A leading industry standard for secure and trusted communication in vehicular ad-hoc networks (VANETs) is the Security Credential Management System (SCMS). It uses anonymous certificates, functioning as pseudonyms, to preserve the privacy of vehicles. With the rapid development of advanced applications in VANETs, such as crowdsensing and federated learning, vehicles need to communicate with each other or infrastructures more frequently, leading to a higher demand for pseudonyms. However, the current approach of certificate provisioning in SCMS is not able to fully support pseudonyms, due to storage limitation, cost of connectivity establishment, and communication overhead of certificate downloading. To tackle this challenge, we propose a non-interactive approach for SCMS, allowing vehicles themselves to generate short-term key pairs and anonymous implicit certificates. Our evaluation and comparison with previous work show that our solution not only effectively reduces the communication cost, but also grants vehicles greater flexibility in certificate generation and use. On the technical side, to the best of our knowledge, this is the first work which (1) applies sanitizable signature for non-interactive anonymous certificate generation, and (2) is specifically designed for SCMS, which opens up possibilities for extensions and applications in industry.
翻译:车载自组网(VANETs)中安全可信通信的行业领先标准是安全凭证管理系统(SCMS)。该系统使用匿名证书(作为假名)来保护车辆隐私。随着车联网中先进应用(如群智感知和联邦学习)的快速发展,车辆需要更频繁地相互通信或与基础设施通信,导致对假名的需求增加。然而,当前SCMS中的证书供应方法因存储限制、连接建立成本和证书下载的通信开销,无法完全支持假名。为应对这一挑战,我们提出了一种非交互式SCMS方法,允许车辆自行生成短期密钥对和匿名隐式证书。我们的评估及与以往工作的对比表明,该方案不仅有效降低了通信成本,还赋予了车辆在证书生成和使用方面更高的灵活性。从技术层面看,据我们所知,这是首项(1)将可净化签名应用于非交互式匿名证书生成,且(2)专门为SCMS设计的工作,为工业扩展与应用开辟了可能性。