【作者】 张磊；

【导师】 仲红；

【作者基本信息】 安徽大学 ， 计算机技术， 2016， 硕士

【摘要】 理论研究与工业技术不断进步,在不远的将来车载自组织网络(VANET)必将应用到人们的现实生活场景中,为人类的生活带来翻天覆地的变化。通过大范围的部署和实施车载自组织网,可以有效的提高通行效率,为驾乘人员提供更好的驾乘体验,包括娱乐,安全,舒适等方面,能够减少交通事故的发生率,保障人们的生命安全,也避免不必要的经济损失。但车载自组织网络也面临着多样的威胁与攻击,例如拒绝服务攻击,广播干预等对消息可用性的威胁。伪装攻击、重放攻击和消息篡改、位置欺骗等对消息真实性的威胁。车载自组织网络因为其节点间频繁的进行消息交换,并且该交换过程都是在无线环境中进行的,因此其消息保密性的威胁极大。面对如此多样的威胁,必须要确保消息认证性和完整性,因为通信过程中“生死攸关的消息”不能被修改；消息保密性也十分重要,类似于访问控制,确保不同用户安全地获得其对应的消息；在尽全力保护用户隐私的同时还需要在当消息陷入争议时进行追溯,即实施有条件的隐私保护；实时高效性是必须得到保障的,确保系统功能有效发挥。相比于物联网,车载自组织网具有一些独特的网络特性。如特殊的通信环境、高速的拓扑变化结构、通信隐蔽性差、移动节点的规律性变化等特点。在通信过程中又要求通过共享消息来优化车辆交通系统,如果这样的通信环境不提供特殊保护机制,就无法有效的保护用户的隐私。所以,我们需要为车载自组织网络量身定做,设计适合于车载自组织网的安全认证与隐私保护的方案,来保护用户的安全与隐私。所以车载自组织网络中的安全认证与隐私保护的研究和实现具有十分重要的现实意义。本文针对车载自组织网络的实际研究和发展现状,在车载自组织网络的安全认证与隐私保护方面做了理论研究和实践探索,主要工作如下：1.整理总结了车载自组织络中存在的安全问题,以及系统需要实现的安全目标。系统地回顾和总结了已有安全认证与隐私保护的解决方法,并得出结论,整合利用现有方案可以获得更好的解决方案。2.本文在分析已有车载自组织网络安全认证与隐私保护方案的基础上提出了改进方案,一种车联网环境下基于身份的高效匿名批认证方案,用于解决车载自组织网络中的安全认证与隐私保护问题。并与已有方案进行了对比分析,进行了安全性证明以及效率分析与对比。3.本文基于车载自组织网络,开发出了一种基于IBV的车联网系统。该系统是车载自组织网络实际应用场景的一个具体实例,可用于车辆管理与通信。同时该系统还具备安全认证与隐私保护的特性,能够解决当下车联网应用系统中缺乏安全考虑的问题,有利于实际应用和推广更多还原

【Abstract】 With the progress of theoretical research and industrial technology, vehicle ad hoc networks (VANETs) will be applied to real-life scenario and bringing about huge changes in daily life in the near future. Through large-scale deployment and implementation of VANETs, it can effectively improve the traffic efficiency and provide a better driving experience including entertainment, safety and comfort for the driver. That also can reduce the incidence of traffic accidents, protect people’s safety while avoiding unnecessary economic losses. But VANETs face a variety of threats and attacks, such as denial of service attacks, broadcast intervention and other threat to message availability. Disguised attacks, replay attacks, message tampering and location cheating are constituting a threat to the message authenticity. In the VANETs, the frequent exchange of messages between the nodes and the process is carried out in a wireless environment, so it is a great threat to the message security. Faced with such a variety of threats, we must guarantee the message authentication and integrity, because the "vital message" in communication should not be modified. Message security is also important, similar to the access control, to ensure the different users to safely obtain the corresponding message. We can trace the sender of message when it has a controversy while protect the privacy of users, which namely conditional privacy protection. The real-time efficiency must be guaranteed to ensure system function.VANET has its own unique characteristics when compared with MANETs, such as high-speed change of topology, poor communication covert, regular changes of the mobile node and so on. In the communication process, system is requested to optimize vehicle transportation system by sharing the message. If such a communication environment does not provide special protection mechanism, the user’s privacy cannot be effectively protected. Therefore, we need to design a security authentication and privacy preserving scheme for VANETs to protect users’ security and privacy. Apparently, the research and implementation of security authentication and privacy protection for VANETs has a very important practical significance.In this thesis, we has done some theoretical study and practical exploration in terms of secure authentication and privacy preserve for VANETs, while consider of the actual research and development status of VANETs. The main works are as follows:1. We organized and summarized security problems that exist in VANETs and the system security objectives which need to be achieved. The existing solutions of security authentication and privacy preserve has been Systematic reviewed and summarized, depend on that we can integrate and using current methods to obtain a much better solution.2. We proposed an improved scheme on the basis of analyzing the existing security authentication and privacy preserve scheme for VANETs, named an efficient identity-based anonymous batch authentication scheme in VANETs, which used to solve the security verification and privacy preserve issues in VANETs. Moreover, we compared and analyzed our scheme with the existing schemes in terms of security prove and efficiency.3. This thesis developed an IBV-based vehicle networking system based on the VANETs. The system is a specific example of the practical scenarios of VANETs which can be used for vehicle management and communication. Meanwhile, the system also includes the characteristics of secure authentication and privacy protection. Moreover, the system can resolve issues that current VANETs systems lack of security in, which contribute to practical application and promotion of VANETs.更多还原