Practical Anonymous Attestation-based Pseudonym Schemes for Vehicular Networks

Efficient and Timely Revocation of V2X Credentials

“…verified in [47], though the possible disruption of OSRs was not addressed. Furthermore, a similar heartbeat mechanism is later proposed in subsequent work [46], [12], [30], which suffers from the same limitations. Finally, all solutions seem to implicitly rely on a notion of trusted synchronized time to check the freshness of revocation requests and compute timeouts, but such a feature may not be available on all vehicles due to the limitations of current technologies [2], [4], neither do previous papers discuss possible issues related to clock drifting between vehicles and the RA.…”

“…Self-revocation. Some DAA protocols adopt a scheme called self-revocation, where revocation is performed with the active cooperation of the vehicle to be revoked [46], [12], [30]. The concept of self-revocation was initially proposed by Förster et al in their REWIRE protocol [21], as a privacy-preserving revocation scheme for vehicular networks that leverage a hardware-based TC in vehicles.…”

“…A large body of academic research and technical standards for V2X communication focuses on privacy-preserving protocols to enroll and manage pseudonymous identities [46], [12], [30], [19], [20], [6]. The key argument for such protocols is that special care must be taken to ensure vehicle routes and patterns in their use of V2X services must not be observable by other V2X participants in the network.…”

“…To address these challenges, we build upon decentralized revocation schemes based on self-revocation [46], [12], [30], which utilize a Trusted Component (TC) embedded in vehicles for secure credential management. Self-revocation enables vehicles to self-certify and also self-revoke pseudonymous credentials, obsoleting most of the centralized public key infrastructure of current ITS designs.…”

“…In difference to ongoing standardization efforts in ITS and SCMS, which rely heavily on centralized public key infrastructure [19], [20], [6], the application of DAA in an ITS context obsoletes most central PKI by relying on secure processing elements (notably TPMs), which enable a decentralized credential management. For example, some DAA schemes allow vehicles to derive pseudonyms autonomously from long-term credentials [46], [12]. These pseudonyms are self-certified using DAA signatures that can be verified by other ITS participants.…”