Heterogeneous Signcryption Scheme Research Articles

A heterogeneous signcryption scheme with Cryptographic Reverse Firewalls for IoT and its application

The Snowden leaks exposed the truth that skilled attackers can access users’ devices and steal their private information. Although public key encryption is widely used and theoretically secure, it has hidden vulnerabilities when implemented in practice. This is especially problematic when employing communication channels among heterogeneous protocols within the Internet of Things (IoT), it becomes apparent that these channels lack adequate protection to address the diverse nature of IoT systems. This work proposes a novel Heterogeneous Online/Offline Signcryption with Cryptographic Reverse Firewalls (HOOS-CRF). The scheme enables a secure communication channel between the sender in an Identity-based cryptosystem (IBC) and the receiver in the Public Key Infrastructure (PKI) cryptosystem with CRF deployed. To reduce computational costs, we split the signcryption algorithm into two stages: online and offline. Most resource-intensive operations are performed during the offline stage, which operates without any knowledge of the message being processed. The HOOS-CRF scheme provides confidentiality, authentication, and defense against insider security attacks. Meanwhile, we prove the security of the HOOS-CRF using the random oracle model and demonstrate its high efficiency and practicality through experiments. Lastly, the scheme’s relevance to IoT-driven healthcare applications is demonstrated.

Heterogeneous Signcryption Scheme With Group Equality Test for Satellite-Enabled IoVs

Heterogeneous Signcryption Scheme With Group Equality Test for Satellite-Enabled IoVs

A lattice-based efficient heterogeneous signcryption scheme for secure network communications

Ensuring the security of transmitted content is an important task in network communication. Signcryption technology combines signature and encryption operations in a single step to achieve message authentication and confidentiality. In practical applications, users are usually in different cryptographic systems, the ordinary signcryption technology cannot realize communication between two different cryptographic systems. And the ciphertext structure of the existing signcryption schemes is relatively complex, signcryption is not efficient. Therefore, in order to solve the problem of efficient communication between different cryptosystems and ensure quantum security, this paper proposes a lattice-based efficient heterogeneous signcryption scheme for secure network communications. This signcryption scheme accomplishes signcryption through matrix operations and hash functions, which avoids complex signcryption structures, efficiently realizes bidirectional message communication between identity-based cryptosystems and certificateless cryptosystems.

An Efficient Online/Offline Heterogeneous Signcryption Scheme With Equality Test for IoVs

The privacy and authenticity of propagated messages are two important goals in Internet of Vehicles (IoVs). Most of existing signcryption schemes can satisfy above requirements, but they are rigidly compatible for a single cryptosystem rather than a heterogeneous system consisting of different cryptographic mechanisms. In this paper, we construct an efficient online/offline heterogeneous signcryption scheme with equality test (OOHSC-ET), in which the signcrypted message is delivered from certificateless cryptosystem (CLC) to public key infrastructure (PKI) system for information compatibility. Besides, this construction allows the cloud server to perform the equality test, to determine whether the different ciphertexts contain the same plaintext without unsigncryption, as a feasible solution for searching ciphertext in heterogeneous environment. In addition, the signcryption phase can be separated into online and offline manners, the former conducts the lightweight operation, while the latter initializes the heavy and preparative operation. In this way, the security and efficiency are both preserved. Finally, the security proof and performance analysis demonstrate that the OOHSC-ET scheme is more suitable for the payment operation in terms of IoVs.

An efficient heterogeneous signcryption scheme for internet of things

In today’s world, Internet of Things (IoT) has penetrated every aspect of us. The security of IoT is challenging because of the open nature of wireless communication and limited resources of sensor nodes (SNs). In this paper, we propose an efficient heterogeneous signcryption scheme from IoT to an Internet server, in which the server is in a public key infrastructure (PKI) environment, while the IoT is in a certificateless cryptosystem (CLC) environment. The proposed scheme is briefly referred to as CP-EHSC. CLC can settle the drawbacks of key escrow in identity-based cryptography (IBC) and public key certificate management in PKI. At the same time, PKI is suitable for the server since it has been widely adopted on the Internet. Our proposed scheme can provide security proof in the random oracle model (ROM). Performance analysis shows that the proposed scheme not only achieves great optimization in calculation cost and communication consumption but also makes great progress in total energy consumption. In addition, we illustrate the practical applicability of our proposed scheme by providing a realistic use case scenario.

Cross Domain Heterogeneous Signcryption Scheme with Equality Test for WBAN

The rapid development of wireless sensors has accelerated the popularity of wireless body area network (WBAN). WBAN use multiple sensors to collect the patient’s body data, and the data is transferred to the medical cloud for processing and analyzing. In order to protect the data in the medical cloud, some heterogeneous signcryption schemes that support equality test have been proposed. However, we observe that these schemes use the same cryptographic parameters in different cryptographic systems. In addition, most of these schemes cannot resist the replay attack (RRA) or know session temporary key attack (RKSTKA). To deal with these problems, this paper presents a cross domain heterogeneous signcryption scheme with equality test (CDSCET) for WBAN. In CDSCET, the ciphertexts are from certificateless cryptographic system to public key infrastructure, where two different cryptosystems use different cryptographic parameters. CDSCET can realize confidentiality, integrity, authentication, RRA and RKSTKA. Moreover, compared with three latest schemes, CDSCET has reduced the total computation cost by at least 56.46%.

A Conditional Privacy Preserving Heterogeneous Signcryption Scheme for Internet of Vehicles

The Internet of Vehicles (IoVs) is a wireless network of intelligent and autonomous vehicles and Roadside Units (RSUs), which work together to improve transportation services. On the one hand, this revolutionary mode of transportation optimizes traffic efficiency and reduces congestion and accidents; on the other hand, it raises security and privacy concerns. As a result, keeping the security and privacy aspects of such vital systems should be a top concern, as security and privacy flaws can have devastating implications. In addition, each vehicle's on-board unit (OBU) has a certain amount of processing and storage power. As a result, in areas with high traffic density, vehicles that need to verify messages have a very high computational overhead. In this article, we propose a conditional privacy-preserving heterogeneous signcryption scheme for IoV utilizing Hyperelliptic Curve Cryptography (HECC) operation. The security robustness of the proposed scheme has been evaluated with the Random Oracle Model (ROM), a formal security evaluation method. In addition, relevant existing schemes are compared to the proposed scheme in terms of computation and communication costs. The findings demonstrate that the proposed scheme is both efficient and secure, validating its viability.

Efficient heterogeneous signcryption scheme based on Edge Computing for Industrial Internet of Things

In recent years, the Industrial Internet of Things (IIoT) has played an indispensable role in the age of intelligence. The data of IIoT is extremely private and valuable. Therefore, privacy protection and secure communication in the IIoT have been the focus of attention. Since terminal devices in the IIoT collect massive amounts of sensitive data in real time, traditional cloud computing architectures cannot satisfy the requirements of the IIoT. Edge computing is an emerging computing paradigm to solve the problems of delay and bandwidth in traditional cloud computing architectures. In edge computing architecture, one-to-many communication is a secure and highly efficient communication method. Due to the complex heterogeneity of the IIoT, it faces various potential threats. In order to solve the dilemma mentioned above, we propose an efficient heterogeneous signcryption scheme based on edge computing for IIoT to achieve multi-message and multi-receiver communication between edge servers and data users, where the edge server belongs to identity-based cryptography while data users belong to certificateless cryptography. In the random oracle model, our proposed scheme is proved to satisfy confidentiality and unforgeability based on the discrete logarithm assumption and the computational Diffie–Hellman assumption. Experimental results indicate that our proposal achieves better performance than existing schemes. Hence, our scheme has more advantages for IIoT.

An Efficient and Conditional Privacy-Preserving Heterogeneous Signcryption Scheme for the Internet of Drones.

The Internet of Drones (IoD) is a network for drones that utilizes the existing Internet of Things (IoT) infrastructure to facilitate mission fulfilment through real-time data transfer and navigation services. IoD deployments, on the other hand, are often conducted in public wireless settings, which raises serious security and privacy concerns. A key source of these security and privacy concerns is the fact that drones often connect with one another through an unprotected wireless channel. Second, limits on the central processing unit (CPU), sensor, storage, and battery capacity make the execution of complicated cryptographic methods onboard a drone impossible. Signcryption is a promising method for overcoming these computational and security limitations. Additionally, in an IoD setting, drones and the ground station (GS) may employ various cryptosystems in a particular region. In this article, we offer a heterogeneous signcryption scheme with a conditional privacy-preservation option. In the proposed scheme, identity-based cryptography (IBC) was used by drones, while the public key infrastructure (PKI) belonged to the GS. The proposed scheme was constructed by using the hyperelliptic curve cryptosystem (HECC), and its security robustness was evaluated using the random oracle model (ROM). In addition, the proposed scheme was compared to the relevant existing schemes in terms of computation and communication costs. The results indicated that the proposed scheme was both efficient and secure, thereby proving its feasibility.

Heterogeneous Signcryption Scheme From PKI to IBC With Multi-Ciphertext Equality Test in Internet of Vehicles

Heterogeneous Signcryption Scheme From PKI to IBC With Multi-Ciphertext Equality Test in Internet of Vehicles

A heterogeneous signcryption scheme for smart grid with trusted multi-ciphertext equality test.

Energy utilization rates have been largely improved thanks to the wide application of smart grids, thereby realizing the reliable, economic and efficient operation of the grids. However, such an application is also accompanied by many security issues. In response to the many problems within existing security schemes, such as not supporting the communication between heterogeneous cryptosystems, low security levels and a low data retrieval efficiency, a heterogeneous signcryption (HSC) scheme that supports a trusted multi-ciphertext equality test (MET) is proposed. The adoption of the HSC helps to identify secure communications from identity-based cryptosystems to certificateless cryptosystem, eliminates the certificate management problems in the traditional public key cryptography scheme, and ensures the confidentiality and authentication of power data. The introduction of the MET technology can avoid the high cost of equality test calculations after grouping ciphertexts in pairs. Using blockchain and smart contract technologies ensure the credibility of test results and eliminates the reliance on trusted cloud servers. Under the random oracle model, on the basis of the bilinear Diffie-Hellman, the computational Diffie-Hellman and the q-strong Diffie-Hellman problems, this paper proves that the scheme proposed herein meets the requirements of indistinguishability and one-way security under adaptive choice ciphertext attacks, and the unforgeability under the adaptive choice message attack. From the findings of the analysis, it has been shown that the proposed scheme satisfies more security attributes and requires lower computational overhead compared to similar schemes.

A Pairing-Free Heterogeneous Signcryption Scheme for Unmanned Aerial Vehicles

During the past few years, as Internet of Things develops rapidly, the applications of unmanned aerial vehicle (UAV) technology have been increasingly widely used. Meanwhile, the efficiency and security issues of UAV communication have brought about widespread attention of many researchers in different fields. In an open wireless network, the attacks on UAV communication mainly include eavesdropping, tampering, interrupting, forgery, etc. Signcryption is an appropriate method to address these security problems. However, the existing signcryption schemes are not suitable for UAVs with limited resources and ground station (GS) that needs to process a large number of messages from UAVs. Moreover, in a certain area, UAVs and a GS may belong to different cryptosystems. Therefore, in this article, we came up with a heterogeneous signcryption scheme for UAVs to communicate to a GS (HSC-U2G) without bilinear pairing operation, where UAVs belong to identity-based cryptography (IBC) while the GS belongs to public-key infrastructure (PKI). Moreover, our scheme provides identity privacy for UAVs and supports batch verification for the GS. Using the random oracle model, we demonstrate HSC-U2G can achieve insider security for confidentiality as well as unforgeability. After that, HSC-U2G is compared with several important related works and we provide all experimental results to show the efficiency.

HSC-MET: Heterogeneous signcryption scheme supporting multi-ciphertext equality test for Internet of Drones.

Internet of Drones (IoD) is considered as a network and management architecture, which can enable unmanned aerial vehicles (UAVs) to collect data in controlled areas and conduct access control for UAVs. However, the current cloud-assisted IoD scheme cannot efficiently achieve secure communication between heterogeneous cryptosystems, and does not support multi-ciphertext equality tests. To improve the security and performance of traditional schemes, we propose a heterogeneous signcryption scheme (HSC-MET) that supports multi-ciphertext equality test. In this paper, we use a multi-ciphertext equality test technique to achieve multi-user simultaneous retrieval of multiple ciphertexts safely and efficiently. In addition, we adopt heterogeneous signcryption technology to realize secure data communication from public key infrastructure (PKI) to certificateless cryptography (CLC). At the same time, the proposed scheme based on the computation without bilinear pairing, which greatly reduces the computational cost. According to the security and performance analysis, under the random oracle model (ROM), the confidentiality, unforgeability and number security of HSC-MET are proved based on the computational Diffie-Hellman (CDH) problem.

Intelligent federated learning on lattice‐based efficient heterogeneous signcryption

Signcryption technology combines signature and encryption operations in a single step to achieve message authentication and confidentiality. The ordinary signcryption technology cannot realize communication between two different cryptographic systems. Therefore, to implement efficient communication between different cryptosystems and resist quantum attacks, this paper proposes a lattice-based efficient heterogeneous signcryption scheme. The heterogeneous signcryption scheme is proved to be secure assuming the hardness of small integer solution and learning with errors problems. Then this paper applies the lattice-based efficient heterogeneous signcryption scheme to the federated learning system to achieve the transmission of confidential information, and designs an intelligent federated learning system on lattice-based efficient heterogeneous signcryption. This system realizes federated learning and the quantum security of data transmission while preserving private data.

An Access Control Scheme Using Heterogeneous Signcryption for IoT Environments

When the Wireless Sensor Network (WSN) is combined with the Internet of Things (IoT), it can be employed in a wide range of applications, such as agriculture, industry 4.0, health care, smart homes, among others. Accessing the big data generated by these applications in Cloud Servers (CSs), requires higher levels of authenticity and confidentiality during communication conducted through the Internet. Signcryption is one of the most promising approaches nowadays for overcoming such obstacles, due to its combined nature, i.e., signature and encryption. A number of researchers have developed schemes to address issues related to access control in the IoT literature, however, the majority of these schemes are based on homogeneous nature. This will be neither adequate nor practical for heterogeneous IoT environments. In addition, these schemes are based on bilinear pairing and elliptic curve cryptography, which further requires additional processing time and more communication overheads that is inappropriate for real-time communication. Consequently, this paper aims to solve the above-discussed issues, we proposed an access control scheme for IoT environments using heterogeneous signcryption scheme with the efficiency and security hardiness of hyperelliptic curve. Besides the security services such as replay attack prevention, confidentiality, integrity, unforgeability, non-repudiations, and forward secrecy, the proposed scheme has very low computational and communication costs, when it is compared to existing schemes. This is primarily because of hyperelliptic curve lighter nature of key and other parameters. The AVISPA tool is used to simulate the security requirements of our proposed scheme and the results were under two backbends (Constraint Logic-based Attack Searcher (CL-b-AtSER) and On-the-Fly Model Checker (ON-t-FL-MCR)) proved to be SAFE when the presented scheme is coded in HLPSL language. This scheme was proven to be capable of preventing a variety of attacks, including confidentiality, integrity, unforgeability, non-repudiation, forward secrecy, and replay attacks.

An efficient heterogeneous blockchain-based online/offline signcryption systems for internet of vehicles

An essential goal of the Internet of Vehicles (IoV) is to allow vehicles’ peer connections and contact a service provider through a secure communication channel. However, privacy and authentication are considered the main objectives of secure communication. In this paper, we propose an efficient Online/Offline signcryption of heterogeneous systems based on blockchain to secure data sharing between the IoV and internet servers. The blockchain prevents tampering with compatibility information. Further, the smart contract addresses the weakness of internet servers, such as passing incorrect data to the IoV nodes. The proposed protocol satisfies the security requirements of IoV, such as integrity, authentication, unforgeability, and confidentiality in a single logical step. We introduce the construction of our Efficient Heterogeneous Signcryption Scheme for Internet of Vehicles (EHSC-IoV) and verify that our protocol is secure under the Discrete Logarithm (DL) and the Computational Diffie–Hellman (CDH) assumptions. As compared with the existing five heterogeneous signcryption schemes, the performance evaluation and simulation results show that the computational cost of the IoV nodes in our protocol reduced by about $$ 75\%,84.2\%,80\%, 67.9\%$$ , and $$ 82.4\%$$ , respectively, and the total energy consumption of the IoV nodes in our protocol reduced by about $$ 69.4\%, 75.4\%, 75.2\%, 62.3\%,$$ and $$ 75.1\% $$ , respectively.

Heterogeneous Signcryption Scheme From IBC to PKI With Equality Test for WBANs

The signcryption protocols supporting the equality test are only for a single system rather than a flexible heterogeneous environment of wireless body area networks (WBANs). In this article, this problem is efficiently addressed through a proposed heterogeneous signcryption scheme from identity-based cryptosystem (IBC) to public key infrastructure (PKI) with an equality test (HSCIP-ET) for WBANs. Our scheme allows the sensors planted or worn by a user in the IBC system to signcrypt sensitive data using the public key of the management center in the PKI system, and then uploading it to the cloud server. Subsequently, the equality test can be executed by the cloud server on diverse ciphertexts to determine whether they contain the identical plaintext and return the corresponding result after receiving a request from an application provider. Furthermore, a rigorous analysis and an experimental comparison demonstrate the security and efficiency of the HSCIP-ET approach, respectively.

Heterogeneous Signcryption Scheme Supporting Equality Test from PKI to CLC toward IoT

AbstractThe prosperity of Internet of Things (IoT) has brought numerous advantages to individuals and organizations. Since the transmission channel is usually considered as untrusted, the notion of signcryption seems to be the desired method to ease the defect. Nevertheless, this primitive inevitably faces the new obstacle that how to search the required data without decrypting it. Therefore, inheriting the excellence of signcryption and equality test, we present a heterogeneous signcryption protocol supporting the equality test from public key infrastructure (PKI) to certificateless cryptosystem (CLC) toward IoT environment (PK‐CLET). In this way, the introduced construction not only preserves the integrity, confidentiality and unforgeability of data, but also allows the cloud server to perform the equality test on different ciphertexts. Moreover, the security of PK‐CLET as well as the performance evaluation are both shown that it is more suitable for IoT.

Heterogeneous Signcryption With Equality Test for IIoT Environment

The existing signcryption schemes with equality testing are aimed at a sole cryptosystem and not suitable for the sophisticated heterogeneous network of Industrial Internet of Things (IIoT). To deal with this challenge, we propose a heterogeneous signcryption scheme with equality test (HSC-ET) in this article. This scheme enables a sensor in public key infrastructure (PKI) to execute data encryption and deliver it to the semitrusted entity (cloud server). When a user in an identity-based cryptosystem (IBC) intends to search for some data stored on the cloud server. The delegated cloud server executes tests on ciphertexts for determining whether the same underlying plaintext exists between two ciphertexts. These two ciphertexts can be one signcrypted ciphertext and one encrypted ciphertext, or both encrypted/signcrypted ciphertext, thus achieving a flexible search to the ciphertext. HSC-ET is demonstrated to be secure by the rigorous and detailed analysis. The experimental simulation and analysis results show the efficiency of our scheme.

Provably Secure Heterogeneous Access Control Scheme for Wireless Body Area Network.

Wireless body area network (WBAN) provides a medium through which physiological information could be harvested and transmitted to application provider (AP) in real time. Integrating WBAN in a heterogeneous Internet of Things (IoT) ecosystem would enable an AP to monitor patients from anywhere and at anytime. However, the IoT roadmap of interconnected 'Things' is still faced with many challenges. One of the challenges in healthcare is security and privacy of streamed medical data from heterogeneously networked devices. In this paper, we first propose a heterogeneous signcryption scheme where a sender is in a certificateless cryptographic (CLC) environment while a receiver is in identity-based cryptographic (IBC) environment. We then use this scheme to design a heterogeneous access control protocol. Formal security proof for indistinguishability against adaptive chosen ciphertext attack and unforgeability against adaptive chosen message attack in random oracle model is presented. In comparison with some of the existing access control schemes, our scheme has lower computation and communication cost.