Certificateless Dual-Layer Anonymous Privacy-Preserving Authentication Scheme for the IoV Environment

The Internet of Vehicles (IoV) enables vehicles and roadside infrastructure to exchange safety-related information to improve traffic efficiency and driving safety. However, the highly dynamic topology and open wireless channels impose stringent requirements on authentication efficiency, scalability, and privacy preservation. Existing authentication schemes still suffer from high computational overhead and insufficient security guarantees in dynamic vehicular environments. To address these challenges, we propose certificateless dual-layer anonymous privacy-preserving authentication scheme (CL-DAPA), an efficient certificateless anonymous privacy-preserving authentication scheme for the IoV. CL-DAPA adopts a dual-layer anonymity architecture composed of a static anonymous identity layer and a bidirectionally self-evolving pseudonym layer implemented via a double-seed mechanism, enabling autonomous pseudonym generation with conditional traceability. The proposed scheme avoids expensive bilinear pairing operations, supports efficient batch verification without assuming a fixed verifier role, and introduces an adaptive batch-based invalid-signature identification mechanism to accelerate faulty-signature localization after batch-verification failure. Malicious vehicle revocation is performed at the seed level, avoiding the maintenance and distribution of large-scale pseudonym revocation lists and enabling fast revocation. The performance and security analyses demonstrate that CL-DAPA provides superior efficiency and privacy protection compared to existing CPPA schemes, especially in environments with high communication volumes and resource constraints.