面向车联网的群密钥管理方案的研究

发布时间：2018-07-22 17:15

【摘要】：随着物联网(Internet of Things,简称IoT)技术的快速发展与广泛应用,人们的生活发生了翻天覆地的变化,如智能医疗、智能家居、智能产业和智能交通等。车联网(Internet of Vehicles,简称IOV)是物联网技术在交通系统领域的应用,有望改善目前的道路交通状况、确保道路驾驶安全,是构建未来智慧城市的重要组成部分。车联网群组通信作为车联网通信系统的主要通信方式,受到学术界和产业界的密切关注。车联网通信系统中,车辆规模较大、车辆的位置不断变化、车载自组织网的拓扑结构不断改变、无线信道中存在各种攻击、报文丢包率大,使得车联网群组通信的安全和效率受到挑战。群密钥管理是保证群组通信安全、群通信开销合理的关键。本文立足于车联网环境,以群密钥管理为研究对象,研究车联网下具有隐私保护功能的群密钥管理方案以及带自愈能力的群密钥分配方案。本文的主要研究工作如下:首先,介绍车载自组织网络和群密钥管理等技术背景,描述群密钥管理方案和自愈群密钥分配方案的研究现状,分析现有研究工作的特点及其存在的不足。其次,针对现有的群密钥管理方案密钥管理开销较大、未协调车辆的身份隐私保护和可问责性之间的矛盾、忽略车联网中相邻路边单元(Road Side Unit,简称RSU)之间的盲区如何获取服务等问题,本文提出一个面向服务的隐私保护群密钥管理方案,利用车辆的假名绑定自身所订购的服务保护车辆身份隐私,并能在可信机构的协助下追溯车辆真实身份,解决问责、合理收费问题,基于中国剩余定理设计群密钥因子,使服务群的成员能够以一个模运算获得群密钥,提高了群密钥更新的效率,降低了群密钥更新的开销。此外,整个方案采用一个集中式的群密钥管理框架,加密服务的群密钥不会因为车辆跨RSU移交而改变,能适应车辆频繁跨RSU移交的车联网环境。对该方案的安全性分析和效率分析表明,该方案具有身份隐私保护性、身份可追溯性、抵抗合谋攻击的能力,并具有较少群密钥管理开销,相比于现有方案,具有明显的优势。然后,针对车联网中群会话密钥在不可靠的无线信道上分配容易丢失,影响群组通信问题,本文提出了一个轻量级的自愈群密钥分配方案。该方案设计访问控制多项式和群密钥以指数的形式广播,并在广播消息中增加消息验证码,实现了群密钥的保密性和广播认证,利用滑动窗口机制恢复丢失的群会话密钥,缓解了通信开销。并针对车联网的子群和群间通信场景,提出子群自愈群密钥分配和安全群间通信方案,实现了子群之间的信息共享和信息保密。安全性分析证明该方案具有通用自愈群密钥分配方案安全模型中定义的各项安全性以及广播认证能力,性能分析表明该方案具有常数的存储开销,并在通信开销方面优于现存方案。最后,分析和总结面向车联网的群密钥管理方案仍然存在的关键问题,并指出未来的研究方向。
[Abstract]:With the rapid development and wide application of Internet of Things (IoT) technology, people's life has undergone tremendous changes, such as intelligent medical treatment, smart home, intelligent industry and intelligent transportation. The Internet of Vehicles (IOV) is the application of the Internet of things technology in the transportation system, and it is expected to improve the current situation. Road traffic conditions, to ensure road safety, is an important part of the construction of the future intelligent city. Vehicle networking group communication is the main communication mode of the vehicle network communication system. It is closely concerned by the academic and industrial circles. In the vehicle network communication system, the vehicle size is larger, the vehicle location is changing, and the vehicle auto organization network is used. The topology structure is constantly changing, there are various kinds of attacks in the wireless channel, the packet loss rate is large, the security and efficiency of the network group communication are challenged. Group key management is the key to ensure the security of the group communication and the reasonable cost of the group communication. The group key management scheme of privacy protection function and the group key allocation scheme with self-healing ability are introduced. The main research work of this paper is as follows: first, it introduces the technical background of vehicle auto organization network and group key management, describes the research status of group key management scheme and self-healing group key distribution scheme, and analyzes the characteristics of the existing research work. Secondly, in order to solve the problem of how to obtain the service between the adjacent roadside unit (Road Side Unit, RSU) between the adjacent roadside unit (Unit, RSU) in the vehicle network, this paper proposes a service oriented privacy. The protection group key management scheme uses the vehicle's pseudonym to bind the service of the vehicle to protect the identity privacy of the vehicle, and can trace the real identity of the vehicle and solve the problem of accountability and reasonable charge under the assistance of the trusted organization. Based on the Chinese remainder theorem, the group key factor is designed to enable the members of the service group to obtain the group density by a model operation. The key is improving the efficiency of group key updating and reducing the cost of group key updating. In addition, the whole scheme uses a centralized group key management framework. The group key of the encrypted service will not be changed by the RSU transfer across the vehicle. It can adapt to the vehicular network environment with frequent cross RSU transfer of vehicles. The security analysis and efficiency analysis of the scheme are analyzed. It shows that the scheme has the identity privacy protection, the identity traceability, the ability to resist conspiracy attack, and has less group key management overhead. Compared with the existing scheme, the scheme has obvious advantages. Then, the distribution of group session keys in the unreliable wireless channel is easily lost and affects the group communication problem. A lightweight self-healing group key distribution scheme is designed. The scheme is designed to broadcast the access control polynomial and group key in an exponential form, and adds message authentication code to the broadcast message, realizes the confidentiality and broadcast authentication of the group key, and uses a sliding window mechanism to restore the lost group session key and alleviates the communication overhead. The subgroup and inter group communication scene of the vehicle network, the subgroup self healing group key distribution and the security inter group communication scheme are proposed to realize the information sharing and information secrecy between the subgroups. The security analysis shows that the scheme has the security of the items defined in the security model of the general self-healing group key distribution scheme and the capability of broadcasting authentication. It shows that the scheme has a constant storage cost and is superior to the existing schemes in communication overhead. Finally, it analyzes and summarizes the key problems that still exist in the group key management scheme facing the Internet, and points out the future research direction.
【学位授予单位】：安徽大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TN918.4

【相似文献】