Flexible Non-interactive Short-term Implicit Certificate Generation for VANETs
Rui Liu, Yun Lu, Jianping Pan
TL;DR
The paper tackles the bottleneck of certificate provisioning in SCMS for VANETs, where frequent pseudonym changes are driven by data-intensive applications. It introduces NOINS, a sanitizable-signature-based framework that allows vehicles to generate short-term implicit certificates on demand, without interacting with the CA after an initial issuance. Key contributions include a CA-issued certificate generation scheme, per-certificate sanitization with unlinkable short-term keys, and integration with V2X workflows, achieving reduced communication overhead and flexible, personalized pseudonym provisioning while preserving immutability, anonymity, and unforgeability. The approach is evaluated against existing methods, showing significant communication savings and favorable performance, and it is positioned as a practical, SCMS-compatible extension with potential for further extensions and industry deployment.
Abstract
A leading industry standard for secure and trusted communication in vehicular ad-hoc networks (VANETs) is the Security Credential Management System (SCMS). It uses anonymous certificates, functioning as pseudonyms, to preserve the privacy of vehicles. With the rapid development of advanced applications in VANETs, such as crowdsensing and federated learning, vehicles need to communicate with each other or infrastructures more frequently, leading to a higher demand for pseudonyms. However, the current approach of certificate provisioning in SCMS is not able to fully support pseudonyms, due to storage limitation, cost of connectivity establishment, and communication overhead of certificate downloading. To tackle this challenge, we propose a non-interactive approach for SCMS, allowing vehicles themselves to generate short-term key pairs and anonymous implicit certificates. Our evaluation and comparison with previous work show that our solution not only effectively reduces the communication cost, but also grants vehicles greater flexibility in certificate generation and use. On the technical side, to the best of our knowledge, this is the first work which (1) applies sanitizable signature for non-interactive anonymous certificate generation, and (2) is specifically designed for SCMS, which opens up possibilities for extensions and applications in industry.
