As advanced V2X applications emerge in the connected and autonomous vehicle (CAV), the data communications between in-vehicle end-devices and outside nodes increase, which make the end-to-end (E2E) security to in-vehicle end-devices as the urgent issue to be handled. However, the E2E security with fine-grained access control still remains as a challenging issue for resource-constrained end-devices since the existing security solutions require complicated key management and high resource consumption. Therefore, we propose a practical and secure vehicular communication protocol for the E2E security based on a new attribute-based encryption (ABE) scheme. In our scheme, the outsourced computation is provided for encryption, and the computation cost for decryption constantly remains small, regardless of the number of attributes. The policy privacy can be ensured by the proposed ABE to support privacy-sensitive V2X applications, and the existing identity-based signature for outsourced signing is newly reconstructed. Our scheme achieves the confidentiality, message authentication, identity anonymity, unlinkability, traceability, and reconfigurable outsourced computation, and we also show the practical feasibility of our protocol via the performance evaluation.
翻译:随着网联自动驾驶汽车(CAV)中先进V2X应用的出现,车载终端设备与外部节点间的数据通信日益频繁,这使得车载终端设备的端到端(E2E)安全成为亟待解决的关键问题。然而,由于现有安全方案需要复杂的密钥管理和较高的资源消耗,在资源受限的终端设备上实现具有细粒度访问控制的端到端安全仍是一项具有挑战性的任务。为此,我们提出了一种基于新型属性基加密(ABE)方案的实用安全车载通信协议,以保障端到端安全。在该方案中,加密过程通过外包计算实现,且解密计算开销始终保持恒定,不随属性数量的增加而增长。所提出的ABE机制能够保障策略隐私性,从而支持对隐私敏感的V2X应用;同时,我们重构了现有基于身份的签名方案用于外包签名。该方案实现了机密性、消息认证、身份匿名性、不可链接性、可追溯性及可配置的外包计算,并通过性能评估验证了协议的实际可行性。