Abstract: Aiming at the scenario of vehicle secure access to application servers in the V2N (vehicle to network) environment, a Kerberos extension protocol is proposed based on the PUF (physical unclonable function). This protocol provides the twoway authentication and key agreement between the vehicle and the remoted application server and ensured the confidentiality and authentication of the V2N data transmission. The CRP (challenge response pair) generated by the PUF is used to replace the password in standard Kerberos to prevent the threats of key leakage caused by physical attacks such as intrusion, semiintrusion, sidechannel attacks, etc. The characteristics of Kerberos’s lightweighted twoway authentication protocol can overcome the defects of high calculation complexity and slow speed of the public key authentication algorithms, and effectively provide the secure data transmission between vehicles and application servers.

Key words: Kerberos, physical unclonable function (PUF), authentication, IoV(Internet of vehicles), lightweighted

摘要： 针对车联网(IoV)的V2N(vehicle to network)环境中车辆安全接入应用服务器场景，提出一种基于物理不可克隆函数(physical unclonable function, PUF)的Kerberos扩展协议PuKEV2N，实现车辆与远程应用服务器之间的双向认证和与密钥协商，保障V2N数据传输的保密性与认证性.利用PUF产生的激励响应对代替标准Kerberos的口令认证，从而防止攻击者通过入侵、半入侵或侧信道攻击等物理攻击造成的密钥泄露威胁.而Kerberos的轻量级双向认证协议，可以克服公钥认证算法计算复杂度高、速度慢的缺陷，高效实现车辆与应用服务器之间的安全数据传输.

关键词: Kerberos, 物理不可克隆函数, 身份认证, 车联网, 轻量