Authentication In Vehicular Ad Hoc Networks Research Articles

CLLS: Efficient certificateless lattice-based signature in VANETs

The rapid development of Vehicular Ad-hoc Network (VANETs) has improved road safety and traffic management, and brought great convenience to intelligent transportation system (ITS). However, the transmission of data over open channels caused many security issues. Certificateless cryptography solves the certificate management and key escrow problems, which makes it the primary method for message authentication in VANETs. However, with the emergence of quantum computing, traditional cryptography faces a significant challenge. Lattice-based cryptography are regarded as effective post-quantum ciphers. Nevertheless, nearly all existing lattice-based certificateless signature schemes rely on Gaussian sampling or trapdoor techniques, resulting in computational inefficiencies and large key and signature sizes that are impractical for VANETs. To address these issues, we proposed the first efficient algebraic lattice-based certificateless signature scheme in VANETs based on the Dilithium signature algorithm. The security of our certificateless lattice-based signature(CLLS) scheme is based on the MSIS and MLWE hardness assumption, which makes the scheme resistant to quantum attacks and easy to implement. Our scheme did not use Gaussian sampling or trapdoor techniques, which improve the computational and storage efficiency. As a result, the public key of our scheme is 1X smaller than the previous scheme and the size of signature is 2X smaller than the previous efficient algebraic lattice scheme. In addition, compared to the most efficient existing CLLS scheme, the signing and verification computation cost of our scheme are reduced by 20% and 55% respectively and our proposed CLLS scheme has low power consumption. Furthermore, the security of our scheme achieves strong unforgeability against chosen-message attacks(SUF-CMA) in the random oracle model(ROM), which surpasses that of existing lattice-based certificateless signature schemes.

CHAM-CLAS: A Certificateless Aggregate Signature Scheme with Chameleon Hashing-Based Identity Authentication for VANETs

Vehicular ad hoc networks (VANETs), which are the backbone of intelligent transportation systems (ITSs), facilitate critical data exchanges between vehicles. This necessitates secure transmission, which requires guarantees of message availability, integrity, source authenticity, and user privacy. Moreover, the traceability of network participants is essential as it deters malicious actors and allows lawful authorities to identify message senders for accountability. This introduces a challenge: balancing privacy with traceability. Conditional privacy-preserving authentication (CPPA) schemes are designed to mitigate this conflict. CPPA schemes utilize cryptographic protocols, including certificate-based schemes, group signatures, identity-based schemes, and certificateless schemes. Due to the critical time constraints in VANETs, efficient batch verification techniques are crucial. Combining certificateless schemes with batch verification leads to certificateless aggregate signature (CLAS) schemes. In this paper, cryptanalysis of Xiong’s CLAS scheme revealed its vulnerabilities to partial key replacement and identity replacement attacks, alongside mathematical errors in the batch verification process. Our proposed CLAS scheme remedies these issues by incorporating an identity authentication module that leverages chameleon hashing within elliptic curve cryptography (CHAM-CLAS). The signature and verification modules are also redesigned to address the identified vulnerabilities in Xiong’s scheme. Additionally, we implemented the small exponents test within the batch verification module to achieve Type III security. While this enhances security, it introduces a slight performance trade-off. Our scheme has been subjected to formal security and performance analyses to ensure robustness.

PFCAS—Paring free certificate less aggregate scheme for ensuring efficient authentication in vehicular Ad-hoc networks

PFCAS—Paring free certificate less aggregate scheme for ensuring efficient authentication in vehicular Ad-hoc networks

An Efficient and Practical Conditional Privacy-Preserving Aggregate Authentication for Vehicular Ad-Hoc Networks

An Efficient and Practical Conditional Privacy-Preserving Aggregate Authentication for Vehicular Ad-Hoc Networks

BAC-CRL: Blockchain-Assisted Coded Caching Certificate Revocation List for Authentication in VANETs

Vehicular Ad Hoc Networks (VANETs) are considered the technological upheaval for improving road safety and traffic efficiency by enabling the wireless and network communications among vehicles and infrastructures. Certificate Revocation List (CRL)-based schemes are the most widely used recovery mechanism for VANETs to eliminate the negative effect of security and privacy attacks. However, providing an efficient and low-cost CRL-based scheme for certificate revocation is still a challenging issue since the communication resources must be capable of carrying various applications apart from the security and privacy purposes. Thus, in this paper, a Blockchain-Assisted Coded Caching Certificate Revocation List, called BAC-CRL, is proposed for authentication in VANETs. In BAC-CRL, the blockchain technology is leveraged to unite regional Trust Authorities (TAs) and Road-Side Units (RSUs) into a blockchain network, which uniformly manages and stores multipart CRLs for preventing resource-constrained On-Board Units (OBUs) to be overwhelmed. In addition, a multi-layer coded caching strategy is further designed in BAC-CRL to distribute the minimum bits of CRLs that satisfies the revocation requirements, aiming to reduce the communication overhead and shorten the processing time cost. Moreover, a novel anonymous authentication mechanism is developed utilizing the proposed BAC-CRL to achieve conditional privacy preservation with efficient certificate revocation. Security analysis and extensive simulations demonstrate that the proposed BAC-CRL is secure and computationally efficient for vehicle revocation.

BDRA: Blockchain and Decentralized Identifiers Assisted Secure Registration and Authentication for VANETs

In vehicular ad-hoc networks (VANETs), road safety and road traffic efficiency can be improved through message interaction between vehicle users, which inevitably relies on secure identity authentication and message credibility verification. Existing authentication and message verification mechanisms are prone to severe single points of failure and low authentication efficiency due to their reliance on the trusted third party, especially during the user registration phase. This paper proposes a double-layer blockchain and decentralized identifiers assisted secure registration and authentication (BDRA) mechanism for decentralized VANETs, which can achieve the following advantages: 1) realizing a secure and decentralized user registration phase by using decentralized identifier (DID) technology; 2) accomplishing efficient authentication and message verification by combining double-layer blockchain, DIDs and a reputation feedback strategy; 3) enabling a more efficient cross-section re-registration that reduces the communication time by 30%. The security features and efficiency of the BDRA mechanism are demonstrated by carrying out security analysis and performance evaluation, which is based on the Hyperledger Fabric platform.

An Efficient Cross-Layer Authentication Scheme for Secure Communication in Vehicular Ad-Hoc Networks

Intelligent transportation systems contribute to improved traffic safety by facilitating real-time communication between vehicles and infrastructures. In this context, message authentication is crucial to safeguard vehicular ad-hoc networks (VANETs) from malicious attacks. The current state-of-the-art for authentication in VANETs relies on conventional cryptographic primitives, introducing significant computation and communication overheads. This paper presents a cross-layer authentication scheme for vehicular communication, incorporating the short-term reciprocal features of the wireless channel for re-authenticating the corresponding terminal, reducing the overall complexity and computation and communication overheads. The proposed scheme comprises four steps: S1. Upper-layer authentication is used to determine the legitimacy of the corresponding terminal at the first time slot; S2. Upon the verification result, a location-dependent shared key with a minimum number of mismatched bits is extracted between both terminals; S3. Using the extracted key and under binary hypothesis testing, a PHY challenge-response algorithm for multicarrier communication is proposed for re-authentication; S4. In the case of false detection, the key extraction step (S2) is re-executed after adapting the quantisation levels at different conditions of channel non-reciprocity based on the feedback from the re-authentication step (S3). Simulation results show the effectiveness of the proposed scheme even at small signal-to-noise ratios. In addition, the immunity of the proposed scheme is proved against active and passive attacks, including signatures' unforgeability against adaptive chosen message attacks in the random oracle model. Finally, a comprehensive comparison in terms of computation and communication overheads demonstrates the superiority of the proposed scheme over its best rivals.

Blockchain-based secret key extraction for efficient and secure authentication in VANETs

Intelligent transportation systems are an emerging technology that facilitates real-time vehicle-to-everything communication. Hence, securing and authenticating data packets for intra- and inter-vehicle communication are fundamental security services in vehicular ad-hoc networks (VANETs). However, public-key cryptography (PKC) is commonly used in signature-based authentication, which consumes significant computation resources and communication bandwidth for signatures generation and verification, and key distribution. Therefore, physical layer-based secret key extraction has emerged as an effective candidate for key agreement, exploiting the randomness and reciprocity features of wireless channels. However, the imperfect channel reciprocity generates discrepancies in the extracted key, and existing reconciliation algorithms suffer from significant communication costs and security issues. In this paper, PKC-based authentication is used for initial legitimacy detection and exchanging authenticated probing packets. Accordingly, we propose a blockchain-based reconciliation technique that allows the trusted third party (TTP) to publish the correction sequence of the mismatched bits through a transaction using a smart contract. The smart contract functions enable the TTP to map the transaction address to vehicle-related information and allow vehicles to obtain the transaction contents securely. The obtained shared key is then used for symmetric key cryptography (SKC)-based authentication for subsequent transmissions, saving significant computation and communication costs. The correctness and security robustness of the scheme are proved using Burrows–Abadi–Needham (BAN)-logic and Automated Validation of Internet Security Protocols and Applications (AVISPA) simulator. We also discussed the scheme’s resistance to typical attacks. The scheme’s performance in terms of packet delay and loss ratio is evaluated using the network simulator (OMNeT++). Finally, the computation analysis shows that the scheme saves ∼99% of the time required to verify 1000 messages compared to existing PKC-based schemes.

PCAS: Cryptanalysis and improvement of pairing-free certificateless aggregate signature scheme with conditional privacy-preserving for VANETs

Certificateless aggregate signature (CLAS) is an effective approach for the multiple authentications in multi-users and multi-information environments like the vehicular ad hoc networks (VANETs), which can address the certificate management issue in the traditional public key cryptography (PKC) and solve the key escrow problem in identity-based cryptography (IBC). In recent years, a new CLAS mechanism (LICLAS) is presented for the authentication of sensors in healthcare wireless medical sensor networks (HWMSNs). In this paper, we make an analysis and prove that LICLAS is not able to against forgery attacks. Thus, we present an improved CLAS scheme (PCAS) for vehicle authentication in VANETs, which satisfies the privacy and security requirements. PCAS constructs the signature algorithm based on Elliptic Curve Cryptography (ECC) to avoid bilinear pairing and Map-to-Hash function operations. In order to further improve security and efficiency of PCAS, the vehicle key generation and signature algorithm is revised. The pseudonym mechanism is also adopted to achieve conditional privacy preservation. Besides, PCAS allows to execute a batch verification of messages, where RSUs may verify the aggregated signatures from vehicles to reduce time overhead. Under the assumption that the elliptic curve discrete logarithm problem (ECDLP) is hard, PCAS is proved to be existentially unforgeable against adaptive chosen message attacks in the random oracle model. Through the performance analysis, under the same time complexity, PCAS is shown to more effective. Compared with LICLAS, for a single message and 2000 messages, the transmission overhead of PCAS is reduced by 25% and 25% respectively, and the computation overhead is reduced by 16.56% and 25.34% respectively.

Efficient Blockchain-Based Group Key Distribution for Secure Authentication in VANETs

This letter proposes a group key distribution scheme using smart contract-based blockchain technology. The smart contract’s functions allow for securely distributing the group session key, following the initial legitimacy detection using public key infrastructure-based authentication. For message authentication, we propose a lightweight symmetric key cryptography-based group signature method, supporting the security and privacy requirements of vehicular ad hoc networks (VANETs). Our discussion examined the scheme’s robustness against typical adversarial attacks. To evaluate the gas costs associated with smart contracts functions, we implemented it on the Ethereum main network. Finally, comprehensive analyses of computation and communication costs demonstrate the scheme’s effectiveness.

Privacy-preserving Authentication Scheme for VANETs using Blockchain Technology

Road accidents and traffic congestion severely impact road safety, resulting in significant loss of life and property. Therefore, there is a need for road safety and traffic management. The wireless networks of connected vehicles called Vehicular Adhoc Networks (VANETs) are designed to improve the traffic management on highways with comfort and safety for drivers and passengers. However, there is a need to develop an authentication scheme that can protect the privacy of vehicles and secure them against attacks such as insider attacks and repudiation attacks. In this article, we present a scheme that performs vehicle registration and message forwarding in the VANETs and appends the transactions to the blockchain. The proposed privacy-preserving authentication scheme using blockchain technology enables vehicles and Trusted Authorities (TA) to authenticate vehicles while preserving privacy. The proposed scheme facilitates privacy-preserving authentication by deploying the scheme on a decentralized network. The proposed scheme ensures privacy, confidentiality, integrity, and transparency during vehicle authentication for VANETs. In the proposed scheme, an authentication process is automated with the use of a smart contract. We comparatively evaluate the security and performance of the proposed privacy-preserving authentication scheme with the state-of-the-art literature. The proposed privacy-preserving authentication scheme is significantly reliable and transparent in authenticating vehicles while preserving privacy.

A forward-secure and efficient authentication protocol through lattice-based group signature in VANETs scenarios

Message authentication has been a research hotspot in current vehicular ad hoc networks (VANETs). Many researchers adopt group signatures based on number-theoretic assumptions to authenticate the vehicular users’ identities. Nevertheless, the classical group signature is vulnerable to quantum computing attacks and without considering the negative consequences of secret key disclosure. In this paper, to address these problems, we propose a novel group signature protocol for authentication in VANETs, which is based on lattice cryptography to achieve quantum-resistance and Bonsai-tree signature architecture to achieve forward security. Our scheme is proven secure in terms of traceability, anonymity, and forward-security under the Short Integer Solution (SIS) and Learning With Errors (LWE) hardness. Through comprehensive performance evaluation, we demonstrate that the storage overhead of our scheme is relatively diminutive and the computation cost of the sign and verify algorithms are efficient and practical compared with other existing schemes.

Improving Vehicular Authentication in VANET Using

In the last several years, many types of research are focusing on Vehicular Ad-hoc Networks (VANETs) field due to the lifesaving factor. VANETs are defined as a set of vehicles in the road interact with other vehicles or with the Road Side Unit (RSU) through wireless Local Area Network (WLAN) technologies. The fundamental advantages of VANETs are enhancing the road and driver's safety and improving the vehicle security against adversaries’ attacks. Security is the most difficult issue belonging to VANETs since messages are exchanged through open wireless environments. Especially in the authentication process, the vehicles need to be authenticated before accessing or sending messages through the network. Any violation of the authentication process will open the whole network for the attack. In this paper, we applied security algorithms to improve authentication in VANETs with four stages of cryptography techniques: challenge-response authentication, digital signature, timestamping, and encryption/decryption respectively. Also, we also proposed an algorithm model and framework. Finally, we implemented the challenge-response authentication technique, and then measured and evaluated the result from the implementation

A fuzzy-based trust evaluation framework for efficient privacy preservation and secure authentication in VANET

ABSTRACT The Vehicular Adhoc Network (VANET) is a newly added smart technique in vehicles to ensure safety and reduce time consumption. Even though it saves time and guarantees safe travel, security and privacy are the most difficult issues in the VANET. Moreover, this is due to the fact that the methods exploit public key infrastructure, group signature, etc., Meanwhile, the hackers can acquire the sensitive data’s which are usually kept in the tamper-proof devices by using side-channel attacks. The VANET also possesses several security-related issues. To circumvent this we propose an efficient privacy-preserving and fuzzy-based trust evaluation scheme. This method ensures the security and authenticity of the VANET. To ensure security our proposed method utilizes a modified Elliptical Curve cryptographic (ECC) method which also reduces the computational complexities created by the conventional ECC. In our proposed method the TPD parameters are renewed more often to eliminate the attacks and permits batch verification methods to reduce the time. The experimental analysis is conducted in Matlab simulator in terms of computational cost, communication cost, evaluation of trustworthiness, privacy protection. The experimental analysis shows that proposed method provides 94% of trustworthiness and time consumption and communication overheads are reduced to greater extent.

EBCPA: Efficient Blockchain-based Conditional Privacy-preserving Authentication for VANETs

Vehicular Ad-hoc Networks (VANETs) are with great potentials to facilitate traffic management and improve driver safety. Blockchain-based conditional privacy-preserving authentication (BCPPA) is proposed to achieve an optimal tradeoff among anonymity, traceability and key/certificate management in VANETs. Existing BCPPA protocols mitigate these security and privacy challenges by adding a significant cost on verification and traceability. As a result, current solutions fail to meet high mobility, low latency, and real-time requirements of VANETs. In this paper, we design three new system building blocks namely key derivation (KeyDer), signatures of knowledge (SoK) and smart contract, following by a more efficient BCPPA protocol (named as EBCPA). To show the advantage of EBCPA, we first demonstrate it can satisfy the necessary requirements (e.g. message authentication, conditional privacy protection, resilience to common attacks, and so forth). Moreover, we implement the EBCPA in the on-line Ethereum test network (Rinkeby), Hyperledger test network and VANETs simulation environment (via VanetMobiSim and NS-2). Finally, we evaluate its communication overhead and computational cost via comparing to existing BCPPA protocols that strive to achieve similar properties. From the implementation and comparison results, our proposal can improve efficiency by reducing the time cost of traceability at least 48.95% and verification at least 42.21%.

SARP: secure routing protocol using anonymous authentication in vehicular Ad-hoc networks

SARP: secure routing protocol using anonymous authentication in vehicular Ad-hoc networks

A novel road side unit assisted hash chain based approach for authentication in vehicular Ad-hoc network

Growth of connected vehicles in vehicular social network (VSN) for the ease of driving, route recommendation and infotainment services involve huge exchange of messages between the vehicles. This exchange of messages is prone to several security attacks. Also, the messages must be from authentic source for the success of VSN. Thus, VSN attracts industries, researchers and academia for the development and deployment of a network for its secured communication. Vehicular Ad-hoc Network (VANET) can provide a promising solution for connected vehicles. VANET is a framework in the intelligent transportation systems (ITS) which provide communication between vehicles also known as vehicle to vehicle (V2V) and to infrastructure also known as vehicle to infrastructure (V2I) communications using dedicated short range communication (DSRC) and wireless Access for Vehicular Environment (WAVE). Several security and privacy majors have been taken up by the researchers in the literature. Also most of the scheme completely relies on the trusted authority (TA) for all decisions. However, because of the strict time constraints, the delay must be minimum and incurs less computational and communication overhead. In this research work, RSU assisted hash chain based approach has been proposed to mitigate security and privacy attacks. RSU based scheme thus reduces the complete dependency on the TA. Simulation results show the effectiveness of proposed work as compared to existing work mentioned in this paper.

Provable secure dynamic lightweight group communication in VANETs

AbstractThe advent of group‐oriented communication applications in Vehicular Ad Hoc Networks (VANETs) has trigger research on lightweight privacy‐preserving Secure Group Communication (SGC) in VANETs. In view of this, many researchers proposed privacy‐preserving, authentication, and key agreements schemes. However, these schemes need to address the dynamic nature, heavier processing loads, massive storage, and higher communication. In this direction, we proposed a framework for lightweight dynamic SGC with privacy‐preserving and authentication in VANETs, encompassing (i) A lightweight Elliptic Curve Cryptography (ECC)‐based two‐party key agreement and its extension to a Dynamic Group Key Agreement, in which fixed Road Side Unit (RSU) acts as Group Controller (GC) with superior computational ability than the On‐Board Unit equipped on the vehicles. (ii) An identify‐based authentication and privacy‐preserving schemes using only two lightweight operations XOR and hashing. (iii) A lightweight encryption and decryption with Exclusive Or (XOR) and hashing only. And (iv) a formal security model for SGC in VANETs. The security analysis shows that the proposed system provides confidentiality of session key, anonymity, secure session key enhancement, and immune to password guessing attack, replay attack, insider attack based on an assumption of the computational G‐ECDDH problem. The experimentation is done for authentication, group key agreement, encryption, and decryption times by a varying number of vehicles in the group to 10, 20, 40, 60, 80, and 100 and shown that the proposed technique is taking considerably less computation than other techniques. So the proposed technique is highly desirable in VANETs.

Secure Message Transmission for V2V Based on Mutual Authentication for VANETs

The advancements in Vehicular Ad Hoc Networks (VANETs) require more intelligent security protocols that ultimately provide unbreakable security to vehicles and other components of VANETs. VANETs face various types of security pitfalls due to the openness characteristics of the VANET communication infrastructure. Researchers have recently proposed different mutual authentication schemes that address security and privacy issues in vehicle‐to‐vehicle (V2V) communication. However, some V2V security schemes suffer from inadequate design and are hard to implement practically. In addition, some schemes face vehicle traceability and lack anonymity. Hence, this paper’s primary goal is to enhance privacy preservation through mutual authentication and to achieve better security and performance. Therefore, this article first describes the vulnerabilities of a very recent authentication scheme presented by Vasudev et al. Our analysis proves that the design of Vasudev et al.’s scheme is incorrect, and resultantly, the scheme does not provide mutual authentication between a vehicle and vehicle server when multiple vehicles are registered with the vehicle sever. Furthermore, this paper proposes a secure message transmission scheme for V2V in VANETs. The proposed scheme fulfills the security and performance requirements of VANETs. The security analysis of the proposed scheme using formal BAN and informal discussion on security features confirm that the proposed scheme fulfills the security requirements, and the performance comparisons show that the proposed scheme copes with the lightweightness requirements of VANETs.

Road Condition Monitoring with Source Authentication in VANET

In recent technologies, it has been said that, to improve the travel efficiency and safety of transportation systems, vehicular ad-hoc network (VANET) has been used as the promising technology where each vehicle is able to collect and communicate the information about current road or traffic condition at a particular location using an embedded on-board unit with the help of distributed roadside units. Examples are: While detection of some accident, congestion, jam, etc., vehicles broadcast warning signals to the nearby vehicles which would give a better awareness to every nearby vehicles about the driving environment and these nearby vehicles would change the driving plan if needed. The VANET technology has gained great attentions from both industry and academics in the recent days.