车载自组网消息认证和隐私保护的研究与设计

发布时间：2018-05-15 12:06

本文选题：车载自组网 + 身份认证　；参考：《西北师范大学》2016年硕士论文

【摘要】：车载自组网(Vehicular ad hoc networks,VANET)作为一种特殊的车辆之间通信的移动自组织网络,通过车与车、车与路边基础设施的相互通信来实现传递辅助驾驶的信息、提供实时交通状况。但是,VANET范围广泛而且具有高速移动性,它在改善乘车环境和保证交通安全的同时,也存在一定的隐私威胁。在VANET中,当移动节点到某个外地网络时,只有通过该网络的认证才会被允许接入,同时为了防止恶意攻击者的跟踪,VANET需要提供匿名服务来隐藏移动节点的身份。所以,传统的身份认证和隐私保护机制不再完全适用于VANET。在本文中,针对VANET自身的特殊性和用户的隐私威胁,本文做了以下几方面的工作:针对VANET用户移动到某个非本辖区自组网络时的认证问题,利用离散对数的相关特性,提出了一种基于身份的跨域匿名认证方案,该方案通过代理者实现不同域证书的转换,并实现转换后证书的验证,从而使RSU也可以和本域或非本域的OBU达成信任关系,实现不同域OBU之间或本域RSU对其它域OBU的匿名认证,并对该方案的安全性进行了分析。针对VANET的特殊性,提出一种安全高效的隐私保护方案。该方案将采用移动通信模式的群组管理,以高效的群签名为基础,让每个车辆可以通过就近的路边设施在不泄露隐私的前提下动态地加入一个群,实现车间安全高效的通信。面向异域的身份认证软件采用B/S体系结构,使用SSH架构来实现。软件主要针对两个不同信任域之间安全交互的问题,实现不同信任域之间通信者身份的双向验证,并设置严密的权限管理,确保认证过程中的安全性。软件主要的功能包括普通用户、代理者和CA三种用户的用户管理、证书查询管理、证书撤销管理、证书更新管理、证书颁发管理、证书转换管理。
[Abstract]:Vehicular ad hoc networks (VANET), as a special mobile ad hoc network for communication between vehicles, can transmit the information of auxiliary driving and provide real-time traffic status through the mutual communication between vehicles and vehicles, vehicles and roadside infrastructure. However, VANET has a wide range and high speed mobility, which not only improves the vehicle environment and ensures traffic safety, but also has certain privacy threats. In VANET, when a mobile node reaches a foreign network, only the authentication of the network is allowed to access it. In order to prevent malicious attackers from tracking VANET, it is necessary to provide anonymous services to hide the identity of the mobile node. Therefore, the traditional authentication and privacy protection mechanisms are no longer fully applicable to vane. In this paper, aiming at the particularity of VANET and the privacy threat of users, we do the following work: to solve the authentication problem when VANET users move to a non-local self-organized network, we use the correlation characteristic of discrete logarithm. In this paper, an identity-based cross-domain anonymous authentication scheme is proposed. The scheme implements the conversion of different domain certificates through agents, and verifies the converted certificates, so that RSU can also reach a trust relationship with local or non-native OBU. The anonymous authentication of OBU between different domains OBU or local RSU is implemented, and the security of the scheme is analyzed. According to the particularity of VANET, a secure and efficient privacy protection scheme is proposed. This scheme will adopt group management of mobile communication mode. Based on efficient group signature, each vehicle can join a group dynamically through nearby roadside facilities without revealing privacy, so that the workshop can communicate safely and efficiently. The identity authentication software for different regions adopts B / S architecture and SSH architecture. Aiming at the problem of secure interaction between two different trust domains, the software realizes the two-way authentication of the identity of the communicators between different trust domains, and sets up strict authority management to ensure the security in the authentication process. The main functions of the software include user management, certificate query management, certificate revocation management, certificate renewal management, certificate issuance management and certificate conversion management.
【学位授予单位】：西北师范大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：U463.67;TP309

【相似文献】