The security and privacy of smart vehicles

Hubaux, J.P.; Capkun, S.; Luo, Jun · 2004 · OpenAlex-citations

DOI: 10.1109/msp.2004.26

archive: archived pipeline: cataloged verified

Get this paper ↗ (DOI — opens at the source; we link to it, we don't host it)

Summary

This paper addresses the critical security and privacy challenges associated with the evolution of "smart vehicles," which are equipped with context-awareness capabilities, wireless communication, and onboard computing platforms. Motivated by the high costs and fatalities associated with traffic accidents, the authors argue that while information technology promises improved road safety and traffic management, the necessary shift toward wireless authentication and vehicle tracking introduces significant risks regarding driver privacy and system security. The authors note that these issues have been largely overlooked by the research community, despite the pressure to adopt generalized wireless authentication for safety mechanisms. The paper reviews modern automotive technologies, including event data recorders (EDRs), GPS receivers, and radar systems, and proposes a security architecture based on "electronic license plates." These plates utilize cryptographic identities, private/public key pairs, and digital certificates issued by cross-certified registration authorities. To protect privacy, the authors advocate for anonymity schemes using temporary pseudonyms, quantifying privacy protection through an entropy-based metric known as the degree of anonymity. The text details two primary methods for verifying vehicle location: tamper-proof GPS receivers and verifiable multilateration. The latter relies on roadside infrastructure and distance-bounding protocols, which use the finite speed of light to establish upper bounds on the distance between a vehicle and fixed base stations, thereby verifying location without requiring tamper-proof hardware in the vehicle. The authors identify several security threats, including impersonation attacks, denial-of-service via signal jamming, and GPS spoofing. They argue that electronic license plates are more resistant to impersonation than physical plates due to cryptographic certification. However, they highlight that GPS systems are vulnerable to spoofing and blocking, whereas verifiable multilateration offers a robust alternative by detecting distance enlargement attacks. The paper illustrates the application of these verified identities and locations in cooperative driving scenarios, such as automated coordination at blind crossings and highway entrances, which require lightweight group communication systems and shared symmetric keys under stringent real-time constraints. The significance of this work lies in its identification of the security and privacy hurdles that must be overcome to deploy smart vehicle technologies effectively. The authors conclude that bootstrapping the adoption of these systems is a formidable business challenge, particularly because safety mechanisms require widespread participation. They suggest a gradual deployment strategy, starting with professional vehicles and non-safety features like toll collection. Ultimately, the paper emphasizes that location verification is the cornerstone of cooperative safety mechanisms, and that defining clear boundaries for law enforcement access to vehicle data is essential for public acceptance and the successful integration of wireless security in automotive systems.

Provenance

The full processing record for this entry. Every stage of this paper's journey through the pipeline is logged — what ran, with which tool and model, how many attempts it took, and when it last completed.

Summary generated by qwen3.6-27b-prismaquant on 2026-06-26; verification: verified.

Topics

Ranked by relevance to this paper. Hover a topic for its definition.

• situational awareness

Information type

What kind of knowledge this paper contributes, grouped by family — independent of topic (what it is about) and method (how it was studied).

• Synthesis & Review: research agenda