Abstract

Industrial Internet of Things (IIoT) is a new type of Internet of Things (IoT), which enables sensors to merge with several smart devices to monitor machine status, environment, and collect data from industrial devices. On the other hand, cloud computing provides a good platform for storing crowdsourced data of IIoT. Due to the semi-trusted nature of cloud computing and communication through open channels, the IIoT environment needs security services such as confidentiality and authenticity. One such solution is provided by the identity-based signcryption. Unfortunately, the identity-based signcryption approach suffers from the key escrow problem. Certificateless signcryption is the alternative of identity-based signcryption that can resolve the key escrow problem. Here, we propose a lightweight certificateless signcryption approach for crowdsourced IIoT applications with the intention of enhancing security and decreasing the computational cost and communication overhead. The security and efficiency of the proposed approach are based on the hyper elliptic curve cryptosystem. The hyper elliptic curve is the advance version of the elliptic curve having small parameters and key size of 80 bits as compared to the elliptic curve which has 160-bits key size. Further, we validate the security requirements of our approach through automated validation of Internet security protocols and applications (AVISPA) tool with the help of high level protocol specification language (HLPSL). Moreover, our lightweight and secured scheme will attract low resource devices and will become a perk in the environment of IIoT.

Highlights

  • Nowadays, the Internet of Things (IoT) is a growing technology, which enables conventional devices to communicate with each other, and includes modern devices, e.g., sensors, mobile phones, smart camera, etc

  • Crowdsourcing empowers utilizing a substantial pool of workers, the nature of contributions that unequivocally relies on expert capacities and inspiration which varies from worker to worker

  • To avoid the escrow problem of the key, a certificateless signcryption was tossed by Barbosa and Farshim [17], which simultaneously fulfills the property of certificateless encryption and signature in a single step

Read more

Summary

Introduction

The Internet of Things (IoT) is a growing technology, which enables conventional devices to communicate with each other, and includes modern devices, e.g., sensors, mobile phones, smart camera, etc. To improve the cost efficiency Zheng [9] coined a new type of security technique called signcryption This method permits the originator of the message by combining the concept of signature and encryption in a single step. Public key infrastructure (PKI) has some deficiencies such as certificate distribution, storage, and manufacturing difficulties [12] To improve these limitations, Shamir [13] was the first who introduced the concept of identity-based cryptography. To build a new approach, elliptic curve cryptography utilizes fewer parameter sizes, public and private key size, identity, and certificate size, etc., further, the security hardiness and efficiency of the scheme based on 160-bit small keys, as compared to Bilinear pairing and RSA [23].

Motivation and Contributions
Outlines of Paper
Related Work
Preliminary
Proposed Model
Generic Model for Certificateless Signcryption
Proposed CertificatelessSigncryption
Correctness
Confidentiality
Replay Attack
Integrity
Authentication
Unforgeability
Computational Cost
10. Communication Overhead
11. Conclusions
12. Future Work
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call