Assume that a municipality has traffic sensors distributed over streets. It broadcasts this data over the Internet so citizens (and robot driven vehicles) can improve their trip planning. The system requirements are as follows:
Many different instantiations of EMSSresult in efficient schemes which satisfy these requirements. The following scheme offers low overhead with high verification probability. Each packet has two hashes, and the length of each hash chain element is chosen uniformly distributed over the interval . Each hash is bits long, hence, only one hash is necessary for verification. A signature packet is sent every packets, or every five seconds, which is not necessary to achieve robustness in this case, but to ensure that the verification delay is less than ten seconds, with high probability. Each signature packet carries the hash of five data packets. The simulation predicts an average verification probability per packet of .
The computation overhead is minimal. The sender only needs to compute one
signature every five seconds, and only hash functions per second. The
communication overhead is low also. Each data packet carries bytes
containing the hash of two previous packets. The signature packet
contains five hashes and a signature, and its length is hence bytes plus
the signature length. Assuming a bit RSA signature, the signature packet
is bytes long. The average per-packet overhead is therefore about
bytes, which is much lower than previous schemes, which we review in
section 4.