【作者】 李想；

【导师】 石琴； 张雷；

【作者基本信息】 合肥工业大学 ， 车辆工程（专业学位）， 2025， 硕士

【摘要】 随着车联网技术的快速更迭,车辆作为万物互联时代下的智能移动终端与数据枢纽,其面向用户增添了远程控车、无钥匙启动、车辆共享等功能。这些功能的实现离不开智能终端设备、车辆和云端服务器之间大量的信息交互,这个交互过程会面对开放且复杂的网络环境,通信主体会面临恶意攻击和隐私泄露的风险。数字钥匙系统作为车联网环境下进行身份认证与访问控制的核心组件,其安全性面临日益严峻的挑战。本文结合车联网数字钥匙场景,对高效的身份认证方案展开研究,完成的主要工作如下:首先,调研了当前车联网的主流认证方案,结果表明现有方案普遍采用非对称加密机制,存在较高的计算开销和通信开销,难以适配资源受限的数字钥匙场景。且随着量子计算技术的实用化突破,此类非对称密码体系存在破解风险。通过对数字钥匙系统车辆侧和终端设备侧架构的分析,发现主流方案仅支持单一终端认证,缺乏面向多设备并发场景的组认证协议。然后,提出了融合量子密钥的车联网数字钥匙认证方案,方案运用量子密钥、哈希函数、HMAC等多种安全技术,确保身份认证和密钥协商过程的安全高效。方案的组证明协议在保证匿名性的同时,可以满足多个设备同时认证的需求,使其能够广泛应用于车联网数字钥匙系统。最后,从安全性、可行性和效率性三个维度对方案进行验证。在安全性层面,采用自然语言分析方案的抵御攻击能力和隐私保障能力,采用ROR模型、Scyther软件和BAN逻辑对方案进行安全性证明。在可行性层面,针对数字钥匙系统的核心环节,设计了加密芯片和微控制器之间的交互协议,部署了系统的实际应用场景,通信的时延和丢包率证明了方案的可行性。在效率性层面,对数字钥匙系统进行台架实验测试,将本文方案与同类型方案进行对比,结果表明本方案在具备更全面安全性的同时,降低了10.7%的计算开销和17.3%通信开销。更多还原

【Abstract】 With the rapid evolution of Internet of Vehicles technology,vehicles,as smart mobile terminals and data hubs in the era of the Internet of Everything,have added functions such as remote vehicle control,keyless start,and vehicle sharing for users.The realization of these functions is inseparable from a large amount of information interaction between smart terminal devices,vehicles,and cloud servers.This interaction process will face an open and complex network environment,and the communication subject will face the risk of malicious attacks and privacy leakage.As the core component for identity authentication and access control in the Internet of Vehicles environment,the security of the digital key system faces increasingly severe challenges.This paper combines the Internet of Vehicles digital key scenario to study efficient identity authentication solutions,and the main work completed is as follows:First,the mainstream authentication schemes of the current Internet of Vehicles were investigated.The results showed that the existing schemes generally use asymmetric encryption mechanisms,which have high computing and communication overheads and are difficult to adapt to resource-constrained digital key scenarios.And with the breakthrough in the practical application of quantum computing technology,such asymmetric cryptographic systems are at risk of being cracked.Through the analysis of the vehicle-side and terminal device-side architectures of the digital key system,it was found that the mainstream schemes only support single terminal authentication and lack group authentication protocols for multi-device concurrent scenarios.Then,a digital key authentication scheme for Internet of Vehicles that integrates quantum keys is proposed.The scheme uses multiple security technologies such as quantum keys,hash functions,HMAC,etc.to ensure the security and efficiency of identity authentication and key negotiation processes.The group proof protocol of the scheme can meet the needs of simultaneous authentication of multiple devices while ensuring anonymity,making it widely used in Internet of Vehicles digital key systems.Finally,the scheme is verified from three dimensions:security,feasibility,and efficiency.At the security level,the natural language analysis scheme is used to resist attacks and protect privacy,and the ROR model,Scyther software,and BAN logic are used to prove the security of the scheme.At the feasibility level,for the core links of the digital key system,an interaction protocol between the encryption chip and the microcontroller is designed,and the actual application scenarios of the system are deployed.The communication delay and packet loss rate prove the feasibility of the scheme.At the efficiency level,the digital key system is bench-tested,and the scheme in this paper is compared with similar schemes.The results show that this scheme has more comprehensive security while reducing 10.7%of computing overhead and 17.3%of communication overhead.更多还原