Scaling Pseudonymous Authentication for Large Mobile Systems

TL;DR

This paper enhances a Vehicular Public-Key Infrastructure to be scalable, resilient, and cost-effective for large-scale vehicular communication systems, ensuring privacy, security, and high availability.

Contribution

It introduces a scalable, resilient VPKI system that dynamically adjusts to request loads and remains operational under failures, demonstrated through cloud deployment.

Findings

System remains operational during benign failures.

System dynamically scales with request rates.

Deployment on Google Cloud is cost-effective.

Abstract

The central building block of secure and privacy-preserving Vehicular Communication (VC) systems is a Vehicular Public-Key Infrastructure (VPKI), which provides vehicles with multiple anonymized credentials, termed pseudonyms. These pseudonyms are used to ensure message authenticity and integrity while preserving vehicle (thus passenger) privacy. In the light of emerging large-scale multi-domain VC environments, the efficiency of the VPKI and, more broadly, its scalability are paramount. By the same token, preventing misuse of the credentials, in particular, Sybil-based misbehavior, and managing "honest-but-curious" insiders are other facets of a challenging problem. In this paper, we leverage a state-of-the-art VPKI system and enhance its functionality towards a highly-available, dynamically-scalable, and resilient design; this ensures that the system remains operational in the presence of benign failures or resource depletion attacks, and that it dynamically scales out, or possibly scales in, according to request arrival rates. Our full-blown implementation on the Google Cloud Platform shows that deploying large-scale and efficient VPKI can be cost-effective.