Self-Authentication in IoT Transportation Systems by Tran Van Hau, VNU-HCM

VIETNAM NATIONAL UNIVERSITY HO CHI MINH CITY HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY TRAN VAN HAU SELF-AUTHENTICATION IN THE IOTS/TRANSPORTATION SYSTEM Major: Computer Science Major code: 8480101 MASTER’S THESIS HO CHI MINH CITY, July 2023 THIS THESIS IS COMPLETED AT HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY – VNU-HCM Supervisor: Dr. TRUONG TUAN ANH Examiner 1: Assoc. NGUYEN TUAN DANG Examiner 2: Dr. PHAN TRONG NHAN This master’s thesis is defended at HCM City University of Technology, VNU- HCM City on July 11th, 2023.

Master’s Thesis Committee: 1. TRAN MINH QUANG 2. NGUYEN THI AI THAO 3. NGUYEN TUAN DANG 4.

PHAN TRONG NHAN 5. DANG TRAN TRI Approval of the Chairman of Master’s Thesis Committee and Dean of Faculty of Computer Science and Engineering after the thesis being corrected (If any). CHAIRMAN OF THESIS COMMITTEE DEAN OF FACULTY OF COMPUTER SCIENCE AND ENGINEERING Assoc. TRAN MINH QUANG Page |i VIETNAM NATIONAL UNIVERSITY - HO CHI MINH CITY SOCIALIST REPUBLIC OF VIETNAM HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY Independence – Freedom - Happiness THE TASK SHEET OF MASTER’S THESIS Full name: TRAN VAN HAU Student ID: 1970505 Date of birth: April 2nd, 1997 Place of birth: HCM City Major: Computer Science Major ID: 8480101 I.

THESIS TITLE: SELF-AUTHENTICATION IN THE IOTS/TRANSPORTATION SYSTEM BẢO VỆ TÍNH RIÊNG TƯ TRONG TỰ XÁC THỰC CỦA HỆ THỐNG GIAO THÔNG THÔNG MINH II. TASKS AND CONTENTS: 1. Research and evaluate authentication schemes in Intelligent Transportation System. Research on mathematics for self-authentication.

Research on applying Blockchain in Intelligent Transportation System. Propose a self-authentication scheme with Blockchain support. Implement and evaluate the proposed scheme with respect to security. THESIS START DAY: February 6th, 2023 IV.

THESIS COMPLETION DAY: June 10th, 2023 V. TRUONG TUAN ANH Ho Chi Minh City, June 9th, 2023 SUPERVISOR CHAIR OF PROGRAM COMMITTEE (Full name and signature) (Full name and signature) Dr. Truong Tuan Anh DEAN OF FACULTY OF COMPUTER SCIENCE AND ENGINEERING (Full name and signature) P a g e | ii ACKNOWLEDGEMENTS I would like to express my profound gratitude to my thesis instructor Dr.Truong Tuan Anh for his invaluable guidance and support throughout every stage of the thesis process. A special thanks goes to my family and friends at the BKU, who have faith in me and been a constant source of encouragement on this journey.

I would also like to acknowledge my colleagues at TMA Solutions, who have shared with me the tasks so that I can focus on this research. Last but not least, I want to thank all other individuals from the faculty and IMP who have in one way or the other contributed to this research effort. Without their support, this achievement would not have been possible. Self-Authentication In Ho Chi Minh City University of Technology The Iots/Transportation System International Master Program P a g e | iii ABSTRACT With the evolution of the world, technology has become an integral part of a new transportation model called Intelligent Transportation System (ITS).

Within ITS, Vehicular Adhoc Network (VANET) is a crucial infrastructure component that provides features such as traffic monitoring and road safety messages. However, the process of broadcasting is susceptible to privacy threats because the user's identity is transmitted in clear text. Therefore, alongside Connectivity and Bottleneck, Privacy can be seen as a significant challenge in ITS. Privacy and authentication are closely linked, as vulnerabilities can be exposed during anomalous actions followed by successful authentication.

Hence, to protect the privacy, authentication with a Pseudonym-based System is deployed, relying on a Trusted Authority (TA) as a pseudonym supervisor. However, the connection between TA and vehicles can lead to Connectivity or Bottleneck issues in rural and urban areas respectively. As a result, authentication is considered as a front line of defense against Privacy breaches, but Connectivity and Bottleneck concerns necessitate self-authentication, which authenticates independently of TA. The thesis examines Privacy by analyzing related studies and devises an improved self-authentication method to protect it based on Pseudonym-based System and Blockchain.

The proposed scheme employs BLS Signatures for efficient synchronization between different stages of the system, from registration to revocation; while requiring only a single connection to TA during the registration stage. Furthermore, the Smart Contract running on Blockchain lessens the burden on TA to give room for ITS monitoring functions. Self-Authentication In Ho Chi Minh City University of Technology The Iots/Transportation System International Master Program P a g e | iv TÓM TẮT LUẬN VĂN Với sự phát triển của thế giới, công nghệ đã trở thành một phần không thể thiếu trong mô hình giao thông mới được gọi là Hệ thống Giao thông Thông minh (ITS). Trong ITS, Mạng Adhoc dành cho phương tiện giao thông (VANET) là một thành phần cơ sở hạ tầng quan trọng cung cấp các tính năng như giám sát giao thông và thông báo an toàn đường bộ.

Tuy nhiên, quá trình phát sóng dễ bị đe dọa về quyền riêng tư vì danh tính của người dùng được truyền dưới dạng văn bản thường. Do đó, bên cạnh vấn đề về Kết nối, Quyền riêng tư có thể được coi là một thách thức đáng kể trong ITS. Quyền riêng tư và xác thực được liên kết chặt chẽ, vì các lỗ hổng có thể dễ dàng khai thác thông qua các hành vi bất thường sau khi xác thực thành công. Do đó, để bảo vệ Quyền riêng tư, xác thực bằng Hệ thống dựa trên bút danh được triển khai, dựa vào Cơ quan đáng tin cậy (TA) với tư cách là người giám sát bút danh.

Tuy nhiên, kết nối giữa TA và phương tiện vẫn tồn đọng những vấn đề về hiện thực ở cả nông thôn và thành thị. Nhìn chung, xác thực được coi là tiền tuyến bảo vệ chống lại các vi phạm Quyền riêng tư, nhưng các mối lo ngại về Kết nối đòi hỏi phải tự xác thực, một cách độc lập với TA. Luận án xem xét Quyền riêng tư bằng cách phân tích các nghiên cứu liên quan và đề xuất một Hệ thống tự xác thực cải tiến để bảo vệ Quyền riêng tư dựa trên Hệ thống dựa trên bút danh và Blockchain. Hệ thống đề xuất sử dụng Chữ ký BLS để đồng bộ hóa hiệu quả giữa các giai đoạn khác nhau của tự xác thực, từ đăng ký đến thu hồi; trong khi chỉ yêu cầu một kết nối duy nhất đến TA trong giai đoạn đăng ký.

Hơn nữa, Hợp đồng thông minh chạy trên Blockchain sẽ giảm bớt tác vụ cho TA để nhường chỗ cho các chức năng giám sát chính của ITS. Self-Authentication In Ho Chi Minh City University of Technology The Iots/Transportation System International Master Program Page |v COMMITMENT I understand that plagiarism is an unethical academic practice and is considered a serious offense. Therefore, I hereby commit to avoiding any instances of plagiarism in my thesis. All information sources and references utilized in this thesis will be appropriately cited, ensuring that the work is entirely original and free from any plagiarism.

I also plight to conduct an extensive review of any literature I have referenced or utilized, ensuring that any quotes and ideas are cited accordingly. Furthermore, I will adhere to proper academic standards and guidelines, including but not limited to proper citation format, citation style, and ethical consideration for the authorship of cited materials. Should any plagiarism be detected in this thesis, I fully acknowledge that it could result in severe consequences, including disqualification of the work. Therefore, I pledge to take full responsibility for ensuring that this thesis is entirely original, authentic, and free from any plagiarism.

Self-Authentication In Ho Chi Minh City University of Technology The Iots/Transportation System International Master Program P a g e | vi Table of Contents THE TASK SHEET OF MASTER’S THESIS. v Table of Contents .vi Table of Figures .ix Table of Tables. 6 2 Overview of authentication schemes in ITS .1 Public Key Infrastructure (PKI) .4 Pseudonym-based System. 15 3 Self-authentication scheme in ITS with Blockchain support .3 Elliptic Curve over Finite Field .4 Elliptic Curve Cryptography (ECC).

24 Self-Authentication In Ho Chi Minh City University of Technology The Iots/Transportation System International Master Program P a g e | vii 3.3 Pairing-Based Cryptography (PBC) .4 BGLS Signatures definition .5 BGLS Signatures construction .3 Proposed self-authentication scheme .1 Security on BLS Signatures .4 Unlinkability and forward unlinkability. 71 Self-Authentication In Ho Chi Minh City University of Technology The Iots/Transportation System International Master Program P a g e | viii 5 Conclusion and Future work. 74 Self-Authentication In Ho Chi Minh City University of Technology The Iots/Transportation System International Master Program P a g e | ix Table of Figures Figure 1.1 Enhanced VANET model with Trusted Authority supported [25].1 Illustration of GSIS protocol under Group Signature scheme [18] .2 Illustration of sample authentication protocol under Pseudonym-Identity scheme [23] .3 Illustration of key derivation with Smart Contract supported [38] .4 Illustration of Blockchain-enabled edge computing based on Cooperation scheme [44] .1 A catalog of elliptic curves with the region shown is x, y ∈ [−3,3] [50]18 Figure 3.2 Two types of a Singular Curve (Cusp and Node) [52] .3 Group Law on point addition of P+Q+R=0 [53] .4 Group Law on point addition with P=Q comes to a tangent to EC [53] 21 Figure 3.6 Relationship between order and subgroup order on cyclic curves [56] .7 Elliptic Curve Cryptography in comparison with Pairing-Based Cryptography [65] .8 BLS Signatures on Message Signing step [72] .9 BLS Signatures on Signature Verification step [72] .11 ITS system model with Blockchain supported feature .12 Proposed scheme on System initialization stage .13 Proposed scheme on Vehicle Registration stage .14 ITS system model on proposed scheme.15 Proposed scheme on Message exchange stage (Normal condition) .16 Proposed scheme on Message exchange stage (No-Internet condition) .17 Proposed scheme on Revocation List (RL) update stage .18 Performance test of proposed scheme on local environment .19 Performance test of proposed scheme on Blockchain network .55 Self-Authentication In Ho Chi Minh City University of Technology The Iots/Transportation System International Master Program Page |x Table of Tables Table 3.1 Performance of proposed scheme compared to others .2 Cost of deployment test for proposed scheme on Ethereum network .3 Cost of deployment for proposed scheme on different Blockchain networks .56 Self-Authentication In Ho Chi Minh City University of Technology The Iots/Transportation System International Master Program Page |1 1 Introduction 1.1 Context New technologies are constantly emerging, leading to a world that moves at a rapid pace. The movement of billions of related journeys each day makes transportation the most complex system on the planet.

Technology has brought about the development of Intelligent Transportation Systems (ITS), which involves equipping vehicles with electronic devices. The changes in transportation policy beginning in the 1980s were brought about due to safety and environmental concerns, and the realization that traditional transportation programs were not well-suited for future needs. The cost-effective nature of technology has supported the advancement of traffic management, with new technology developments such as microprocessors, computers, sensors, and communication technologies having direct implications for transportation [1, 2]. The global market size of ITS is currently estimated at USD 23 billion, and may likely reach USD 100 billion by 2030 [3-5].

The adoption of ITS is expected to expand in regions such as Asia Pacific and Europe, with North America holding a 40% market share of the worldwide market by 2021. Advanced Transportation Management Systems (ATMS) which is the most widely used ITS category because they effectively monitor traffic flow and detect incidents. Generally, ITS applications offer solutions to reduce environmental impact, promote overall mobility and improve road safety. ITS development involves improving infrastructure, and Vehicular Adhoc Network (VANET) is considered a core infrastructure component.

VANET has its origins in Mobile Adhoc Network (MANET), and security discussions about ITS and VANET often utilize the two terms interchangeably.