Optimized Certificate Revocation List Distribution for Secure V2X Communications

TL;DR

This paper presents an efficient framework for distributing compressed Certificate Revocation Lists in vehicular networks, improving scalability and reducing overhead using optimized Bloom filters.

Contribution

It introduces a low-complexity CRL distribution method with Bloom filter compression, enhancing scalability in PPKI-based vehicular security systems.

Findings

Compressed CRLs reduce distribution overhead significantly

Bloom filter optimization balances false positives and efficiency

Enhanced system scalability without added complexity

Abstract

The successful deployment of safe and trustworthy Connected and Autonomous Vehicles (CAVs) will highly depend on the ability to devise robust and effective security solutions to resist sophisticated cyber attacks and patch up critical vulnerabilities. Pseudonym Public Key Infrastructure (PPKI) is a promising approach to secure vehicular networks as well as ensure data and location privacy, concealing the vehicles' real identities. Nevertheless, pseudonym distribution and management affect PPKI scalability due to the significant number of digital certificates required by a single vehicle. In this paper, we focus on the certificate revocation process and propose a versatile and low-complexity framework to facilitate the distribution of the Certificate Revocation Lists (CRL) issued by the Certification Authority (CA). CRL compression is achieved through optimized Bloom filters, which guarantee a considerable overhead reduction with a configurable rate of false positives. Our results show that the distribution of compressed CRLs can significantly enhance the system scalability without increasing the complexity of the revocation process.