In vehicular communications, in-vehicle devices' mobile and multihoming characteristics bring new requirements for devicevsecurity authentication. On the one hand, the existing network layer authentication methods rely on the PKI system; on the other hand, key negotiation needs interaction. These two points determine that the traditional security authentication method requires bandwidth consumption and additional delay. It is unsuitable for heterogeneous wireless scenarios with a high packet loss rate and limited bandwidth resources. In addition, the establishment of a security association state is contrary to the original design that the network layer only provides a forwarding function. We proposed a non-interactive multihoming security authentication (NIMSA) scheme, a stateless network layer security authentication scheme triggered by data forwarding. Our scheme adopts an identity-based non-interactive key agreement strategy to avoid the interaction of signaling information, which is lightweight and has good support for mobile and multipath parallel transmission scenarios. The comparison with IKEv2 and its mobility and multihoming extension scheme (MOBIKE) shows that the proposed scheme has shorter authentication and handover delay and data transmission delay and can bring better bandwidth aggregation effect in the scenario of multipath parallel transmission.
翻译:在车辆通信中,车辆装置的移动和多相位特性为设备安全认证带来了新的要求。一方面,现有的网络层认证方法依赖于公用钥匙基础结构系统;另一方面,关键的谈判需要互动。这两点确定传统的安全认证方法需要带宽消耗和额外延迟。这不适用于具有高包装损失率和有限带宽资源的多种无线情景。此外,建立一个安全协会国与最初设计相悖,即网络层只提供转发功能。我们提议了一个非交互式多相位安全认证方案,即由数据传输引发的无国籍网络层安全认证方案。我们的计划采用了基于身份的非互动关键协议战略,以避免信号信息的互动,这种信息是轻量的,对移动和多路平行传输情景有很好的支持。与IKEv2及其移动和多相位扩展计划(MOBIKE)的比较表明,拟议的计划具有较短的认证和移交延迟以及数据传输延迟,能够在多路平行传输设想中带来更好的带宽聚合效应。