| Summary: | An analysis of the two-stage authentication and key agreement protocol for commuting in Internet of vehicles proposed by Zhang et al. revealed its vulnerability to various malicious attacks, which included secret leakage attack and man-in-the-middle attack. To address security risks faced by the protocol, a lightweight authentication key agreement (LAKA) protocol for Internet of vehicles was proposed. Firstly, private values were encrypted by XOR and symmetric encryption algorithm, which ensured the privacy of private value. Secondly, authentication requests were generated by the private values of vehicles and roadside unit, which guaranteed the security of the protocol. Thirdly, performance analysis shows that it has a significant advantage in terms of computational cost compared with the similar protocols. Finally, formal analysis and verification by BAN logic and ProVerif tool confirm that it enhances security and privacy preservation.
|
|---|
