Participant Exclusion in Vehicular Networks via Revocation Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In mobile ad hoc networks, particularly in vehicular ad hoc networks, there is a need to exclude a participant from communication while maintaining data protection and anonymity, as improper conduct may necessitate removing a participant without revealing their identity or compromising pseudonymous certificates.
Innovation Solution
A method involving a withdrawal request transmitted by a certification authority, which identifies the participant to be excluded using their certificate or a revocation token, allowing only the participant to terminate authorized communication, ensuring anonymity and data protection by using trustworthy components to enforce the request and verify integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If pseudonymous certificates are used for data protection, then participant anonymity is improved, but the ability to identify and exclude improper participants deteriorates
Solution Approach 1:
The certificate system is segmented into two distinct components: pseudonymous certificates for communication (maintaining anonymity) and revocation tokens for identification (enabling exclusion). The revocation token contains a unique identifier that links to the participant's identity without being visible in normal communications. This segmentation allows the system to simultaneously achieve both anonymity during communication and identifiability when needed for exclusion.
Solution Approach 2:
A certification authority acts as an intermediary that issues both pseudonymous certificates and corresponding revocation tokens to participants. The certification authority maintains the mapping between revocation tokens and participant identities, enabling it to send targeted withdrawal requests to specific participants without other participants being able to identify the target. This intermediary mechanism resolves the contradiction by providing a trusted third party that can selectively reveal identities when necessary.
2Ease of operation
If certificates are generated from initial keys to limit recognizability, then participant anonymity is improved, but the ability to terminate communication for improper conduct deteriorates
Solution Approach 1:
Before a participant engages in improper conduct, the system preliminarily issues a revocation token along with the pseudonymous certificate. This revocation token is stored securely and enables the certification authority to later send a withdrawal request that the participant can uniquely identify. The preliminary issuance of this identification mechanism ensures that when misconduct occurs, the system can reliably terminate communication without compromising the anonymity-providing certificate generation process.
3Reliability
If withdrawal requests are transmitted to multiple participants, then exclusion capability is improved, but energy consumption and communication overhead worsen
Solution Approach 1:
The withdrawal request message structure is designed with local quality: it contains a revocation token identifier that is globally unique but locally meaningful only to the target participant. Other participants receiving the broadcast can quickly verify that the revocation token does not correspond to them and discard the message without further processing. This local differentiation enables reliable exclusion of the target participant while minimizing energy consumption and processing overhead for non-target participants.
Data Source
AI summary
A method for excluding a participant from a group of multiple participants, in which certificates are used for an authorized communication of the participants among each other, a withdrawal request being received by one participant of the group, the withdrawal request making an identification of the participant to be excluded possible by the participant to be excluded itself, and the authorized communication being terminated by the participant when it is identifiable as the participant to be excluded based on the withdrawal request, as well as a communication system for carrying it out.