Hyperelliptic Curve Cryptography Research Articles

A Cost-Effective Identity-Based Signature Scheme for Vehicular Ad Hoc Network Using Hyperelliptic Curve Cryptography

A Vehicular Ad Hoc Network (VANET) is a subset of the Mobile Ad Hoc Network (MANET) that allows vehicles to communicate with each other and with roadside stations to offer efficient and safe transportation. Furthermore, when VANET is used in connection with the Internet of Things (IoT) devices and sensors, it can help with traffic management and road safety by allowing vehicles to interact with one another at any time and from any location. Since VANET’s event-driven communications are carried out via an open wireless channel, there are significant security concerns. In this paper, we use Hyperelliptic Curve Cryptography (HECC) to offer a cost-effective identity-based signature for secure communication over VANET. The proposed scheme does not need certificate management, and we found that it is more secure against a variety of cryptographic threats after conducting a thorough security analysis. In addition, comparisons of communication and computational costs are made, demonstrating that the proposed scheme is more efficient in both respects than existing schemes.

A Provable and Privacy-Preserving Authentication Scheme for UAV-Enabled Intelligent Transportation Systems

In this article, unmanned aerial vehicles (UAVs) are expected to play a key role in improving the safety and reliability of transportation systems, particularly where data traffic is nonhomogeneous and nonstationary. However, heterogeneous data sharing raises plenty of security and privacy concerns, which may keep UAVs out of future intelligent transportation systems (ITS). Some of the well-known security and privacy issues in the UAV-enabled ITS ecosystem include tracking UAVs and vehicle locations, unauthorized access to data, and message modification. Therefore, in this article, we contribute to the sum of knowledge by combining the hyperelliptic curve cryptography (HECC) techniques, digital signature, and hash function to present a privacy-preserving authentication scheme. The security features of the proposed scheme are assessed using formal security analysis methods, i.e., real-or- random (ROR) oracle model. To examine the performance of the proposed scheme, a comparison with other existing schemes has been carried out. The results reveal that the proposed scheme outperforms its counterpart schemes in terms of computation and communication costs.

A Cost Effective Identity-Based Authentication Scheme for Internet of Things-Enabled Agriculture

The Internet of Things (IoT) has revolutionized practically every industry, including agriculture, due to its fast expansion and integration into other industries. The application of IoT in agriculture motivates farmers to use their resources wisely and allows for better field monitoring and decision-making, resulting in increased agricultural productivity. Because IoT-enabled agriculture systems need the use of various types of sensors that collect data (such as soil moisture and humidity) and then transmit it over the network. IoT-based agriculture systems, on the other hand, are always vulnerable to security threats. Authentication is one of the assured options for addressing the security concern, since it only enables an authorized party to access the data. Existing authentication schemes typically use the Rivest-Shamir-Adleman (RSA) algorithm and elliptic curve cryptography (ECC), which has a greater computational and communication cost. Furthermore, the security of the majority of existing authentication schemes is not verified using any security tool. As a result, we propose an identity-based authentication scheme for IoT-enabled agriculture in this article. To ensure that our scheme is cost-effective, we employ hyperelliptic curve cryptography (HECC). Our scheme surpasses existing authentication schemes in terms of computational cost and communication overhead while providing better security, according to a thorough investigation of performance and security.

An Efficient Multidocument Blind Signcryption Scheme for Smart Grid-Enabled Industrial Internet of Things

The smart grid-enabled industrial Internet of Things (SG-IIoT) is a hybrid data communication network connected with the power grid that collects and analyzes data from transmission lines, distribution substations, and consumers. In the IIoT setting, SG provides predictive information to its supplier and customers on how to effectively manage the power based on this aggregated data. To achieve this goal, every virtual or physical entity in the SG-IIoT must be linked and accessible over the Internet, which can be susceptible to numerous cyberattacks. In this paper, we propose a multidocument blind signcryption scheme to simultaneously resolve the security and efficiency issues. The proposed scheme performs the blind signature and encryption operation on multiple digital documents in one step because SG-IIoT outputs a large amount of data that needs to be blind signed and encrypted in a batch. The proposed scheme employs the concept of hyperelliptic curve cryptography (HECC), which is lightweight owing to the smaller key size. The comparative analysis in both security and efficiency with the relevant existing scheme authenticates the viability of the proposed scheme.

An Efficient and Secure Multimessage and Multireceiver Signcryption Scheme for Edge-Enabled Internet of Vehicles

The Internet of Vehicles (IoV) is considered an enhancement of existing vehicular ad-hoc networks, which helps connect mobile vehicles to the Internet of Things (IoT) with the support of 5G networks. To assure the quality-of-service demand by the users, the edge computing paradigm of 5G networks can be incorporated in the IoV environment for supporting compute-intensive applications. The basic safety messages are typically transmitted using a multicast pattern in the IoV-enabled edge computing paradigm. The use of the multicast channel may accelerate the communication process; however, it is prone to various attacks due to the open nature of wireless networks. This article proposes a multimessage and multireceiver signcryption scheme for the multicast channel in a certificateless setting to solve the key escrow problem. The security of the partial private key is dependent on the secure channel, which increases the complexities of the system. Therefore, in the proposed scheme, we introduce a new idea that does not require a secure channel. The key generation center only sends the pseudo partial private key of the users on a public channel. Furthermore, the proposed scheme is based on hyper-elliptic curve cryptography (HECC), which has much smaller key sizes as compared to elliptic curve cryptography (ECC). The security proofs and performance comparison for our scheme are carried out. The findings show that the proposed scheme provides high security while using less computational and communication costs.

Certificate-Based Signature Scheme for Industrial Internet of Things Using Hyperelliptic Curve Cryptography

The Industrial Internet of Things (IIoT) is a technology that uses the Internet of Things (IoT) infrastructure to sense, process, and communicate real-time events in the industrial system to cut down on unnecessary operating costs and to speed up industrial automation of internal and external working processes. Since the IIoT system inherits the same cyber-physical vulnerabilities that the IoT system already encounters, it requires additional work to address security concerns owing to its heterogeneous nature. As a result, an efficient security mechanism is essential to protect against various and unknown cyber-attacks. In this article, we propose a certificate-based signature scheme based on hyperelliptic curve cryptography (HECC), with the aim of improving security while reducing computational and communication costs in the IIoT environment. The proposed scheme outperforms existing schemes in terms of both computational and communication costs, as well as offering better security.

Designing a Healthcare-Enabled Software-Defined Wireless Body Area Network Architecture for Secure Medical Data and Efficient Diagnosis

In the struggle against population aging, chronic diseases, and a lack of medical facilities, the emergence of Wireless Body Area Networks (WBANs) technology has ushered in optimism. WBANs use a variety of wearable and implanted biosensor nodes to constantly monitor physiological parameters such as oxygen saturation (SpO2), electrocardiogram (ECG), electromyography (EMG), electroencephalogram (EEG), blood pressure, respiration rate, body temperature, and pulse rate. Importantly, these vital signs are communicated to a doctor over a public network, who can diagnose ailments remotely and efficiently. Among these communications, the security and privacy of patients are the prime concerns while transferring data over an open wireless channel from biosensor nodes to a Medical Server (MS) through a Base Station (BS) for efficient medical diagnosis. Finding an effective security strategy for patients which rely on WBANs to monitor their health information is a huge challenge due to the confined nature of the WBANs environment. To tackle the above challenges, in this research, a new, efficient, and secure healthcare-enabled software-defined WBANs architecture based on Schnorr signcryption and Hyperelliptic Curve Cryptography (HECC) is suggested in which the SDN technology is integrated into WBANs. By separating the control and data planes in an efferent manner, SDN technology allows you to control and manage the network in a programmable manner. The main features of SDN, such as its programmability, flexibility, and centralized control, make it a simple and scalable network. In this research, first, a Software-Defined Wireless Body Area Networks (SD-WBANs) architecture has been designed, and then a lightweight Schnorr signcryption with Hyperelliptic Curve Cryptography (HECC) has been proposed to preserve sensitive patient data security during transmission on public networks. Moreover, a well-known Multicriteria Decision-Making (MCDM) approach known as Evaluation Based on Distance from Average Solution (EDAS) is also used to demonstrate the success of the suggested system. According to the performance analysis, the suggested approach beats previous state-of-the-art techniques in terms of computation cost, communication overhead, storage cost, and energy usage.

An Efficient Certificate-Based Aggregate Signature Scheme for Internet of Drones

Internet of drones (IoD) is a network of small drones that leverages IoT infrastructure to deliver real-time data communication services to users. On the one hand, IoD is an excellent choice for a number of military and civilian applications owing to key characteristics like agility, low cost, and ease of deployment; on the other hand, small drones are rarely designed with security and privacy concerns in mind. Intruders can exploit this vulnerability to compromise the security and privacy of IoD networks and harm the information exchange operation. An aggregate signature scheme is the best solution for resolving security and privacy concerns since multiple drones are connected in IoD networks to gather data from a certain zone. However, most aggregate signature schemes proposed in the past for this purpose are either identity-based or relied on certificateless cryptographic methods. Using these methods, a central authority known as a trusted authority (TA) is responsible for generating and distributing secret keys of every user. However, the key escrow problem is formulated as knowing the secret key generated by the TA. These methods are hampered by key distribution issues, which restrict their applicability in a variety of situations. To address these concerns, this paper presents a certificate-based aggregate signature (CBS-AS) scheme based on hyperelliptic curve cryptography (HECC). The proposed scheme has been shown to be both efficient in terms of computation cost and unforgeable while testing its toughness through formal security analysis.

Hyper Elliptic Curve Based Certificateless Signcryption Scheme for Secure IIoT Communications

Industrial internet of things (IIoT) is the usage of internet of things (IoT) devices and applications for the purpose of sensing, processing and communicating real-time events in the industrial system to reduce the unnecessary operational cost and enhance manufacturing and other industrial-related processes to attain more profits. However, such IoT based smart industries need internet connectivity and interoperability which makes them susceptible to numerous cyber-attacks due to the scarcity of computational resources of IoT devices and communication over insecure wireless channels. Therefore, this necessitates the design of an efficient security mechanism for IIoT environment. In this paper, we propose a hyperelliptic curve cryptography (HECC) based IIoT Certificateless Signcryption (IIoT-CS) scheme, with the aim of improving security while lowering computational and communication overhead in IIoT environment. HECC with 80-bit smaller key and parameters sizes offers similar security as elliptic curve cryptography (ECC) with 160-bit long key and parameters sizes. We assessed the IIoT-CS scheme security by applying formal and informal security evaluation techniques. We used Real or Random (RoR) model and the widely used automated validation of internet security protocols and applications (AVISPA) simulation tool for formal security analysis and proved that the IIoT-CS scheme provides resistance to various attacks. Our proposed IIoT-CS scheme is relatively less expensive compared to the current state-of-the-art in terms of computational cost and communication overhead. Furthermore, the IIoT-CS scheme is 31.25% and 51.31% more efficient in computational cost and communication overhead, respectively, compared to the most recent protocol.

BlockCRN-IoCV: Secure Spectrum Access and Beamforming for Defense Against Attacks in mmWave Massive MIMO CRN in 6G Internet of Connected Vehicles

Cognitive Radio (CR) is a wireless communication system that is used for intelligent vehicles to solve spectrum scarcity and improve the utilization of the spectrum. However, spectrum sensing and data sharing are difficult due to the presence of malicious nodes which degrades the performance. To overcome these issues, we proposed the BlockCRN-IoCV method which includes authentication, density aware clustering, dual agent based spectrum access and secure beamforming. Here, authentication is performed for both Primary Users (PUs) and Secondary Users (SUs) using the Hybrid Advanced Encryption Standard and Hyper-elliptic Curve Cryptography (AES-HCC) algorithm by considering ID, PUF and location which ensures the legitimacy of the users. To address the mobility of the vehicle we perform density aware clustering using Density aware Dynamic Radius Clustering (DADRC) by considering location, distance and direction for increasing throughput. After completing clustering, we perform efficient spectrum access by using the Dual Agent based Twin Delayed (DA-TD3) algorithm which includes two agents, the first agent performs spectrum sensing by considering SNR, noise level and trust, and the second agent performs spectrum allocation by considering Channel State Information (CSI), in which the CSI is predicted by Quasi-Newton Iterative Unscented Kalman Filter (QNIUKF) algorithm for effective data transmission. Finally, secure beamforming is performed using Bi-Gated Recurrent Neural Network (BiGRU-CapsNet) by considering CSI, beam score, array factor, and direction of angle. The simulation is carried out by OMNET++ and SUMO simulation tools and the performance of this work is evaluated by throughput, packet delivery ratio, SNR, detection accuracy, BER, and delay. The simulation result shows that the proposed work achieves superior performance compared to existing work for secure spectrum sensing and beamforming.

A novel security framework for densely populated Internet of Things users in pervasive service access

User density in the Internet of Things (IoT) platform changes with different applications and user demands. Security requirements are adaptable based on the services and the authentication servers attached to the resources. However, the lack of unanimous security measures increases the complexity and authentication level in a user-centric scenario. This article introduces an Ascendable Authentication Framework (AAF) for balancing security and services in a dense IoT by considering this drawback. The proposed framework adopts a high level of authentication and user services through unanimous keying and allocations. This process is defined within the framework covering the service provider and end-users. In this authentication, hyper-elliptic curve cryptography is exploited for service authentication, whereas the key distribution follows a discrete allocation process. Here the discreteness and continuity in authentication are determined using regression learning. The change in distribution function determines the authentication level and redeeming security for further service disseminations. Therefore, the regression sequence is modified without augmenting additional keys in a pervasive manner. This reduces the computation complexity, service authentication time, response latency, and failures.

A Multi-Message Multi-Receiver Signcryption Scheme with Edge Computing for Secure and Reliable Wireless Internet of Medical Things Communications

Thanks to recent advancements in biomedical sensors, wireless networking technologies, and information networks, traditional healthcare methods are evolving into a new healthcare infrastructure known as the Internet of Medical Things (IoMT). It enables patients in remote areas to obtain preventative or proactive healthcare services at a cheaper cost through the ease of time-independent interaction. Despite the many benefits of IoMT, the ubiquitously linked devices offer significant security and privacy concerns for patient data. In the literature, several multi-message and multi-receiver signcryption schemes have been proposed that use traditional public-key cryptography, identity-based cryptography, or certificateless cryptography methods to securely transfer patient health-related data from a variety of biomedical sensors to healthcare professionals. However, certificate management, key escrow, and key distribution are all complications with these methods. Furthermore, in terms of IoMT performance and privacy requirements, they are impractical. This article aims to include edge computing into an IoMT with secure deployment employing a multi-message and multi-receiver signcryption scheme to address these issues. In the proposed method, certificate-based signcryption and hyperelliptic curve cryptography (HECC) have been coupled for excellent performance and security. The cost study confirms that the proposed scheme is better than the existing schemes in terms of computational and communication costs.

Hyperelliptic Curve Diffie–Hellman-Based Two-Server Password-Only Authenticated Key Exchange Protocol for Edge Computing Systems

Due to the unprecedented growth of data, edge computing is transforming our lives in a better manner by increasing the performance and reducing the latency. It is the key framework deployed close to the data for processing effectively by connecting millions of devices together. Though it handles accelerated growth of data efficiently in real-time, data security and edge device authentication are still a nightmare. On the contrary, it is not possible to use complex protocols for authentication of edge devices due to its resource-constrained in nature. To address this issue, a state-of-art Hyperelliptic Curve Diffie–Hellman-based two-server Password-Only Authenticated Key Exchange Protocol is proposed in this paper by utilizing the properties of a geometrical shape, namely, tetrahedron. As a primary mandate, edge devices are authenticated to centralize cloud servers that store password information as tetrahedron properties using Hyperelliptic Curve Cryptography and Diffie–Hellman key exchange mechanisms. The proposed work is compared with similar existing works and proves its strength by considering communication cost, computational cost, security defense rate, and attack resistance rate as its core evaluation parameters.

An Efficient Scheme for Industrial Internet of Things Using Certificateless Signature

Currently, hyperelliptic curve cryptography (HECC) got attractions towards low power devices such as Industrial Internet of Things (IIoT). As we all know, it has the capability of utilizing low key size, which can be suitable for IIoT environment. Inspired by the aforementioned property of HECC, we proposed an efficient scheme for IIoT using certificateless signature with the help of HECC. The presented approach is proven to be unforgeable against the challenges of type I and type II attackers. We tested the security of the designed approach through Automated Validation of Internet Security Protocols and Applications (AVISPA). We also performed the computational and communicational cost comparisons with already existed schemes, and it is observed from our analysis that our scheme is computationally efficient and needs low communication cost.

Improved authentication and computation of medical data transmission in the secure IoT using hyperelliptic curve cryptography

Data transmission is a great challenge in any network environment. However, medical data collected from IoT devices need to be transmitted at high speed to ensure that the transmitted data are secure. This paper focuses on the security, speed and load of transmission. To prove security, combined steganographic methods involving cryptographic algorithms are used. The proposed model begins by updating two entries, medical image data and medical report data. Digital imaging and communications in medicine image data hold the medical report data to be encrypted and transmitted over the network channel. Although the proposed work follows the conventional method of data transmission from encryption until transmission, an effort has been made to split up the given data without transmitting them as such. As a public cryptography mechanism, the algorithm is also capable of transmission during decryption. The method of this article is genuine in proving its secure actions during the transmission of medical data and medical images. The proposed method justifies its performance when tested in hiding medical transcription data of different sizes varying across 30, 45, 64, 128 and 256 bytes in sample images with an average PSNR ranging from 55 to 70 dB, an MAE averaging from 0.2 to 0.7, and an SSIM, SC and correlation coefficient averaging to 1. This research is proven to work well in a simulation environment, and the results prove the genuine nature of the proposed technique.

An Efficient and Secure Certificate-Based Access Control and Key Agreement Scheme for Flying Ad-Hoc Networks

The evolution of Flying Ad-hoc Networks (FANETs) marks the paradigm shift from a single large drone to multiple small drones linked together in an ad-hoc fashion. To maintain the Quality of Service (QoS) in the multi-hop networking schema, FANETs utilize the available resources efficiently. However, due to open wireless boundary and high mobility of the drones, the FANETs are vulnerable to malicious nodes that can penetrate the network and, thus, pose serious security threats, particularly at the Medium Access Control (MAC) layer. Such susceptibility compromises the network security and privacy and harms the information exchange operation within the network. The attacker can either transmit a large number of reservation requests to waste the bandwidth, listen to the control messages, conduct power-efficient jamming or falsify the information to manipulate the network control. Therefore, secure access control and a key agreement mechanism are required. The mechanism must utilize the two phases, i.e., node authentication and key agreement, to counter the aforementioned attacks. Our contribution, in this paper, is a certificate-based access control and key agreement scheme, which is based on the technique of Hyperelliptic Curve Cryptography (HECC) and employs a collision-resistant one-way cryptographic hash function. In order to assess the viability and performance of the proposed scheme, we analyze it using formal security analysis techniques, such as the Real-Or-Random (ROR) model and Automated Validation of Internet Security Protocols and Applications (AVISPA) tool. The scheme is also evaluated using the informal security analysis technique, or the non-mathematical approach. The results obtained from both analyses affirm the superiority of our proposed scheme.

Workflow scheduling in cloud environment using a novel metaheuristic optimization algorithm

SummaryWorkflow scheduling is the most focused research issue in the on‐demand clouds where the user satisfaction like cost and bandwidth is more difficult. Several research works have been conducted earlier towards performing reliable workflow scheduling with the aim of reducing cost or execution time. However, those works lack to produce better result by compromising any attributes for attaining the goal. The existing work lacks from the security where the tasks might get corrupted during execution. To resolve this problem, an Enhanced Artificial Fish Swarm Algorithm (EAFSA)‐based IaaS Cloud Partial Critical Path (IC‐PCP) Replication and Hyper Elliptic Curve Cryptography (EAFSAIPR with HECC) is proposed. The main goal is to perform better workflow scheduling which can complete the task execution before deadline given by the users. This is done by predicting the early start time and latest finish time using EAFSA algorithm, so that task replication can be made to meet the soft deadline constraint. The task authentication is done efficiently using HEEC algorithm, so that corruption from malicious users can be avoided. The task replication is done securely using the cryptographic algorithm. The proposed EAFSAIPR with HECC algorithm uses idle time of provisioned resources to replicate workflow tasks optimally. The proposed EAFSAIPR algorithm scheduler focused to ensure the lowest cost while serving a deadline set by the user. The experimental results show that the scheduler can find good schedules of deadlines being met and reduces the total execution time of applications as the budget available for replication increases.

RFID Authentication Scheme Based on Hyperelliptic Curve Signcryption

The implementation of efficient security mechanisms for Radio Frequency Identification (RFID) system has always been a continuous challenge due to its limited computing resources. Previously, hash-based, symmetric-key cryptography-based and elliptic curve cryptography based security protocols were proposed for RFID system. However, these protocols are not suitable because some of them failed to fulfil the RFID security requirements, and some of them produce high computational overhead. Recently researchers have focused on developing an efficient security mechanism based on Hyper Elliptic Curve Cryptography (HECC) which provides high security with 80 bits lower-key size. In this paper, we propose an efficient RFID authentication scheme (RFID-AS) based on hyperelliptic curve Signcryption. The proposed RFID-AS provides the required security features for the RFID system as well as security from potential attacks. We validated the security of proposed RFID-AS by using formal security analysis techniques, such as the Real-Or-Random (ROR) model and Automated Validation of Internet Security Protocols and Applications (AVISPA). Furthermore, the results reveal that the computational, communication and storage overheads of the proposed RFID-AS is much less than the other recently proposed schemes. Compared to the most recently published work based on ECC Signcryption, our scheme is 70% efficient in terms of computational overhead, 42.7% efficient in terms of communication overhead, and 57.7% efficient in terms of storage overhead. Therefore, the proposed RFID-AS is more efficient as compared to the recently published work in this domain. Hence, it is an attractive solution for resource-limited devices like RFID tags.

Securing Internet of Drones With Identity-Based Proxy Signcryption

Internet of Drones (IoD) is a decentralized networking architecture that makes use of the internet for uniting drones to enter controlled airspace in a coordinated manner. On the one hand, this new clan of interconnected drones has ushered in a new era of real-world applications; Small drones, on the other hand, are generally not designed with security in mind, making them exposed to fundamental security and privacy concerns. Limited computing capabilities, along with communication over an open wireless channel, exacerbate these challenges, making the IoD unfeasible for secure operations. In this article, we propose an identity-based proxy signcryption scheme to address these issues. During data transfer between drones and to the cloud server, the proposed scheme supports outsourcing decryption and member revocation. The proposed scheme is based on the notion of Hyper Elliptic Curve Cryptography (HECC), which improves network computation efficiency. We use formal security analysis with the Random Oracle Model (ROM) to evaluate security toughness. The performance analysis of the proposed scheme has also been reviewed in terms of computation and communication costs with the relevant existing schemes. The results obtained from both the security and performance analyses affirm the superiority of the proposed scheme.

Enhanced Biometric Recognition for Secure Authentication Using Iris Preprocessing and Hyperelliptic Curve Cryptography

Biometrics combined with cryptography can be employed to solve the conceptual and factual identity frauds in digital authentication. Biometric traits are proven to provide enhanced security for detecting crimes because of its interesting features such as accuracy, stability, and uniqueness. Although diverse techniques have been raised to address this objective, limitations such as higher computational time, minimal accuracy, and maximum recognition time remain. To overcome these challenges, an enhanced iris recognition approach has been proposed based on hyperelliptic curve cryptography (HECC). The proposed study uses the 2D Gabor filter approach for perfect feature extraction in iris preprocessing. A lightweight cryptographic scheme called HECC was employed to encrypt the iris template to avoid intentional attack by the intruders. The benchmark CASIA Iris V-4 and IITD iris datasets were used in the proposed approach for experimental analysis. The result analysis witnessed that the prime objective of the research such as lesser false acceptance rate, lesser false rejection rate, maximum accuracy of 99.74%, maximum true acceptance rate of 100%, and minimal recognition time of 3 seconds has been achieved. Also, it has been identified that the proposed study outperforms other existing well-known techniques.