Balancing auditability and privacy in vehicular networks

ABSTRACT

We investigate how to obtain a balance between privacy and audit requirements in vehicular networks. Challenging the current trend of relying on asymmetric primitives within VANETs, our investigation is a feasibility study of the use of symmetric primitives, resulting in some efficiency improvements of potential value. More specifically, we develop a realistic trust model, and an architecture that supports our solution. In order to ascertain that most users will not find it meaningful to disconnect or disable transponders, we design our solution with several types of user incentives as part of the structure. Examples of resulting features include anonymous toll collection; improved emergency response; and personalized and route-dependent traffic information.

REFERENCES

• 1: Naouel Ben Salem , Jean-Pierre Hubaux , Markus Jakobsson, Reputation-based Wi-Fi deployment protocols and security analysis, Proceedings of the 2nd ACM international workshop on Wireless mobile applications and services on WLAN hotspots, October 01-01, 2004, Philadelphia, PA, USA [doi>10.1145/1024733.1024738]
• 2: Sonja Buchegger , Jean-Yves Le Boudec, Performance analysis of the CONFIDANT protocol, Proceedings of the 3rd ACM international symposium on Mobile ad hoc networking & computing, June 09-11, 2002, Lausanne, Switzerland [doi>10.1145/513800.513828]
• 3: J. Blum and A. Eskandarian. The Threat of Intelligent Collisions. In IT Professional, 6(1):24-29, Jan.-Feb. 2004.
• 4: David L. Chaum, Untraceable electronic mail, return addresses, and digital pseudonyms, Communications of the ACM, v.24 n.2, p.84-90, Feb. 1981 [doi>10.1145/358549.358563]
• 5: Z. Desptovic and K. Aberer. Trust and Reputation in P2P Networks. In 1st Interdisciplinary Symposium on Online Reputation Mechanisms, 2003.
• 6: George Danezis , Roger Dingledine , Nick Mathewson, Mixminion: Design of a Type III Anonymous Remailer Protocol, Proceedings of the 2003 IEEE Symposium on Security and Privacy, p.2, May 11-14, 2003
• 7: Sastry Duri , Marco Gruteser , Xuan Liu , Paul Moskowitz , Ronald Perez , Moninder Singh , Jung-Mu Tang, Framework for security and privacy in automotive telematics, Proceedings of the 2nd international workshop on Mobile commerce, September 28-28, 2002, Atlanta, Georgia, USA [doi>10.1145/570705.570711]
• 8: Federal Communications Commission. FCC 99-305. FCC Report and Order, October 1999.
• 9: Philippe Golle , Dan Greene , Jessica Staddon, Detecting and correcting malicious data in VANETs, Proceedings of the 1st ACM international workshop on Vehicular ad hoc networks, October 01-01, 2004, Philadelphia, PA, USA [doi>10.1145/1023875.1023881]
• 10: David Goldschlag , Michael Reed , Paul Syverson, Onion routing, Communications of the ACM, v.42 n.2, p.39-41, Feb. 1999 [doi>10.1145/293411.293443]
• 11: Amir Herzberg , Markus Jakobsson , Stanislław Jarecki , Hugo Krawczyk , Moti Yung, Proactive public key and signature systems, Proceedings of the 4th ACM conference on Computer and communications security, p.100-110, April 01-04, 1997, Zurich, Switzerland [doi>10.1145/266420.266442]
• 12: Jean-Pierre Hubaux , Srdjan Capkun , Jun Luo, The Security and Privacy of Smart Vehicles, IEEE Security and Privacy, v.2 n.3, p.49-55, May 2004 [doi>10.1109/MSP.2004.26]
• 13: D. Houser and J. Wooders. Reputation in Auctions: Theory and Evidence from eBay. Working Paper 00-01, University of Arizona, 2001.
• 14: M. Jakobsson, S. Capkun, and J. P. Hubaux. Secure and Privacy-Preserving Communication in Hybrid Ad hoc Networks. Technical Report IC/2004/10, EPFL-DI-ICA, January 2004.
• 15: M. Jakobsson and M. Yung. Distributed Magic Ink DSS Signatures. In Proceeding of Eurocrypt '97, 1997.
• 16: Jiejun Kong , Xiaoyan Hong, ANODR: anonymous on demand routing with untraceable routes for mobile ad-hoc networks, Proceedings of the 4th ACM international symposium on Mobile ad hoc networking & computing, June 01-03, 2003, Annapolis, Maryland, USA [doi>10.1145/778415.778449]
• 17: P. Karger and F. Yair. Security and Privacy Threats to ITS. In The Second World Congress on Intelligent Transport Systems, pp. 2452--2458, November 1995.
• 18: S. Micali. Fair Cryptosystems. In Proceedings of Crypto, 1992.
• 19: Pietro Michiardi , Refik Molva, Core: a collaborative reputation mechanism to enforce node cooperation in mobile ad hoc networks, Proceedings of the IFIP TC6/TC11 Sixth Joint Working Conference on Communications and Multimedia Security: Advanced Communications and Multimedia Security, p.107-121, September 26-27, 2002
• 20: A. Perrig, R. Canetti, J. D. Tygar, and D. Song. The TESLA Broadcast Authentication Protocol. RSA CryptoBytes, 5:(2):2--13, 2002.
• 21: M. Raya and J.-P. Hubaux. The Security of Vehicular Networks. In EPFL Technical Report IC/2005/009, 2005.
• 22: M. Raya and J.-P. Hubaux. Security Aspects of Inter-Vehicle Communications. In Swiss Transport Research Conference(STRC) 2005, March 2005.
• 23: ZMT02 M. Zarki, S. Mehrotra, G. Tsudik, and N. Venkatasubramanian. Security Issues in a Future Vehicular Network. In European Wireless, 2002.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication

General Terms:
Algorithms, Design, Management, Security, Verification

Keywords:
audit, incentive, light-weight, privacy, symmetric