信息安全研究 ›› 2025, Vol. 11 ›› Issue (2): 139-.

• 学术论文 • 上一篇    下一篇

面向车联网的群组密钥管理机制

谢绒娜1黄锐1李宗俞2武佳卉1周竞1   

  1. 1(北京电子科技学院密码科学与技术系北京100070)
    2(北京电子科技学院网络空间安全系北京100070)
  • 出版日期:2025-02-20 发布日期:2025-02-20
  • 通讯作者: 谢绒娜 博士,教授.主要研究方向为密码理论与协议、数据安全与隐私保护、安全体系结构与系统安全. 486503266@qq.com
  • 作者简介:谢绒娜 博士,教授.主要研究方向为密码理论与协议、数据安全与隐私保护、安全体系结构与系统安全. 486503266@qq.com 黄锐 硕士.主要研究方向为密钥管理、密码协议. 1364046097@qq.com 李宗俞 硕士.主要研究方向为信息安全、密钥管理. 1277584641@qq.com 武佳卉 硕士.主要研究方向为信息安全、密钥协商. leomayday@163.com 周竞 硕士.主要研究方向为密钥管理、密钥协商. 1427980882@qq.com

Group Key Management Mechanism for Internet of Vehicles

Xie Rongna1, Huang Rui1, Li Zongyu2, Wu Jiahui1, and Zhou Jing1   

  1. 1(Department of Cryptologic Science and Technology, Beijing Electronic Science and Technology Institute, Beijing 100070)
    2(Department of Cyberspace Security, Beijing Electronic Science and Technology Institute, Beijing 100070)
  • Online:2025-02-20 Published:2025-02-20

摘要: 基于车联网的特点,提出一种基于树的轻量级群组密钥管理机制 (lightweight tree group key management mechanism, LTGKM),实现了车联网中组播和广播通信的安全性.LTGKM采用层次化方式进行群组密钥的生成、分发和更新;各个管理节点采用HMAC函数作为密钥导出函数生成对应群组密钥,并基于加密认证算法将群组密钥层层分发到叶子节点;密钥更新时新加入节点由父节点生成新的群组密钥并分发给新节点,其余节点自行更新群组密钥;用户离开时非叶子节点自行更新群组密钥,叶子节点由自己父节点分发新的群组密钥.安全性分析表明,LTGKM实现了群组密钥生成和更新的随机性、前向安全和后向安全、密钥分发的机密性、完整性和不可否认性.性能分析实验结果表明,LTGKM在存储、计算和通信开销等方面都具有明显优势.

关键词: 车联网, 群组密钥, 密钥树, 轻量级, 加密认证

Abstract: Based on the characteristics of the Internet of vehicles(IoV), a treebased lightweight group key management mechanism (Lightweight Tree Group Key Management Mechanism, LTGKM) is proposed to realize the security of multicast and broadcast communications in the IoV. LTGKM adopts a hierarchical approach to generate, distribute and update the group keys. The management node of various layers generates the corresponding group key using the HMAC function as the key derivation function, and distributes the group key to the child node based on the encrypted certification algorithm; When a new node joins, the parent node generates a new group key and distribute it to the new node, and the remaining nodes update the group key by themselves; when the user leaves, the nonleaf node updates the group key by themselves, and the new group key is distributed to the leaf node by its father node. Security analysis shows that LTGKM realizes the randomness, forward security, and backward security during the group key generation and update, and the confidentiality, integrity and uniformity during key distribution. Performance analysis shows that LTGKM has obvious advantages in storage, computing and communication.

Key words: Internet of vehicles, group key, key tree, lightweight, encryption authentication

中图分类号: