Performance Evaluation of Pseudonym Reload over Cellular Technology

The implementation of security in Cooperative Intelligent Transport Systems (C-ITS) is highly recommended to authenticate and ensure the integrity of Cooperative Awareness Message (CAM) exchanged between vehicles. Modern networks must be reliable and optimized in terms of the use of resources. In Europe, the ETSI standardization institute has defined a PKI (Public Key Infrastructure) for C-ITS that is used to distribute certificates for each vehicle. To ensure that CAMs (Cooperative Awareness Messages) are generated by trusted vehicles, they have to be signed using these certificates. However, integrating signature and certificate within each sent CAM presents a high impact on the overload of the communication channel and the bandwidth, due to the added size to the sent CAMs, which is significant. In this paper, we propose a new lightweight authentication protocol based on the ETSI standard. Our protocol is dynamic and integrates few concepts allowing to smartly reduce the transmitted security information, which often presents the highest cost in network systems. First, we build a cluster to establish a trusted link between vehicles giving them the opportunity to exchange information using unsigned CAMs (without integrating certificate and signature). As a result, the verification and the signing processes are not always necessary, which saves processing time and results in smoother and faster communication. Furthermore, we added a process that aims to check the consistency of the CAMs of each vehicle in the cluster in real time to avoid an attack. Under the Omnet++ simulator and the Artery framework, we have demonstrated that our protocol is more efficient in terms of communication channel usage and latency, while still secured.

Cooperative Intelligent Transport Systems (C-ITS) have seen increased interest in recent years, with several ongoing activities and first practical implementations. While clearly V2X-communication will play a significant role in all C-ITS deployments, several key components, such as the wireless communication technology and the message formats, are still evolving. This calls for a modular approach when designing C-ITS infrastructure, especially when considering a real world urban environment. Such environments are characterized by heterogeneous traffic light hardware and traffic management systems.This paper focuses on the modular architecture of the C-ITS pilot in Dresden. For example, a highly flexible communication stack is developed for this special purpose. It fully supports the message types standardized by European Telecommunications Standards Institute (ETSI) on the one hand, while on the other hand allowing the rapid implementation and test of novel message types and contents. This went hand in hand with the development of a modular roadside unit, enabling the rapid implementation of service applications on its central processing unit. In combination with a cloud-based backend, a real-time C-ITS service platform with a hybrid communication concept is developed.This paper presents a modular architecture and best practice guidelines based on experiences of the C-ITS pilot in Dresden. First results of research topics, such as latency measurements, are shown.The ongoing C-ITS deployment in Dresden is part of the initiative Synchrone Mobilitat 2023, which aims at advancing Intelligent Transport Systems. Focusing on automated and connected driving in urban areas, the research and development projects under its umbrella initiate scientific and technological developments and provide comprehensive test facilities. Automated and connected driving in urban areas requires not only simulations and test drives on test sites but also enormous testing effort under real traffic conditions. The Dresden Testbed offers outstanding conditions to conduct real-world test with a multitude of test kilometers and the experience of different traffic scenarios.

Today, more and more vehicles on the road are being connected via roadside communication networks for a wide range of services, ranging from road safety and navigation applications to in-vehicle entertainment. Cooperative Intelligent Transport Systems (C-ITS) services are aiming to improve road safety, traffic management and environmental performance of road transportation by sharing data between vehicles and road operator’s infrastructure via roadside communication networks. This paper investigates the capacity requirements of roadside ITS-G5 and cellular communication networks for supporting the emerging C-ITS applications, based on the C-ITS pilot implemented by Transport Infrastructure Ireland (TII). The results indicate that although the current communication networks are able to support the capacity demand of C-ITS applications at a low penetration rate of C-ITS equipped vehicles during the early uptake of C-ITS, new measures are required to improve the capacity of roadside communication networks when the number of C-ITS applications or the penetration rate of C-ITS equipped vehicles on the road goes high.

Cooperative, connected and automated Intelligent Transportation System (ITS) aims to improve road traffic safety, comfort, security, and traffic management by sharing data/information among vehicles, infrastructure and road users. Cooperative ITS (C-ITS) also targets the reduction of environmental impact by the road transportation systems. Regarding self-driving vehicles, C-ITS plays a complementary role for enhancing on-board vehicle sensory data and thus making autonomous vehicles more robust and safe. In this paper we present the C-ITS platform, the test-cases and scenarios to be performed during the Lisbon Pilot of the AUTOCITS project. We also provide a description of the C-ITS Day-1 services, as simulated and also real-world events, that will be deployed and evaluated during the test-cases. Conventional, instrumented and autonomous vehicles will take part on the Lisbon Pilot, all equipped with on-board connected vehicular technologies. Two scenarios will be considered, motorway and urban-node scenarios, having distinct vehicles and test-cases, but all sharing the same C-ITS technology framework.

Cooperative Intelligent Transport Systems (C-ITS) aim to enhance road safety, traffic efficiency and environmental performance of road transportation by enabling communication between the vehicles and the road infrastructure. Today, vehicle manufacturers and road operators are investing significantly in C-ITS technology and infrastructure implementation to realise its potential benefits. In Europe, the C-Roads platform aims to harmonise the deployment of C-ITS infrastructure and services across Europe. As part of the C-Roads platform, Transport Infrastructure Ireland implemented C-ITS pilot infrastructure to deliver C-ITS services to road users via ITS-G5 and cellular communications. For the deployment of ITS-G5 Roadside Units along a 60 km distance of the pilot routes in Ireland, a radio coverage planning exercise was undertaken to optimise the deployment. Several technical and practical factors were taken into consideration during this exercise. This paper outlines Transport Infrastructure Ireland’s C-ITS pilot infrastructure, discusses the key technical and practical factors taken into consideration and summarises the results achieved. As a result of this radio coverage planning exercise, we were able to achieve over 50% cost savings on infrastructure deployment for C-ITS services via ITS-G5 technology on the M50 and M1 motorways.

In cooperative ITS, security and privacy protection are essential. Cooperative Awareness Message (CAM) is a basic V2V message standard, and misbehavior detection is critical for protection against attacking CAMs from the inside system, in addition to node authentication by Public Key Infrastructure (PKI). On the contrary, pseudonym IDs, which have been introduced to protect privacy from tracking, make it challenging to perform misbehavior detection. In this study, we improve the performance of misbehavior detection using observation data of other vehicles. This is referred to as collective perception message (CPM), which is becoming the new standard in European countries. We have experimented using realistic traffic scenarios and succeeded in reducing the rate of rejecting valid CAMs (false positive) by approximately 15 percentage points while maintaining the rate of correctly detecting attacks (true positive).

Vehicles have been connected for decades through over-the-air updates, infotainment systems, Wi–Fi, and Bluetooth interfaces. The emergence of cooperative intelligent transport systems (C-ITS) as the next generation of intelligent transport systems (ITS) has greatly expanded this connectivity. C-ITS is a key enabler for autonomous driving, providing real-time coordination between vehicles and infrastructure. By linking vehicles, infrastructure, road users, and cloud platforms through vehicle-to-everything (V2X) communication, C-ITS supports safer, more efficient, and intelligent transport. At the same time, expanded connectivity enlarges the cyberattack surface, exposing safety functions such as braking, steering, and traffic signal control to potential manipulation. This chapter contributes a literature-based conceptual mapping that uses a tri-level perspective to relate vulnerabilities to detection techniques. It pinpoints technical challenges, including false positives, latency, scalability, heterogeneity, and adversarial machine learning, and discusses strategies such as hybrid intrusion detection systems (IDS). To further enhance applicability, it presents methodologies including simulations, hardware-in-the-loop testbeds, and case studies based on C-Roads implementations. It further incorporates cybersecurity asset management and cybersecurity risk assessment as part of the C-ITS ecosystem, consistent with the NIST Cybersecurity Framework (CSF) and ISO/SAE 21434 standard, to enforce regulation and lifecycle-dependent security administration. The chapter also highlights the research challenges, which include asset-agnostic detection, insider and supply-chain threats, adversarial resilience, regulation alignment, and few real-world verifications, and provides a roadmap to further develop IDS research and practice toward C-ITS.

Intelligent Transport Systems (ITS) and Cooperative Intelligent Transport Systems (C-ITS) are of high significance, mainly due to the benefits they have in terms of operation of the transport network. Despite ITS and C-ITS importance in the operation of the transport network, there is a major knowledge gap regarding their development, way of operation and significance worldwide and especially among the responsible for their deployment public authorities. In order for such fragmentations to be tackled, an online training platform concerning the operation and impacts of ITS and C-ITS has been designed in the framework of the European Union's Horizon 2020 funded CAPITAL project. For the proper design of the CAPITAL Online Training Platform, two main approaches have been studied: capacity building and massive open online courses. The present study provides insight regarding the design and the context of the CAPITAL Online Training Platform.

Intelligent Transport Systems (ITS), and the specialised subset of them represented by Cooperative ITS (C-ITS), are part of the wider machine-to-machine communications, and software driven world. The aims of ITS and C-ITS are multifold but for the purposes of this book are mainly in improving safety of transport users and their transport modes. The chapter that follows covers some of the basics of security, including the contrast with safety and privacy, the role of privacy protection in the ITS context, and a review of the cryptographic countermeasures recommended for C-ITS using the certificate and signature schemes defined in IEEE 1609.2.

Cooperative Intelligent Transportation Systems (C-ITS) enable vehicles to be aware of objects that are not in line of sight, by interacting directly with each other and the surrounding road infrastructure. C-ITS promise to reduce traffic congestion, lessen the environmental impact of transportation, and most importantly, significantly reduce the number of (lethal) traffic accidents. As C-ITS is subject to strong network effects, adoption of C-ITS is a key driver of its (societal) benefits. Therefore, this paper estimates penetration rates of C-ITS equipped cars in the car park of Flanders, Belgium. Based on the preferred policy option with mandatory adoption, as proposed in the recent new Delegated Regulation of the European Commission, full penetration of C-ITS in the Flemish car park is expected later than twenty years after the mandate enters into force. Determination of C-ITS adoption numbers is valuable for a number of stakeholders, such as national and local governments, road authorities, technology providers and network operators. Additionally, penetration numbers allow Member States to ascertain to what extent C-ITS can contribute to the goal of zero traffic mortalities by 2050, as envisioned by the European Commission.

Today the public key technology enjoys wide acceptance and use. Countless network protocols and applications use it to guarantee strong authentication and privacy. Usability and maintainability of this technology remains problematic, however. It is still very cumbersome and time-consuming to set up an enterprise Public Key Infrastructure (PKI) that has relationships with external parties. The emergence of PKI bridges, while solving one set of problems, created a new one: management of distributed trust became much more difficult. Complexity of the global PKI mesh and its decentralized nature created a need for a service with a unified view of the global PKI. In this paper we propose a PKI search engine that can provide such a service. The engine supports facilities for certificate and certificate revocation list (CRL) discovery, testing and troubleshooting of extra-enterprise PKIs, certificate revocation status lookup, certification path construction and validation, all based on the Internet-mined and user-registered information.

Security threats are most common in e-commerce and e-business transactions. Public key infrastructure (PKI) is a framework on which the security services are established. It can provide various secure services in e-commerce and e-business transactions by providing a comprehensive infrastructure for issuing and managing public keys in the form of digital certificates to a set of users. During acquisition of companies, the multiple PKIs deployed by them must be interoperated. Hierarchical PKI is one of the most popular PKI trust models that the companies deploy as their security infrastructure. Considering the specialties of such context, an efficient scheme to merge hierarchical PKIs during acquisition of companies is proposed. The proposed merging process is simple, fast and low cost. Compared with the common ways of merging PKIs with cross-certification at the root, the certificate verification in new PKI is more efficient and straightforward. Also the employment cost of root certification authorities is reduced. In the proposed method, there is no cross-certification at the root and so certificate verification time reduces significantly as compared to the normal method of merging with cross-certification.

Current wireless network standards perform user authentication, signaling and data encryption, as well as message integrity protection, by utilizing only symmetric key methods. However, as mobile networks are evolving into full-IP and the communication is envisaged to change from second generation (2G) person-to-person model to fourth generation (4G) machine-to-machine model, there is greater demand to provide more flexible, reconfigurahle and scalable security mechanisms that can advance in a many-to-many trust relationship model. Employing public key methods in many-to-many schemes drops the requirement for a secure channel to transfer keys between two communication parties, thus providing the appropriate scalability to the whole system. With a large number of different network technologies and operators, expected in the future mobile communications environment, that should frequently and seamlessly interwork with each other, and a constantly increasing population of communication parties, capturing the full benefits of open channel key transfers and scaling public key methods requires Public Key Infrastructure (PKI). In this paper, we discuss and investigate different ways to take advantage of a proposed PKI system. From the network side, we investigate how PKI can provide future inter/intra mobile core network security, while from the user’s perspective we present solutions that far enhance authentication procedures and end-to-end communication model trust. We show that PKI offers the appropriate framework to overcome symmetric key based security inefficiencies, providing powerful solutions to protect both network core signaling and user’s data from potential intruders.KeywordsPKIMobile NetworksIKENetwork Domain SecuritySSL/TLSIPsec

PKI(Public Key Infrastructure) provides confidentiality, integrity, and non-repudiation services for etransaction and various countries around the world offer a e-commerce service by using PKI. These PKI technologies can be used in e-transaction between countries like e-trade area. To do this, an interoperability of PKI technology is necessary between different PKI domains. This paper introduces „Asia PKI Interoperability Guideline“ that was developed by the pilot project between Asia countries for Asia PKI interoperability and intends to present the possibility of PKI interoperability between countries.

Public key cryptography can uniquely enable trust within distributed settings. Employing it usually requires deploying a set of tools and services collectively known as a Public Key Infrastructure (PKI). PKIs have become a central asset for many organizations, due to distributed IT and users. Even though the usage of PKIs in closed and controlled environments is quite common, interoperability and usability problems arise when shifting to a broader, open environment. To make an effective trust judgment about a public key certificate, a PKI user needs more than just knowledge of that certificate: she also needs to be able to locate critical parameters such as the certificate repositories and certificate validation servers relevant to that certificate – and all the others the trust path she builds for it. Surprisingly, locating these resources and services remains a largely unsolved problem in real-world X.509 PKI deployment. This issue impacts especially on the usability of this technology and the interoperability of PKIs in open environments such as the Internet. In this paper, we present the design and prototype of a new and flexible solution for automatic discovery of the services and data repositories made available by a Certificate Service Provider (CSP). This contribution will take real-world PKI one step closer to enhancing usability of digital certificates and interoperability between PKIs.