The invention provides an Internet of Vehicles cross-domain identity
authentication method based on PUF and certificateless, and the method comprises the steps: firstly generating a
system master key and a master public key through a KGC, and disclosing
system parameters; secondly, the vehicle generates a physical response and extracts a stable key, interacts with the KGC to complete generation of a certificateless key pair, and stores registration information to a block chain; then the
edge server registers in the KGC, obtains a certificateless key pair, initiates an
authentication request to the KGC, and obtains a block chain data reading authority; finally, bidirectional
authentication is carried out between the vehicle and the
edge server based on the certificateless signature and the PUF response, and a
session key is generated; and the cross-domain vehicles are assisted by the
edge server to complete mutual identity authentication and
session key negotiation. According to the method, the
key escrow and
certificate management burden is eliminated by adopting a certificateless
cryptosystem, the high computing load is released to the edge
server in combination with the PUF hardware security characteristic and the block chain distributed trust, the computing and communication overhead is remarkably reduced, and the method is suitable for a large-scale Internet of Vehicles cross-domain authentication scene.