Resource-constrained Internet Of Things Research Articles

Uncovering botnets in IoT sensor networks: a hybrid self-organizing maps approach

The integration of the internet of things (IoT) has revolutionized diverse industries, introducing interconnected devices and IoT sensor networks for improved data acquisition. However, this connectivity exposes IoT ecosystems to emerging threats, with botnets posing significant risks to security. This research aims to develop an innovative solution for detecting botnets in IoT sensor networks. Leveraging insights from existing research, the study focuses on designing a hybrid self-organization map (SOM) Approach that integrates lightweight deep learning (DL) techniques. The objective is to enhance detection accuracy by exploring various DL architectures. Proposed methodology aims to balance computational efficiency for resource-constrained IoT devices while improving the discriminatory power of the detection system. The study advancing IoT cybersecurity and addresses critical challenges in botnet detection within IoT sensor networks. The testing of the artificial neural networks (ANN) classifier involves three models, each represented based on parameters related to the construction of the training models. The most effective ANN achieves 86%, works on anomaly intrusion detection systems (AIDS).

A systematic review on elliptic curve cryptography algorithm for internet of things: Categorization, application areas, and security

Cyberattacks on the Internet of Things (IoT) may be avoided by implementing cybersecurity protocols on IoT devices, platform packages, and Internet tools. A significant problem is developing a simple security mechanism suitable for resource-constrained IoT devices. Elliptic curve cryptography (ECC) is extensively utilized and well-suited for use in low-resource environments like smartphone devices. ECC utilizes short crypto keys with the same security strength as conventional cryptosystems, decreasing power consumption and enhancing device efficiency. This study comprehensively evaluates ECC data privacy and security techniques in IoT-based devices. The research also looked into other cryptography protocols that ECC may use to increase security and performance. The inclusion procedures were papers published between 2018 and 2023, written in English, and published in a peer-reviewed scholarly outlet. This research eventually reviewed 61 suitable publications in total. Compared to other cryptographic methods, the study discovered that ECC has received greater attention or is frequently employed in IoT-based systems. However, additional issues and concerns must be addressed, including efficient IoT device security, maintaining privacy, and device security against vulnerability assaults such as man-in-the-middle attacks. For the efficient security of the IoT-based system, an improved ECC-based algorithm should be developed to enhance the security and privacy issues of the IoT system.

Decentralized Zone-Based PKI: A Lightweight Security Framework for IoT Ecosystems

The advent of Internet of Things (IoT) devices has revolutionized our daily routines, fostering interconnectedness and convenience. However, this interconnected network also presents significant security challenges concerning authentication and data integrity. Traditional security measures, such as Public Key Infrastructure (PKI), encounter limitations when applied to resource-constrained IoT devices. This paper proposes a novel decentralized PKI system tailored specifically for IoT environments to address these challenges. Our approach introduces a unique “zone” architecture overseen by zone masters, facilitating efficient certificate management within IoT clusters while reducing the risk of single points of failure. Furthermore, we prioritize the use of lightweight cryptographic techniques, including Elliptic Curve Cryptography (ECC), to optimize performance without compromising security. Through comprehensive evaluation and benchmarking, we demonstrate the effectiveness of our proposed solution in bolstering the security and efficiency of IoT ecosystems. This contribution underlines the critical need for innovative security solutions in IoT deployments and presents a scalable framework to meet the evolving demands of IoT environments.

IoT Video Delivery Optimization Through Machine Learning-Based Frame Resolution Adjustment

Providing acceptable video quality in the Internet of Things (IoT) implementation poses a significant challenge, mainly when the application is performed on low-cost and low-power devices. This research focuses on developing a frame resolution adjustment system that maintains the frame rate value of video delivery in wireless IoT environments with resource-constrained devices. Consistent frame rates prevent motion lag and data loss, improving user experience. The system works by predicting the upcoming throughput values using machine learning methods to adjust the sensing parameter, which is the resolution of the video frame to be captured by camera nodes. Hence, the proposed system is equipped with a file size estimator to estimate the size of the next video frame and then adjust the resolution in accordance with the throughput prediction. In this research, we conducted extensive experiments to evaluate the accuracy of the file size estimator and the throughput prediction. The experiment generated a dataset to evaluate throughput prediction and file size estimator model. The evaluation results for the file size estimator showed a Mean Absolute Percentage Error (MAPE) of 6.73% in the experiment using 317 frames with video resolutions between 72p and 720p. Experiments were also conducted to compare several machine learning methods for predicting throughput values. Compared to Long Short-Term Memory (LSTM) and Autoregressive Integrated Moving Average (ARIMA), Simple Exponential Smoothing (SES) outperforms the others with the lowest Root Mean Squared Error (RMSE) and Mean Absolute Error (MAE) values. Building upon these findings, we implemented the frame resolution adjustment system using SES as the method for predicting the upcoming throughput values. Finally, we demonstrated that the proposed system can maintain the frame rate according to the threshold set by the system while the resolution is being maximized, thereby addressing the challenges of maintaining video quality in resource-constrained IoT environments.

MULTI-BLOCK: A novel ML-based intrusion detection framework for SDN-enabled IoT networks using new pyramidal structure

The ever-expanding Internet of Things (IoT) landscape faces significant security challenges due to limitations in traffic monitoring, device heterogeneity, and weak security practices, leaving networks vulnerable to multi-target and coordinated attacks like large-scale botnets and Distributed Denial-of-Service (DDoS). Existing intrusion detection systems can be computationally expensive and resource-intensive. This can be problematic for resource-constrained IoT devices with limited processing power, memory, and battery life. This paper proposes MULTI-BLOCK, a novel, multi-module framework that leverages machine learning, stateful P4 processing, and a Software-Defined Networking (SDN)-based multi-controller architecture. MULTI-BLOCK tackles critical management tasks within IoT networks, including synchronized communication, traffic monitoring, intrusion detection, and attack mitigation. This comprehensive framework comprises four modules. The first, the proposed pyramidal conceptually decentralized multi-controller structure (PCDMCS), introduces Decentralized Control Interfaces (DCIs) for real-time threat identification through a Decentralized Warning Conduit (DWC). The second module provides comprehensive network monitoring using P4-enabled 24-state tables. The third module leverages 30 new P4-extracted/calculated features and the Enhanced Weighted Ensemble Algorithm (EWEA) for enhanced anomaly detection. The final module presents a novel mitigation approach with 22 steps distributed across multiple controllers for scalability. Extensive evaluation using established IoT datasets (X-IIoTID, TON_IoT, and Edge-IIoTset) and diverse test scenarios (including single-victim and multi-victim attacks) demonstrates MULTI-BLOCK's exceptional performance, achieving high accuracy (99.75 %), precision (99.32 %), F1-score (99.53 %), recall (99.67 %), specificity (99.60 %), low false positive rates (FPR) (0.40 %), and low Average Detection Time (ADT) (2.11 ms). By offering a robust and adaptable solution against evolving threats, MULTI-BLOCK represents a significant advancement in IoT network security.

ELIDS: Ensemble Feature Selection for Lightweight IDS against DDoS Attacks in Resource-Constrained IoT Environment

Distributed Denial of Service (DDoS) attacks are increasingly prevalent in today’s digital era, particularly due to the growth of unprotected Internet of Things (IoT) devices. This escalation in attacks necessitates the development of adaptive Intrusion Detection Systems (IDS) that are both efficient in detection and less resource intensive, suitable for resource-constraint IoT devices. Feature Selection (FS) techniques are most popular for developing efficient and lightweight IDS, but their reliance on a single method can be risky due to inherent dataset biasness, necessitating diverse and adaptable FS approaches. This paper proposes a new Ensemble FS approach, termed as Ensemble Feature Selection for Lightweight IDS (ELIDS), by leveraging the strength of seven different filter-based methods. ELIDS not only reduces features but also converges the selection towards the most significant features out of those identified by the individual FS methods. Considering several learning algorithms, robust classification models are built out of ELIDS that are comprehensively evaluated for performance and resumption through both in-domain and cross-domain testing. During in-domain testing, results indicate that classification models built out of ELIDS generally exhibit similar accuracy to those built out of the existing individual FS techniques, where peak accuracy rates of 99.8% are achieved. However, cross-domain testing reveals that classifiers built using individual FS methods fall noticeably in their accuracy whereas the proposed ELIDS show robustness by outperforming existing techniques by large margins. In-fact, ELIDS exhibits a higher accuracy rate by at-least 23.7% over existing solutions while considering Random Forest (RF) as the learning algorithm.

Unlocking the Potential of Mobile-Edge Cloud: A Comprehensive Review and Future Directions

With the rapid expansion of the Internet of Things (IoT), the demand for computational resources continues to soar, necessitating innovative solutions to address the needs of resource-constrained IoT users. Mobile edge computing (MEC) emerges as a promising remedy, mitigating the strain imposed by resource-intensive mobile applications. Concurrently, leveraging unmanned aerial vehicles (UAVs) as aerial platforms presents an enticing opportunity to enhance connectivity in wireless networks, owing to their on-demand deployment capabilities, high cruising altitudes, and maneuverability in three-dimensional space. This paper presents a comprehensive examination of UAV-enabled aerial MEC, elucidating its advantages, challenges, and recent advancements across various domains. Topics explored include joint optimization of UAV trajectory, computation offloading, and resource allocation, UAV deployment strategies, task scheduling, load balancing, interplay with other technologies, and machine learning-driven optimizations. Additionally, the paper outlines key avenues for future research endeavors.

Unlocking the Potential of Mobile-Edge Cloud: A Comprehensive Review and Future Directions

With the rapid expansion of the Internet of Things (IoT), the demand for computational resources continues to soar, necessitating innovative solutions to address the needs of resource-constrained IoT users. Mobile edge computing (MEC) emerges as a promising remedy, mitigating the strain imposed by resource-intensive mobile applications. Concurrently, leveraging unmanned aerial vehicles (UAVs) as aerial platforms presents an enticing opportunity to enhance connectivity in wireless networks, owing to their on-demand deployment capabilities, high cruising altitudes, and maneuverability in three-dimensional space. This paper presents a comprehensive examination of UAV-enabled aerial MEC, elucidating its advantages, challenges, and recent advancements across various domains. Topics explored include joint optimization of UAV trajectory, computation offloading, and resource allocation, UAV deployment strategies, task scheduling, load balancing, interplay with other technologies, and machine learning-driven optimizations. Additionally, the paper outlines key avenues for future research endeavors.

A novel trusted hardware-based scalable security framework for IoT edge devices

The Internet of Things (IoT) devices are pervasively deployed and embedded into our daily lives. Over several years, the massive assimilation of IoT devices has given rise to smart cities, smart factories, smart farms, etc. While IoTs can collect immense amounts of user and environmental information, the lack of adequate security measures is among the major concerns about information security and privacy. With the ever-increasing presence of IoTs, information flow between IoT devices in a single or multi-layered network is becoming increasingly vulnerable to attacks. Although several software-based solutions have been developed over the years that improve the security of resource-constrained IoT devices, there are limited efforts on hardware-oriented IoT security solutions. This paper proposes a Trusted HArdware-based Scalable Secure Architecture (THASSA) for IoT Edge systems. Leveraging standard cryptographic algorithms, THASSA provides a secure mechanism for data transfer and off-loads cryptography operations to trusted hardware. The modularized THASSA architecture allows devices to be added or removed without user intervention. Also, THASSA could be scaled to multiple subsystems using multiple trusted hardware to form IoT clusters with secure data path(s) for mission-critical applications. An experimental study has verified the correctness and effectiveness of THASSA.

A Lightweight Image Cryptosystem for Cloud-Assisted Internet of Things

Cloud computing and the increasing popularity of 5G have greatly increased the application of images on Internet of Things (IoT) devices. The storage of images on an untrusted cloud has high security and privacy risks. Several lightweight cryptosystems have been proposed in the literature as appropriate for resource-constrained IoT devices. These existing lightweight cryptosystems are, however, not only at the risk of compromising the integrity and security of the data but also, due to the use of substitution boxes (S-boxes), require more memory space for their implementation. In this paper, a secure lightweight cryptography algorithm, that eliminates the use of an S-box, has been proposed. An algorithm termed Enc, that accepts a block of size n divides the block into L n R bits of equal length and outputs the encrypted block as follows: E=L⨂R⨁R, where ⨂ and ⨁ are exclusive-or and concatenation operators, respectively, was created. A hash result, hasR=SHA256P⨁K, was obtained, where SHA256, P, and K are the Secure Hash Algorithm (SHA−256), the encryption key, and plain image, respectively. A seed, S, generated from enchash=Enchashenc,K, where hashenc is the first n bits of hasR, was used to generate a random image, Rim. An intermediate image, intimage=Rim⨂P, and cipher image, C=Encintimage,K, were obtained. The proposed scheme was evaluated for encryption quality, decryption quality, system sensitivity, and statistical analyses using various security metrics. The results of the evaluation showed that the proposed scheme has excellent encryption and decryption qualities that are very sensitive to changes in both key and plain images, and resistance to various statistical attacks alongside other security attacks. Based on the result of the security evaluation of the proposed cryptosystem termed Hash XOR Permutation (HXP), the study concluded that the security of the cryptography algorithm can still be maintained without the use of a substitution box.

Enabling privacy-aware interoperable and quality IoT data sharing with context

Sharing Internet of Things (IoT) data across different sectors, such as in smart cities, becomes complex due to heterogeneity. This poses challenges related to a lack of interoperability, data quality issues and lack of context information, and a lack of data veracity (or accuracy). In addition, there are privacy concerns as IoT data may contain personally identifiable information. To address the above challenges, this paper presents a novel semantic technology-based framework that enables data sharing in a GDPR-compliant manner while ensuring that the data shared is interoperable, contains required context information, is of acceptable quality, and is accurate and trustworthy. The proposed framework also accounts for the edge/fog, an upcoming computing paradigm for the IoT to support real-time decisions. We evaluate the performance of the proposed framework with two different edge and fog–edge scenarios using resource-constrained IoT devices, such as the Raspberry Pi. In addition, we also evaluate shared data quality, interoperability and veracity. Our key finding is that the proposed framework can be employed on IoT devices with limited resources due to its low CPU and memory utilization for analytics operations and data transformation and migration operations. The low overhead of the framework supports real-time decision making. In addition, the 100% accuracy of our evaluation of the data quality and veracity based on 180 different observations demonstrates that the proposed framework can guarantee both data quality and veracity.

Trust-Based Optimized Reporting for Detection and Prevention of Black Hole Attacks in Low-Power and Lossy Green IoT Networks.

The Internet of Things (IoT) is empowering various sectors and aspects of daily life. Green IoT systems typically involve Low-Power and Lossy Networks (LLNs) with resource-constrained nodes. Lightweight routing protocols, such as the Routing Protocol for Low-Power and Lossy Networks (RPL), are increasingly being applied for efficient communication in LLNs. However, RPL is susceptible to various attacks, such as the black hole attack, which compromises network security. The existing black hole attack detection methods in Green IoT rely on static thresholds and unreliable metrics to compute trust scores. This results in increasing false positive rates, especially in resource-constrained IoT environments. To overcome these limitations, we propose a delta-threshold-based trust model called the Optimized Reporting Module (ORM) to mitigate black hole attacks in Green IoT systems. The proposed scheme comprises both direct trust and indirect trust and utilizes a forgetting curve. Direct trust is derived from performance metrics, including honesty, dishonesty, energy, and unselfishness. Indirect trust requires the use of similarity. The forgetting curve provides a mechanism to consider the most significant and recent feedback from direct and indirect trust. To assess the efficacy of the proposed scheme, we compare it with the well-known trust-based attack detection scheme. Simulation results demonstrate that the proposed scheme has a higher detection rate and low false positive alarms compared to the existing scheme, confirming the applicability of the proposed scheme in green IoT systems.

A Two-Mode, Adaptive Security Framework for Smart Home Security Applications

With the growth of the Internet of Things (IoT), the number of cyber attacks on the Internet is on the rise. However, the resource-constrained nature of IoT devices and their networks makes many classical security systems ineffective or inapplicable. We introduce TWINKLE, a two-mode, adaptive security framework that allows an IoT network to be in regular mode for most of the time, which incurs a low resource consumption rate, and to switch to vigilant mode only when suspicious behavior is detected, which potentially incurs a higher overhead. Compared to the early version of this work, this article presents a more comprehensive design and architecture of TWINKLE, describes challenges and details in implementing TWINKLE, and reports evaluations of TWINKLE based on real-world IoT testbeds with more metrics. We show the efficacy of TWINKLE in two case studies where we examine two existing intrusion detection and prevention systems and transform both into new, improved systems using TWINKLE. Our evaluations show that TWINKLE is not only effective at securing resource-constrained IoT networks, but can also successfully detect and prevent attacks with a significantly lower overhead and detection latency than existing solutions.

Analysis and Performance Comparison of IoT Message Transfer Protocols Applying in Real Photovoltaic System

AbstractThe adoption of reliable and real-time communication technology is an absolute necessity for the advancement of Internet of Things (IoT) applications. Messaging protocols such as MQTT, AMQP, and HTTP are frequently used for communication with resource-constrained IoT devices. However, choosing a suitable and effective messaging protocol presents a daunting challenge for organizations, as it depends on the specific characteristics and messaging requirements of the IoT system. Therefore, it is crucial to have a comprehensive understanding of three established messaging protocols, such as the Hypertext Transfer Protocol (HTTP), the Message Queuing Telemetry Transport (MQTT), and the Advanced Message Queuing Protocol (AMQP), to appropriately apply them in practical projects. In this paper, information technology solutions are provided for a chain of solar farms to improve harvest productivity, facilitate warning notifications, and enable remote control. Subsequently, a detailed comparative analysis is performed, considering various interconnected criteria, to gain valuable insight into the strengths and limitations of these protocols. The results show that MQTT and AMQP play a role in enhancing overall efficiency and speed within the framework of our suggested photovoltaic system.

Novel image pixel scrambling technique for efficient color image encryption in resource-constrained IoT devices

AbstractIn the digital age, where data is a valuable commodity, securing sensitive information has become a growing concern. Image encryption techniques play an essential role in protecting visual data from unauthorized access and ensuring privacy. However, with limited computing capacity in Internet of Things (IoT) devices, standard encryption algorithms are not feasible, rendering lightweight methods mandatory. This study proposes a novel Corner Traversal algorithm, an alternative to existing pixel scrambling techniques. The proposed algorithm demonstrably outperforms its counterparts in both higher confusion and lower time complexity, making it remarkably efficient. Integrated with chaos-based diffusion methods, this algorithm forms a comprehensive encryption scheme. The proposed lightweight image encryption scheme utilizing the Corner Traversal algorithm successfully passed rigorous statistical and differential security analysis. Compared to similar schemes, the proposed encryption scheme employing the Corner Traversal algorithm in the confusion phase distinguishes itself through exceptional NPCR (99.6093 for Lenna) and UACI (33.4648 for Lenna) values. Combined with other evaluation criteria, this method demonstrably meets the stringent security requirements of IoT systems.

Integrating Blockchain and Deep Learning Into Extremely Resource-Constrained IoT: An Energy-Saving Zero-Knowledge PoL Approach

The convergence of blockchain and deep learning (DL) drives the intelligence of the Internet of Things (IoT) with security guarantees. However, the soaring resource consumption resulting from blockchain mining and DL model training has overwhelmed the extremely resource-constrained IoT. In this paper, we first build a blockchain and DL-empowered cloud-edge orchestrated framework for an extremely resource-constrained IoT environment. To solve the resource bottleneck of this framework, we then propose a Zero-Knowledge Proof of Learning (ZPoL) consensus approach to channel the meaningless Proof of Work (PoW) mining energy waste to valuable DL model training, while protecting the DL model privacy. Besides, to encourage resource-constrained IoT devices to perform meaningful DL model mining in our ZPoL consensus, we design a model quality-aware incentive mechanism based on a two-stage Stackelberg game. Moreover, we conduct extensive simulations and experiments to evaluate our proposed ZPoL-based framework. The numerical simulation illustrates our proposed incentive mechanism could motivate IoT devices to actively join in DL model mining. Compared with the existing blockchain and DL-enabled IoT system, experimental results demonstrate our proposed ZPoL-based framework could significantly reduce the communication, computation, and storage cost, which is more applicable to a resource-constrained IoT environment.

Efficient privacy preserving communication protocol for IOT applications

The proliferation of Internet of Things (IoT) devices has led to an unprecedented increase in data generation and communication, raising concerns about the security and privacy of transmitted information. This paper presents a novel Message Authentication Protocol (MAP) specifically designed for IoT devices, addressing the dual challenges of ensuring data integrity and preserving user privacy. The proposed protocol employs advanced cryptographic techniques to authenticate messages securely while incorporating privacy-preserving mechanisms to safeguard sensitive user information.The protocol utilizes a hybrid approach, combining symmetric and asymmetric cryptographic primitives to achieve efficient and robust message authentication. Symmetric key algorithms are employed for fast and lightweight authentication, ensuring minimal computational overhead for resource-constrained IoT devices. Additionally, asymmetric key techniques are integrated to facilitate secure key exchange and protect against key compromise.Privacy preservation is a paramount concern in IoT ecosystems, where devices often handle sensitive data. The protocol incorporates anonymization and differential privacy techniques to conceal the identity of users and the specific content of transmitted messages. This ensures that even if an adversary intercepts communication, extracting meaningful information about the users or their data remains a formidable challenge.To evaluate the effectiveness of the proposed protocol, we conducted comprehensive simulations and real-world experiments. The results demonstrate that the protocol achieves a balance between security, efficiency, and privacy preservation. It outperforms existing solutions in terms of computational efficiency and provides a robust defence against various common attacks, such as replay attacks and message tampering.In conclusion, the presented Secure and Efficient Message Authentication Protocol for IoT Devices with Privacy Preservation offers a viable solution to the evolving security and privacy challenges in IoT environments. By leveraging cryptographic techniques and privacy-preserving mechanisms, the protocol provides a strong foundation for safeguarding sensitive information while ensuring the integrity of communication in the vast and interconnected landscape of IoT devices.

DRcipher: A pseudo-random dynamic round lightweight block cipher

The Internet of Things (IoT) has gained popularity in various fields, including components such as embedded devices and wireless sensors. However, ensuring the security of data transmission from these devices is of critical importance. In light of these challenges, a novel lightweight encryption method called DRcipher is proposed in this paper for resource-constrained IoT devices. DRcipher has a 64-bit block size and supports either 96-bit or 128-bit key sizes. In order to improve the security, DRcipher employs a pseudo-random number of encryption rounds determined by the primary key. DRcipher adopts the structure of Generalized Feistel Network (GFN) with 4 branches, and its round functions consist of F-function, FF-function and RP permutation components. In particular, there is a negative feedback mechanism between the FF-function and the overall round of encryption functions. In addition, DRcipher is synthesised using Synopsys Design Compiler version A-2007.12-SP1 and the UMCL18G212T3 standard cell library. DRcipher-96 has an area footprint of 1546 Gate Equivalents (GE), while DRcipher-128 has a slightly larger area footprint of 1646 GE. Moreover, a comprehensive security analysis shows that the proposed DRcipher ensures high-level security redundancy against differential cryptanalysis, linear cryptanalysis, and so on.

Securing micro transactions in the Internet of Things with cryptography primitives

The growing number of IoT devices, microtransaction security in the Internet of Things (IoT) is a critical issue. In order to improve the security of microtransactions in Internet of Things ecosystems, this article investigates the usage of cryptographic primitives. Strong safeguards against possible risks including data manipulation, eavesdropping, and unauthorized access are provided by cryptography, which provides a foundation for guaranteeing the confidentiality, integrity, and validity of transaction data. We address the special problems of power and processing limits by delving into the implementation of lightweight cryptography algorithms and protocols designed for resource-constrained IoT devices. Our goal is to create a trust framework that guarantees the security and privacy of data exchange by incorporating cryptographic primitives into IoT microtransactions. By encouraging trust and dependability in microtransactions, which are essential to the future of networked smart devices, our research helps to build a more secure and robust Internet of Things environment.

Fog-Enabled Secure and Efficient Fine-Grained Searchable Data Sharing and Management Scheme for IoT-Based Healthcare Systems

In recent times, fog computing has emerged as a helpful extension of cloud computing. It can efficiently handle the prevalent issue of managing silos of data generated by today's digital healthcare services. Moreover, the application of the Internet of Things (IoT) in the development of smart healthcare systems further adds tons of data tirelessly to these silos, thus making the cloud congested. To manage such continuously growing data, the concept of adding a fog layer between the cloud and the end-users (EUs) proved to be beneficial. These intermediary fog nodes (FNs) can handle and store data, and thus facilitate the cloud and alleviate the burden from the EUs. Most of the existing search schemes for encrypted data have been developed for the cloud platform and ignored this helpful extension, which can improve the scheme's efficiency by delegating most of the heavy computations to the intermediary FNs. In this article, a fine-grained searchable data sharing scheme has been proposed using the fog computing platform. The resulting scheme is efficient and lightweight because the FN facilitates EUs by performing computationally intensive tasks on their behalf. A significant reduction in storage and computational cost has been achieved by the proposed scheme at the data owner's end, representing the resource-constrained IoT devices. The storage cost has been reduced to two source group elements, and the computational cost has been reduced to three exponent operations in the source group and one hash operation. Furthermore, the proposed scheme is secure against the selectively chosen keyword attack in the generic bilinear group model.