Abstract:Secure and efficient access authentication is one of the most important security requirements for vehicular networks, but it is difficult to fulfill due to potential security attacks and long authentication delay caused by high vehicle mobility, etc. Most of the existing authentication protocols, either do not consider attacks like single point of failure or do not focus on reducing authentication delay. To address these issues, we introduce an edge-assisted decentralized authentication (EADA) architecture, which provides secure and more communication-efficient authentication by enabling an authentication server to delegate its authentication capability to distributed edge nodes (ENs) such as roadside units (RSUs) and base stations (BSs). Under the architecture, we propose a threshold mutual authentication protocol that supports fast handover, which involves two scenarios, Auth-I and Auth-II. Auth-I only happens once when a vehicle tries to access the network for the first time, while Auth-II happens when a vehicle seamlessly roams between two ENs, i.e., handover. Specifically, for Auth-I, each vehicle can be cooperatively authenticated by $t$ out of $n$ ENs with identity-based signature techniques to obtain an authentication token and the involved ENs can be efficiently authenticated in a batch by the vehicle. For Auth-II, the vehicle can utilize the token as its private credential to achieve fast handover based on identity-based signature without interacting with multiple ENs, which further reduces the authentication delay significantly. In addition, we design a flexible method to support dynamic joining and leaving of ENs without the assistance of a trusted center. We demonstrate that the proposed protocol is secure and efficient through security analysis and performance evaluation.

Building secure distributed applications the DECENT way

DECENT: A Decentralized Architecture for Enforcing Privacy in Online Social Networks

Dtee: A Declarative Approach to Secure IoT Applications Using TrustZone

Teamwork Makes TEE Work: Open and Resilient Remote Attestation on Decentralized Trust

Remote Credential Management with Mutual Attestation for Trusted Execution Environments

DECO: Liberating Web Data Using Decentralized Oracles for TLS

End-to-End Security for Distributed Event-Driven Enclave Applications on Heterogeneous TEEs

Decentralized Translator of Trust: Supporting Heterogeneous TEE for Critical Infrastructure Protection

AADEC: Anonymous and Auditable Distributed Access Control for Edge Computing Services

SRAS: Self-governed Remote Attestation Scheme for Multi-party Collaboration

A Last-Level Defense for Application Integrity and Confidentiality

A Holistic Approach for Trustworthy Distributed Systems with WebAssembly and TEEs

Delegating Authentication to Edge: A Decentralized Authentication Architecture for Vehicular Networks

A Trusted Decentralized Access Control Framework for the Client/server Architecture

Scanclave: Verifying Application Runtime Integrity in Untrusted Environments

Ekiden: A Platform for Confidentiality-Preserving, Trustworthy, and Performant Smart Contract Execution

Reliable Communication in Hybrid Authentication and Trust Models

A blockchain-based trust system for decentralised applications: When trustless needs trust

DecentRAN: Decentralized Radio Access Network for 5.5G and beyond

Dynamic Role-Based Access Control for Decentralized Applications

Runtime Verification for Trustworthy Computing