🤖 AI Summary
This study addresses the lack of effective authentication and secure communication in existing remote automated valet parking systems during passenger drop-off and pick-up. To overcome this limitation, the paper proposes SecLAVP, a novel protocol that introduces, for the first time in this context, a three-factor authentication mechanism combining passwords, biometrics, and smart cards, along with a session key agreement scheme enabling mutual vehicle-user authentication at designated drop-off and pick-up points. The protocol is formally proven secure under the Real-Or-Random (ROR) model and validated through AVISPA simulations and comprehensive security analysis, demonstrating resilience against man-in-the-middle attacks and compliance with 15 essential security properties. Experimental results confirm that SecLAVP achieves practical deployment feasibility with acceptable communication and computational overheads while maintaining efficient scheduling performance.
📝 Abstract
Long-range autonomous valet parking (LAVP) is increasingly adopted to alleviate traffic congestion and parking difficulties. For large-scale parking demand, reservation can improve parking management. However, existing schemes mainly focus on parking request verification and parking check-in, and do not adequately protect identity legitimacy and communication security during passenger drop-off and pick-up. To address this problem, we propose SecLAVP, a provably secure three-factor authentication and key agreement protocol for LAVP reservation services. SecLAVP combines passwords, biometrics, and smart cards. With assistance from the drop-off/pick-up point (DP), the passenger and the autonomous vehicle (AV) achieve mutual authentication and establish a session key for secure communication. In the Real-Or-Random (ROR) model, we formally prove that SecLAVP provides session-key security. AVISPA simulations show that SecLAVP resists man-in-the-middle attacks, while informal analysis demonstrates that it satisfies 15 defined security goals. Finally, performance evaluation in terms of communication overhead, computational overhead, and scheduling shows that SecLAVP is feasible for practical deployment.