Abstract: The Internet of vehicles (IoV) significantly enhances traffic safety and travel efficiency, however, its open network environment and structural features expose it to security threats such as identity forgery, privacy leakage, and malicious attacks. A key challenge is achieving efficient and secure authentication under resourceconstrained scenarios while ensuring controllable verification rights and preserving user privacy. This paper proposes a certificatebased designated verifier aggregate authentication scheme, which enables efficient vehicletovehicle authentication and addresses both verifier authorization control and privacy risks in IoV communications by incorporating designated verifier signatures with conditional privacypreserving mechanisms. Formal security proofs demonstrat that the scheme is reducible to the CDH (computational DiffieHellman) problem in the random oracle model and achieves existential unforgeability under adaptive chosenmessage attacks. Experimental evaluation confirms its efficiency and practicality, making it suitable for resourceconstrained IoV environments.

Key words: designated verifier signature, identity authentication, aggregate signature, certificatebased cryptography, Internet of vehicles

摘要： 车联网显著提高了交通安全性与出行效率，但是开放的网络环境与结构特点使其面临身份伪造、隐私泄露、恶意攻击等安全威胁.如何在资源受限的场景下实现高效安全的身份认证，同时兼顾验证权限可控和用户隐私保护，成为车联网安全领域亟待解决的关键问题.提出一种基于证书的指定验证者聚合认证方案，在实现车辆之间的高效身份认证的同时，通过引入指定验证者签名和条件隐私保护机制，解决车联网通信中存在的验证权限控制问题与隐私泄露风险.完整的安全性证明表明该方案在随机预言机模型下可规约于CDH(computational DiffieHellman)问题，满足自适应选择消息攻击下的存在不可伪造性.实验分析验证了该方案的高效性与实用性，适用于资源受限的车联网应用环境.

关键词: 指定验证者签名, 身份认证, 聚合签名, 基于证书密码学, 车联网