Securing
vehicle-to-vehicle and
vehicle-to-roadside communication is an indispensable prerequisite for
its
deployment and real world use. The system
must ensure that the transmission comes from a trusted source and has
not been
tampered with since transmission. For
example, with the Traffic Signal Violation Warning application, the
in-vehicle
system will use information communicated from the infrastructure
located at
traffic signals to determine if a warning should be given to the
driver. An
incorrect transmission from a malfunctioning, invalid or compromised
unit might
jeopardize the safety of the vehicle and endanger others in the
vicinity.
Privacy and
anonymity are major issues
that will also need to be addressed.
Vehicle safety communication applications broadcast messages about a
vehicle’s current location, speed and heading.
There is a strong desire to provide user privacy so that the full
identity of the car sending each message is kept private. People
who are concerned about tracking might
disable their radio, impacting the safety and other benefits. The
system also needs to reassure people that
Big Brother isn’t in the passenger’s seat.
Objectives
The goal is to
develop a
trustworthy vehicular communication framework.
Our key weapons are an emerging
cryptographic technique, group signatures, and tamper-resistant devices
(chips).
We view
vehicular networks as a
large scale distributed system. All
accesses to the system should be authorized.
The controlled access is enforced by a trusted tamper-resistant device
in the vehicle. Furthermore, to achieve
accountable privacy, all messages sent should be signed and all
messages
received should be verified based on the group signature
technique.
The
framework will assure the following properties in vehicular networks:
- Authenticity: the system assures that the packet/data are
generated by a trusted source.
- Integrity: the system assures that the data has not
been tampered with or altered after it was generated.
- Anonymity: the
full identity of a vehicle sending each packet/data is kept private.
- Accountability: the system can attribute actions to the entity that caused
those actions, in case of conflict.
- Real-time constraints: the security solution still allows low
latency communication.