A Secure Pseudonym-Based Conditional Privacy-Preservation Authentication Scheme in Vehicular Ad Hoc Networks
Existing identity-based schemes utilized in Vehicular Ad hoc Networks (VANETs) rely on roadside units to offer conditional privacy-preservation authentication and are vulnerable to insider attacks. Achieving rapid message signing and verification for authentication is challenging due to complex oper...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-02-01
|
| Series: | Sensors |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1424-8220/22/5/1696 |
| _version_ | 1797473847030579200 |
|---|---|
| author | Mahmood A. Al-Shareeda Mohammed Anbar Selvakumar Manickam Iznan H. Hasbullah |
| author_facet | Mahmood A. Al-Shareeda Mohammed Anbar Selvakumar Manickam Iznan H. Hasbullah |
| author_sort | Mahmood A. Al-Shareeda |
| collection | DOAJ |
| description | Existing identity-based schemes utilized in Vehicular Ad hoc Networks (VANETs) rely on roadside units to offer conditional privacy-preservation authentication and are vulnerable to insider attacks. Achieving rapid message signing and verification for authentication is challenging due to complex operations, such as bilinear pairs. This paper proposes a secure pseudonym-based conditional privacy-persevering authentication scheme for communication security in VANETs. The Elliptic Curve Cryptography (ECC) and secure hash cryptographic function were used in the proposed scheme for signing and verifying messages. After a vehicle receives a significant amount of pseudo-IDs and the corresponding signature key from the Trusted Authority (TA), it uses them to sign a message during the broadcasting process. Thus, the proposed scheme requires each vehicle to check all the broadcasting messages received. Besides, in the proposed scheme, the TA can revoke misbehaving vehicles from continuously broadcasting signed messages, thus preventing insider attacks. The security analysis proved that the proposed scheme fulfilled the security requirements, including identity privacy-preservation, message integrity and authenticity, unlinkability, and traceability. The proposed scheme also withstood common security attacks such as man-in-the-middle, impersonation, modification, and replay attacks. Besides, our scheme was resistant against an adaptive chosen-message attack under the random oracle model. Furthermore, our scheme did not employ bilinear pairing operations; therefore, the performance analysis and comparison showed a lower resulting overhead than other identity-based schemes. The computation costs of the message signing, individual signature authentication, and batch signature authentication were reduced by 49%, 33.3%, and 90.2%, respectively. |
| first_indexed | 2024-03-09T20:22:22Z |
| format | Article |
| id | doaj.art-70cd908341d5431caef373904faf1142 |
| institution | Directory Open Access Journal |
| issn | 1424-8220 |
| language | English |
| last_indexed | 2024-03-09T20:22:22Z |
| publishDate | 2022-02-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Sensors |
| spelling | doaj.art-70cd908341d5431caef373904faf11422023-11-23T23:44:40ZengMDPI AGSensors1424-82202022-02-01225169610.3390/s22051696A Secure Pseudonym-Based Conditional Privacy-Preservation Authentication Scheme in Vehicular Ad Hoc NetworksMahmood A. Al-Shareeda0Mohammed Anbar1Selvakumar Manickam2Iznan H. Hasbullah3National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, USM, Gelugor 11800, Penang, MalaysiaNational Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, USM, Gelugor 11800, Penang, MalaysiaNational Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, USM, Gelugor 11800, Penang, MalaysiaNational Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, USM, Gelugor 11800, Penang, MalaysiaExisting identity-based schemes utilized in Vehicular Ad hoc Networks (VANETs) rely on roadside units to offer conditional privacy-preservation authentication and are vulnerable to insider attacks. Achieving rapid message signing and verification for authentication is challenging due to complex operations, such as bilinear pairs. This paper proposes a secure pseudonym-based conditional privacy-persevering authentication scheme for communication security in VANETs. The Elliptic Curve Cryptography (ECC) and secure hash cryptographic function were used in the proposed scheme for signing and verifying messages. After a vehicle receives a significant amount of pseudo-IDs and the corresponding signature key from the Trusted Authority (TA), it uses them to sign a message during the broadcasting process. Thus, the proposed scheme requires each vehicle to check all the broadcasting messages received. Besides, in the proposed scheme, the TA can revoke misbehaving vehicles from continuously broadcasting signed messages, thus preventing insider attacks. The security analysis proved that the proposed scheme fulfilled the security requirements, including identity privacy-preservation, message integrity and authenticity, unlinkability, and traceability. The proposed scheme also withstood common security attacks such as man-in-the-middle, impersonation, modification, and replay attacks. Besides, our scheme was resistant against an adaptive chosen-message attack under the random oracle model. Furthermore, our scheme did not employ bilinear pairing operations; therefore, the performance analysis and comparison showed a lower resulting overhead than other identity-based schemes. The computation costs of the message signing, individual signature authentication, and batch signature authentication were reduced by 49%, 33.3%, and 90.2%, respectively.https://www.mdpi.com/1424-8220/22/5/1696Vehicular Ad hoc Networks (VANETs)security and privacy requirementsrandom oracle modelpseudonym identity schemeElliptic Curve Cryptography (ECC) |
| spellingShingle | Mahmood A. Al-Shareeda Mohammed Anbar Selvakumar Manickam Iznan H. Hasbullah A Secure Pseudonym-Based Conditional Privacy-Preservation Authentication Scheme in Vehicular Ad Hoc Networks Sensors Vehicular Ad hoc Networks (VANETs) security and privacy requirements random oracle model pseudonym identity scheme Elliptic Curve Cryptography (ECC) |
| title | A Secure Pseudonym-Based Conditional Privacy-Preservation Authentication Scheme in Vehicular Ad Hoc Networks |
| title_full | A Secure Pseudonym-Based Conditional Privacy-Preservation Authentication Scheme in Vehicular Ad Hoc Networks |
| title_fullStr | A Secure Pseudonym-Based Conditional Privacy-Preservation Authentication Scheme in Vehicular Ad Hoc Networks |
| title_full_unstemmed | A Secure Pseudonym-Based Conditional Privacy-Preservation Authentication Scheme in Vehicular Ad Hoc Networks |
| title_short | A Secure Pseudonym-Based Conditional Privacy-Preservation Authentication Scheme in Vehicular Ad Hoc Networks |
| title_sort | secure pseudonym based conditional privacy preservation authentication scheme in vehicular ad hoc networks |
| topic | Vehicular Ad hoc Networks (VANETs) security and privacy requirements random oracle model pseudonym identity scheme Elliptic Curve Cryptography (ECC) |
| url | https://www.mdpi.com/1424-8220/22/5/1696 |
| work_keys_str_mv | AT mahmoodaalshareeda asecurepseudonymbasedconditionalprivacypreservationauthenticationschemeinvehicularadhocnetworks AT mohammedanbar asecurepseudonymbasedconditionalprivacypreservationauthenticationschemeinvehicularadhocnetworks AT selvakumarmanickam asecurepseudonymbasedconditionalprivacypreservationauthenticationschemeinvehicularadhocnetworks AT iznanhhasbullah asecurepseudonymbasedconditionalprivacypreservationauthenticationschemeinvehicularadhocnetworks AT mahmoodaalshareeda securepseudonymbasedconditionalprivacypreservationauthenticationschemeinvehicularadhocnetworks AT mohammedanbar securepseudonymbasedconditionalprivacypreservationauthenticationschemeinvehicularadhocnetworks AT selvakumarmanickam securepseudonymbasedconditionalprivacypreservationauthenticationschemeinvehicularadhocnetworks AT iznanhhasbullah securepseudonymbasedconditionalprivacypreservationauthenticationschemeinvehicularadhocnetworks |