A SECURE VANET MAC PROTOCOL FOR DSRC APPLICATIONS

Yi Qian 1, Kejie Lu 2, and Nader Moayeri 1

1 2
National Institute of Standards and Technology Department of Electrical and Computer Engineering
100 Bureau Drive, Stop 8920 University of Puerto Rico
Gaithersburg, MD 20899-8920, USA Mayaguez, PR 00681, USA

Abstract — Vehicular ad hoc networking is an and decision / control actions in support of these
important component of Intelligent Transportation objectives. Communication-based active safety is viewed
Systems. The main benefit of vehicular ad hoc network as the next logical step towards proactive safety systems.
(VANET) communication is seen in active safety systems These systems provide an extended information horizon to
that increase passenger safety by exchanging warning warn the driver or the vehicle of potentially dangerous
messages between vehicles. Other applications and situations at an early stage. The allocation of 75 MHz in
private services are also permitted in order to lower the the 5.9 GHz frequency band licensed for DSRC in North
cost and to encourage VANET deployment and adoption. America, which supports seven separate channels, may
Dedicated Short Range Communications (DSRC) is a key also enable the future delivery of rich multimedia contents
enabling technology for VANET applications and to vehicles at short- to medium-range via either V2V or
services. There are many challenges that must be V2R VANET links [2] [3].
addressed before VANETs can be successfully deployed. In spite of the ongoing academic and industrial research
Among these challenges is designing of security efforts on VANETs, many research challenges remain.
mechanisms to secure VANETs against abuse, and From the network perspective, security is one of the most
designing of efficient medium access control (MAC) significant challenges. Vehicle safety applications are
protocols so that safety related and other application among the major drivers for VANETs. Where people’s
messages can be timely and reliably disseminated through lives are at stake, it is of course essential to secure
VANETs. In this paper we propose a secure MAC VANETs against abuse. On the other hand, like all the
protocol for VANETs, with different message priorities other wireless networks, a MAC protocol should play a
for different types of applications to access DSRC crucial role in scheduling application packet transmissions
channels. Our simulations and analysis show that the fairly and efficiently in VANETs, according to the quality
proposed MAC protocol can provide secure of service (QoS) requirements of the applications.
communications while guarantee the reliability and
In this paper, we propose a secure MAC protocol for
latency requirements of safety related DSRC applications
VANETs, with different message priorities for different
for VANETs.
types of applications to access DSRC channels. The secure
communication protocol is designed using time-stamp,
Keywords: VANET, security, safety, MAC, DSRC.
digital signature, and trust certificate to guarantee the
freshness of the message, message authentication and
1. INTRODUCTION integrity, message non-repudiation, and privacy and
Intelligent Transportation Systems (ITS) have been anonymity of the senders.
developed to improve the safety, security and efficiency of In the rest of this paper, we first give a brief
the transportation systems and enable new mobile background on VANETs in Section 2. We present our
applications and services for the traveling public. The field secure MAC protocol for VANET DSRC applications in
of inter-vehicular communications (IVC), including both Section 3, followed by simulation and performance
vehicle-to-vehicle communications (V2V) and vehicle-to- analysis in Section 4. Conclusions are given in Section 5.
roadside communications (V2R), also known as VANET, is
recognized as an important component of ITS in various 2. BACKGROUND ON VANETS
national plans [1]. The ITS architecture provides a
framework for the much needed overhaul of the highway 2.1. VANET BASICS AND STANDARDS
information system infrastructure. The immediate impacts In a VANET, each vehicle is equipped with the
include alleviating the vehicular traffic congestions and technology that allows the vehicle to communicate with
improving operation management in support of public safety each other as well as with the roadside infrastructure, e.g.,
goals, such as collision avoidance. Equipping vehicles with base stations also known as roadside units (RSUs), located
various kinds of on-board sensors, and V2V and V2R in some critical sections of the road, such as traffic lights,
communication capabilities will allow large-scale sensing intersections, or stop signs, to improve the driving

978-1-4244-2324-8/08/$25.00 © 2008 IEEE. 1

This full text paper was peer reviewed at the direction of IEEE Communications Society subject matter experts for publication in the IEEE "GLOBECOM" 2008 proceedings.
 experience and make driving safer. By using such (WAVE) Resource Manager. It defines the services and
communication devices, also known as on-board units interfaces of the WAVE resource manager application as
(OBUs), vehicles can communicate with each other as well well as the message data formats. It provides access for
as with RSUs. A VANET is a self-organized network that applications to the other architectures. P1609.2 defines
enables communications between vehicles and RSUs, and the security, secure message formatting, processing, and
RSUs can be connected to a backbone network, so that many message exchange. P1609.3 defines routing and transport
other network applications and services, including Internet services. It provides an alternative to IPv6. It also defines
access, can be provided to the vehicles. Figure 1 shows an the management information base for the protocol stack.
example of a VANET. P1609.4 deals mainly with specification of the multiple
channels in the DSRC standard.
The WAVE stack uses a modified version of the IEEE
RSU 802.11a, known as IEEE 802.11p [5], for its Medium
Access Control (MAC) layer protocol. It uses CSMA/CA
as the basic medium access scheme for link sharing and
uses one control channel to set up transmissions, which
then are carried over some transmission channels. The
Emergency
Event
802.11p PHY layer is expected to work in the 5.850 –
V2V
5.925 GHz DSRC spectrum in North America, which is a
V2R
licensed ITS Radio Services Band in the United States. By
using the OFDM system, it provides both V2V and V2R
wireless communications over distances up to 1000 m,
Figure 1. An Example of a VANET while taking into account the environment, that is, high
absolute and relative velocities (up to 200 km/h), fast
The U.S. Federal Communications Commission (FCC) multipath fading and different scenarios (rural, highway,
recently allocated 75 MHz of DSRC spectrum at 5.9 GHz to and urban). Operating in 10-MHz channels, it should allow
be used exclusively for V2V and V2R communications [2]. data payload communication rates of 3, 4, 5, 6, 9, 12, 18,
The primary purpose is to enable public safety applications 24, and 27 Mb/s. By using the optional 20 MHz channels,
that save lives and improve vehicular traffic flow. Private it allows data payload capabilities up to 54 Mb/s.
services are also permitted in order to lower the network
deployment and maintenance costs to encourage DSRC 2.2. VANET APPLICATIONS
development and adoption. The DSRC spectrum is divided In the following we summarize the existing
into seven 10-MHz wide channels as shown in Figure 2. applications and several potential applications that have
Channel 178 is the control channel, which is generally been proposed for VANETs. As studied in [6] and [7],
restricted to safety communications only. The two channels VANETs would support life-critical safety applications,
at the edges of the spectrum are reserved for future advanced safety warning applications, electronic toll collection,
accident avoidance applications and high-power public safety Internet access, group communications, roadside service
communication usages. The rest are service channels and are finder, etc. In [7] we also elaborated on the functions of
available for both safety and non-safety applications. each application that shall be provided in the MAC layer
Frequency (GHz)
and the network layer, so as to fulfill the requirements of
5.850
these applications.
5.855
Ch 172 Accident avoidance, Figure 3 lists the characteristics of the example
5.865 safety of life
Ch 174 Service channel VANET applications discussed in [7], with the priorities of
Ch 175 Optional
5.875
20 MHz the application message classes, allowable latency as the
Ch 176 Service channel
5.885 major QoS requirements of the applications, the network
5.895
Ch 178 Control channel traffic types, and the message transmission ranges.
Ch 180 Service channel
5.905 Ch 181
Optional Message
20 MHz Applications Priority Allowable Latency Network Traffic Range
Ch 182 Service channel
(ms) Type (m)
5.915
Ch 184 High power,
Life-Critical Safety Class 1 100 Event 300

5.925 long range Safety Warning Class 2 100 Periodic 50 - 300

Electronic Toll Collection Class 3 50 Event 15

Figure 2. DSRC Channel assignment in North America Internet Access Class 4 500 Event 300
Group Communications Class 4 500 Event 300
The IEEE has completed the standards IEEE P1609.1, Roadside Service Finder Class 4 500 Event 300

P1609.2, P1609.3, and P1609.4 for vehicular networks and

Figure 3. Example VANET Applications
recently released them for trial use [4]. P1609.1 is the
standard for the Wireless Access for Vehicular Environments

978-1-4244-2324-8/08/$25.00 © 2008 IEEE. 2

This full text paper was peer reviewed at the direction of IEEE Communications Society subject matter experts for publication in the IEEE "GLOBECOM" 2008 proceedings.
 For safety messaging, the amount of information to be reserved for future DSRC applications. We assume here
transmitted is relatively small, but the transmission reliability that there are four internal queues per OBU for the four
as well as the latency and packet dissemination are of great different priority message classes, and each message will
importance. be queued in a queue according to its priority. Class 1
message will always access the channel 178 with the
2.3. PREVIOUS WORK ON SECURITY IN VANETS highest priority, if the channel 178 is full, then it will
In the past few years, considerable effort has been spent access either of the channels 174, 176, 180, or 182 with the
in research on VANET networking protocols and highest priority; Class 2 message will always access the
applications. However, research on security threats and channel 178 with the 2nd highest priority, if the channel 178
solutions of VANETs started only recently. While most of is full, then it will access either of the channels 174, 176,
the previous studies on VANET security concentrate on 180, or 182 with the 2nd highest priority; Class 3 and Class
particular security mechanisms and solutions on VANET 4 message cannot access the channel 178, and it will access
communications (e.g., [7-10]), there are not many works on channels 174, 176, 180, or 182 with the 3rd or 4th priority
secure medium access control. In [11] the authors presented a respectively. We assume that there is a scheduler in each
secure MAC protocol for inter-vehicle communication in OBU, which handles the internal collision. The scheduler
conjunction with message priority highway safety messaging. will allow higher priority messages to be transmitted
The proposed approach uses IEEE 802.11e standard, before lower priority messages. We adopt a preemptive
provides proportional service differentiation in VANET in policy, that an arriving high priority (Class 1 and Class 2)
terms of security, reliability and delay. The work of [11], safety related message will be scheduled to get the channel
however, has not considered the DSRC channel structures immediately before the completion of the current low
with the DSRC application scenarios. priority (Class 3 and Class 4) message transmission. Figure
In the WAVE stack, IEEE 802.11p MAC [5] aims at 4 shows the traffic priority classes and the DSRC channels
providing the minimum set of specifications required to that each class can access.
ensure interoperability between wireless devices attempting Message Priority
to communicate in potentially rapidly changing Classes DSRC Channels
communication environments and in situations where Class 1 178, 174, 176, 180, and 182
transactions must be completed in a timeframe, much shorter Class 2 178, 174, 176, 180, and 182
than that of 802.11 based wireless local area networks Class 3 174, 176, 180, and 182
(WLAN). The IEEE 1609.2 standard addresses the issues of
Class 4 174, 176, 180, and 182
securing WAVE messages against eavesdropping, spoofing,
and other attacks. IEEE 1609.2 security infrastructure is Figure 4. Message Priority Classes and the DSRC
based on industry standards for Public Key Infrastructure Channels
(PKI), including the support of Elliptic Curve Cryptography
(ECC), WAVE certificate formats, and hybrid encryption 3.2. THE SECURE PROTOCOL
methods, in order to provide secure services for WAVE As it is discussed in [7], VANET security requires
communications. However, IEEE 1609.2 standard does not message authentication and integrity, message non-
define vehicle identification and privacy protection, and has repudiation, entity authentication, access control, message
left a lot of open issues. confidentiality, availability, privacy and anonymity, and
liability identification for the safety related applications
3. A SECURE MAC PROTOCOL FOR DSRC (Class 1 and Class 2).
APPLICATIONS For non-safety related messages (Class 3 and Class 4),
In this section we propose a secure MAC protocol in different security requirements may be established as
consideration of the DSRC channel structures, and to compared to those of Class 1 and Class 2. We assume that
accommodate the DSRC applications while providing other security mechanisms will address the security
adequate security for VANETs. The proposed secure MAC requirements of Class 3 and Class 4 messages. We will
protocol will use part of the IEEE 1609.2 security focus our study in this paper on the impact of secure safety
infrastructure including PKI and ECC, the secure messages and the priority based medium access control
communication message format for VANETs, and the mechanism for all DSRC applications.
priority based channel access according to the QoS Similar to [9], [10], and [11], we assume that each
requirements of the applications. OBU on a vehicle has a secure database, which stores all
3.1. MESSAGE PRIORITIES OF THE VANET cryptography components used for signing and verifying
each message. Each vehicle has to have a valid certificate
COMMUNICATIONS
usually issued by a central trusted party called Certificate
As discussed in Section 2.1 from Figure 2, the two Authority (CA). PKI will be used for certificates issued by
channels at the edges of the spectrum (Ch 172 & Ch 184) are a CA. For the privacy of a vehicle, such as identity and

978-1-4244-2324-8/08/$25.00 © 2008 IEEE. 3

This full text paper was peer reviewed at the direction of IEEE Communications Society subject matter experts for publication in the IEEE "GLOBECOM" 2008 proceedings.
 travel route, a set of anonymous keys can be used to sign by the RSU. Figure 5 and Figure 6 show a V2R based
each message that will be changed periodically. These keys VANET and a V2V based VANET respectively.
can be preloaded in the secure database of the OBU for a
long period of time, e.g., for one year until next yearly
license plate registration. Each key is certified by the issuing
CA and has a short lifetime. In case of an accident or other
law investigation, the authority can track back to the real
identity of the vehicle, using Electronic License Plate (ELP)
[8]. This can also help to prevent non-repudiation in case of
accidents.
For safety related (Class 1 and Class 2) messages,
RSU
message authentication and integrity, message non-
repudiation, and privacy and anonymity of the senders are
very important. Confidentiality of the safety message itself is
not needed, so it can be transmitted in plaintext [9], [11]. Figure 5. A V2R based VANET
Under the PKI solution, before an OBU sends a safety
message, it signs it with its private key and includes the CA’s
certificate as follows:
V Æ *: M, T, SigPrKv{H[M|T]}, CertV (1)
where, V is the sender of the safety message, * represents any
receivers, M is the safety message sent by plaintext, T is the
time-stamp to guarantee the freshness of the message (is also
sent in plaintext), SigPrKv{H[M|T]} is the hash of the message
M and time-stamp T, signed by the private key of the sender
KV, and CertV is the pre-stored certificate of the sender issued
by any CAs. In (1), the total overhead per packet is 140-Byte
with 56-Byte signature and 84-Byte certificate.
Note that attackers cannot alter both message and time- Figure 6. A V2V based VANET
stamp, due to digital signature. Since no other OBU knows
the private key of the sender, no other OBU can alter the 4.1. V2R BASED VANET COMMUNICATIONS
content in the packet. The certificate of the sender is included In our simulation, we assume that each vehicle has five
in the packet, so that other vehicles can extract the sender’s interface cards, each of which is operating on a different
public key and verify the correctness of each message. Once frequency band. More over, for each channel, we apply the
other OBUs receive a message, they retrieve the sender’s basic parameters of IEEE 802.11. In particular, the main
public key, KV from CertV in order to decrypt the signature to parameters are listed in Table 1 below.
obtain H[M|T], hash the message and time-stamp, compare
Table 1. Simulation parameters
the hash with H[M|T] and if both of them are the same, the
message is verified. Otherwise the message is falsified and PARAMETER VALUE
will be ignored. Basic rate 1 Mb/s
4. PERFORMANCE ANALYSIS Data rate 1 Mb/s
In this section we present our simulation and analysis to SIFS 10 us
show the performance results of the proposed secure MAC Slot time 20 us
protocol. There are two scenarios of the VANETs: V2R
based VANETs, and V2V based VANETs. In V2R based DIFS 50 us
VANETs, we assume that the vehicular communication is Size of RTS/CTS/ACK 160/112/112 bits
controlled by RSUs. Each RSU acts as an access point that Size of frame header 224 bits
broadcasts all the messages received from one vehicle to all
others in the range. In V2V based VANETs, on the other Size of preamble 48 bits
hand, we assume there is no RSU infrastructure exist, each Minimum window size 31
OBU on a vehicle has to rely on its own for communications. Maximum window size 1023
It has to broadcast messages to all the nearby nodes. There is
no acknowledgement in the V2V based VANET, unlike in Retry limits 5
the V2R based VANET where acknowledgement is created In addition, we assume that the packet arrival of each
class of traffic on every node is exponential with average

978-1-4244-2324-8/08/$25.00 © 2008 IEEE. 4

This full text paper was peer reviewed at the direction of IEEE Communications Society subject matter experts for publication in the IEEE "GLOBECOM" 2008 proceedings.
 interval be 100 ms. We also assume that the packet size is for different types of applications to access DSRC
fixed to 300 Bytes. Since the packet size is rather small, we channels. The secure communication protocol is designed
use the basic access method instead of the RTS/CTS scheme. to guarantee the freshness of the message, message
authentication and integrity, message non-repudiation, and
3 privacy and anonymity of the senders. Simulation results
Class 1
Class 2 show that the proposed MAC protocol can provide secure
Throughput (Mb/s)

Class 3 communications while guarantee the QoS requirements of

2 Class 4 safety related VANET DSRC applications. Future work is
continuing on the performance of V2V based secure
communication scenario.
1 REFERENCES
[1] U.S. Department of Transportation, Intelligent
Transportation Systems (ITS) Home,
0 http://www.its.dot.gov/index.htm
0 20 40 60 80 100 [2] Dedicated Short Range Communications (DSRC)
Number of nodes Home.
http://www.leearmstrong.com/DSRC/DSRCHomeset.
Figure 7. Throughput vs. the number of nodes htm
[3] Crash Avoidance Metric Partnership, “Vehicle Safety
20
Communication Project Final Report”, available
Class 1
through U.S. Department of Transportation.
Class 2 [4] IEEE Draft P1609.0/D01, February 2007.
15
Class 3 [5] IEEE Draft P802.11p/D2.0, November 2006.
Delay (ms)

Class 4
[6] Qing Xu, Tony Mak, Jeff Ko, and Raja Sengupta,
10
“Vehicle-to-Vehicle Safety Messaging in DSRC”,
Proceedings of the 1st ACM international workshop
5 on Vehicular ad hoc networks (VANET’04), October
1, 2004, Philadelphia, PA.
0
[7] Yi Qian, and Nader Moayeri, “Design Secure and
0 20 40 60 80 100
Application-Oriented VANETs”, Proceedings of IEEE
VTC’2008-Spring, Singapore, May 11-14, 2008.
Number of Nodes
[8] Maxim Raya, Panos Papadimitratos, and Jean-Pierre
Figure 8. Delay vs. the number of nodes Hubaux, “Securing Vehicular Communications”,
IEEE Wireless Communications, October 2006.
In Fig.7, we show the throughput performance of the [9] Maxim Raya, and Jean-Pierre Hubaux, “Securing
proposed MAC scheme. We can observe that, when the vehicular ad hoc networks”, Journal of Computer
number of nodes in the network is small, all traffic will be Security, Vol.15, No.1, pp.39-68, 2007.
accepted and be increased linearly with the increasing of the [10] Xiaodong Lin, Xiaoting Sun, Pin-Han Ho, and
number of nodes. However, if the number of nodes increases Xuemin Shen, “GSIS: A Secure and Privacy-
to a certain value, then the performance of lower classes will Preserving Protocol for Vehicular Communications”,
be decrease, while the throughput of Class 1 can still grow. IEEE Transactions on Vehicular Technology, Vol.56,
Figure 8 illustrates the corresponding delay performance No.6, pp.3442-3456, November 2007.
of the proposed scheme. We can see that the average delay [11] Chakkaphong Suthaputchakun, and Aura Ganz,
for Class 1 traffic is rather stable with the increase of the “Secure Priority Based Inter-Vehicle Communication
number of nodes. The other three classes, on the other hand, MAC Protocol for Highway Safety Messaging”,
will be extremely large at certain thresholds. Proceedings of IEEE ISWCS 2007, October 16-19,
2007, Trondheim, Norway.
5. CONCLUSIONS
Vehicular ad hoc networking is a promising wireless
communication technology for improving highway safety
and information services. In this paper we proposed a secure
MAC protocol for VANETs with different message priorities

978-1-4244-2324-8/08/$25.00 © 2008 IEEE. 5

This full text paper was peer reviewed at the direction of IEEE Communications Society subject matter experts for publication in the IEEE "GLOBECOM" 2008 proceedings.