[1]王 冠,张倩倩.基于 SGX 的车联网身份认证方案研究[J].计算机技术与发展,2023,33(11):99-105.[doi:10. 3969 / j. issn. 1673-629X. 2023. 11. 015]
　WANG Guan,ZHANG Qian-qian.Research on Identity Authentication Scheme Based on SGX in Internet of Vehicles[J].,2023,33(11):99-105.[doi:10. 3969 / j. issn. 1673-629X. 2023. 11. 015]

点击复制

基于 SGX 的车联网身份认证方案研究()

分享到：

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:

33

期数:

2023年11期

页码:

99-105

栏目:

网络空间安全

出版日期:

2023-11-10

文章信息/Info

Title:

Research on Identity Authentication Scheme Based on SGX in Internet of Vehicles

文章编号:

1673-629X(2023)11-0099-07

作者:

王 冠¹; 2 ; 张倩倩¹; 2

1. 北京工业大学 信息学部,北京 100124;

2. 北京市可信计算重点实验室,北京 100124

Author(s):

WANG Guan1; 2 ; ZHANG Qian-qian1; 2

1. Faculty of Information Technology,Beijing University of Technology,Beijing 100124,China;

2. Beijing Key Laboratory of Trusted Computing,Beijing 100124,China

关键词:

车联网; 身份认证; SGX; 计算卸载; 安全

Keywords:

Internet of vehicles; identity authentication; SGX; computation offloading; security

分类号:

TP309

DOI:

10. 3969 / j. issn. 1673-629X. 2023. 11. 015

摘要:

车联网需要实时采集和处理交通数据,缓解交通拥堵,并保护用户的隐私数据,防止被攻击者窃取和操纵。 然而,目前大部分认证协议不能很好地抵抗来自内部的特权用户攻击,且没

有高效地利用路边基站单元( RSU) 。 针对上述问题,该文设计了基于 SGX 的车联网身份认证协议。 该协议将身份认证过程中主要的计算工作从 TA 卸载到 RSU 内完成,使 RSU?

不再只有简单的转发功能,实现了分布式计算。 通过 SGX 远程认证提供的安全通道将主密钥从 TA 传输到 RSU。并将身份认证过程中主密钥的使用过程转移到 SGX 的安全区内,

利用可信硬件来存储主密钥,同时用主密钥对 TA 中的车辆关系认证表进行加密。 在满足抵抗内部特权用户攻击的同时实现了计算工作的卸载。 实验结果表明,该协议的计算时间

减少了 23. 16% ,同时大大降低了 TA 的计算负载,在没有增加网络节点的情况下实现了去中心化的身份认证,具备较好的安全性和实时性。

Abstract:

IoV needs to collect and process traffic data in real time,alleviate traffic congestion,and protect users’ private data from beingstolen and manipulated by attackers. However,

most of the existing authentication protocols cannot resist the privileged user attack frominside,and do not make efficient use of roadside Base Station Unit ( RSU) . In view of?

the above problems,we design an identity authentication protocol based on SGX for IoV. The protocol offloads the main computing work in the process of identity authentication from TAto RSU,so that RSU no longer only has a simple forwarding function and realizes distributed computing. The master key is transferredfrom TA to RSU through the secure channel provided by SGX Remote attestation. The use of the master key in the process of identity authentication is transferred to the secure area of SGX,and the master key is stored by the trusted hardware. At the same time,the masterkey is used to encrypt the vehicle relationship authentication table in TA. The offloading of computing work is achieved while satisfyingthe resistance to internal privileged user attacks. The experimental results show that the computing time of the proposed protocol isreduced by 23. 16% , and the computational load of TA is greatly reduced. It realizes decentralized identity authentication withoutincreasing network nodes,and has good security and real-time performance.

常用功能