A Self-Generating Pseudonym-Based Certificateless Conditional Privacy Preservation Authentication Scheme for IoV

With the development of smart cars, the Internet of Vehicles (IoV) has garnered significant attention. To ensure message anonymity in IoV, researchers have proposed various privacy-preserving schemes. Among them, pseudonym-based certificateless privacy-preserving schemes are widely favored for their efficiency. These schemes are mainly divided into three types: those based on Key Generation Centers (KGCs), Tamper-Proof Devices (TPDs), and Road-Side Units (RSUs). However, they face challenges such as heavy workloads on the KGC, risks of system-wide private key exposure, and high registration costs. Recent studies have attempted to address these issues by delegating the generation of pseudonyms and key pairs to users, while simplifying the KGC's role to distributing a small set of basic authentication parameters, enabling users to autonomously derive the temporary parameters required for anonymous communication. Although these schemes improve efficiency, they still exhibit significant security deficiencies. Building upon this research direction, we refine the underlying mechanism and propose a self-generating pseudonym-based scheme. The proposed design maintains a lightweight architecture while substantially enhancing protection against forgery attacks, active attacks by the KGC, and persistent threats from identified malicious users. Security proofs in the Random Oracle Model (ROM) demonstrate that our scheme effectively resists Type-I adversaries (who can replace user public keys but lack knowledge of the KGC's private key) and Type-II adversaries (who possess the KGC's private key but cannot replace user public keys), as well as various attacks. Performance analysis shows that our scheme achieves a better balance between security and efficiency compared to existing schemes.