Abstract:Vehicular Ad-Hoc Networks(VANETs) provide various safety services and improve people's travel experience by sharing traffic information among vehicles and roadside infrastructures.However,the communication security of VANETs and the privacy preservation of vehicles need to be solved urgently.To solve these problems,firstly,the scheme of Thumbur et al.is proved that it cannot resist public key substitution attacks.Secondly,a certificateless signature scheme for VANETs is proposed based on the zero-trust architecture (ZTA).Specifically,the trusted authority and the vehicle generate a tuple of the public key and the private key without secure channels.The scheme is proved unforgeable based on the elliptic curve discrete logarithm problem under the random oracle model and satisfies anonymity and traceability.Performance analysis shows that,compared with related schemes,the proposed scheme is superior to them in terms of computation cost and communication overhead.