CBACS: A Privacy-Preserving and Efficient Cache-Based Access Control Scheme for Software Defined Vehicular Networks
CBACS: A Privacy-Preserving and Efficient Cache-Based Access Control Scheme for Software Defined Vehicular Networks
复制标题
CBACS：一种用于软件定义车辆网络的隐私保护且高效的基于缓存的访问控制方案
DOI：
10.1109/tifs.2022.3174389
复制
发表时间：
2022
影响因子：
6.8
通讯作者：
Jie Cui
中科院分区：
文献类型：
--
作者：
Xiaoyu Zhang;Hong Zhong;Chunyang Fan;Irina Bolodurina;Jie Cui
在车载网络中，在雾节点缓存内容是一种被广泛接受的有利方式，可以快速响应海量车辆请求，减少内容检索延迟，提高服务质量。然而，为了实现这种缓存模式，当车辆访问雾节点中缓存的内容时，确保有效的安全性和隐私保护是至关重要的。针对该问题，利用TESLA广播认证协议和Pederson承诺，提出了一种新的基于密码的软件定义车载网络（SDVN）轻量级访问控制方案。该方案在限制只有合法车辆才能得到请求响应的同时，实现了车辆与雾节点之间直接、高效的认证，避免了现有访问控制方案的局限性或不足。此外，考虑到有限的缓存空间的雾节点，通过利用SDN范例的灵活性，提供了一个合作的缓存更新机制。通过ProVerif的安全性验证和详细的安全性分析，证明该方案能够满足SDVN的安全性要求。与相关工作相比，我们的方案在计算和通信开销方面取得了更好的性能。
In vehicular networks, caching content in fog nodes is a widely accepted and favorable way to quickly respond to massive vehicle requests, reduce content retrieval delay and improve service quality. However, to implement such caching mode, it is critical to ensure efficient security and privacy protection when vehicles access the cached content in fog nodes. In this paper, aiming at the security issue, a novel lightweight cryptography-based access control scheme for software defined vehicular networks (SDVN) is proposed, by using TESLA broadcast authentication protocol and Pederson commitment. The scheme realizes direct and efficient authentication between vehicles and fog nodes while limiting only legitimate vehicles can get request responses, and avoids limitations or deficiencies in existing access control schemes. Moreover, considering the limited cache space of the fog node, by utilizing the flexibility of the SDN paradigm, a cooperative cache update mechanism is provided. The security verification with ProVerif and detailed security analyses prove that the scheme can meet the security requirements in SDVN. And compared with the related works, our scheme achieves better performance in terms of computation and communication costs.