and wait for re-authentication.

[0088] Step 3: When the jth vehicle V j and the kth vehicle V k Appears at the same time at the i-th roadside unit RSU i Within the scope of the Internet of Vehicles system, communication authentication is performed between vehicles, including: pseudonym and signature generation, signature authentication;

[0089] Step 3.1, Pseudonym and signature generation:

[0090] Step 3.1.1, the jth vehicle V j In Z * q Randomly select a number , and calculate the second combination of kana =( , ),in, is the first pseudonym of car-car, and , is the second pseudonym of car-car, and = H( ), calculate the identity binding public key Z * i =Z i + , k=1,2,…,m, m is the number of vehicles in the vehicle network system;

[0091] Step 3.1.2, V j Calculate the authentication signature +h8 , where h8 is the eighth hash value, and h8=H6( ,GK, ,T m ), and then the identity authentication information { , , ,Z * i ,T m}Sent to the jth vehicle V j ;in, It is information related to traffic safety. m is the timestamp when the authentication signature is calculated, For RSU i The second identity binding value, and =y i + .

[0092] Step 3.2, Signature Verification:

[0093] When V k Receive V j The authentication message { , , ,Z * i ,T m}, verify T m After the freshness is calculated, the ninth hash value h9=H6( ,GK, ,T m ), =Z * i -Z i , thus verifying = +h9(Z * i +H(Ppub H5( )) is true, if true, then V k Accept V j If the vehicle is a trusted vehicle, then return to step 3.2, receive a new vehicle identity authentication message, and perform signature authentication;

[0094] When V k Receive the i-th roadside unit RSU i When multiple vehicles are within range of the authentication message, verify +P pub H5( ) Is it true? If it is true, it means that the batch authentication is successful and all vehicles have passed the authentication. Otherwise, return to step 3.2, receive a new vehicle identity authentication message again, and perform signature authentication; where a represents the i-th roadside unit RSU i The number of vehicles within the range, h 9,j is the 9th hash value of the jth vehicle, is the sum of signatures sent by a vehicles, is the sum of the first parts of the anonymous identities of a vehicles, is the sum of the public key parts of the identities of a vehicles, P pub H5( ) It is the sum of the public key parts of the identity authentication of a vehicles.

[0095] Step 4: malicious vehicle revocation based on group key update, including: malicious vehicle identity disclosure, group key update and distribution, and legitimate vehicle key update and malicious vehicle isolation;

[0096] Step 4.1: Malicious vehicle identity disclosure:

[0097] KGC H( )= Calculating the identity of the malicious vehicle , thereby transmitting Sent to the roadside units in the area to reveal the identity of the malicious vehicle.

[0098] Step 4.2: Key update and distribution:

[0099] The roadside unit in the area where the malicious vehicle is located receives After that, in Z * q Randomly select a number As the new private key of the roadside unit group, calculate the new public key of the roadside unit group , collect the public keys of all legal vehicles within its range { |l=1,2,…,a}, and define a new key update function ; Where x is the key recovery value; thereby updating the key of the roadside unit group;

[0100] The roadside unit in the area where the malicious vehicle is located broadcasts the update message to all legitimate vehicles within its range. };in, is the timestamp of the broadcast;

[0101] Step 4.3: Legitimate vehicle key update and isolation from malicious vehicles:

[0102] The first legal vehicle When receiving an update message, verify After verifying the freshness, calculate and enter In, solve , to update the legal vehicle The key is .

[0103] because The calculation method excludes the public key of the malicious vehicle, so the malicious vehicle cannot obtain the correct x, even if the malicious vehicle tries to calculate , and ultimately could not be recovered , ensuring that malicious vehicles are completely excluded and cannot affect the communication security of the Internet of Vehicles.

[0104] In this embodiment, an electronic device includes a memory and a processor, wherein the memory is used to store a program that supports the processor to execute the above method, and the processor is configured to execute the program stored in the memory.

[0105] In this embodiment, a computer-readable storage medium stores a computer program on the computer-readable storage medium, and the computer program executes the steps of the above method when executed by a processor.

Claims

1. An anonymous authentication method for a certificate-less group in a vehicle network, characterized in that: It is applied to a vehicle network system consisting of a key generation center KGC, a roadside unit group, and a vehicle group, and includes the following steps: Step 1: Initialization of the vehicle network system, including: generation of system parameters, registration of roadside units and registration of vehicles; Step 2: The jth vehicle V in the Internet of Vehicles system j With the i-th roadside unit RSU i Communication authentication between parties, including: two-way identity authentication and security key negotiation; Step 3: When the jth vehicle V j and the kth vehicle V k Appears at the same time at the i-th roadside unit RSU i When within the range of the Internet of Vehicles, communication authentication is performed between vehicles in the Internet of Vehicles system, including: pseudonym and signature generation, signature authentication; Step 4: Malicious vehicle revocation based on group key update, including: malicious vehicle identity disclosure, group key update and distribution, and legitimate vehicle key update and malicious vehicle isolation.

2. According to claim 1, an improved anonymous authentication method for certificateless groups in Internet of Vehicles, characterized in that: The step 1 comprises: Step 1.1, Generation of system parameters: Step 1.1.1, the key generation center KGC selects the elliptic curve group G and the basic parameter q, and * q Select two random numbers as the i-th roadside unit RSU i Master Key and the jth vehicle V j Master Key , and calculate the i-th roadside unit RSU i System public key and the jth vehicle V j System public key , where P is a base point on the elliptic curve group G, i=1…n, n is the number of roadside units in the vehicle network system, j=1…m, m is the number of vehicles in the vehicle network system; Step 1.1.2: Select 7 secure hash functions H, H1, H2, H3, H4, H5, H6 to convert a binary string {0, 1} of any length into * Mapping to Z * q In this way, the system parameters {G,P,q, , ,H,H1,H2,H3,H4,H5,H6}; Step 1.2: The i-th roadside unit RSU i Registration: Step 1.2.1, the i-th roadside unit RSU i In Z * q Generate the first private key and the first public key , and the i-th roadside unit RSU i Identity and Submit to KGC for registration; Step 1.2.2, the key generation center KGC is at Z * q Select a random number r from the equation and calculate the i-th roadside unit RSU i The second public key and the second private key After that, the i-th RSU key pair ( , ) sent to RSU i , where h1 represents the first hash value, and h1=H1(GK, , , ), GK is the public key of the roadside unit group; Step 1.2.3: The i-th roadside unit RSU i Verify the i-th RSU key pair ( , ) after completing the i-th roadside unit RSU i Registration; Step 1.3, the jth vehicle V j Registration: Step 1.3.1, the jth vehicle V j In Z * q Pick a random number As the first private key, and calculate the first public key Then, the jth vehicle V j Identity and Submit to KGC for registration; Step 1.3.2, the key generation center KGC is at Z * q Select a random number v from the , and calculate the jth car V j The second public key and the second private key After that, the jth OBU key pair ( , ) is sent to the jth vehicle V j , where h2 represents the second hash value, and h2=H1(GK, , , ); Step 1.3.3, the jth vehicle V j Verify the jth OBU key pair ( , ) after completing the jth vehicle V j Registration.

3. According to claim 2, an improved anonymous authentication method for certificateless groups in Internet of Vehicles is characterized in that: The step 2 comprises: Step 2.1, two-way identity authentication: Step 2.1.1, the i-th roadside unit RSU i In Z * q A number t1 is randomly selected and the first temporary public key T1=t1P is calculated, and the third hash value h b =H( , ,tt i ,GK), the fourth hash value h3=H2(T1,T r ), then RSU i Send broadcast messages to the connected car system ={T1,tt i ,T r , ,RIRL, , }; where T r Is to calculate RSU i The timestamp of the fourth hash value, Yes RSU i The signature of , RIRL is the RSU revocation list, tt i Is to calculate RSU i The timestamp of the third hash value; Step 2.1.2: When the i-th roadside unit RSU i The jth vehicle V in the range j Receive broadcast message , the jth vehicle V j Check T r After the freshness is verified =T1+h b GK+h3( + +h1 ) is true, if so, execute step 2.1.3, otherwise, return to step 2.1.2 and wait for RSU i Send a new broadcast message; Step 2.1.3, query RIRL, if RSU i In the revocation list, the jth vehicle V j Reject the i-th roadside unit RSU i communication, return to step 2.1.2, wait for receiving the broadcast message sent by other roadside units for two-way identity authentication, otherwise, execute step 2.1.4; Step 2.1.4, V j In Z * q Randomly select two numbers t2 and d, and calculate the second temporary public key T2=t2P to generate the first combined pseudonym ={ , },in, is the first pseudonym of the car-road, and =dP, is the second pseudonym of the car-road, and = H(d( + )),in, It is an XOR calculation; Step 2.1.5: Calculate the jth vehicle V j Authentication message =( ,tt i ,T2,T v ) and V j Signature =t2+h d gk+h4( + ), thus the message signature group { , }Send to RSU i ; Among them, T v is the current timestamp, h d is the public key hash value, and h d =H( , ,tt i ,GK), h4 is the fifth hash value, and h4=H3( ,T2,T v ), gk is the private key of the RSU group; Step 2.1.6, RSU i Receive the jth vehicle V j The message signature group { , }, check T v If the timeout is exceeded, the jth vehicle V is rejected. j communication, return to step 2.1.6 and wait for the message signature group to be received again, otherwise, calculate = H(( + ) ), the jth vehicle V j The third temporary public key = + +H1( , , ) , thus verifying P=T2+h d GK+h4 Is it true? If so, then RSU i Allow V j Join the Internet of Vehicles system and execute step 2.2; otherwise, return to step 2.1.6 and wait for receiving the message signature group again; Step 2.2, security key negotiation: Step 2.2.

1. RSU i In Z * q Randomly select four random numbers {z i ,r1,r2,m}, and calculate the fourth temporary public key Z i =z i P, fifth temporary public key R1=r1P, sixth temporary public key R2=r2P, public public key P pub =mP,RSU i The first identity binding value y i =z i +mH5( ), the first vehicle identity hash value C=r1( + )+P pub H1( , , ), session key N = H(C) ( ||gk||y i ||R2), the sixth hash value h6=H4(N,P pub ,Z i ,R1,R2,T r ), RSU i The authentication message M i ={N,P pub ,Z i ,R1,h6,T r }, RSU i Message signature =r2+h4( + ), and then RSU i The authentication message {M i , }Sent to the jth vehicle V j ; Among them, P pub Yes RSU i The local master key of Step 2.2.2, V j Upon receiving RSU i The authentication message {M i , }, and verify that T r After the freshness is calculated, the second vehicle identity hash value is calculated =R1( + )+P pub H1( , , ), identity key authentication parameters ||gk||y|| =H( ) N, the seventh hash value h7=H4(N,P pub ,Z i ,R1, ,T r ), and store the unknown number set {y i ,Z i }; Step 2.2.3, V j Calculating RSUs i The identity binding value = + +H1( , , ) and verify P= +h7 Is it true? If true, it means RSU i Authentication successful, RSU i With V j Use N as the session key for encrypted communication; otherwise, return to step 2.2.2 and wait for re-authentication.

4. According to claim 3, an improved anonymous authentication method for certificateless groups in Internet of Vehicles is characterized in that: Step 3 includes: Step 3.1, Pseudonym and signature generation: Step 3.1.1, the jth vehicle V j In Z * q Randomly select a number , and calculate the second combination of kana =( , ),in, is the first pseudonym of car-car, and , is the second pseudonym of car-car, and = H( ), calculate the identity binding public key Z * i =Z i + , k=1,2,…,m, m is the number of vehicles in the vehicle network system; Step 3.1.2, V j Calculate the authentication signature +h8 , where h8 is the eighth hash value, and h8=H6( ,GK, ,T m ), and then the identity authentication information { , , ,Z * i ,T m }Sent to the jth vehicle V j ;in, It is information related to traffic safety. m is the timestamp when the authentication signature is calculated, For RSU i The second identity binding value, and =y i + ; Step 3.2, signature verification: When V k Receive V j The authentication message { , , ,Z * i ,T m }, verify T m After the freshness, calculate V j The ninth hash value h 9,j =H6( ,GK, ,T m ), =Z * i -Z i , thus verifying = +h9(Z * i +H(P pub H5( )) is true, if true, then V k Accept V j If the vehicle is a trusted vehicle, then return to step 3.2, receive a new vehicle identity authentication message, and perform signature authentication; When V k Receive the i-th roadside unit RSU i When multiple vehicles are within range of the authentication message, verify +P pub H5( ) Is it true? If it is true, it means that the batch authentication is successful and all vehicles have passed the authentication. Otherwise, return to step 3.2, receive a new vehicle identity authentication message again, and perform signature authentication; where a represents the i-th roadside unit RSU i The number of vehicles within the range.

5. According to claim 4, an improved certificateless group anonymous authentication method for Internet of Vehicles is characterized in that: Step 4 includes: Step 4.1: Malicious vehicle identity disclosure: KGC H( )= Calculating the identity of the malicious vehicle , thereby transmitting Sent to the roadside units in the area to reveal the identity of the malicious vehicle; Step 4.2: Key update and distribution: The roadside unit in the area where the malicious vehicle is located receives After that, in Z * q Randomly select a number As the new private key of the roadside unit group, calculate the new public key of the roadside unit group , collect the public keys of all legal vehicles within its range { |l=1,2,…,a}, and define a new key update function ; Where x is the key recovery value; thereby updating the key of the roadside unit group; The roadside unit in the area where the malicious vehicle is located broadcasts the update message to all legitimate vehicles within its range. };in, is the timestamp of the broadcast; Step 4.3: Legitimate vehicle key update and isolation from malicious vehicles: The first legal vehicle When receiving an update message, verify After the freshness, calculate and enter In, solve , to update the legal vehicle The key is , and isolate malicious vehicles.

6. The improved certificateless group anonymous authentication method for Internet of Vehicles according to claim 2, characterized in that: The i-th roadside unit RSU in step 1.2 i verify Is it true? If true, it means the verification is successful. Otherwise, the i-th roadside unit RSU i Wait for KGC to resend RSU i The key pair is used for authentication.

7. The improved certificateless group anonymous authentication method for Internet of Vehicles according to claim 2, characterized in that: The jth on-board unit OBU in step 1.3 j verify Is it true? If true, it means the verification is passed. Otherwise, the jth on-board unit OBU j Wait for KGC to resend OBU j The key pair is used for authentication.

8. An electronic device, comprising a memory and a processor, characterized in that: The memory is used to store a program that supports the processor to execute the anonymous authentication method according to any one of claims 1 to 7, and the processor is configured to execute the program stored in the memory.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the anonymous authentication method according to any one of claims 1 to 7 are executed.

Images