Conditional Privacy Preservation Research Articles

A Conditional Privacy-Preserving Identity-Authentication Scheme for Federated Learning in the Internet of Vehicles

With the rapid development of artificial intelligence and Internet of Things (IoT) technologies, automotive companies are integrating federated learning into connected vehicles to provide users with smarter services. Federated learning enables vehicles to collaboratively train a global model without sharing sensitive local data, thereby mitigating privacy risks. However, the dynamic and open nature of the Internet of Vehicles (IoV) makes it vulnerable to potential attacks, where attackers may intercept or tamper with transmitted local model parameters, compromising their integrity and exposing user privacy. Although existing solutions like differential privacy and encryption can address these issues, they may reduce data usability or increase computational complexity. To tackle these challenges, we propose a conditional privacy-preserving identity-authentication scheme, CPPA-SM2, to provide privacy protection for federated learning. Unlike existing methods, CPPA-SM2 allows vehicles to participate in training anonymously, thereby achieving efficient privacy protection. Performance evaluations and experimental results demonstrate that, compared to state-of-the-art schemes, CPPA-SM2 significantly reduces the overhead of signing, verification and communication while achieving more security features.

A Conditional Privacy-Preserving Identity-Authentication Scheme for Federated Learning in the Internet of Vehicles

A Conditional Privacy-Preserving Identity-Authentication Scheme for Federated Learning in the Internet of Vehicles

Human Activity Recognition for Elderly People Using Pseudonym-Based Conditional Privacy-Preservation Authentication

Human Activity Recognition for Elderly People Using Pseudonym-Based Conditional Privacy-Preservation Authentication

Hybrid cryptography-based scheme with conditional privacy-preserving authentication and memory-based DOS resilience in V2X

To secure Vehicle-to-everything (V2X) communications, many Conditional Privacy-Preserving Authentication schemes (CPPA) use symmetric and asymmetric encryption during the authentication process. However, several existing schemes have some security limitations regarding VANET requirements. In many symmetric cryptography-based schemes, the participants are required to share the same keys which could compromise the security of the network in case the key of one participant is compromised, while many asymmetric cryptography-based schemes take much time during the authentication process, and don't address the denial-of-service attack. In this paper, we propose a certificateless scheme that does not require a certificate and prevents the escrow problem. Plus, it uses the elliptic curve cryptography and avoids bilinear pairing and Map-to-Hash functions. We call our scheme Hybrid Cryptography-Based Scheme with a Conditional Privacy-Preserving Authentication (HCBS-CPPA), as it uses both symmetric and asymmetric cryptography during the authentication process. Our scheme combines the strength of an asymmetric encryption that satisfies non-repudiation, and the strength of a symmetric encryption that allows to perform a lightweight authentication. In addition, we show that our scheme is resilient to memory-based Denial of Service (DOS) attack which occurs when an attacker floods the memory of a receiver with invalid messages. A security proof shows that HCBS-CPPA is secure in the random oracle. Regarding the simulation of our scheme, it turns out that HCBS-CPPA has the best performance when compared with several existing certificateless schemes. Additionally, it requires less execution time during the signing and verification process, as well as less communication overhead when compared to the existing schemes.

IPCAS: An improved conditional privacy-preserving certificateless aggregate signature scheme without bilinear pairing for VANETs

Recently, Gong et al. proposed a Certificateless Aggregate Signature (CLAS) scheme (shorted by PCAS) with conditional privacy-preserving without bilinear pairing for Vehicular Ad-hoc Networks (VANETs). Unfortunately, after analyzing security, the PCAS scheme fails to satisfy the necessary unlinkability in VANETs and is vulnerable to the public key replacement forgery attack of the Type-I adversary. Subsequently, this article analyzes the causes of these two security issues in detail and proposes an improved CLAS scheme for VANETs (called IPCAS). Through security analysis, this article proves that the IPCAS is existentially unforgeable under the adaptive chosen message attacks against Type-I and Type-II adversaries in the random oracle model, and satisfies the necessary security and privacy requirements in VANETs, including unlinkability. Finally, the performance analysis results show that compared to PCAS for single message and n aggregate messages (n=1000), the computational overhead of IPCAS is reduced by 20.01% and 49.08% respectively, and the communication overhead is reduced by 18.75% and 28.14% respectively. Therefore, IPCAS not only makes up for the security vulnerabilities of PCAS but also has better performance.

Improvement of a Conditional Privacy-Preserving and Desynchronization-Resistant Authentication Protocol for IoV

In Internet of Vehicles (IoV), the secure data transmission between vehicles and transportation infrastructure effectively ensures the safety and fast driving of vehicles, while authentication and key agreement protocols between vehicles and transportation infrastructure (V2I) play an important role in ensuring data security and user privacy. However, how to design a provably secure and lightweight V2I authentication protocol for IoV is a challenge. Recently, Kumar et al. proposed a conditional privacy-preserving and desynchronization-resistant authentication protocol for IoV, but we find that Kumar et al.’s scheme is vulnerable to identity guessing attacks, impersonation attacks, and a lack of session key secrecy once the attacker obtains data stored in smart card through side-channel attacks. We also point out that Kumar et al.’s protocol is vulnerable to Roadside Unit (RSU) captured attacks and lacks perfect forward secrecy. Therefore, we propose an improved V2I authentication protocol for IoV, which uses the Physical Unclonable Function (PUF) to resist RSU captured attacks, and designed a three-factor secrecy strategy to resist side-channel attacks; a conditional privacy-preserving strategy was also adopted to achieve anonymity and malicious user tracking. Furthermore, the proposed protocol is provably secure under the random oracle model and has low computation and communication costs.

A secure certificateless ring signcryption scheme based on SM2 algorithm in smart grid

In the context of smart grids, bidirectional transmission of electricity information enables real-time electricity generation tailored to consumer needs. However, ensuring user privacy during data collection has emerged as a significant concern with the proliferation of data collection and transmission capabilities. Existing solutions such as group signature and pseudonym systems have limitations, such as a lack of trustworthiness in group signature administrators and increased system costs associated with pseudonym storage. To address these drawbacks, this paper proposes a certificateless ring signcryption scheme with conditional privacy protection based on the SM2 algorithm. The scheme efficiently enables users to ring signcryption-transmitted messages, thereby concealing the sender’s identity from the message receiver. This approach resolves the privacy concerns mentioned earlier. In addition, tracking algorithm and batch verification algorithm have been designed to improve computational efficiency while also providing the ability for trusted parties to track malicious users. This scheme achieves conditional privacy preservation while avoiding substantial storage costs for power resources. Compared to the latest available programs, our proposed scheme offers enhanced efficiency and lower communication costs.

BCS-CPP: A Blockchain and Collaborative Service-Based Conditional Privacy-Preserving Scheme for Internet of Vehicles

BCS-CPP: A Blockchain and Collaborative Service-Based Conditional Privacy-Preserving Scheme for Internet of Vehicles

Security in Optical Wireless Communication-Based Vehicular Ad Hoc Networks Using Signature and Certificate Revocation

A vehicular ad hoc network is a capable method of making possible road well-being, traffic supervision, as well as information distribution for driving users and travelers. One definitive objective in the blueprint of this type of network is to refuse to accept a variety of malevolent mistreatment and security assaults. The paper analyzed the existing procedure, which has covered the ways of offering security duties and conserving user solitude in the context of wireless access in vehicular environments (WAVE) applications. To make the standards more realistic, it considers techniques of certificate revocation and conditional privacy preservation. These techniques are found to be the most promising ones in vehicular ad hoc networks (VANET). Therefore, a group of narrative security methods is proposed for the safe implementation of the techniques of certificate revocation and conditional privacy preservation. For enhancement of security, the paper proposes that the message should be encapsulated with a proper certificate and be duly signed. For faster communication, we propose the use of optical wireless communication (OWC) between an onboard unit (OBU) and a roadside unit (RSU).

Efficient Certificateless Aggregate Designated Verifier Signature With Conditional Privacy Preserving in VANETs

Efficient Certificateless Aggregate Designated Verifier Signature With Conditional Privacy Preserving in VANETs

Efficient and Security-Enhanced Certificateless Aggregate Signature-Based Authentication Scheme With Conditional Privacy Preservation for VANETs

Efficient and Security-Enhanced Certificateless Aggregate Signature-Based Authentication Scheme With Conditional Privacy Preservation for VANETs

Analysis and Improvement of a Conditional Privacy-Preserving Authentication Scheme with Double-Insurance in VANETs

Analysis and Improvement of a Conditional Privacy-Preserving Authentication Scheme with Double-Insurance in VANETs

Generic Construction of Conditional Privacy-Preserving Certificateless Signatures With Efficient Instantiations for VANETs

Generic Construction of Conditional Privacy-Preserving Certificateless Signatures With Efficient Instantiations for VANETs

Mutual and Batch Authentication With Conditional Privacy-Preserving Scheme for V2G Communication System

Mutual and Batch Authentication With Conditional Privacy-Preserving Scheme for V2G Communication System

Comments on "A Conditional Privacy-Preserving Certificateless Aggregate Signature Scheme in the Standard Model for VANETs"

Comments on "A Conditional Privacy-Preserving Certificateless Aggregate Signature Scheme in the Standard Model for VANETs"

An anonymous authentication scheme with conditional privacy-preserving for Vehicular Ad hoc Networks based on zero-knowledge proof and Blockchain

Recently, Vehicular Ad hoc Networks (VANETs) have gained extensive attention in both academia and industry. VANETs play a seminal role in smart transportation by enhancing driving convenience and traffic efficiency through real-time information interaction. Despite this, ensuring secure authentication and privacy preservation remains two challenging issues in VANETs. The existence of security schemes that are vulnerable to privacy and security issues or have substantial computation and communication overheads shows the necessity for further research in this area. Therefore, in this article, we present an anonymous authentication scheme based on Zero-Knowledge Proof. To be more specific, we adopted Simulation Extractable Zero-Knowledge SNARKs (SE zk-SNARKs) to achieve anonymity and conditional privacy. Although zk-SNARK proofs are succinct and fast to verify, the time required for proof generation poses a major obstacle in using zk-SNARKs in a time-sensitive VANET environment. To overcome this drawback, we focus on key components of the proof statement, separating the repetitive calculations, and archiving in the Blockchain, which serves as an immutable data storage. By omitting repetitive calculations, our proposed scheme becomes lightweight enough to run efficiently on VANETs. Security analysis showed that the proposed protocol satisfied security and privacy requirements. Additionally, a computation cost analysis is provided to demonstrate the significant advantage of our proposed scheme. ProVerif is used to verify the strong secrecy of the protocol, and the results show that privacy can be guaranteed in the proposed scheme.

A Security-Enhanced Certificateless Conditional Privacy-Preserving Authentication Scheme for Vehicular Ad Hoc Networks

By adopting advanced Internet of Things (IoT) technology to sense and collect traffic-related information to improve traffic safety and efficiency, the vehicular ad hoc network (VANET) is becoming a prominent application that changes human driving experiences in the current era. Because frequent data exchange occurs in open environments, VANETs are inherently vulnerable to security and privacy attacks. In history, many certificateless aggregate signature (CLAS) schemes with conditional privacy-preserving (CPP) have been proposed to ensure the authenticity and integrity of the exchanged data and protect users’ privacy. However, we reveal that the state-of-the-art schemes cannot be deployed in practical VANET applications by proposing concrete signature forgery attacks. To this end, we propose a new CLAS-based authentication scheme with CPP for VANETs. The rigorous security proofs based on the standard cryptographic assumption show that the scheme has enhanced security. Moreover, theoretical analysis and experimental evaluation illustrate the practicality of our design.

A Conditional Privacy-Preserving, Lightweight V2I and V2V Authentication Framework for IoV using VANETs

A Conditional Privacy-Preserving, Lightweight V2I and V2V Authentication Framework for IoV using VANETs

BAC-CRL: Blockchain-Assisted Coded Caching Certificate Revocation List for Authentication in VANETs

Vehicular Ad Hoc Networks (VANETs) are considered the technological upheaval for improving road safety and traffic efficiency by enabling the wireless and network communications among vehicles and infrastructures. Certificate Revocation List (CRL)-based schemes are the most widely used recovery mechanism for VANETs to eliminate the negative effect of security and privacy attacks. However, providing an efficient and low-cost CRL-based scheme for certificate revocation is still a challenging issue since the communication resources must be capable of carrying various applications apart from the security and privacy purposes. Thus, in this paper, a Blockchain-Assisted Coded Caching Certificate Revocation List, called BAC-CRL, is proposed for authentication in VANETs. In BAC-CRL, the blockchain technology is leveraged to unite regional Trust Authorities (TAs) and Road-Side Units (RSUs) into a blockchain network, which uniformly manages and stores multipart CRLs for preventing resource-constrained On-Board Units (OBUs) to be overwhelmed. In addition, a multi-layer coded caching strategy is further designed in BAC-CRL to distribute the minimum bits of CRLs that satisfies the revocation requirements, aiming to reduce the communication overhead and shorten the processing time cost. Moreover, a novel anonymous authentication mechanism is developed utilizing the proposed BAC-CRL to achieve conditional privacy preservation with efficient certificate revocation. Security analysis and extensive simulations demonstrate that the proposed BAC-CRL is secure and computationally efficient for vehicle revocation.

XAuth: Secure and Privacy-Preserving Cross-Domain Handover Authentication for 5G HetNets

5G networks are highly heterogeneous, with ultradense base stations (BSs), due to the low penetration of millimeter waves and the availability of different access technologies. However, the continuous heterogeneity and densification of 5G networks pose great challenges to network security, especially for user mobility support. In the process of user handover between BSs or between different network domains, user access authentication and security session establishment are far riskier compared to 4G networks. On one hand, the overhead of handover authentication increases significantly as handovers become more frequent in an ultradense network. On the other hand, the differentiation of security schemes in heterogeneous networks poses a big challenge to handover authentication. Successfully designing a secure, privacy-preserving, and efficient handover authentication protocol for heterogeneous and ultra-dense 5G networks would substantially expand the prospects of future 5G network applications. Although numerous solutions (e.g., challengeresponse-based, public key cryptography-based, physical layer information-based, and blockchain-based solutions) have been proposed to solve the cross-domain handover authentication problem, most of them surfer from security and privacy vulnerabilities and unreasonable performance overhead. In this paper, we propose XAuth, a secure and privacy-preserving authentication protocol for both intra-domain and inter-domain handover in 5G Heterogeneous Networks (HetNets) based on blockchain. The proposed protocol can achieve mutual authentication, key agreement between User Equipment (UE) and target network, and is characterized by forward secrecy, backward secrecy, user anonymity, and conditional privacy preservation. Formal security analysis and comprehensive performance evaluation demonstrate the security and effectiveness of the proposed protocol.