Zhikang Zeng;Chunming Tang;Quan Zhou;Zhiquan Liu;Zhihong Deng;Debiao He
{"title":"EFSC: Efficient and Forward-Secure Conditional Privacy-Preserving Scheme for Internet of Vehicles","authors":"Zhikang Zeng;Chunming Tang;Quan Zhou;Zhiquan Liu;Zhihong Deng;Debiao He","doi":"10.1109/JIOT.2024.3499373","DOIUrl":null,"url":null,"abstract":"The interconnected environment of the Internet of Vehicles (IoV) facilitates the development of various low-carbon and secure location-based services. However, sharing data with semi-trusted service providers poses serious security risks. In particular, it can threaten the confidentiality of past messages after the leakage of the user’s key. In this article, we propose an efficient and forward-secure conditional privacy-preserving scheme for IoV, namely, EFSC. We construct a cryptographic method with forward secrecy in the proposed EFSC scheme, which ensures the confidentiality of past messages even after the user’s secret key has been compromised. This method incorporates key derivation functionality and efficiently addresses the complex certificate management issue with the assistance of smart contracts. Additionally, the designed smart contract facilitates authentication. We analyze and prove that the proposed EFSC scheme satisfies the proposed privacy and security requirements with better security performance. We use Goerli, an Ethernet test network, to deploy customized smart contracts to prove its feasibility. Furthermore, the proposed EFSC scheme exhibits high-index generation and pairing efficiency and realizes less computational and communication overhead. Compared with the existing schemes, its computational overhead in message signing, signature verification, and user revocation can be reduced by up to 95.61%, 36.53%, and 67.01%, respectively. Moreover, the communication overhead for initiating a location service query is only 0.3760 kB. These results show that the proposed EFSC scheme has certain advantages regarding efficiency and security.","PeriodicalId":54347,"journal":{"name":"IEEE Internet of Things Journal","volume":"12 7","pages":"8406-8420"},"PeriodicalIF":8.9000,"publicationDate":"2024-11-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Internet of Things Journal","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/10753493/","RegionNum":1,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0
Abstract
The interconnected environment of the Internet of Vehicles (IoV) facilitates the development of various low-carbon and secure location-based services. However, sharing data with semi-trusted service providers poses serious security risks. In particular, it can threaten the confidentiality of past messages after the leakage of the user’s key. In this article, we propose an efficient and forward-secure conditional privacy-preserving scheme for IoV, namely, EFSC. We construct a cryptographic method with forward secrecy in the proposed EFSC scheme, which ensures the confidentiality of past messages even after the user’s secret key has been compromised. This method incorporates key derivation functionality and efficiently addresses the complex certificate management issue with the assistance of smart contracts. Additionally, the designed smart contract facilitates authentication. We analyze and prove that the proposed EFSC scheme satisfies the proposed privacy and security requirements with better security performance. We use Goerli, an Ethernet test network, to deploy customized smart contracts to prove its feasibility. Furthermore, the proposed EFSC scheme exhibits high-index generation and pairing efficiency and realizes less computational and communication overhead. Compared with the existing schemes, its computational overhead in message signing, signature verification, and user revocation can be reduced by up to 95.61%, 36.53%, and 67.01%, respectively. Moreover, the communication overhead for initiating a location service query is only 0.3760 kB. These results show that the proposed EFSC scheme has certain advantages regarding efficiency and security.
期刊介绍:
The EEE Internet of Things (IoT) Journal publishes articles and review articles covering various aspects of IoT, including IoT system architecture, IoT enabling technologies, IoT communication and networking protocols such as network coding, and IoT services and applications. Topics encompass IoT's impacts on sensor technologies, big data management, and future internet design for applications like smart cities and smart homes. Fields of interest include IoT architecture such as things-centric, data-centric, service-oriented IoT architecture; IoT enabling technologies and systematic integration such as sensor technologies, big sensor data management, and future Internet design for IoT; IoT services, applications, and test-beds such as IoT service middleware, IoT application programming interface (API), IoT application design, and IoT trials/experiments; IoT standardization activities and technology development in different standard development organizations (SDO) such as IEEE, IETF, ITU, 3GPP, ETSI, etc.