Anonymous post-quantum two-party authentication and key agreement method and system for car networking environment

Abstract

The invention belongs to the field of information security, and provides an anonymous post-quantum two-party authentication and key agreement protocol method and system for an Internet of Vehicles environment. The method comprises an initialization stage, a registration stage and an authentication and key negotiation stage. Wherein in the authentication and key negotiation stage, the vehicle-type entity sends a service request to the server-type entity by using system parameters, a pseudonym and long-term secret information of the vehicle-type entity so as to complete authentication; the server class entity receives the request information of the vehicle class entity, carries out authentication, generates a common session key and a service response by using system parameters and long-term secret information of the server class entity after the authentication is passed, and sends the service response to the vehicle class entity to complete the response; and after receiving the service response of the server class entity, the vehicle class entity calculates a common session key to complete key confirmation. According to the invention, the vehicle entity class entity can be ensured to safely apply for the front work of the service from the server class entity in the Internet of Vehicles environment.

Description

Technical Field

[0001] The present invention belongs to the field of information security, and in particular, relates to an anonymous post-quantum two-party authentication and key negotiation protocol method and system for the vehicle networking environment. Background Art

[0002] With the continuous in-depth research and development of technologies such as navigation and new energy, the vehicle networking environment has flourished and become an indispensable part of people's daily lives. In vehicle networking, vehicle entities equipped with on-vehicle units can directly communicate wirelessly with server entities such as roadside units through dedicated short-range communication protocols, which are defined as vehicle-to-infrastructure communications. During the vehicle-to-infrastructure communication process, server entities collect traffic information from vehicles and forward it to a traffic center, enabling the center to make real-time decisions and improve traffic conditions. In addition, vehicle entities obtain traffic information (such as traffic conditions, congestion levels, road speed limits, etc.) from server entities. Therefore, vehicle-to-infrastructure communication can improve driving safety, navigation efficiency, and traffic flow management.

[0003] The open communication environment poses great challenges to the communication security of vehicle networking. First, attackers may tamper with or intercept messages transmitted by vehicle entities in the public channel, which may cause vehicle entities to fail to obtain services or transmit information in a timely manner, and may even lead to traffic jams or traffic accidents. Therefore, it is necessary to ensure the reliability of the message source and the integrity of the content. Second, attackers can track vehicle entities based on messages in the public channel. In addition, when it is necessary to hold malicious vehicle entities accountable, it is necessary to accurately track vehicles that have undergone public verification, and malicious tracking or false accusations against trackers should be avoided. Finally, quantum computers can quickly solve traditional cryptographic problems (e.g., the large integer factorization problem, the discrete logarithm problem, etc.), so it is necessary to study anti-quantum cryptographic systems as early as possible to prepare for the advent of the quantum computing era. Summary of the Invention

[0004] In view of the above security problems existing in the vehicle networking environment, the present invention proposes an anonymous post-quantum two-party authentication and key negotiation method and system for the vehicle networking environment.

[0005] In a first aspect, the present invention provides an anonymous post-quantum two-party authentication and key negotiation method for the vehicle networking environment, including:

[0006] In the initialization stage, a trusted party generates and publishes system parameters;

[0007] In the registration stage, vehicle entities and server entities use the system parameters to complete registration at the trusted party to obtain their respective long-term secret information, and vehicle entities also obtain corresponding pseudonyms and expiration dates;

[0008] During the authentication and key negotiation phase, the vehicle entity sends a service request to the server entity by using the system parameters, the pseudonym, and its own long-term secret information to complete the authentication; after receiving the request information from the vehicle entity, the server entity performs authentication and, upon successful authentication, generates a common session key and a service response by using the system parameters and its own long-term secret information, and sends the service response to the vehicle entity to complete the response; after receiving the service response from the server entity, the vehicle entity calculates the common session key to complete the key confirmation.

[0009] Furthermore, the trusted party generates and publishes system parameters, specifically including:

[0010] The trusted party selects a prime number q that satisfies and an integer m that satisfies m ≥ 2nlogq according to the security parameter n;

[0011] From a matrix A of rank n and a master private key X are randomly selected respectively t , and the corresponding master public key P t = AX t is calculated;

[0012] Select one-way hash functions h1, h2, h3, h4, and h5;

[0013] The trusted party publishes the system parameters P = {n, m, q, A, P t , h i (i = 1, 2,..., 5)} and securely stores the master private key X t .

[0014] Furthermore, the registration phase includes the registration of vehicle entities and the registration of server entities.

[0015] Furthermore, the registration of vehicle entities specifically includes:

[0016] The vehicle entity V i randomly selects a self-selected private key from and calculates the corresponding self-selected public key Sends the registration request to the trusted party; where RID represents the true identity identifier of the vehicle entity; vi

[0017] After receiving the registration request , the trusted party verifies whether RID vi exists in the vehicle registration list and whether the registration information has expired; if RID vi is not in the vehicle registration list or the registration information has expired, then for the vehicle entity from​ Randomly select a partial private key Based on the partial private key Calculate the vehicle entity V i Corresponding kana Intermediate parameter and where VT vi Indicates the expiration date of the kana PID vi Send the registration response To the vehicle entity V i ;

[0018] Vehicle entity V i After receiving the registration response Verify the equation Whether it holds; if the equation holds, the vehicle entity V i Accept the registration response and store

[0019] Furthermore, the registration of the server entity specifically includes:

[0020] Server entity S j From Randomly select a self-selected private key And calculate the corresponding self-selected public key Send the registration request To the trusted party; where RID sj Indicates the true identity identifier of the server entity;

[0021] The trusted party receives the registration request Verify RID sj Whether it exists in the server registration list; if it exists, reject the registration request of the server entity S j ; if not, randomly select a partial private key for the server entity from Randomly select a partial private key Based on the partial private key Calculate the intermediate parameter Send the registration response To the server entity S j ;

[0022] Server entity S j After receiving the registration response Verify the equation Whether it holds; if the equation holds, the server entity S j Accept the registration response and store

[0023] Furthermore, the vehicle entity V iThe true identity identifier RID vi Includes vehicle model, vehicle brand, purchase time, and driver; server - type entity S j The true identity identifier RID sj Includes location coordinates, operating range, and service types.

[0024] Furthermore, the vehicle - type entity uses the system parameters, the pseudonym, and its own long - term secret information to send a service request to the server - type entity for authentication, specifically including:

[0025] Vehicle - type entity V i Selects a vector randomly from a set of vectors

[0026] Vehicle - type entity V i Calculates and where T1 is the timestamp of the vehicle - type entity;

[0027] Vehicle - type entity V i Sends the service request to S j .

[0028] Furthermore, after receiving the request information from the vehicle - type entity for authentication and passing the authentication, the server - type entity uses the system parameters and its own long - term secret information to generate a common session key and a service response, and sends the service response to the vehicle - type entity for response, specifically including:

[0029] Server - type entity S j After receiving the service request , first verifies the validity of the timestamp T1 and the element ; after passing the verification, the server - type entity S j Calculates the pseudonym of the vehicle - type entity intermediate parameter and intermediate parameter and verifies the equation whether it holds; if it holds, the server - type entity S j Accepts the service request of the vehicle - type entity V i ; if it does not hold, the server - type entity S j Rejects the service request of the vehicle - type entity V i ;

[0030] Server - type entity S j After accepting the service request of the vehicle - type entity V i , selects a vector randomly from a set of vectors and calculates and to generate a common session key and a verification message server - type entity S j sends the service response to vehicle - type entity V i ; where T2 is the timestamp of the server - type entity.

[0031] Furthermore, after receiving the service response from the server - type entity, the vehicle - type entity calculates the common session key to complete key confirmation, specifically including:

[0032] Vehicle - type entity V i receives the service response and first verifies the validity of the timestamp T2 and the validity of the element and further verifies the validity of the message Vehicle - type entity V i after successful verification, calculates to calculate the common session key and verification information and verifies the equation Auth sj = Auth' sj to check if it holds; if it holds, vehicle - type entity V i completes the service request process and uses the generated session key for subsequent communication.

[0033] In a second aspect, the present invention provides an anonymous post - quantum two - party authentication and key negotiation system for the vehicle - to - everything environment, including:

[0034] a trusted party, a vehicle - type entity, and a server - type entity;

[0035] The trusted party, at the initialization node, is used to generate and publish system parameters; in the registration phase, it is used for the vehicle - type entity and the server - type entity to complete registration at the trusted party using the system parameters to obtain their respective long - term secret information;

[0036] The vehicle - type entity, in the authentication and key negotiation phase, is used to send a service request to the server - type entity using the system parameters, pseudonyms, and its own long - term secret information to complete authentication; it is also used to calculate the common session key after receiving the service response from the server - type entity to complete key confirmation;

[0037] The server - type entity, in the authentication and key negotiation phase, is used to authenticate the request information received from the vehicle - type entity and, after successful authentication, generate a common session key and a service response using the system parameters and its own long - term secret information, and send the service response to the vehicle - type entity to complete the response.

[0038] The beneficial effects of the present invention are:

[0039] The method provided by the present invention can effectively ensure the preliminary work for vehicle entity classes to securely apply for services from server entity classes in the vehicle networking environment. And it can meet two-way authentication, key establishment, vehicle entity anonymity, conditional untraceability of vehicle entities, forward security, and can resist spoofing attacks, man-in-the-middle attacks, unknown key sharing attacks, temporary key leakage attacks, key leakage spoofing attacks, etc. Compared with other authentication key agreement schemes, the present invention effectively reduces communication overhead and computational overhead, and is more suitable for the vehicle networking environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 FIG. is a schematic flowchart of an anonymous post-quantum two-party authentication and key agreement method for a vehicle networking environment provided by an embodiment of the present invention;

[0041] Figure 2 FIG. is a schematic flowchart of the authentication and key agreement phase provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0042] To make the objectives, technical solutions, and advantages of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly described below in conjunction with the accompanying drawings in the embodiments of the present invention. Apparently, the described embodiments are some, but not all, of the embodiments of the present invention. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0043] As Figure 1 shown, an embodiment of the present invention provides an anonymous post-quantum two-party authentication and key agreement method for a vehicle networking environment, including:

[0044] In the initialization phase, the trusted party generates and publishes system parameters.

[0045] Specifically, this phase is executed by the trusted party (Trusted Authority, TA), and mainly completes the selection and publication of system parameters.

[0046] In the registration phase, vehicle entity classes and server entity classes complete registration with the trusted party using the system parameters to obtain their respective long-term secret information, and vehicle entity classes also obtain corresponding pseudonyms and expiration dates.

[0047] Specifically, this stage is executed by the communication entity and the trusted party, mainly for generating the long-term secret information of the communication entity. The stage process classifies vehicle entity registration and server entity registration according to the types of communication entities. Moreover, the communication in this stage is completed over a secure channel, that is, an adversary cannot obtain the messages transmitted in the channel. Specifically, vehicle entities mainly refer to terminal devices in the vehicle networking environment such as cars and electric vehicles. Server entities mainly refer to edge server nodes in the vehicle networking such as roadside units and charging stations.

[0048] In the authentication and key agreement stage, the vehicle entity sends a service request to the server entity by using the system parameters, pseudonym, and its own long-term secret information to complete authentication; after receiving the request information from the vehicle entity, the server entity conducts authentication and, after successful authentication, generates a common session key and a service response by using the system parameters and its own long-term secret information, and sends the service response to the vehicle entity to complete the response; after receiving the service response from the server entity, the vehicle entity calculates the common session key to complete key confirmation.

[0049] Specifically, this stage is executed by the vehicle entity and the server entity, mainly for completing the mutual authentication between the two types of entities and generating a session key. The communication in this stage is completed over an open channel, that is, an adversary can eavesdrop on, tamper with, and replace the messages transmitted in the open channel. Assume that a vehicle entity that wants to obtain a service sends a service request (such as obtaining real-time road information, navigation, or refueling and charging, etc.) to the server entity, and mutual authentication between the vehicle entity and the server entity is completed through this stage and a common session key is established.

[0050] The method provided by the embodiments of the present invention can effectively ensure the preliminary work for vehicle entities in the vehicle networking environment to securely apply for services from server entities. And it can meet two-way authentication, key establishment, vehicle entity anonymity, conditional untraceability of vehicle entities, forward security, and can resist spoofing attacks, man-in-the-middle attacks, unknown key sharing attacks, temporary key leakage attacks, key leakage spoofing attacks, etc. Compared with other authentication key agreement schemes, the present invention effectively reduces the communication overhead and computational overhead and is more applicable to the vehicle networking environment.

[0051] Based on the above embodiments, the specific steps of the initialization stage are provided in this embodiment, including:

[0052] The trusted party selects a prime number (prime) q that satisfies according to the security parameter n and an integer m that satisfies m ≥ 2nlogq.

[0053] From a matrix A with rank n and a master private key X are randomly selected respectively t , and the corresponding master public key P is calculated t= AX t 。

[0054] Specifically, the trusted party randomly selects a matrix A with rank n from . And randomly selects a matrix X from as the master private key of TA. And calculates the master public key P t in the way of P t = AX t (where P t is a matrix in t ).

[0055] Select one-way hash functions h1, h2, h3, h4, and h5.

[0056] Specifically, the definition of each one-way hash function is:

[0057] The trusted party publishes the system parameters P = {n, m, q, A, P t , h i (i = 1, 2,..., 5)}, and securely stores the master private key X t .

[0058] Based on the above embodiments, this embodiment provides the specific steps of the registration phase, where the registration phase includes vehicle entity registration and server entity registration. The vehicle entity is V i , which has its own real identity identifier RID vi (RID vi is a dictionary-type string) containing necessary sensitive information such as vehicle model, vehicle brand, purchase time, fuel tank / battery capacity, and driver. The server entity is S j , which has its own real identity identifier RID sj (RID sj is a dictionary-type string), containing necessary information such as location coordinates, operation scope, and service type.

[0059] Vehicle entity registration specifically includes:

[0060] The vehicle entity V i randomly selects a self-selected private key from and calculates the corresponding self-selected public key Sends the registration request to the trusted party; where RID vi represents the real identity identifier of the vehicle entity.

[0061] Specifically, V i randomly selects from Randomly select a vector from as the self - selected private key of V i and thus calculate the corresponding self - selected public key which is a vector in

[0062] The trusted party receives the registration request and verifies whether the RID vi exists in the vehicle - type registration list and whether the registration information has expired; if the RID vi is not in the vehicle - type registration list or the registration information has expired, then randomly select a vector from as the partial private key for the vehicle - type entity; based on the partial private key calculate the pseudonym i corresponding to the vehicle - type entity V intermediate parameters and where VT vi is a time - type string representing the expiration period of the pseudonym PID vi ; send the registration response to the vehicle - type entity V i .

[0063] Specifically, PID vi is an encrypted string, which is a vector in and is a vector in

[0064] The vehicle - type entity V i after receiving the registration response verifies whether the equation holds; if the equation holds, the vehicle - type entity V i accepts the registration response and stores

[0065] Server - type entity registration, specifically including:

[0066] The server - type entity S j selects a self - selected private key randomly from and calculates the corresponding self - selected public key sends the registration request to the trusted party; where RID sj represents the true identity identifier of the server - type entity.

[0067] The trusted party receives the registration request and verifies the RID sjIs it in the server class registration list; if so, reject the registration request of the server class entity S j ; if not, randomly select a partial private key for the server class entity from Calculate the intermediate parameter based on the partial private key Calculate the intermediate parameter Send the registration response To the server class entity S j .

[0068] Server class entity S j After receiving the registration response , verify whether the equation Holds; if the equation holds, the server class entity S j Accept the registration response and store

[0069] Based on the above embodiments, this embodiment provides the steps of the authentication and key negotiation phase, as Figure 2 Shown, specifically including:

[0070] Vehicle class entity V i Randomly select a vector from Vehicle class entity V i Calculate And Where T1 is the timestamp of the vehicle class entity; the vehicle class entity V i Send the service request To S j .

[0071] Among them, Is One of the vectors in, Is One of the vectors in, EID vi Is a string of identity identification class, Auth vi Is One of the matrices in, T1 is a time type string.

[0072] Server class entity S j After receiving the service request , first verify the validity of the timestamp T1, element ; after passing the verification, the server class entity S j Calculate the pseudonym of the vehicle class entity Intermediate parameter And intermediate parameter And verify the equation ​​Whether it holds; if it holds, the server entity S j accepts the service request from the vehicle entity V i ; if not, the server entity S j rejects the service request from the vehicle entity V i .

[0073] Specifically, the verification timestamp T1 is verified by determining whether △T = |T2 - T1| < Accrpt_T is satisfied, where T2 is the timestamp of the server entity and Accrpt_T is the time validity.

[0074] After the server entity S j accepts the service request from the vehicle entity V i , it randomly selects a vector from and calculates and to generate a common session key and a verification message The server entity S j sends the service response to the vehicle entity V i ; where T2 is the timestamp of the server entity.

[0075] Among them, AID sj is a string of the identity identification class,

[0076] After the vehicle entity V i receives the service response , it first verifies the validity of the timestamp T2 and the element and further verifies the validity of the message After the vehicle entity V i verifies and passes, it calculates to calculate the common session key and the verification information and verifies whether the equation Auth sj = Auth' sj holds; if it holds, the vehicle entity V i completes the service request process and uses the generated session key for subsequent communication.

[0077] Among them, the verification timestamp T2 is verified by determining whether △T = |T3 - T2| < Accrpt_T is satisfied, where T3 is the timestamp when the vehicle entity receives the service response, K sj is an element in vi and SK

[0078] An embodiment of the present invention also provides an anonymous post - quantum two - party authentication and key agreement system for the vehicle - to - everything environment, including: a trusted party, a vehicle - type entity, and a server - type entity;

[0079] The trusted party is used to generate and publish system parameters at the initialization node; in the registration phase, it is used for the vehicle - type entity and the server - type entity to complete registration at the trusted party using the system parameters to obtain their respective long - term secret information;

[0080] The vehicle - type entity is used to send a service request to the server - type entity using the system parameters, pseudonym, and its own long - term secret information to complete authentication in the authentication and key agreement phase; it is also used to calculate a common session key after receiving the service response from the server - type entity to complete key confirmation;

[0081] The server - type entity is used to authenticate the request information received from the vehicle - type entity in the authentication and key agreement phase, and after successful authentication, generate a common session key and a service response using the system parameters and its own long - term secret information, and send the service response to the vehicle - type entity to complete the response.

[0082] Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: they can still modify the technical solutions recorded in the foregoing embodiments, or perform equivalent replacements for some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. An anonymous post-quantum two-party authentication and key agreement method for the vehicle networking environment, characterized in that Including: In the initialization phase, the trusted party generates and publishes system parameters; In the registration phase, vehicle entities and server entities complete registration at the trusted party using the system parameters to obtain their respective long-term secret information. The vehicle entities also obtain corresponding pseudonyms and expiration dates; In the authentication and key agreement phase, the vehicle entities send service requests to the server entities using the system parameters, the pseudonyms, and their own long-term secret information to complete authentication; after receiving the request information from the vehicle entities, the server entities perform authentication and, after successful authentication, generate a common session key and a service response using the system parameters and their own long-term secret information, and send the service response to the vehicle entities to complete the response; after receiving the service response from the server entities, the vehicle entities calculate the common session key to complete key confirmation.

2. The anonymous post-quantum two-party authentication and key agreement method for the vehicle networking environment according to claim 1, wherein The trusted party generates and publishes system parameters, specifically including: The trusted party selects a prime number q that satisfies and an integer m that satisfies m ≥ 2n log q according to the security parameter n; Select a matrix A of rank n and the master private key X randomly from respectively, and calculate the corresponding master public key P t ; t = AX t ; Select one-way hash functions h1, h2, h3, h4, and h5; The trusted party publicly discloses the system parameters P = {n, m, q, A, P t , h i (i = 1, 2,..., 5)}, and securely stores the master private key X t .

3. An anonymous post-quantum two-party authentication and key agreement method for the vehicle networking environment according to claim 2, characterized in that The registration phase includes vehicle entity registration and server entity registration.

4. The anonymous post-quantum two-party authentication and key agreement method for the vehicle networking environment according to claim 3, wherein The vehicle entity registration specifically includes: Vehicle entity V i Randomly select a self-selected private key from and calculate the corresponding self-selected public key Send the registration request to the trusted party; where RID represents the true identity identifier of the vehicle entity; vi ​ The trusted party receives the registration request and verifies the RID vi to check whether it exists in the vehicle registration list and whether the registration information has expired; if the RID vi is not in the vehicle registration list or the registration information has expired, then a partial private key is randomly selected for the vehicle entity from and the vehicle entity V is calculated based on the partial private key i corresponding pseudonym intermediate parameter and where VT vi represents the expiration date of the pseudonym PID vi The registration response is sent to the vehicle entity V i ; Vehicle class entity V i After receiving the registration response Verify the equation Whether it holds; if the equation holds, the vehicle class entity V i Accept the registration response and store 5. The anonymous post-quantum two-party authentication and key agreement method for an Internet of Vehicles environment according to claim 4, wherein The server entity registration specifically includes: Server - like entity S j Randomly select a self - selected private key from and calculate the corresponding self - selected public key Send the registration request to the trusted party; where RID represents the true identity identifier of the server - like entity; sj ​ The trusted party receives the registration request and then verifies the RID sj to check if it exists in the server class registration list; if it exists, the registration request of the server class entity S j is rejected; if it does not exist, a partial private key is randomly selected for the server class entity from and the intermediate parameters are calculated based on the partial private key and the registration response is sent to the server class entity S ; j j ; Server class entity S j After receiving the registration response Verify the equation Whether it holds; if the equation holds, server class entity S j Accept the registration response and store 6. The anonymous post-quantum two-party authentication and key agreement method for the vehicle networking environment according to claim 5, characterized in that, Vehicle entity V i The real identity identifier RID vi includes vehicle model, vehicle brand, purchase time, and driver; Server entity S j The real identity identifier RID sj includes location coordinates, operating range, and service type.

7. An anonymous post-quantum two-party authentication and key agreement method for the vehicle networking environment according to claim 5, characterized in that The vehicle entities send service requests to the server entities using the system parameters, the pseudonyms, and their own long-term secret information to perform authentication, specifically including: Vehicle - type entity V i Randomly select a vector from and Vehicle entity V i Calculate and where T1 is the timestamp of the vehicle entity; Vehicle entity V i Send a service request to S j .

8. An anonymous post-quantum two-party authentication and key agreement method for the vehicle networking environment according to claim 7, characterized in that After receiving the request information from the vehicle entities, the server entities perform authentication and, after successful authentication, generate a common session key and a service response using the system parameters and their own long-term secret information, and send the service response to the vehicle entities to perform the response, specifically including: Server class entity S j After receiving a service request , first verify the validity of the timestamp T1 and the element . After the verification passes, the server class entity S j calculates the pseudonym of the vehicle class entity intermediate parameter and intermediate parameter and verify the equation whether it holds; if it holds, the server class entity S j accepts the service request of the vehicle class entity V i ; if it does not hold, the server class entity S j rejects the service request of the vehicle class entity V i . Server Entity S j Accepts vehicle entity V i After the service request, Randomly select a vector from And calculate and To generate a common session key and verification message Server Entity S j The service will answer Sent to vehicle entity V i ; Where T2 is the timestamp of the server-type entity.

9. The anonymous post-quantum two-party authentication and key negotiation method for the vehicle networking environment according to claim 8, wherein After receiving the service response from the server entities, the vehicle entities calculate the common session key to complete key confirmation, specifically including: Vehicle entity V i After receiving the service reply first verify the validity of the timestamp T2 and the elements and further verify the validity of the message Vehicle entity V i After successful verification, calculate to calculate the common session key and the verification information and verify the equation Auth sj = Auth' sj to check if it holds; if it holds, vehicle entity V i completes the service request process and uses the generated session key for subsequent communication.

10. An anonymous post-quantum two-party authentication and key agreement system for the vehicular network environment, characterized in that, Including: A trusted party, vehicle entities, and server entities; The trusted party, at the initialization node, is used to generate and publish system parameters; In the registration phase, it is used for vehicle entities and server entities to complete registration at the trusted party using the system parameters to obtain their respective long-term secret information; Vehicle entities, in the authentication and key agreement phase, are used to send service requests to the server entities using the system parameters, pseudonyms, and their own long-term secret information to complete authentication; they are also used to calculate the common session key after receiving the service response from the server entities to complete key confirmation; Server entities, in the authentication and key agreement phase, are used to receive the request information from the vehicle entities for authentication and, after successful authentication, generate a common session key and a service response using the system parameters and their own long-term secret information, and send the service response to the vehicle entities to complete the response.

Images