高级检索

    车联网中基于格的无抽样条件隐私保护聚合认证

    Lattice-Based Conditional Privacy-Preserving Aggregate Authentication Without Sampling in Vehicular Ad Hoc Network

    • 摘要: 车载自组织网络是构建智能交通系统的基础,其能够有效提高交通效率以及增加道路安全性. 但由于其自身无线通信环境的开放性,车载自组织网络中的边缘节点易遭受到各种外部攻击. 为了兼顾隐私保护和可追溯性,并确保安全认证,一种有效的方法是采用车联网条件隐私保护认证方案. 虽然目前已有各种车联网条件隐私保护认证方案被相继提出,但这些方案的安全性几乎都依赖于传统数论困难假设,难以具备后量子安全特性. 因此,针对现有基于格的车联网条件隐私保护认证方案的安全和效率问题,同时为解决密钥托管问题,利用结构化格上的环上带误差学习决策困难假设以及环上小整数解困难假设,并结合拒绝抽样技术,设计了一种车联网中基于格的无抽样条件隐私保护聚合认证方案,并在随机预言机模型下证明了所提方案能够达到适应性安全. 此外,通过性能评估展示了该方案在计算开销方面优于基于一般格的聚合认证方案.

       

      Abstract: Vehicular ad hoc network is the foundation of the intelligent transportation system, which can effectively improve traffic efficiency and enhance road safety. However, due to the openness of its wireless communication environment, the edge nodes in vehicular ad hoc networks are vulnerable to various external attacks. In order to balance privacy protection and traceability, also ensure secure authentication, an effective method is to adopt the conditional privacy-preserving authentication scheme in vehicular ad hoc networks. Although various privacy-preserving authentication schemes have been proposed successively, the security of these schemes almost all rely on the difficult assumptions of traditional number theory, and it is difficult to have post-quantum security characteristics. Therefore, aiming at the security and efficiency problems of existing lattice-based conditional privacy-preserving authentication schemes in vehicular ad hoc networks, and in order to solve the key escrowing problem, by leveraging the decisional learning with errors over rings (RLWE) hardness assumption and the ring-learning with errors (RLWE) small integer solution (SIS) hardness assumption on structured lattices, and combining with the rejection sampling technique, a lattice-based sampling-free conditional privacy preserving aggregate authentication scheme is designed. It is proved that the proposed scheme can achieve adaptive security in the random oracle. In addition, the performance evaluation shows that the proposed scheme is superior to the scheme based on the general lattice in terms of computation cost.

       

    /

    返回文章
    返回