A2E: Attribute-based Anonymity-Enhanced Authentication for Accessing Driverless Taxi Service

TL;DR

This paper introduces A2E, a novel attribute-based authentication scheme for driverless taxis that enhances user privacy, ensures security, and maintains low overhead for practical urban transportation systems.

Contribution

It presents a new anonymous, attribute-verifiable authentication scheme using redactable signatures, ring signatures, and secret sharing, with improved privacy and traceability features.

Findings

A2E achieves attribute verifiability with redactable signatures.

The scheme provides unlinkability and unforgeability.

A2E demonstrates low overhead and high scalability in performance evaluations.

Abstract

Driverless vehicle as a taxi is gaining more attention due to its potential to enhance urban transportation efficiency. However, both unforeseen incidents led by unsupervised physical users' driverless taxi (DT) rides and personalized needs of users when riding in a DT necessitate the authentication of user identity and attributes. Moreover, safeguarding user identity privacy and quickly tracing malicious users if necessary to enhance the adoption of DTs remains a challenge. This paper proposes a novel Attribute-based Anonymity Enhanced (A2E) authentication scheme for users to access DT service. From the security aspect, A2E has attribute verifiability, which is achieved by designing a user attribute credential based on redactable signature. Meanwhile, this attribute credential also satisfies unlinkability and unforgeability. In addition, A2E has enhanced anonymity, which is achieved by designing a decentralized credential issuance mechanism utilizing ring signature and secret sharing, safeguarding user attributes from association with anonymous identities. Moreover, this mechanism provides traceability and non-frameability to users. From the performance aspect, A2E causes low overhead when tracing malicious users and updating credentials. Besides, both scalability and lightweight are satisfied, which contributes to A2E's practicability. We conduct security analysis and performance evaluation to the security and performance capabilities of A2E.