Towards Deploying a Scalable & Robust Vehicular Identity and Credential Management Infrastructure

Abstract

Several years of academic and industrial research efforts have converged to a common understanding on fundamental security building blocks for the upcoming Vehicular Communication (VC) systems. There is a growing consensus towards deploying a Vehicular Public-Key Infrastructure (VPKI) enables pseudonymous authentication, with standardization efforts in that direction. However, there are still significant technical issues that remain unresolved. Existing proposals for instantiating the VPKI either need additional detailed specifications or enhanced security and privacy features. Equally important, there is limited experimental work that establishes the VPKI efficiency and scalability. In this paper, we are concerned with exactly these issues. We leverage the common VPKI approach and contribute an enhanced system with precisely defined, novel features that improve its resilience and the user privacy protection. In particular, we depart from the common assumption that the VPKI entities are fully trusted and we improve user privacy in the face of an honest-but-curious security infrastructure. Moreover, we fully implement our VPKI, in a standard-compliant manner, and we perform an extensive evaluation. Along with stronger protection and richer functionality, our system achieves very significant performance improvement over prior systems - contributing the most advanced VPKI towards deployment.

8 pages, 13 figures, IEEE Vehicular Networking Conference (VNC). IEEE VNC, Dec. 2014, pp. 33-40

References in corpus (1)

• VeSPA: Vehicular Security and Privacy-preserving Architecture

Cited by in corpus (13)

• The Key to Intelligent Transportation: Identity and Credential Management in Vehicular Communication Systems
• Cooperative Location Privacy in Vehicular Networks: Why Simple Mix-zones are not Enough
• Scalable & Resilient Vehicle-Centric Certificate Revocation List Distribution in Vehicular Communication Systems
• Efficient, Scalable, and Resilient Vehicle-Centric Certificate Revocation List Distribution in VANETs
• Evaluating On-demand Pseudonym Acquisition Policies in Vehicular Communication Systems
• Context-based Pseudonym Changing Scheme for Vehicular Adhoc Networks
• Resilient Privacy Protection for Location-Based Services through Decentralization
• Scaling Pseudonymous Authentication for Large Mobile Systems
• DoS-resilient Cooperative Beacon Verification for Vehicular Communication Systems
• VPKIaaS: A Highly-Available and Dynamically-Scalable Vehicular Public-Key Infrastructure
• Proactive Certificate Validation for VANETs
• Resilient Collaborative Privacy for Location-Based Services
• Accountable, Scalable and DoS-resilient Secure Vehicular Communication