车载网中高效安全的无证书聚合签名方案

doi:10.3969/j.issn.1671-1122.2024.02.003

摘要/Abstract

摘要：

为了保障车载网系统中车辆间通信的完整性、真实性、有效性和即时性，文章提出了一种能抗合谋攻击且不需要双线性对的无证书聚合签名方案。无证书密码体制既较好地解决了基于身份的密码体制所固有的密钥托管问题，又保留了基于身份的密码体制不需要使用公钥证书的优点。文章基于椭圆曲线离散对数问题和分叉引理，在随机预言模型中严格证明了其安全性。性能及效率分析表明，该方案是有效的，在保证通讯数据完整性和真实性的同时，减少了带宽开销以及存储开销，提高了验证效率。

关键词: 聚合签名, 合谋攻击, 无证书密码体制, 车载网

Abstract:

Certificateless cryptography not only eliminates the key escrow problem inherent in ID-based cryptography, but also maintains the advantages of ID-based cryptography that does not need public key certificate. In order to ensure the integrity, authenticity, validity and immediacy of the communication between vehicles in the VANETs system, this paper proposed a certificateless aggregate signature scheme without bilinear pairing and the scheme could resist coalition attacks. In the random oracle model, the security of the algorithm was rigorously proved based on the elliptic curve discrete logarithm problem and bifurcation lemma. The performance and efficiency analysis show that the scheme is effective, it can ensure the integrity and authenticity of communication data, reduce bandwidth and storage overhead, and improve the verification efficiency.

Key words: aggregate signature, coalition attacks, certificateless cryptosystem, vehicular ad-hoc networks

中图分类号:

TP309

顾妍妍, 沈丽敏, 高晨旭, 朱婷. 车载网中高效安全的无证书聚合签名方案[J]. 信息网络安全, 2024, 24(2): 188-202.

GU Yanyan, SHEN Limin, GAO Chenxu, ZHU Ting. Efficient and Secure Certificateless Aggregate Signature Scheme in Vehicle Networks[J]. Netinfo Security, 2024, 24(2): 188-202.

图/表 8

图1

图2

表1

表2

表3

表4

图3

图4

参考文献 37

[1]	DONG Jing, CURTMOLA R, SETHI R, et al. Toward Secure Network Coding in Wireless Networks: Threats and Challenges[C]// IEEE. Proceedings of the 4th Workshop on Secure Network Protocols 2008. New York: IEEE, 2008: 33-38.
[2]	HU Xiaoming, TAN Wenan, YAN Jihong, et al. Security and Improvement of Aggregate Signature Scheme for Underwater Wireless Sensor Networks and Certificateless Aggregate Signature Scheme for Vehicular Ad Hoc Networks[C]// IEEE. Proceedings of the 5th International Conference on Mechanical, Control and Computer Engineering 2020. New York: IEEE, 2020: 574-577.
[3]	KAMIL I A, OGUNDOYIN S O. On the Security of Privacy-Preserving Authentication Scheme with Full Aggregation in Vehicular Ad Hoc Network[J]. Security and Privacy, 2020, 3(1): 1-20.
[4]	KUMAR P, SHARMA V. On the Security of Certificateless Aggregate Signature Scheme in Vehicular Ad Hoc Networks[C]//Springer. Proceedings of the Soft Computing:Theories and Applications 2016. Heidelberg: Springer, 2018: 715-722.
[5]	THUMBUR G, RAO G S, REDDY P V, et al. Efficient and Secure Certificateless Aggregate Signature-Based Authentication Scheme for Vehicular Ad Hoc Networks[J]. IEEE Internet of Things Journal, 2020, 8(3): 1908-1920. doi: 10.1109/JIoT.6488907 URL
[6]	ZHANG Lei, WU Qianhong, DOMINGO-FERRER J, et al. Distributed Aggregate Privacy-Preserving Authentication in VANETs[J]. IEEE Transactions on Intelligent Transportation Systems, 2016, 18(3): 516-526. doi: 10.1109/TITS.2016.2579162 URL
[7]	CUI Jie, ZHANG Jing, ZHONG Hong, et al. An Efficient Certificateless Aggregate Signature without Pairings for Vehicular Ad Hoc Networks[J]. Information Sciences, 2018, 451: 1-15.
[8]	XU Guangquan, ZHOU Wenjuan, SANGAIAH A K, et al. A Security-Enhanced Certificateless Aggregate Signature Authentication Protocol for InVANETs[J]. IEEE Network, 2020, 34(2): 22-29.
[9]	ZHANG Wenfang, LEI Liting, WANG Xiaomin, et al. Secure and Efficient Authentication and Key Agreement Protocol Using Certificateless Aggregate Signature for Cloud Service Oriented VANET[J]. ACTA ELECTONICA SINICA, 2020, 48(9): 1814-1823.
	张文芳, 雷丽婷, 王小敏, 等. 面向云服务的安全高效无证书聚合签名车联网认证密钥协商协议[J]. 电子学报, 2020, 48(9): 1814-1823. doi: 10.3969/j.issn.0372-2112.2020.09.020
[10]	SHAMIR A. Identity-Based Cryptosystems and Signature Schemes[C]//Springer. Advances in Cryptology:Proceedings of the Cryptology 1984. Heidelberg: Springer, 1985: 47-53.
[11]	WATERS B. Efficient Identity-Based Encryption without Random Oracles[C]// Springer. Proceedings of the Eurocypto 2005. Heidelberg: Springer, 2005: 114-127.
[12]	BONEH D, CANETTI R, HALEVI S, et al. Chosen-Ciphertext Security from Identity-Based Encryption[J]. Siam Journal on Computing, 2011, 36(5): 1301-1328. doi: 10.1137/S009753970544713X URL
[13]	YANG Zhihao, DUONG D H, SUSILO W, et al. An Efficient Post-Quantum Identity-Based Signature[J]. Chinese Journal of Electronics, 2021, 30(2): 238-248. doi: 10.1049/cje2.v30.2 URL
[14]	XIE Congge, WENG Jian, ZHOU Dehua. Revocable Identity-Based Fully Homomorphic Signature Scheme with Signing Key Exposure Resistance[J]. Information Sciences, 2022, 594: 249-263. doi: 10.1016/j.ins.2022.02.027 URL
[15]	HERRANZ J. Deterministic Identity-Based Signatures for Partial Aggregation[J]. The Computer Journal, 2006, 49(3): 322-330. doi: 10.1093/comjnl/bxh153 URL
[16]	AL-RIYAMI S S, PATERSON K G. Certificateless Public Key Cryptography[C]// Springer. International Conference on the Theory and Application of Cryptology and Information Security. Heidelberg: Springer, 2003: 452-473.
[17]	HUANG Xinyi, SUSILO W, MU Yi, et al. On the Security of Certificateless Signature Schemes from Asiacrypt 2003[C]// Springer. Proceedings of the 4th International Conference, Cryptology and Network Security 2005. Heidelberg: Springer, 2005: 13-25.
[18]	HE Debiao, CHEN Jianhua, ZHANG Rui. An Efficient and Provably-Secure Certificateless Signature Scheme without Bilinear Pairings[J]. International Journal of Communication Systems, 2012, 25(11): 1432-1442. doi: 10.1002/dac.v25.11 URL
[19]	TIAN Miaomiao, HUANG Liusheng. Cryptanalysis of a Certificateless Signature Scheme without Pairings[J]. International Journal of Communication Systems, 2013, 26(11): 1375-1381. doi: 10.1002/dac.v26.11 URL
[20]	YAP W S, HENG S H, GOI B M. An Efficient Certificateless Signature Scheme[C]// Springer. Proceedings of the Emerging Directions in Embedded and Ubiquitous Computing 2006. Heidelberg: Springer, 2006: 322-331.
[21]	BONEH D, GENTRY C, LYNN B, et al. Aggregate and Verifiably Encrypted Signatures from Bilinear Maps[C]// Springer. Proceedings of the 22nd International Conference on Theory and Applications of Cryptographic Techniques 2003. Heidelberg: Springer, 2003: 416-432.
[22]	GONG Zheng, LONG Yu, HONG Xuan, et al. Two Certificateless Aggregate Signatures Frombilinear Maps[C]// IEEE. Proceedings of the 8th ACIS International Conference 2007. New York: IEEE, 2007: 188-193.
[23]	ZHANG Yinghui, DENG R, ZHENG Dong, et al. Efficient and Robust Certificateless Signature for Data Crowdsensing in Cloud-Assisted Industrial IoT[J]. IEEE Transactions on Industrial Informatics, 2019, 15(9): 5099-5108. doi: 10.1109/TII.9424 URL
[24]	YANG Wenjie, WANG Shangpeng, HUANG Xinyi, et al. On the Security of an Efficient and Robust Certificateless Signature Scheme for IIoT Environments[J]. IEEE Access, 2019, 7: 91074-91079. doi: 10.1109/ACCESS.2019.2927597
[25]	XIANG Dengmei, LI Xuelian, GAO Juntao, et al. A Secure and Efficient Certificateless Signature Scheme for Internet of Things[J]. Ad Hoc Networks, 2022, 124(5): 102702. doi: 10.1016/j.adhoc.2021.102702 URL
[26]	WANG Weizheng, XU Hao, ALAZAB M, et al. Blockchain-Based Reliable and Efficient Certificateless Signature for IIoT Devices[J]. IEEE Transactions on Industrial Informatics, 2021, 18(10): 7059-7067. doi: 10.1109/TII.2021.3084753 URL
[27]	JIA Xiaoying, HE Debiao, LIU Qin, et al. An Efficient Provably-Secure Certificateless Signature Scheme for Internet-of-Things Deployment[J]. Ad Hoc Networks, 2018, 71: 78-87. doi: 10.1016/j.adhoc.2018.01.001 URL
[28]	KARATI A, ISLAM S K H, BISWAS G P. A Pairing-Free and Provably Secure Certificateless Signature Scheme[J]. Information Sciences, 2018, 450: 378-391. doi: 10.1016/j.ins.2018.03.053 URL
[29]	THUMBUR G, RAO G S, REDDY P V, et al. Efficient Pairing-Free Certificateless Signature Scheme for Secure Communication in Resource-Constrained Devices[J]. IEEE Communications Letters, 2020, 24(8): 1641-1645. doi: 10.1109/COML.4234 URL
[30]	ZHANG Lei, ZHANG Futai. A New Certificateless Aggregate Signature Schemes[J]. Computer Communications, 2009, 32(6): 1079-1085. doi: 10.1016/j.comcom.2008.12.042 URL
[31]	XIONG Hu, GUAN Zhi, CHEN Zhong, et al. An Efficient Certificateless Aggregate Signature with Constant Pairing Computations[J]. Information Sciences, 2013, 219: 225-235. doi: 10.1016/j.ins.2012.07.004 URL
[32]	HE Debiao, TIAN Miaomiao, CHEN Jianhua. Insecurity of an Efficient Certificateless Aggregate Signature with Constant Pairing Computations[J]. Information Sciences, 2014, 268: 458-462. doi: 10.1016/j.ins.2013.09.032 URL
[33]	LIU Jinhui, WANG Lianhai, YU Yong. Improved Security of a Pairing-Free Certificateless Aggregate Signature in Healthcare Wireless Medical Sensor Networks[J]. IEEE Internet of Things Journal, 2020, 7(6): 5256-5266. doi: 10.1109/JIoT.6488907 URL
[34]	ZHAO Yanan, HOU Yingzhe, WANG Lili, et al. An Efficient Certificateless Aggregate Signature Scheme for the Internet of Vehicles[J]. Transactions on Emerging Telecommunications Technologies, 2020, 31(5): 1-20.
[35]	ZHANG Futai, SHEN Limin, WU Ge. Notes on the Security of Certificateless Aggregate Signature Schemes[J]. Information Sciences, 2014, 287: 32-37. doi: 10.1016/j.ins.2014.07.019 URL
[36]	SHEN Limin, MA Jianfeng, LIU Ximeng, et al. A Provably Secure Aggregate Signature Scheme for Healthcare Wireless Sensor Networks[J]. Journal of Medical Systems, 2016, 40: 1-10. doi: 10.1007/s10916-015-0365-5 URL
[37]	WU Ge, ZHANG Futai, SHEN Limin, et al. Certificateless Aggregate Signature Scheme Secure against Fully Chosen-Key Attacks[J]. Information Sciences, 2020, 514: 288-301. doi: 10.1016/j.ins.2019.11.037 URL

符号	定义
$\left\|m\right\|$	消息$\{{m}_{1},{m}_{2},\cdots,{m}_{l}\}$的总长度
${T}_{M}$	$G$中标量乘法的计算开销
${T}_{E}$	$G$中指数计算的计算开销
${T}_{P}$	$G$中配对操作的计算开销
${T}_{H}$	映射到点的计算开销

方案	签名大小	聚合开销
单个签名	$n\left(\right\|G\|+{Z}_{q})$	—
文献[37]方案	$(n+1)\left\|G\right\|+{Z}_{q}$	$n{T}_{M}$
本文方案	$n\left\|G\right\|+{Z}_{q}$	$n{T}_{M}$

方案	签名验证开销
单个签名	$4n{T}_{M}$
文献[37]方案	$2n{T}_{M}+(2n+3){T}_{P}$
本文方案	$(4n+2){T}_{M}$

软硬件	规格
CPU	AMD Ryzen 5 3600 6-Core Processor 3.60 GHz
操作系统	64-bit Windows 10 专业版
库	JPBC Library
RAM	8.00 GB