Distributed Blockchain-Based Message Authentication Scheme for Connected Vehicles

Abstract

Vehicular ad-hoc networks (VANETs) have several security issues such as privacy preservation, secure authentication, and system reliability. In the VANET, a vehicle communicates with other vehicles or infrastructures using broadcasting messages. These messages contain not only normal traffic information, but also identification information of sender. In general, the identification information remains encrypted to ensure privacy. However, the conventional centralized system can decrypt the identification information using private information of the sender vehicle. As a result, the central server can often be targeted by adversaries. We propose a message authentication scheme for anonymity and decentralization of information using blockchain technology. Here, we introduce public-private key and message authentication code (MAC) for secure authentication. In this paper, we adopt consensus algorithms for composing blockchain system such as the proof of work (PoW) and Practical Byzantine Fault Tolerance (PBFT) into the proposed authentication process. Finally, we demonstrate that the proposed method is secure from the attacks which include impersonation from internal attacker as well as typical attacks.

Blockchain from the Perspective of Privacy and Anonymisation: A Systematic Literature Review

“…With regard to anonymisation, there is more controversy: the works in [31,32,[47][48][49] claim that total anonymity of the identities participating in the blockchain is not achieved and, on the other hand, the works in [9,40,41,[43][44][45][46]50,51] claim that it is. This issue raises concerns as different publications offer different approaches.…”

“…As can be seen in Figure 3 , there is a relationship between the terms privacy and anonymity in several of the studies analysed, finding that some only address privacy-related mechanisms [ 8 , 26 ] and that focuses solely on privacy, not on anonymity, addressing consensus mechanisms as a way of ensuring the privacy of transactions or through the elimination of central servers. We note that most studies selected for data extraction address both privacy and anonymity in conjunction and find an intrinsic relationship between the two terms [ 7 , 9 , 23 , 24 , 25 , 31 , 32 , 33 , 34 , 35 , 36 , 37 , 38 , 39 , 40 , 41 , 42 , 43 , 44 , 45 , 46 , 47 , 48 , 49 , 50 , 51 ].…”

“…Another problem is that computing is relatively expensive on distributed blockchain-based platforms. The availability of solutions with centralised models [25,48] means that participants in the data exchange do not trust each other either because of possible manipulation of the data or because they are not assumed to be consistent. The lack of appropriate standard codes [8,40] means that the use of IoT via blockchain has yet to be improved and its scalability made possible.…”

A new algorithm for implementing message authentication and integrity in software implementations

“…Also, there are weaknesses points of SHA-1, suggesting that it need several years to break it. There are other new applications protect against the matters by using another SHA, like SHA-2, or new techniques like random defragmentation [20][21][22][23]. To produce new applications, use Hash functions, there is strong competition for developing SHA-2 to produce SHA-3 in 2012 [24,25].…”

Optimized Authentication System with High Security and Privacy

“…In such scenarios tracing down the culprit is also difficult [7]. There are various security and privacy challenges [8][9][10] with the traditional authentication systems and a highly secure authentication system is required [11]. The limitations of the traditional frameworks can be overcome by using biometrics, which is based on biometric traits of a human [12,13].…”