QKBAKA: A Quantum-Key-Based Authentication and Key Agreement Scheme for Internet of Vehicles

With the rapid development of intelligent connected vehicles, networked vehicles carry a large amount of sensitive data. Secure authentication and controlled access to data in the Internet of Vehicles (IoV) are essential to protect vehicular private data. We propose a quantum-key-based authentication and key agreement scheme for IoV, called QKBAKA. Its features are as follows: 1) Role-Based Data Access Control Strategy: Access to private data requires authorization and management by vehicle owners. 2) Vehicle privatization manages quantum session keys. The quantum random number generator (QRNG) deployed on the vehicle side generates quantum session keys and realizes secure agreement through multilevel quantum keys. The multilevel quantum key includes the quantum prefilled key, the quantum protection key and the quantum session key. 3) Secure and Efficient Authentication Scheme: QKBAKA uses quantum keys, symmetric encryption algorithms, and hash algorithms. It is relatively secure for quantum computing and has better performance. Security analysis shows that QKBAKA is secure under the real-or-random (ROR) model and meets the security requirements of IoV. Performance evaluation shows that, compared with the existing schemes, QKBAKA reduces computation and communication costs by 74.83%–98.59% and 28.7%–83.1%. Simulation and real vehicle tests show that QKBAKA has good communication stability and feasibility.