基于区块链和智能合约的双链车联网系统

doi:10.3969/j.issn.1671-1122.2022.08.004

摘要/Abstract

摘要：

近年来由于智能汽车数量的指数级递增产生了海量数据,传统的车联网交互模式在数据保护、密钥管理、数据存储、并发性能和响应速度方面都存在不足。文章提出双链车联网系统,基于智能合约改进中心化的身份认证和数据存储方式,在提升性能的同时防止恶意攻击导致的单点失效、伪造身份、篡改数据、泄露隐私等问题。首先,双链车联网系统通过国密SM2算法为车辆自动生成、更新和撤销密钥对,实现对等节点的双向认证;然后,将敏感数据加密存储到分布式文件系统（Inter Planetary File System,IPFS）中,在数据查询场合通过区块检索算法实现关键字匹配搜索。仿真结果表明,文章提出的系统具有良好的安全性,能够满足高速车辆数据传输的实时性和稳定性,具备更好的实用性和先进性。

关键词: 信息安全, 车联网, 区块链, 智能合约

Abstract:

In recent years, the exponential increase in the number of smart cars has generated massive amounts of data, and the traditional Internet of Vehicles(IoV) interaction model is inadequate in terms of data protection, key management, data storage, concurrency performance and response speed. This paper proposes a dual-chain IoV system, based on smart contracts to improve the centralized authentication and data storage methods, which improves performance while preventing single point of failure, identity forgery, data tampering, and privacy leakage caused by malicious attacks. The dual-chain IoV system automatically generates, updates and revokes key pairs for vehicles through the Chinese SM2 algorithm to achieve two-way authentication of peer nodes, after which sensitive data are stored encrypted in the distributed file system IPFS, and keyword matching search is achieved by block retrieval algorithm in data query occasions. Simulation experiments show that the system proposed in this paper has good security and performance, can meet the real-time and stability of high-speed vehicle data transmission,.and has better practicability and advancement.

Key words: information security, internet of Vehicles, blockchain, smart contracts

中图分类号:

TP309

胡艺, 佘堃. 基于区块链和智能合约的双链车联网系统[J]. 信息网络安全, 2022, 22(8): 26-35.

HU Yi, SHE Kun. Blockchain and Smart Contract Based Dual-Chain Internet of Vehicles System[J]. Netinfo Security, 2022, 22(8): 26-35.

图/表 19

图1

表1

图2

图3

图4

表2

图5

表3

表4

图6

图7

图8

图9

表5

图10

图11

图12

表6

表7

参考文献 15

[1]	LIU Yang, WANG Shuo, GAO Hongwei. Overview of Global V2X Technology Progress-A review of the 5th SIP-Adus Conference(SIP-adus Workshop 2018) on Telematics[J]. Automotive Digest, 2019(3): 20-23.
	刘阳, 王硕, 高洪伟. 全球V2X技术进展概述—第5届SIP-Adus大会 (SIP-Adus Workshop 2018)车联网综述[J]. 汽车文摘, 2019(3): 20-23.
[2]	WANG Xuejin, LIU Jing, AN Xiaojiang. A Review of Information Security Research in Vehicle Networking[J]. Transportation Technology and Management, 2021(2): 123-126.
	王学进, 柳晶, 安晓江. 车联网信息安全研究综述[J]. 交通科技与管理, 2021(2): 123-126.
[3]	ZHANG Haibo, CHENG Yan, LIU Kaijian, et al. Mobility Management Strategies for Integrating Mobile Edge Computing and Content Delivery Networks in Vehicular Networking[J]. Journal of Electronics and Information, 2020, 42(6): 1444-1451.
	张海波, 程妍, 刘开健, 等. 车联网中整合移动边缘计算与内容分发网络的移动性管理策略[J]. 电子与信息学报, 2020, 42(6): 1444-1451.
[4]	FEANC O, CICIRELL I, ANTONI O, et al. Edge Computing and Social Internet of Things for Large-Scale Smart Environments Development[J]. IEEE Internet of Things Journal, 2017, 5(4): 2557-2571. doi: 10.1109/JIOT.2017.2775739 URL
[5]	NAKAMOTO S. Bitcoin: A Peer-to-Peer Electronic Cash System[EB/OL]. (2008-11-1)[2022-02-17]. https://bitcoin.org/bitcoin.pdf.
[6]	KANO Y, NAKAJIMA T. A Novel Approach to Solve a Mining Work Centralization Problem in Blockchain Technologies[J]. International Journal of Pervasive Computing and Communications, 2018, 14(1): 15-32. doi: 10.1108/IJPCC-D-18-00005 URL
[7]	TUSHAR W, SAHA T K, YUEN C, et al. Peer-to-Peer Trading in Electricity Networks: An Overview[J]. IEEE Transactions on Smart Grid, 2020, 11(4): 3185-3200. doi: 10.1109/TSG.2020.2969657 URL
[8]	CHRISTIDIS K, DEVETSIKIOTIS M. Blockchains and Smart Contracts for the Internet of Things[J]. IEEE Access, 2016(4): 2292-2303.
[9]	ALI O, JARADAT A, KULAKLI A, et al. A Comparative Study: Blockchain Technology Utilization Benefits, Challenges and Functionalities[J]. IEEE, 2021(9): 12730-12749.
[10]	YANG Qing, WANG Hao. Privacy-Preserving Transactive Energy Management for IoT-Aided Smart Homes via Blockchain[J]. IEEE Internet of Things Journal, 2021, 8(14): 1-13.
[11]	ZHANG Xiaohong, CHEN Xiaofeng. Data Security Sharing and Storage Based on a Consortium Blockchain in a Vehicular Ad-Hoc Network[J]. IEEE, 2019, 7: 58241-58254.
[12]	KOUICEM D E, BOUABDALLAH A, LAKHLEF H. An Efficient and Anonymous Blockchain-Based Data Sharing Scheme for Vehicular Networks[C]// IEEE. 2020 IEEE Symposium on Computers and Communications(ISCC). New York: IEEE, 2020: 1-6.
[13]	STD I. IEEE Trial-Use Standard for Wireless Access in Vehicular Environments(WAVE)- Multi-Channel Operation[J]. IEEE, 2006(1): 71-82.
[14]	SALEM A H, ABDEL H A, ELNASR M A. The Case for Dynamic Key Distribution for PKI-Based VANETs[J]. International Journal of Communication Networks and Distributed Systems, 2014, 6(1): 61-78.
[15]	HENG C, TAN N, MAOD E, et al. A Secure and Authenticated Key Management Protocol(SA-KMP) for Vehicular Networks[J]. IEEE Transactions on Vehicular Technology, 2016, 65(12): 9570-9584. doi: 10.1109/TVT.2016.2621354 URL

变量和方法名	含义
RPK	RSU的公钥
VPK	车辆的公钥
M	包含驾驶员的身份信息、车辆信息和VPK
S	包含设备信息、访问权限信息

变量和方法名	含义
X_init	初始化参数集
p	有限素数域的大小
F_p	椭圆曲线的有限素数域
a和b	确定椭圆曲线基点的参数
G(F_p)	素数域F_p对大素数q取模确定的椭圆曲线
n	子群的阶
h	子群的辅助因子
VSK	车辆的私钥
VT	身份凭证过期时间戳
SM2Generator	SM2密钥生成方法
updateSecrets	身份凭证更新方法

变量和方法名	含义
F	车辆行驶过程中产生的存量数据
S	包含设备信息、访问权限信息
List<File>	经过预处理后的待上传文件列表
keyset	每条数据对应的数据类型,用于加快检索速度
accessSet	每条数据的权限映射集
RID	每台RSU的独有标识
keyWords	包含查询关键字的集合,用于和keySet匹配检索

字段	类型	含义
VID	uint	标识车载端的唯一ID
role	uint	上传者的身份标识
keyset	mapping	数据的关键词集
accessSet	mapping	访问权限控制集

存储开销方案	车载端/MB	RSU端身份认证链/MB
文献^[13]方案	1.2	132
文献^[14]方案	-	33
文献^[15]方案	3.7	97
本文方案	0.1	166