基于国密SM2的车联网高效匿名认证协议

苏彬庭; 方禾; 许力

doi:10.11959/j.issn.2096-109x.2025030

您当前的位置：

首页 >

文章列表页 >

基于国密SM2的车联网高效匿名认证协议

学术论文 | 更新时间：2025-06-30

- 基于国密SM2的车联网高效匿名认证协议
- Efficient anonymous authentication protocol for internet of vehicles based on Chinese cryptographic SM2
- 网络与信息安全学报 2025年11卷第3期页码：98-108
- 作者机构：
  
  1.福建师范大学，福建福州 350117
  2.网络安全与教育信息化福建省高校工程研究中心，福建福州 350117
  3.福建省网络安全与密码技术重点实验室，福建福州 350117
- 作者简介：
  
  [ "苏彬庭（1990- ），男，福建泉州人，福建师范大学实验师，主要研究方向为网络与信息安全。" ]
  [ "方禾（1991- ），女，福建莆田人，福建师范大学教授，主要研究方向为无线网络安全、智能认证、信任管理。" ]
  [ "许力（1970- ），男，福建福州人，福建师范大学教授，主要研究方向为网络与数据安全、计算机通信网络、大数据与信息化、复杂系统分析。" ]
- 基金信息：
  
  国家自然科学基金(62471139);国家科技项目备案-中央引导地方科技发展专项(2023L3007);福建省中青年教师教育科研项目(JAT220813)
- DOI：10.11959/j.issn.2096-109x.2025030
  中图分类号： TP393
- 收稿：2024-10-16，
  
  修回：2025-02-26，
  
  纸质出版：2025-06-25
- 稿件说明：
移动端阅览
苏彬庭, 方禾, 许力. 基于国密SM2的车联网高效匿名认证协议[J]. 网络与信息安全学报, 2025, 11(3): 98-108.

Format: SU B T, FANG H, XU L. Efficient anonymous authentication protocol for internet of vehicles based on Chinese cryptographic SM2[J]. Chinese Journal of Network and Information Security, 2025, 11(3): 98-108.
苏彬庭, 方禾, 许力. 基于国密SM2的车联网高效匿名认证协议[J]. 网络与信息安全学报, 2025, 11(3): 98-108. DOI： 10.11959/j.issn.2096-109x.2025030.

Format: SU B T, FANG H, XU L. Efficient anonymous authentication protocol for internet of vehicles based on Chinese cryptographic SM2[J]. Chinese Journal of Network and Information Security, 2025, 11(3): 98-108. DOI： 10.11959/j.issn.2096-109x.2025030.

摘要

身份认证是车联网安全防护的关键，然而，现有的很多认证方案效率低且不兼容国产密码算法。为进一步提升认证效率，丰富国产密码算法在车联网领域的应用，提出了一种基于国密SM2的匿名切换认证协议。该协议结合伪身份认证机制，强化了车辆隐私信息保护，有效隐藏车辆的真实身份和行驶数据。该协议不仅融合了国产密码算法，在认证效率上也表现良好，特别在密集车辆环境下，该协议设计了一种巧妙的批量认证算法。为了验证协议性能，基于Fedora系统的QT平台，对协议的批量认证算法进行测试，测试认证车辆数为10，20，40，…，320的批量认证效率。随着认证车辆数的增加，批量认证算法展示出的效率优势越发明显，当认证车辆数达到320辆时，路侧单元（road side unit

RSU）认证效率提升了约65%，极大地减轻了RSU并发认证压力。理论和AVISPA工具实验分析证明，所设计的协议在车联网安全的自主可控性方面更有优势，不仅能够有效抵抗重放攻击和中间人攻击等攻击行为，并且在认证效率上也有显著提升，为车联网系统的身份认证提供了更为安全有效的解决方案。

Abstract

A critical component of cybersecurity protection in the internet of vehicles (IoV) was identity authentication. However

many existing authentication schemes were plagued by low efficiency and incompatibility with domestic cryptographic algorithms. To further enhance authentication efficiency and expand the application of domestic cryptographic algorithms in the IoV domain

an anonymous handover authentication protocol was designed based on the Chinese national cryptographic SM2 algorithm. A pseudo-identity authentication mechanism was integrated into the protocol to strengthen the protection of vehicle privacy information

effectively concealing vehicles’ real identities and operational data. Domestic cryptographic algorithms were incorporated into the protocol

which also demonstrated superior performance in authentication efficiency. In densely vehicle environments

an innovative batch authentication algorithm was employed by the protocol. To validate the protocol's performance

tests of the batch authentication algorithm were conducted on a QT platform based on the Fedora system

with the batch authentication efficiency for 10

⋯

320 vehicles being evaluated. As the number of authenticated vehicles increased

the efficiency advantages of the batch authentication algorithm became more pronounced. When authenticating 320 vehicles

the road side unit (RSU) verification efficiency improved by approximately 65%

significantly alleviating the concurrent authentication pressure on RSUs. Both theoretical analyses and experiments using the AVISPA tool confirm that the proposed protocol offers enhanced advantages in the autonomous controllability of IoV security. It not only effectively resists replay attacks and man-in-the-middle attacks but also achieves significant improvements in authentication efficiency

thus providing a more secure and effective identity authentication solution for IoV systems.

关键词

Keywords

references

SON S , LEE J , PARK Y , et al . Design of blockchain-based lightweight V2I handover authentication protocol for VANET [J ] . IEEE Transactions on Network Science and Engineering , 2022 , 9 ( 3 ): 1346 - 1358 .

LI X C , YIN X C . Blockchain-based group key agreement protocol for vehicular ad hoc networks [J ] . Computer Communications , 2022 , 183 : 107 - 120 .

CUI J , TAO X F , ZHANG J , et al . HCPA-GKA: A hash function-based conditional privacy-preserving authentication and group-key agreement scheme for VANETs [J ] . Vehicular communications , 2018 , 14 : 15 - 25 .

QIAO Z R , MA K , ZHOU Y W , et al . An anonymous and efficient certificate-based identity authentication protocol for VANET [J ] . IEEE Internet of Things Journal , 2023 .

张海波 , 余艺 , 王冬宇 , 等 . 面向车联网通勤的双阶段认证密钥协商协议 [J ] . 通信学报 , 2024 , 45 ( 5 ): 128 - 139 .

ZHANG H B , Y Y , WANG D Y , et al . Two-stage authentication and key agreement protocol for commuting in Internet of vehicles [J ] . Journal on Communications , 2024 , 45 ( 5 ): 128 - 139 .

TAN H W , ZHENG W Y , VIJAYAKUMAR P . Secure and efficient authenticated key management scheme for UAV-assisted infrastructure- less IoVs [J ] . IEEE Transactions on Intelligent Transportation Systems , 2023 , 24 ( 6 ): 6389 - 6400 .

SIKARWAR H , DAS D . A novel MAC-based authentication scheme (NoMAS) for internet of vehicles (IoV) [J ] . IEEE Transactions on Intelligent Transportation Systems , 2023 , 24 ( 5 ): 4904 - 4916 .

FENG X , SHI Q C , XIE Q Q , et al . P2BA: A privacy-preserving protocol with batch authentication against semi-trusted RSUs in vehicular ad hoc networks [J ] . IEEE Transactions on Information Forensics and Security , 2021 , 16 : 3888 - 3899 .

XU Z Y , HE D B , KUMAR N , et al . Efficient certificateless aggregate signature scheme for performing secure routing in VANETs [J ] . Security and Communication Networks , 2020 , 2020 ( 1 ): 5276813 .

LI X , LIU T , OBAIDAT M S , et al . A lightweight privacy-preserving authentication protocol for VANETs [J ] . IEEE Systems Journal , 2020 , 14 ( 3 ): 3547 - 3557 .

何业锋 , 张茜 , 陈鸣欣 , 等 . 车联网中基于阈值的边缘辅助身份认证方案 [J ] . 计算机应用研究 , 2024 , 41 ( 10 ): 3155 - 3159 .

HE Y F , ZHANG X , CHEN M X , et al . Threshold-based edge-assisted identity authentication scheme in VANET [J ] . Application Research of Computers , 2024 , 41 ( 10 ): 3155 - 3159 .

张应辉 , 钱佳乐 , 曹进 , 等 . 5G-V2X中基于轨迹预测的安全高效群组切换认证协议 [J ] . 通信学报 , 2023 , 44 ( 8 ): 144 - 154 .

ZHANG Y H , QIAN J L , CAO J , et al . Secure and efficient group handover authentication protocol based on trajectory prediction in 5G-V2X [J ] . Journal on Communications , 2023 , 44 ( 8 ): 144 - 154 .

MUHAMMAD A S , XIONG L , KHALID M , et al . A cost-efficient anonymous authenticated and key agreement scheme for v2i-based vehicular ad-hoc networks [J ] . IEEE Transactions on Intelligent Transportation Systems , 2024 ， 25 ( 9 )： 12621 - 12630 .

ZHAO C , GUO N , GAO T H , et al . PEPA: Paillier cryptosystem-based efficient privacy-preserving authentication scheme for VANETs [J ] . Journal of Systems Architecture , 2023 , 138 : 102855 .

YANG A J , WENG J , YANG K , et al . Delegating authentication to edge: A decentralized authentication architecture for vehicular networks [J ] . IEEE Transactions on Intelligent Transportation Systems , 2020 , 23 ( 2 ): 1284 - 1298 .

AZEES M , VIJAYAKUMAR P , DEBOARH L J . EAAP: Efficient anonymous authentication with conditional privacy-preserving scheme for vehicular ad hoc networks [J ] . IEEE Transactions on Intelligent Transportation Systems , 2017 , 18 ( 9 ): 2467 - 2476

LI S L , YANG R L , CHEN J G . A privacy‐preserving authentication scheme for VANETs with exculpability [J ] . Security and Communication Networks , 2023 , 2023 ( 1 ): 8676929 .

ZHU F , YI X , ABUADBBA A , et al . A security-enhanced certificateless conditional privacy-preserving authentication scheme for vehicular ad hoc networks [J ] . IEEE Transactions on Intelligent Transportation Systems , 2023 , 24 ( 10 ): 10456 - 10466 .

LIU X X , WANG Y C , LI Y P , et al . PTAP: A novel secure privacy-preserving & traceable authentication protocol in VANETs [J ] . Computer Networks , 2023 , 226 : 109643 .

SU H D , DONG S , WANG N , et al . An efficient privacy-preserving authentication scheme that mitigates TA dependency in VANETs [J ] . Vehicular Communications , 2024 , 45 : 100727 .

SHEN S Y , YANG Y , LIU X M . Toward data privacy preservation with ciphertext update and key rotation for IoT [J ] . Concurrency and Computation: Practice and Experience , 2023 , 35 ( 20 ): e6729 .

HU X H , ZHENG X , ZHANG S S , et al . A high-performance elliptic curve cryptographic processor of SM2 over GF ( p ) [J ] . Electronics , 2019 , 8 ( 4 ): 431 .

郭辉 , 罗勇 , 郭晓潞 . 基于国密算法的车载以太网控制器身份认证方法 [J ] . 网络与信息安全学报 , 2022 , 8 ( 6 ): 20 - 28 .

GUO H , LUO Y , GUO X L . Automotive ethernet controller authentication method based on national cryptographic algorithms [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 6 ): 20 - 28 .

WU K H , CHENG R , CUI W C , et al . A lightweight SM2-based security authentication scheme for smart grids [J ] . Alexandria Engineering Journal , 2021 , 60 ( 1 ): 435 - 446 .

胡小明 , 陈海婵 . 可证明安全的SM2盲适配器签名方案 [J ] . 网络与信息安全学报 , 2024 , 10 ( 2 ): 59 - 68 .

HU X M , CHEN H C . Proven secure blind adaptor signature scheme based on the SM2 [J ] . Chinese Journal of Network and Information Security , 2024 , 10 ( 2 ): 59 - 68 .

JI H H , ZHANG H J , SHAO L S , et al . An efficient attribute-based encryption scheme based on SM9 encryption algorithm for dispatching and control cloud [J ] . Connection Science , 2021 , 33 ( 4 ): 1094 - 1115 .

GB/T 32918.2-2016 , 信息安全技术　SM2椭圆曲线公钥密码算法　第2部分：数字签名算法 [S ] . 2016 .

GB/T 32918.2-2016 , Information security technology - SM2 elliptic curve public key cryptographic algorithm - Part 2: Digital signature algorithm [S ] . 2016 .

何德彪 , 张佳妮 , 陈泌文 , 等 . 一种基于SM 2 的身份基的数字签名方法与系统 : CN108809658A [P ] . 2018-11-13 .

HE D B , ZHANG J N , CHEN B W , et al . An identity-based digital signature method and system based on SM2 : CN108809658A [P ] . 2018-11-13 .

陆思奇 , 程庆丰 , 赵进华 . 安全协议形式化分析工具比较研究 [J ] . 密码学报 , 2014 , 1 ( 6 ): 568 - 577 .

LU S Q , CHENG Q F , ZHAO J H . Comparison study of formal verification tools for security protocols [J ] . Journal of Cryptologic Research , 2014 , 1 ( 6 ): 568 - 577 .

TEAM T A . HLPSL tutorial—the AVISPA project [EB ] . 2005 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

FL-IoV：基于联邦学习的综合车联网入侵检测方法

基于深度学习的车联网无线密钥生成系统

面向车联网的匿名组密钥分发方案

基于SM2的两方协作盲签名协议

低功耗嵌入式平台的SM2国密算法优化实现