US20230308288A1
2023-09-28
18/150,345
2023-01-05
US 11,792,018 B1
2023-10-17
-
-
Ghodrat Jamshidi
Kaplan Breyer Schwarz, LLP | Stuart H. Mayer
2043-01-05
Disclosed is a method for constructing an emergency reporting system of vehicle networking based on multi-signatures, which comprises the following steps: initializing an emergency reporting system to obtain a public-private key pair and pre-calculation parameters of a vehicle set; obtaining authentication information of the emergency based on the public-private key pair and the pre-calculation parameters; integrating the authentication information to obtain multi-signatures of the emergency; and completing the system construction by regulating a traffic state based on the multi-signatures. The method realizes the efficient signature generation function of the vehicle with limited computing resources, reduces the communication pressure and computing pressure of roadside units, and may effectively prevent the common rogue key attacks in other schemes.
Get notified when new applications in this technology area are published.
H04L9/3247 » CPC main
arrangements for secret or secure communications Cryptographic mechanisms or cryptographic ; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
H04L9/3073 » CPC further
arrangements for secret or secure communications Cryptographic mechanisms or cryptographic ; Network security protocols; Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy involving algebraic varieties, e.g. elliptic or hyper-elliptic curves involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing
H04L9/3242 » CPC further
arrangements for secret or secure communications Cryptographic mechanisms or cryptographic ; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
H04L9/30 IPC
arrangements for secret or secure communications Cryptographic mechanisms or cryptographic ; Network security protocols Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
H04L9/32 IPC
arrangements for secret or secure communications Cryptographic mechanisms or cryptographic ; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
H04W4/44 » CPC further
Services specially adapted for wireless communication networks; Facilities therefor; Services specially adapted for particular environments, situations or purposes for vehicles, e.g. vehicle-to-pedestrians [V2P] for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]
H04W4/90 » CPC further
Services specially adapted for wireless communication networks; Facilities therefor Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]
H04L9/40 IPC
arrangements for secret or secure communications Cryptographic mechanisms or cryptographic ; Network security protocols Network security protocols
This application claims priority to Chinese Patent Application No. 202210290875.4, filed on Mar. 23, 2022, the contents of which are hereby incorporated by reference.
The application relates to the technical field of cyberspace security, and in particular to a method for constructing an emergency reporting system of vehicle networking based on multi-signatures.
VANET is a dynamic network based on the availability of vehicles and infrastructure along the road. Through wireless communication of VANET, vehicles may share different kinds of information. When a vehicle witnesses an emergency (such as a traffic accident), the vehicle may send the message and its own signature to the roadside unit through VANET network. After receiving the message and verifying the validity of the signature, the roadside unit broadcasts the message to the vehicles within its communication range, thus achieving the purpose of avoiding secondary accidents. However, the dynamic characteristics of VANET also bring many problems that traditional networks do not have, such as the broadcast storm caused by too many vehicles sending the same emergency message to the roadside unit and the waste of computing resources caused by the slow signature generation of vehicles.
Multi-signatures technology is a popular technology nowadays, which allows a group of signers to generate a common signature on the same message. This signature may be verified by the public key of this group of signers, which means that all the signers in this group approve the message. The length of multi-signatures has nothing to do with the number of signatures, and is always consistent with the length of a single signature, which greatly reduces the information transmission and communication pressure. Since the concept of multi-signatures was put forward, the design of multi-signatures schemes has been fully studied, and the security of these schemes may be restricted to large integer decomposition problem, discrete logarithm problem and lattice difficulty problem.
In order to solve the problems of broadcast storm caused by traditional methods in the prior art and the waste of computing resources caused by slow signature generation at the vehicle end, the present application provides a method for constructing an emergency reporting system of vehicle networking based on multi-signatures. By combining multi-signatures algorithm with sub-exponent algorithm, the communication pressure and computing pressure of roadside units are reduced, and the common rogue key attack in multi-signatures is avoided.
In order to achieve the above technical purpose, the present application provides a method for constructing an emergency reporting system of vehicle networking based on multi-signatures, which includes:
Optionally, the obtaining process of the public-private key pair includes:
Optionally, the obtaining process of the pre-calculation parameters includes:
Optionally, the emergency authentication process includes:
Optionally, the obtaining process of the multi-signatures includes:
Optionally, the formula of the signature is as follows: riβ²=(miβmβ²)*ski*ci+ri,
Optionally, the formula of the aggregation operation is as follows: R=Ξ£i=1n riβ²,
Y=Ξ i=1nyi (i=1, . . . ,n),
where, R are multi-signatures, n is the number of vehicles willing to participate in emergency authentication, riβ² is the signature of the vehicle numbered i, Y is the aggregation parameter, and yi is the parameter randomly selected by the vehicle numbered i.
Optionally, the calculation formula of the pre-calculation parameters is as follows: Si=gri; Mi=pkimi,
where, Si and Mi are pre-calculation parameter, g is a generator of G, and is a public security parameter shared by the whole system, G is a cyclic group of order l, where l is a prime number, M is an emergency, and pki is the public key of the vehicle numbered i.
Optionally, the calculation formula of the hash value is mβ²=h(M),
where, mβ² is the hash value, his any commonly used hash function and M is an emergency.
The application has the following technical effects.
By combining multi-signatures algorithm with sub-exponent algorithm, the problem of computing resource waste caused by broadcast storm and slow signature generation at vehicle end in traditional methods is improved, the communication pressure and computing pressure of roadside units are reduced, and the common rogue key attack in multi-signatures is avoided.
In order to more clearly explain the embodiments of the present application or the technical solutions in the prior art, the following will briefly introduce the drawing that need to be used in the embodiments. Obviously, the drawing in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawing may be obtained according to these drawing without any creative labor.
FIG. 1 is a flowchart of a method for constructing an emergency reporting system according to an embodiment of the present application.
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawing in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, but not all of them. Based on the embodiment of the present application, all other embodiments obtained by ordinary technicians in the field without creative labor are within the scope of the present application.
As shown in FIG. 1, the application discloses a method for constructing an emergency reporting system of vehicle networking based on multi-signatures, which includes the following steps:
S1, initializing the emergency reporting system to obtain the public-private key pairs and pre-calculation parameters of the vehicle set, and the process is as follows:
S2, obtaining the authentication information of the emergency based on the public-private key pair and the pre-calculation parameters, and the process is as follows:
S3, integrating the authentication information to obtain multi-signatures of emergencys, and the process is as follows:
The signature riβ² of each vehicle participating in the emergency authentication, the secret parameter yi calculated before, the small exponent ci and the public key pki of each vehicle willing to participate in the emergency authentication are sent to the vehicle N for aggregation. After the vehicle N collects all the signatures of the vehicle willing to participate in the emergency authentication, the vehicle N performs aggregation operation, and the aggregation operation formula is as follows:
R = β i = 1 n β’ r i β² Y = β i = 1 n y i ( i = 1 , β¦ , n )
While waiting for the multi-signatures and aggregation parameters sent by the vehicle, the roadside unit calculates the sub-exponent by using the sub-exponent algorithm, and then calculates the aggregation public key: PK=Ξ i=1n pkici. After receiving the multi-signatures and aggregation parameters sent by the vehicle N, the roadside unit performs the multi-signatures verification operation, and the formula is as follows: gR*PKmβ²=Y,
S4, regulating the traffic state based on multi-signatures to complete the system construction;
The above shows and describes the basic principle, main features and advantages of the present application. It should be understood by those skilled in the art that the application is not limited by the above-mentioned embodiments. The above-mentioned embodiments and descriptions only illustrate the principles of the application. Without departing from the spirit and scope of the application, there will be various changes and improvements of the application, all of which fall within the scope of the claimed application. The scope of that application is define by the appended claim and their equivalents.
1. A method for constructing an emergency reporting system of vehicle networking based on multi-signatures, comprising the following steps:
S1, initializing the emergency reporting system to obtain a public-private key pair and pre-calculation parameters of a vehicle set; an obtaining process of the pre-calculation parameters is as follows: the vehicle set updates public safety parameters of the emergency reporting system, randomly selects the parameters, and pre-calculates the public safety parameters to obtain the pre-calculation parameters;
S2, obtaining authentication information of the emergency based on the public-private key pair and the pre-calculation parameters; the obtaining process of the authentication information of the emergency is as follows: reporting the emergency to a roadside unit; the roadside unit broadcasts the emergency and a hash value to the vehicle set; the hash value is used for indicating an authentication degree of the vehicle set to the emergency;
S3, integrating the authentication information to obtain the multi-signatures of the emergency; the obtaining process of the multi-signatures is as follows: sending a public key to the roadside unit, setting a public key set, broadcasting the emergency and the public key set and signing; performing an aggregation operation on the signatures to obtain multi-signatures and aggregation parameters, wherein the calculation formula of the multi-signatures is as follows:
R=Ξ£i=1nriβ²,
wherein n is a number of vehicles willing to participate in emergency authentication; riβ² is a signature of each vehicle participating in emergency authentication;
the formula for calculating the aggregation parameters is as follows:
Y=Ξ i=1nyi (i=1, . . . ,n),
wherein yi is a secret parameter obtained by the pre-calculation;
the roadside unit broadcasts the information of the vehicle and the public key set set by the roadside unit, and a sub-exponent is calculated by a sub-exponent algorithm after the vehicle willing to participate in the emergency authentication receives the broadcast message as follows: ci=h(L,pki), and then signing, and the signature formula is as follows: riβ²=(miβmβ²)*ski*ci+ri, wherein h is a common hash function, L is the public key set, pki is the public key of a vehicle numbered i, ri and mi are the parameter selected by the vehicle numbered i, mβ² is the hash value of the emergency, ski is the private key;
the roadside unit calculates the sub-exponent ci by using the sub-exponent algorithm while waiting for the vehicle to send the multi-signatures and the aggregation parameters, and then calculates an aggregation public key: PK=Ξ i=1n pkici; the roadside unit performs a multi-signatures verification operation after receiving the multi-signatures and the aggregation parameters sent by the vehicle, and the formula of the multi-signatures verification operation is as follows:
gR*PKmβ²=Y;
wherein R is the multi-signatures, Y is the aggregation parameters, and PK is the aggregation public key; and
S4, completing the system construction by regulating a traffic state based on the multi-signatures.
2. The method for constructing an emergency reporting system of vehicle networking based on multi-signatures according to claim 1, wherein the obtaining process of the public-private key pairs comprises:
the public-private key pair issued by a key management institution after registered in the key management institution, and the public-private key pair comprises the public key and the private key.
3. The method for constructing an emergency reporting system of vehicle networking based on multi-signatures according to claim 1, wherein
a calculation formula of the pre-calculation parameters is: Si=gri; Mi=pkimi;
wherein, Si and Mi are the pre-calculation parameters, g is a generator of G, and is a public security parameter shared by the whole system; G is a cyclic group of order l, wherein l is a prime number, ri, mi are parameters randomly selected by the vehicle numbered i, mβ² is a hash value of the emergency, M is the emergency, and pki is the public key of the vehicle numbered i.
4. The method for constructing an emergency reporting system of vehicle networking based on multi-signatures according to claim 1, wherein
a calculation formula of the hash value is mβ²=h(M);
wherein mβ² is the hash value, h is a commonly used hash function, and M is the emergency.