基于数字签名的车联网安全体系研究

doi:10.3778/j.issn.1002-8331.2010-0131

摘要/Abstract

摘要： 车联网以智能网联汽车为信息交互感知主体，通过建立车-云-路-人消息互联传输体系，实现智慧交通智能管理、高效控制和及时调度。然而非法网络入侵与攻击导致车联网多通信场景存在安全隐患，为了解决通信各端身份识别问题和复杂通信场景下消息安全传输机制，身份认证技术成为车联网安全体系的重要保障。综述了国内外车联网研究现状和成果，说明了智能网联汽车平台、组件、通信体系，设计了基于数字签名的车联网安全架构；通过深入研究安全框架内在机理，进行架构的详细设计，将全生命周期安全保障机制融于设计中，实现了多场景全生命周期内的身份认证服务；通过分析LTE-V2X技术特点和V2X证书管理体系实际需要，提出面向LTE-V2X数字签名体系，可实际应用于LTE-V2X业务部署及系统开发设计。

关键词: 车联网安全, 身份认证, 数字签名, LTE-V2X

Abstract: As the main body of information interaction perception of Internet of Vehicles, intelligent connected vehicles aim to achieve intelligent management, efficient control and timely scheduling of intelligent transportation through the establishment of message interconnection and transmission system among on board units, cloud, road side units and humans. However, illegal network intrusion and cyber-attacks lead to security risks in the multi-communication scenarios of Internet of Vehicles. In order to solve the problem of identity identification at all communication terminals and the message security transmission mechanism in complex communication scenarios, identity authentication technology becomes an important guarantee for the security system of Internet of Vehicles. The basic ideas of research works are as follows. By summarizing the research status and results of Internet of Vehicles at home and abroad, the platform, components and communication system of intelligent connected vehicles are proposed, the security architecture based on digital certificate is constructed. By researching the intrinsic characters of security framework in depth, each terminal architecture is designed in detail based on the security requirements, full life-cycle security mechanisms are integrated into the architecture, the personalized identity authentication service within the whole life cycle of multiple scenes is realized. This paper analyzes the actual needs of the V2X certificate management and the LTE-V2X technical characteristics. And then a digital signature system based on LTE-V2X is proposed, which can actually be applied to the development and design of LTE-V2X service deployment and related systems.

Key words: Internet of Vehicles security, identity authentication, digital signature, long term evolution-v2x（LTE-V2X）

杨正球, 郑一帆, 修佳鹏. 基于数字签名的车联网安全体系研究[J]. 计算机工程与应用, 2022, 58(9): 116-126.

YANG Zhengqiu, ZHENG Yifan, XIU Jiapeng. Research on Security System for Internet of Vehicles Based on Digital Signature[J]. Computer Engineering and Applications, 2022, 58(9): 116-126.

参考文献

[1] China Academy of Information and Communications Technology.Internet of vehicles white paper[R].2018.
[2] SHEN C.Research on communication security and privacy protection in internet of vehicles[D].Beijing：Beijing Jiaotong University，2018.
[3] LI X H，ZHONG H，CHEN Y.Survey of Internet of vehicles security[J].Journal of Cyber Security，2019，4（3）：17-33.
[4] Beijing Qihoo Technology Co，LTD.2019 Annual report on intelligent network automotive information security[R].2019.
[5] ZHAO X F.Research on anonymous authentication scheme for VANETs[D].Chongqing：Chongqing University of Posts and Telecommunications，2019.
[6] RAYA M，HUBAUX J P.Securing vehicular Ad Hoc networks[J].Journal of Computer Security，2007，15（1）：39-68.
[7] JIANG D，DELGROSSI L.IEEE 802.11 p：towards an international standard for wireless access in vehicular environments[C]//Vehicular Technology Conference.Singapore：IEEE，2008：2036-2040.
[8] LU R，LIN X，SHEN X.An efficient pseudonymous authentication scheme with strong privacy preservation for vehicular communications[J].IEEE Transactions on Vehicular Technology，2010，59（7）：3589-3603.
[9] VERMA S，CHAURASIA B K.Infrastructure based authentication in VANETs[J].International Journal of Multimedia and Ubiquitous Engineering，2011，6（2）：41-54.
[10] ALMEIDA J，SHINTRE S，BOBAN M，et al.Probabilistic key distribution in vehicular networks with infrastructure support[C]//Global Communications Conference，Anaheim，CA，USA，3-7 December 2012：973-978.
[11] DAS A K，KUMAR N，WAZID M，et al.Design of lightweight authentication and key agreement protocol for vehicular Ad Hoc networks[J].IEEE Access，2017（5）：14966-14980.
[12] BRECHT B，THERRIAULT D，ANDRE W，et al.A security credential management system for V2X communications[J].IEEE Transactions on Intelligent Transportation Systems，2018，19（12）：3850-3871.
[13] ETSI TS WG5.TS 102 940：Intelligent transport systems（ITS）；Security；ITS communications security architecture and security management，V1.3.1[S].2018.
[14] LI F，CHEN X.PKI infrastructure architecture based on LTE-V2[J].Network and Information Security，2020，39（7）：41-47.
[15] IEEE Vehicular Technology Society.IEEE 1609.2—IEEE standard for wireless access in vehicular environments security service for applications and management messages[S].New York：IEEE Standards Association，2016.
[16] BENALIA E，BITAM S，MELLOUK A.Data dissemination for Internet of vehicle based on 5G communications：a survey[J].Transactions on Emerging Telecommunications Technologies，2020（1）.
[17] WANG Y H.Research on the authentication technology and algorithm for internet of vehicles[D].Chongqing：Chongqing University of Posts and Telecommunications，2017.
[18] LIU X L.Research on OBU-based multilevel security architecture and communication scheme for internet of vehicles[D].Zhenjiang：Jiangsu University，2018.
[19] PEI Y.Research on safe and efficient authentication scheme in VANE[D].Beijing：Beijing Jiaotong University，2018.
[20] YAO J.Design and safety research on digital car key[J].Auto Electric Parts，2019（6）：4-8.
[21] LUO D F.Research and implementation of car networking information service platform security mechanism[D].Hefei：University of Science and Technology of China，2017.
[22] DONG Z J，LIANG J.Overview on key technology and solution of C-V2X for internet of vehicles[J].Telecommunication Science，2020，36（4）：3-14.
[23] LIU W，ZHANG Y P.C-V2X city-scale demonstration application[J].Telecommunication Science，2020，36（4）：27-35.
[24] YE L，LI P.A secure transmission mechanism for internet of things based on certification[J].Computer Engineering，2013，39（3）：45-48.
[25] WU C X.The pivotal secure technology of in-vehicle network oriented to the internet of vehicles[D].Nanjing：Southeast University，2018.
[26] WANG W.System safety test and evaluation of vehicle T-box[J].Telecommunication Network Technology，2018（1）：85-88.
[27] DAI J.Design and implementation of vehicular information security based on key management and decentralized encryption[D].Beijing：Beijing University of Posts and Telecommunications，2018.
[28] WANG H F.Research on DRM digital certificates management[D].Wuhan：Wuhan University of Technology，2013.
[29] STORCK C R，DUARTE-FIGUEIREDO F.A survey of 5G technology evolution，standards，and infrastructure associated with vehicle-to-everything communications by internet of vehicles[J].IEEE Access，2020（99）：1.
[30] LIU Y B，SONG X L.Authentication mechanism and trust model for internet of vehicles paradigm[J].Journal of Beijing University of Posts and Telecommunications，2017，40（3）：1-18.
[31] WANG Q.Research on security mechanism and key technology of Internet of vehicles[D].Nanjing：Nanjing University of Science and Technology，2016.
[32] JIAN C F，XIE J H.Research and application of cloud digital signature technology[J].Computer Engineering，2017，43（12）：1-5.
[33] CHEN W，LI Y.Industrial progress and key technologies of internet of vehicle[J].ZTE Technology Journal，2020，26（1）：5-11.
[34] XIE Y，WU L B.Anonymous mutual authentication and key agreement protocol in multi-server architecture for VANETs[J].Journal of Computer Research and Development，2016，53（10）：2323-2333.