Cognitive radio is emerging as a technology to alleviate spectrum shortage and to improve spectrum utilization. In database-driven cognitive radio networks (CRNs), secondary users (SUs) must provide their locations to the database to enable channel allocation, which results in severe privacy violation. As SUs are usually energy-constrained or fast-moving, how to provide efficient channel allocation solutions for SUs while guaranteeing security and privacy becomes a main challenge in database-driven CRNs. In this paper, we propose a lightweight privacy-preserving scheme to protect the privacy of SUs and to allocate channels efficiently with the aid of base stations (BSs). In order to save the energy of SUs and to reduce the delay of channel allocation, only lightweight operations are required to achieve authentication and privacy preservation of SUs. For further improving the efficiency of channel allocation, the database periodically predicts and pre-allocates channels to BSs for the purpose of allocating channels to SUs locally. We perform the security verification using the automated protocol verifier tool Proverif to show that our scheme resists various attacks. Performance analysis reveals that our scheme significantly reduces computation and communication cost of SUs and incurs the shortest delay in channel allocation.

认知无线电作为一种缓解频谱短缺和提高频谱利用率的技术正在兴起。在数据库驱动的认知无线电网络（CRN）中，辅助用户（SU）必须将其位置提供给数据库才能启用信道分配，这会严重侵犯隐私。由于SU通常是能量受限或快速移动的，因此如何在为SU提供有效的信道分配解决方案的同时保证安全性和隐私性成为数据库驱动CRN的主要挑战。在本文中，我们提出了一种轻量级的隐私保护方案，以保护SU的隐私并借助基站（BS）高效地分配信道。为了节省SU的能量并减少信道分配的延迟，仅需轻量级操作即可实现SU的身份验证和隐私保护。为了进一步提高信道分配的效率，数据库周期性地预测和预分配信道给BS，以将信道分配给本地SU。我们使用自动协议验证程序工具Proverif进行安全验证，以表明我们的方案可以抵抗各种攻击。性能分析表明，我们的方案大大减少了SU的计算和通信成本，并在信道分配中产生了最短的延迟。我们使用自动协议验证程序工具Proverif进行安全验证，以表明我们的方案可以抵抗各种攻击。性能分析表明，我们的方案大大降低了SU的计算和通信成本，并在信道分配中产生了最短的延迟。我们使用自动协议验证程序工具Proverif进行安全验证，以表明我们的方案可以抵抗各种攻击。性能分析表明，我们的方案大大降低了SU的计算和通信成本，并在信道分配中产生了最短的延迟。