SePCAR: A Secure and Privacy-Enhancing Protocol for Car Access Provision

Symeonidis, Iraklis; Aly, Abdelrahaman; Mustafa, Mustafa; Mennink, Bart; Dhooghe, Siemen; Preneel, Bart

doi:10.1007/978-3-319-66399-9_26

Cited by 27 publications

(48 citation statements)

References 31 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…SePCAR is a smart car access control protocol. On the other hand, this protocol is more concerned with user privacy than with bandwidth efficiency [35].…”

Section: Related Workmentioning

confidence: 99%

A New Hybrid Online and Offline Multi-Factor Cross-Domain Authentication Method for IoT Applications in the Automotive Industry

et al. 2021

View full text Add to dashboard Cite

Connected vehicles have emerged as the latest revolution in the automotive industry, utilizing the advent of the Internet of Things (IoT). However, most IoT-connected cars mechanisms currently depend on available network services and need continuous network connections to allow users to connect to their vehicles. Nevertheless, the connectivity availability shortcoming in remote or rural areas with no network coverage makes vehicle sharing or any IoT-connected device problematic and undesirable. Furthermore, IoT-connected cars are vulnerable to various passive and active attacks (e.g., replay attacks, MiTM attacks, impersonation attacks, and offline guessing attacks). Adversaries could all use these attacks to disrupt networks posing a threat to the entire automotive industry. Therefore, to overcome this issue, we propose a hybrid online and offline multi-factor authentication cross-domain authentication method for a connected car-sharing environment based on the user’s smartphone. The proposed scheme lets users book a vehicle using the online booking phase based on the secured and trusted Kerberos workflow. Furthermore, an offline authentication phase uses the OTP algorithm to authenticate registered users even if the connectivity services are unavailable. The proposed scheme uses the AES-ECC algorithm to provide secure communication and efficient key management. The formal SOV logic verification was used to demonstrate the security of the proposed scheme. Furthermore, the AVISPA tool has been used to check that the proposed scheme is secured against passive and active attacks. Compared to the previous works, the scheme requires less computation due to the lightweight cryptographic algorithms utilized. Finally, the results showed that the proposed system provides seamless, secure, and efficient authentication operation for the automotive industry, specifically car-sharing systems, making the proposed system suitable for applications in limited and intermittent network connections.

show abstract

“…SePCAR is a smart car access control protocol. On the other hand, this protocol is more concerned with user privacy than with bandwidth efficiency [35].…”

Section: Related Workmentioning

confidence: 99%

A New Hybrid Online and Offline Multi-Factor Cross-Domain Authentication Method for IoT Applications in the Automotive Industry

et al. 2021

View full text Add to dashboard Cite

show abstract

“…The proposed instantiation uses a secure execution platform that can be implemented on devices such as smartcards or smartwatches. Another approach for car sharing is proposed in [52]. The paper presents a decentralised protocol that provides both security and privacy allowing owners to share their cars.…”

Section: A Related Workmentioning

confidence: 99%

PRESTvO: PRivacy Enabled Smartphone Based Access to Vehicle On-Board Units

et al. 2020

View full text Add to dashboard Cite

Smartphones are quickly moving toward complementing or even replacing traditional car keys. We advocate a role-based access control policy mixed with attributes that facilitates access to various functionalities of vehicular on-board units from smartphones. We use a rights-based access control policy for in-vehicle functionalities similar to the case of a file allocation table of a contemporary OS, in which read, write or execute operations can be performed over various vehicle functions. Further, to assure the appropriate security, we develop a protocol suite using identity-based cryptography and we rely on group signatures which preserve the anonymity of group members thus assuring privacy and traceability. To prove the feasibility of our approach, we develop a proof-of-concept implementation with modern smartphones, aftermarket Android head-units and test computational feasibility on a real-world in-vehicle controller. Our implementation relies on state-of-the-art cryptography, including traditional building blocks and more modern pairing-friendly curves, which facilitate the adoption of group signatures and identitybased cryptography in automotive-based scenarios.

show abstract

“…However, their system contains a centralized fully-trusted SE provider that collects and stores all the information exchanged within the system. Symeonidis et al [33] performed security and privacy analysis of such systems and designed a solution for secure and privacy-friendly vehicle access provision [34]. Akash et al [35] proposed a solution for the booking and payments functionality of a car sharing system using smart contracts.…”

Section: Limitations Of Exiting Approachesmentioning

confidence: 99%

Towards Systematic Specification of Non-Functional Requirements for Sharing Economy Systems

Symeonidis

Schroers

Mustafa

et al. 2019

2019 15th International Conference on Distributed Computing in Sensor Systems (DCOSS)

Self Cite

View full text Add to dashboard Cite

Sharing Economy (SE) systems use technologies to provide individuals with information that enables the optimization of resources through the mutualization of excess capacity in goods and services; thus, SE systems contribute to the reuse phase of the Circular Economy. In this paper, we assess existing SE services and identify their weaknesses in areas that are not technically connected to their core functionality, but are essential in creating trust: information security, personal data protection and economic incentives. We then propose to take a systematic approach to non-functional requirements specification, where a well-defined, structured approach would pay immediate dividends. As existing frameworks are not holistic and have several shortcomings, we set forward a research agenda, both for ourselves and the community, aiming at systematizing the specification of non-functional requirements for SE services in a top-down-top manner.

show abstract

SePCAR: A Secure and Privacy-Enhancing Protocol for Car Access Provision

Cited by 27 publications

References 31 publications

A New Hybrid Online and Offline Multi-Factor Cross-Domain Authentication Method for IoT Applications in the Automotive Industry

A New Hybrid Online and Offline Multi-Factor Cross-Domain Authentication Method for IoT Applications in the Automotive Industry

PRESTvO: PRivacy Enabled Smartphone Based Access to Vehicle On-Board Units

Towards Systematic Specification of Non-Functional Requirements for Sharing Economy Systems

Contact Info

Product

Resources

About