Decentralized CRL Management for Vehicular Networks With Permissioned Blockchain

In vehicular networks, authentication technology provides a basic security means to achieve trusted communication between legitimate vehicles. Revocation checking for vehicle certificates is an indispensable procedure in the process of authentication to protect vehicular networks from attacks by non-legitimate vehicles. However, revocation checking introduces procedures that requires additional time to process which challenges latency-sensitive applications in vehicular networks. This challenge grows more evidently when considering the factor of privacy preservation. In this paper, we propose to offload partial revocation task to network edges to lighten the revocation process in vehicles. Particularly, we design a method to achieve decentralized Global Certificate Revocation List (GCRL) management in network edges using permissioned blockchain technologies. In the method, both tamper-proof property and quick synchronization of the GCRL are guaranteed. Besides, our method can detect illegal revocation behaviours by validation in vehicles. Finally, we build a prototype of our proposed solution based on Hyperledger Fabric, and compare with Proof-of-Work scheme in terms of blockchain synchronization latency performance.