| 引用本文: | 毕昌兵,田有亮,李沓.5G车联网中基于区块链的半分布式消息认证加密方案.软件学报,2026,37(2):934-952 |
| |
|
| |
|
|
| 本文已被：浏览 900次 下载 2059次 |
码上扫一扫！ |
|
|
| 5G车联网中基于区块链的半分布式消息认证加密方案 |
|
毕昌兵1,2,3,4, 田有亮1,2,3,4, 李沓1,2,3,4
|
|
1.公共大数据国家重点实验室(贵州大学), 贵州 贵阳 550025;2.贵州大学 计算机科学与技术学院, 贵州 贵阳 550025;3.贵州大学 密码学与数据安全研究所, 贵州 贵阳 550025;4.贵州省密码学与区块链技术特色重点实验室, 贵州 贵阳 550025
|
|
| 摘要: |
| 5G车联网通过将5G技术应用于车联网来实现高速的信息传输. 然而, 随着车辆数量的急剧增长, 采用传统单一第三方生成密钥容易引发单点故障问题, 同时无线通信会面临消息被拦截、篡改以及大量不可信的虚假消息干扰网络等风险. 为应对这些问题, 提出一种基于区块链的半分布式消息认证加密方案. 首先, 设计基于联盟区块链的半分布式密钥生成与分布式信息共享框架, 通过5G基站提供全覆盖的网络, 并由各区域的车辆管理中心充当联盟链的全节点来维护区块链的正常运行, 而车辆作为轻节点加入区块链, 仅可查看区块链上存储的信息. 其次, 设计了无双线性运算的无证书签名算法, 确保消息来源可认证, 并使用反向哈希链生成信誉票证来加解密消息, 保证消息的机密性. 然后, 针对不可信的虚假消息问题, 为车辆设置信誉值, 传播虚假消息将导致其信誉值下降, 以此约束车辆行为, 进而从源头减少虚假消息数量. 最后, 安全性分析与实验结果表明, 所提方案能够保障通信安全, 并通过实现半分布式密钥获取有效缓解单点故障风险, 同时防止篡改、重放和假冒等攻击. 此外, 该方案的计算和通信开销较低, 满足车联网的时效性需求, 且执行信誉值更新合约的 Gas 成本较低, 进一步说明所提方案具备良好的实用性和可行性. |
| 关键词: 半分布式认证 无证书签名 区块链 智能合约 车联网 |
| DOI：10.13328/j.cnki.jos.007490 |
| 分类号:TP309 |
| 基金项目:国家重点研发计划(2021YFB3101100); 国家自然科学基金(62272123); 贵州省高层次创新型人才项目(黔科合平台人才[2020]6008); 贵州省科技计划(黔科合支撑[2022]一般065); 贵阳市科技计划(筑科合[2021]1-5, 筑科合[2022]2-4) |
|
| Blockchain-based Semi-distributed Message Authentication and Encryption Scheme in 5G Internet of Vehicles |
|
BI Chang-Bing1,2,3,4, TIAN You-Liang1,2,3,4, LI Ta1,2,3,4
|
|
1.State Key Laboratory of Public Big Data (Guizhou University), Guiyang 550025, China;2.College of Computer Science and Technology, Guizhou University, Guiyang 550025, China;3.Institute of Cryptography and Data Security, Guizhou University, Guiyang 550025, China;4.Guizhou Provincial Key Laboratory of Cryptography and Blockchain Technology, Guiyang 550025, China
|
| Abstract: |
| The 5G Internet of vehicles (IoV) enables high-speed data transmission by applying 5G technology to vehicular networks. However, with the rapid growth in the number of vehicles, traditional single third-party key generation can lead to single-point failures. In addition, wireless communication faces risks such as message interception, tampering, and network disruption due to a large number of untrustworthy false messages. To address these issues, this study proposes a blockchain-based semi-distributed message authentication and encryption scheme. First, a semi-distributed key generation and distributed information-sharing framework based on a consortium blockchain is designed. The 5G base stations provide full network coverage, while regional vehicle management centers act as full nodes to maintain the blockchain’s proper operation, and vehicles, as lightweight nodes, can only view the information stored on the blockchain. Second, to ensure message source authentication and confidentiality, a certificateless signature algorithm without bilinear pairing is designed, and an inverse hash chain is employed to generate reputation tokens for message encryption and decryption. To address the problem of untrustworthy false messages, a reputation-based system is introduced, where disseminating false messages leads to a decline in the vehicle’s reputation value. This mechanism helps to constrain vehicle behavior and reduces the number of false messages at the source. Finally, security analysis and experimental results demonstrate that the proposed scheme ensures communication security, effectively mitigates single-point failure risks through semi-distributed key acquisition, and prevents tampering, replay, and impersonation attacks. Moreover, the proposed scheme incurs low computational and communication overhead, meets the real-time requirements of IoV, and incurs low Gas costs for executing reputation update contracts, further demonstrating the practicality and feasibility of the proposed scheme. |
| Key words: semi-distributed authentication certificateless signature blockchain smart contract Internet of vehicles (IoV) |
|
|
|
|
