FFHA: Fast and Full-Secure Handover Authentication With Prefilter-Then-Batch for Hybrid Blockchain-Enabled 6G-V2I

Abstract

Vehicle-to-infrastructure (V2I) handover authentication constitutes a cornerstone for 6G-enabled Internet of Vehicles (IoV). Nevertheless, existing schemes face challenges including high latency, privacy breaches, poor scalability, and signature injection attacks in batch verification. This article proposes a fast and fully secure handover authentication (FFHA) scheme for 6G-V2I. FFHA adopts a hybrid blockchain architecture for efficient synchronization of authentication data, supporting seamless intradomain and interdomain handover. A two-layer fast authentication mechanism is designed that combines Cuckoo Filter and anonymous Chameleon Hash for privacy-preserving identity verification, eliminating expensive digital signatures while achieving anonymity, unlinkability, and traceability. By integrating physical unclonable functions, biometric verification, and key escrow freeness, FFHA provides comprehensive full-side security. Formal security verification via burrows-abadi-needham (BAN) logic, automated validation of internet security protocols and applications (AVISPA), and the real-or-random model confirms its resistance to common attacks and the semantic security of session keys. Performance evaluations show remarkable reductions in computational overhead: at a 10% error rate, FFHA outperforms individual verification by 18.5% and aggregate-then-locate by 79.3%; at over 50% error rate, the gains increase to 61.9% and 92.3%, proving its high practicality for large-scale, high-mobility 6G-V2I scenarios.