PriMiRe: Privacy-Preserving Misbehavior Reporting for ETSI C-ITS

In Europe, the C-ITS Security Certificate Management System supplies pseudonymous credentials to valid stations, allowing them to authenticate each other when exchanging messages. Detecting misbehavior and evicting offenders from the C-ITS is challenging but must be addressed to maintain security and safety. The offending station must be reported and found guilty by the Misbehavior Authority (MA) in order to revoke its credentials and protect other stations. Collecting necessary evidence is hindered by privacy requirements, allowing potential attackers to use pseudonyms to obfuscate the source of misbehavior. Privacy-Preserving Misbehavior Reporting (PriMiRe) enables the MA to aggregate and analyze evidence for unique senders without revealing their real or pseudonymous identities, thus maintaining privacy requirements. It is shown that PriMiRe requires minor changes to the existing architecture and protocols, and additional data storage requirements are modest.