A security communication model based on certificateless online/offline signcryption for Internet of Things

Abstract

The communication model of Internet of Things (IOT) application has some shortcomings in user privacy protection and information security. To solve these shortcomings, we define the formal models of certificateless online/offline signcryption and propose a concrete certificateless online/offline signcryption scheme for IOT environment. Compared with the existing identity‐based online/offline signcryption schemes that do not require the plaintext and the receiver's identity in the offline phase, our scheme has the great advantage of the offline computation cost, offline storage, ciphertext length, and receiver computation cost. Moreover, our scheme achieves known session‐specific temporary information security, public verifiability with confidentiality and no key escrow problem. Copyright © 2013 John Wiley & Sons, Ltd.

Certificateless online/offline signcryption for the Internet of Things

“…We know that the aim of online/offline technique is to shift the heavy operations to the offline phase. Therefore, [5][6][7] violate this object. In this paper, we give a new COOSC scheme that removes all heavy operations in the online phase.…”

“…Recently, the COOSC is considered in [5][6][7]. However, these schemes need a point multiplication operation in the online phase.…”

“…A Type I adversary models an attacker that is a common user and does not have the [5,7]. The first game (Game-I) is a confidentiality game played between a Type I adversary A I and a challenger C.…”

“…A generic COOSC scheme consists of the following seven algorithms [5,7]. Setup is a probabilistic algorithm run by a KGC that takes as input a security parameter k, and outputs a master secret key s and the system parameters params that contains a master public key P pub .…”

“…The security task to the IoT is challenging because of the scalability, heterogeneity, open nature of wireless communication and limited resources of WSNs and RFID [4]. Luo et al [5] proposed a certificateless online/offline signcryption (COOSC) scheme (hereafter called LTX) and designed a secure communication model using the COOSC scheme. The COOSC has the following two advantages: (1) it simultaneously achieves confidentiality and authentication at a low cost; (2) it has neither public key certificates nor key escrow problem.…”