Subversion-Resistant Identity-Based Aggregate Signature With Reverse Firewalls for IoV

Internet of vehicle (IoV) is essential in intelligent transportation systems by enabling interaction and integration of information. However, IoV is vulnerable to tamper and forgery attacks without secure authentication. Identity-based aggregate signature (IBAS) is crucial in guaranteeing identity authentication and information integrity, thereby building secure authentications. With signature compression and batch verification, IBAS improves the efficiency of signatures transmission and verification, thereby reducing computing and storage demands on machines. Unfortunately, Snowden revealed that powerful adversaries replaced pure cryptographic algorithms with subverted ones to corrupt machines and undermine their security. To address this issue, we propose a fully and universal identity-based aggregate signature with reverse firewalls (FU-IBAS-RF), vehicles and the private key generator (PKG) are equipped with RFs to sanitize information transmitted throughout the entire process. Additionally, we propose an identity-based aggregate signature with reverse firewalls (IBAS-RF), RFs are deployed for each vehicle to sanitize information generated during the signing phase. Moreover, we prove that both FU-IBAS-RF and IBAS-RF not only inherit the security and functional property of IBAS but also are subversion-resistant. Finally, we conduct experiments and indicate that RFs accounts for approximately 18% of computation costs across three distinct security levels in both schemes. Therefore, both FU-IBAS-RF and IBAS-RF achieve stronger security with efficiency compared with existing IBAS.