A Secure and Authenticated Key Management Protocol (SA-KMP) for Vehicular Networks

TL;DR

This paper introduces SA-KMP, a secure, efficient key management protocol tailored for vehicular networks that overcomes PKI limitations by reducing computational costs and eliminating certificate exchanges.

Contribution

The paper presents a novel SA-KMP scheme that enhances scalability, reduces overhead, and improves security for vehicular network communications compared to traditional PKI.

Findings

SA-KMP reduces key generation time compared to ECC and DH protocols.

The scheme is secure against active attackers, DoS, and collusion attacks.

Performance evaluations show improved scalability and efficiency.

Abstract

Public key infrastructure (PKI) is the most widely used security mechanism for securing communications over the network. However, there are known performance issues, making it unsuitable for use in vehicular networks. In this paper, we propose a secure and authenticated key management protocol (SA-KMP) to overcome the shortcomings of the PKI. The SA-KMP scheme distributes repository containing the bindings of the en-tity's identity and its corresponding public key to each vehicle and road side unit. By doing so, certificate exchanges and certificate revocation lists are eliminated. Furthermore, the SA-KMP scheme uses symmetric keys derived based on a 3-D-matrix-based key agreement scheme to reduce the high computational costs of using asymmetric cryptography. We demonstrate the efficiency of the SA-KMP through performance evaluations in terms of transmission and storage overhead, network latency, and key generation time. Analytical results show that the SA-KMP is more scalable and outperforms the certificate-based PKI. Simulation results indicate that the key generation time of the SA-KMP scheme is less than that of the existing Elliptic Curve Diffie--Hellman and Diffie--Hellman protocols. In addition, we use Proverif to prove that the SA-KMP scheme is secure against an active attacker under the Dolev and Yao model and further show that the SA-KMP scheme is secure against denial of service, collusion attacks, and a wide range of other malicious attacks.