IEEE 1609.2标准：车载无线通信安全服务

需积分: 9 147 浏览量更新于2024-07-17 收藏 4.62MB PDF 举报

"WAVE1609.2标准是针对车载网络应用和管理消息安全服务的IEEE标准，由IEEE智能交通系统委员会赞助。这个标准在2016年进行了修订，是IEEE Vehicular Technology Society的一部分。" "WAVE1609.2"标准详细阐述了无线接入车载环境中的安全服务，特别是对于应用和管理消息的安全处理。在智能交通系统中，车载通信是关键部分，而这种通信的安全性直接影响到道路安全和整个交通系统的效率。该标准的制定是为了确保车辆间以及车辆与基础设施之间的无线通信具有高度的安全性和可靠性。该标准涵盖了以下几个核心知识点： 1. **安全框架**：定义了一套全面的安全框架，包括加密算法、认证机制、数据完整性保护以及时间同步等，以防止未经授权的访问、篡改或伪造车载通信数据。 2. **身份认证**：为车辆、路边单元（RSU）和其他交通参与者提供了身份验证机制，确保只有合法的实体可以参与通信，防止假冒身份的攻击。 3. **消息加密**：标准规定了如何对传输的数据进行加密，以保护敏感信息，如车辆状态、驾驶行为数据和乘客隐私信息，防止信息泄露。 4. **消息完整性**：通过哈希函数和消息认证码（MAC）来确保消息在传输过程中未被篡改，确保通信的准确性。 5. **时间同步**：为了保证通信的有效性和安全性，标准可能包含了精确的时间同步机制，以确保所有参与者在同一时间轴上操作。 6. **安全更新和管理**：定义了安全更新和补丁的分发流程，以及如何管理和更新车载设备的安全配置，以应对新的威胁和漏洞。 7. **应答和确认机制**：通过应答和确认机制，确保消息已被接收并正确处理，同时可以检测和处理重放攻击。 8. **隐私保护**：标准可能还涉及了如何在保证通信安全的同时，保护个人隐私，避免车辆位置等敏感信息被滥用。 9. **兼容性和互操作性**：为了促进不同制造商的设备之间的兼容和协同工作，标准设定了统一的接口和通信协议。这个标准对于开发安全的车载通信系统、构建智能交通系统以及推动自动驾驶技术的发展至关重要。通过遵循这些规定，汽车制造商和通信服务提供商可以创建更可靠、更安全的车载网络，为未来的交通系统奠定坚实的基础。

IEEE Std 1609.2-2016

IEEE Standard for Wireless Access in Vehicular Environments—Security Services for Applications and Management

Messages

certificate holder: The entity authorized to use a particular digital certificate to establish trust. The

certificate holder can carry out operations using the private key corresponding to the certficate’s public key.

A certificate holder’s certificate is referred to as a locally held certificate.

certificate management information: Information that allows the secure data service to determine the

trustworthiness of certificates and received data.

certificate revocation list (CRL) distribution center: An entity that stores and distributes certificate

revocation lists (CRLs).

certificate revocation list (CRL) series (CRL series): An integer used to assign different certificates

issued by the same certificate authority (CA) to distinct sets, such that the certificates in different sets

appear on different revocation lists if revoked.

certificate revocation list (CRL): A list identifying certificates that have been revoked. See: revocation.

certificate revocation list (CRL) signer: An entity authorized to sign certificate revocation lists (CRLs).

certificate signing request (CSR): A protocol data unit (PDU) sent from an entity to a certificate authority

(CA), requesting that the CA issues a certificate on behalf of the entity.

chains to: A digital certificate A chains to another certificate B if B is above A in the certificate chain

(q.v.) from A to the root.

complete certificate chain: A certificate chain in which the top certificate is a root certificate and the

bottom certificate is an end-entity certificate.

confidentiality: A cryptographic service that provides assurance that only the intended recipients of a

protocol data unit (PDU) can read it.

consistency conditions: Criteria for validity of a signed protocol data unit (PDU) that depend only on the

contents of the signed secured protocol data unit (SPDU) and not on the state of the receiver.

counter mode with cipher block chaining message authentication code (CCM): A mode of operation of

a block cipher where the data is encrypted with a keystream, which in turn is generated by encrypting an

incrementing counter, and in turn authenticated with a message authentication code calculated using cipher

block chaining mode.

critical information field: An information field necessary to establish the validity of a signed secured

protocol data unit (SPDU).

cryptographic type (of a certificate): How a certificate transfers information about its associated public

key (q.v.). Cryptographic types of certificate are: implicit certificate; explicit certificate.

cryptographic verification: The process of determining whether a signature on a signed secured protocol

data unit (SPDU) is consistent with the SPDU and the private key.

cryptographically secure hash function: A function that maps an arbitrary-length input into a fixed-

length output (the hash value) such that (a) it is computationally infeasible to find an input that maps to a

specific hash value and (b) it is computationally infeasible to find two inputs that map to the same hash

value. All hash functions used in this document are cryptographically secure hash functions.

Cryptomaterial Handle: A reference to a private key and the associated public key or certificate, used to

indicate to the secure data service that the referenced key should be used in a particular operation.

Authorized licensed use limited to: Northeastern University. Downloaded on October 10,2018 at 13:43:00 UTC from IEEE Xplore. Restrictions apply.

IEEE Std 1609.2-2016

IEEE Standard for Wireless Access in Vehicular Environments—Security Services for Applications and Management

Messages

cryptomaterial: A private key, a public key, or a certificate.

data plane: A component of the abstract architecture containing entities that exchange user data.

decode: To convert an array of octets into a data structure. Contrast: decrypt, encode.

decrypt: To convert unreadable, encrypted data to readable, decrypted data using a decryption algorithm

and a key. Contrast: decode, encrypt.

decryption algorithm: An algorithm that takes as input ciphertext and a key and (if the correct key is

provided) produces the original plaintext.

delta certificate revocation list (delta CRL): A certificate revocation list that carries information only

about certificates that were revoked within a certain time period. Contrast: full certificate revocation list.

(permitted) depth of chain (in a certificate authority (CA) certificate’s permissions): The length that a

certificate chain is permitted to be, starting from the certificate with which the depth value is associated and

ending with an end-entity certificate.

digital certificate: A digitally signed document binding a public key to an identity and/or a set of

permissions.

direct hashing: Creating a hash of particular data by passing that data through a hash function without

including any additional data or processing.

dubious certificate: A certificate for which the most recent certificate revocation list (CRL) is overdue,

i.e., it is scheduled to be issued but has not yet been received.

elliptic curve cryptography (ECC): A form of public-key cryptography based on the problem of finding

discrete logarithms in a group defined over elliptic curves.

Elliptic Curve Digital Signature Algorithm (ECDSA): A digital signature mechanism based on the

elliptic curve discrete logarithm problem and standardized in Federal Information Processing Standard

(FIPS) 186-4.

Elliptic Curve Integrated Encryption Scheme (ECIES): A public-key encryption mechanism based on

the elliptic curve discrete logarithm problem.

encode: To convert a data structure into an array of octets. Contrast: decode, encrypt.

encrypt: To convert readable data to unreadable, encrypted data using an encryption algorithm and a key.

Contrast: decrypt, encode.

encryption algorithm: An algorithm that takes as input plaintext and a key and produces ciphertext.

encryption certificate: A certificate that contains an encryption key.

end-entity certificate: A certificate used to validate application PDUs or certificate requests.

enrolment certificate: A certificate used to validate a certificate request (CSR). Contrast: authorization

certificate, certificate authority (CA) certificate.

explicit certificate: A certificate that contains a public key and the certificate authority’s signature.

Authorized licensed use limited to: Northeastern University. Downloaded on October 10,2018 at 13:43:00 UTC from IEEE Xplore. Restrictions apply.

IEEE Std 1609.2-2016

IEEE Standard for Wireless Access in Vehicular Environments—Security Services for Applications and Management

Messages

full certificate revocation list (full CRL): A certificate revocation list that carries information about

certificates that were revoked and have not expired, regardless of when the revocation took place. Contrast:

delta certificate revocation list.

global consistency conditions: Consistency conditions (q.v.) which apply to all protocol data units (PDUs)

regardless of the application area in which they are used.

hash function: See: cryptographically secure hash function.

hash ID-based revocation: Revocation (q.v.) which identifies certificates to be revoked via their

cryptographic hash.

hash value: The output of a hash function.

IEEE 1609.2 security profile: A means for specifying options and parameters that are provided to the

1609.2 security services by a particular consumer of those services. May be used as part of the specification

of a secure data exchange entity (q.v.).

implicit certificate: A digital certificate that allows the associated public key to be reconstructed from a

reconstruction value and the certificate authority’s public key rather than directly providing the associated

public key.

inherited permissions: Permissions within a subordinate certificate that are communicated by reference to

the issuing certificate, rather than stated explicitly within the subordinate certificate.

integrity: A cryptographic service that provides assurance that any changes to a protocol data unit (PDU)

made after it is validly created will be detected.

issuing certificate: The certificate that issues a subordinate certificate.

linkage-based revocation: Revocation (q.v.) which identifies certificates to be revoked via a linkage value

(q.v.) included in the certificate.

linkage value: A value included in a certificate that enables that certificate to be revoked via linkage-based

revocation (q.v.).

locally held certificate: A certificate on a device such that WAVE Security Services on that device may

generate a signature on a secured protocol data unit (SPDU) which verifies correctly with that certificate.

management plane: A component of the abstract architecture containing functions that manage the entities

in the data plane.

misbehavior: Behavior that results in devices receiving information that could cause them to take incorrect

actions.

misbehavior authority: A management component on the network with responsibility for determining

which devices are responsible for misbehavior.

misbehavior reporting: The activity of providing information to some authority, known as the

misbehavior authority, about misbehavior within a particular application area. The subsequent actions taken

by the misbehavior authority may be application area specific.

network byte order: An ordering of the bytes of an integer such that the byte transmitted first is the byte

containing the most significant bit, and the most significant bit is first in that byte.

Authorized licensed use limited to: Northeastern University. Downloaded on October 10,2018 at 13:43:00 UTC from IEEE Xplore. Restrictions apply.

IEEE Std 1609.2-2016

IEEE Standard for Wireless Access in Vehicular Environments—Security Services for Applications and Management

Messages

non-repudiation (of origin): A cryptographic service whereby the origin of a message can be

demonstrated to a third party, preventing the sender from denying that they produced the message.

off-cycle certificate revocation list (CRL): A certificate revocation list (CRL) that is issued before the

“next CRL” time indicated in the previous CRL in the CRL series.

partial certificate chain: A certificate chain that is not a complete certificate chain, i.e., the top certificate

is not a root certificate or the bottom certificate is not an end-entity certificate.

permitted depth of chain: See: depth of chain.

peer-to-peer certificate distribution: A mechanism for allowing devices to learn certificates from peer

devices.

plaintext: Unencrypted data.

properly formed certificate: A certificate that can be parsed correctly according to the data structures and

encoding defined in this standard.

Provider Service Identifier (PSID): An identifier of an application area. (See IEEE Std 1609.12).

Provider Service Identifier (PSID) derived from context: A Provider Service Identifier (PSID)

associated with a protocol data unit (PDU) received by a secure data exchange entity (SDEE), where the

SDEE does not obtain the PSID from the PDU itself, but by some other means.

pseudonym certificate: An authorization certificate (q.v.) that indicates its holder’s permissions but not its

holder’s identity.

pseudonymity: A property wherein an entity’s permanent or long-lived identities, and its long-term

patterns of behavior, cannot be deduced from its network traffic and are only observable by appropriately

authorized parties.

public-key digital signature: A cryptographically secure checksum that is generated using a private key

and verified using a public key.

reconstruction value: A value in an implicit certificate that allows the associated public key to be

recovered.

relevance conditions: Criteria for validity of a signed secured protocol data unit (SPDU) that depend on

the local state of the receiver.

replay attack: An attack in which an attacker retransmits, possibly with a delay, data that was originally

validly transmitted.

revocation: The publication by a relevant authority of the information that a particular certificate is no

longer to be trusted.

root certificate: A self-signed certificate that can be used as a trust anchor to verify other certificates.

secure data service: A subset of Wireless Access in Vehicular Environments (WAVE) Security Services

providing services that allow secure data service entities to request communications security services to be

applied to protocol data units (PDUs).

secure data exchange entity (SDEE): An entity that uses IEEE 1609.2 services to secure any

communications.

Authorized licensed use limited to: Northeastern University. Downloaded on October 10,2018 at 13:43:00 UTC from IEEE Xplore. Restrictions apply.

IEEE Std 1609.2-2016

IEEE Standard for Wireless Access in Vehicular Environments—Security Services for Applications and Management

Messages

secure data exchange entity (SDEE)-specific consistency checks: Consistency checks (q.v.) which are

specific to a SDEE (q.v.).

secure data exchange entity (SDEE)-verified relevance checks: Relevance checks (q.v.) which cannot be

verified within the security services.

secured protocol data unit (SPDU): A protocol data unit which has been processed by WAVE Security

Services before transmission.

security envelope: The additional data added to a protocol data unit by the security services when

transforming it into a secured protocol data unit.

security services management entity (SSME): The management entity responsible for managing the

certificate management information on a device.

security management message: A protocol data unit (PDU) used to manage certificates or information

about certificates.

security management: Operations that support acquiring or establishing the validity of 1609.2 certificates.

security profile policy: For an IEEE 1609.2 security profile (q.v.), a set of entries in the security profile for

which values used by different implementations should be coordinated and for which values may change

over time.

security service-verified relevance conditions: Relevance conditions (q.v.) that can be tested within the

security services.

self-signed certificate: A certificate whose signature can be verified with the public key in the certificate.

Service Specific Permissions (SSP): A field that indicates the permissions of a particular certificate holder

with respect to a particular application area.

signature: See: public key digital signature.

subordinate certificate: The certificate that was issued by an issuing certificate.

symmetric cryptographic algorithm: A cryptographic algorithm that uses a single key. Knowledge of a

symmetric encryption key allows both encryption and decryption. Knowledge of a symmetric

authentication key allows generation and verification of message authentication codes.

Symmetric Cryptomaterial Handle: A reference to a symmetric key, used to indicate to the secure data

service that the referenced key should be used in a particular operation.

symmetric key: The key for a symmetric cryptographic algorithm (q.v.).

Transport Layer Security (TLS): An Internet Engineering Task Force (IETF) protocol, specified in

Request for Comments (RFC) 5246 [B13], providing for secure communications over Transmission

Control Protocol/Internet Protocol (TCP/IP).

trigger secure data exchange entity (trigger SDEE): A secure data exchange entity that sends a secured

protocol data unit (SPDU) that triggers peer-to-peer certificate distribution.

trigger secured protocol data unit (trigger SPDU): A secured protocol data unit (SPDU) that triggers

peer-to-peer certificate distribution.

Authorized licensed use limited to: Northeastern University. Downloaded on October 10,2018 at 13:43:00 UTC from IEEE Xplore. Restrictions apply.

剩余239页未读，继续阅读

十一月的纪念

粉丝: 105
资源: 2

IEEE 1609.2标准：车载无线通信安全服务

1609.2协议

V2X_1609.2_ieee1609.2标准_车联网_V2X_

WAVE1609.0标准

IEEE WAVE 1609.3- Networking Services

IEEE 1069.2 1609.3 标准规范

IEEE 1609 协议标准1609.1~1609.4

IEEE 1609.2

IEEE 1609.2标准：车载无线通信的安全与信息交互

IEEE 1609.4标准：车载环境无线访问(WAVE)多频道操作修正

如何在V2X ITS协议栈中实现车辆间高效且安全的数据通信？请结合WAVE和IEEE 1609.x标准进行解答。

最新资源