Hybrid Lightweight Proxy Re-Encryption Scheme for Secure Fog-to-Things Environment

Abstract

Fog computing is a promising paradigm that can mitigate the heavy burden on cloud-central processing of the vast amount of IoT data. Although fog computing has the advantages of low latency, storage, and computing resources that serve IoT applications and things, it hardly suffers from security and privacy challenges. Proxy re-encryption (PRE) is an effective cryptographic solution to ensure the security of fog-to-things communication. However, in PRE schemes, the problem of a processing delay caused by offloading significant computational load to the proxy for re-encryption, and the heavy computation operations of data owner encryption and user decryption due to asymmetric cryptographic use, are still unresolved in the literature. In this paper, we propose a hybrid proxy re-encryption scheme that combines lightweight symmetric and asymmetric encryption algorithms to establish secure communications in fogto-things computing. In the proposed scheme, the computational cost incurred by fog nodes to carry out the re-encryption process is highly efficient. Meanwhile, the scheme can reduce the encryption and decryption overheads for end-users with resource-constrained devices. Security and performance analyses are conducted, and the results indicate that our scheme is secure, highly efficient, and lightweight.

Chaos-Based Cryptographic Mechanism for Smart Healthcare IoT Systems

“…In [21], another system combines generalized Feistel structure (GFS) with "AND", "Rotation", and "XOR" (ARX) operations. In [22], a hybrid encryption scheme with a 128-bit key is proposed, which encrypts and decrypts the data collected by the fog node. In [23], another system is proposed, which uses a method based on dynamic key alteration to report the results of encrypted text files.…”

A Review on Data Access Control Schemes in Mobile Cloud Computing: State-of-the-Art Solutions and Research Directions

“…Traditional symmetric encryption and public key encryption are generally extended to support a lightweight cryptographic protocol in many applications. For example, Khashan et al [1] recently proposed a hybrid proxy reencryption (PRE) scheme that combines lightweight symmetric encryption and asymmetric encryption algorithms to render cryptographic functions for resource-limited end user nodes. The proposed PRE scheme is communicated with fog node in a secure manner.…”

Secure Outsourcing and Sharing of Cloud Data Using a User-Side Encrypted File System

“…give it to a third party or even publish it). As soon as the key is released the security is potentially compromised [20]. On the other hand, the asymmetric encryption is not the best candidate for practical implementation due to the high computational and communication overheads [21].…”

“…They can greatly reduce the key management complexity for data owners and users and enforce secure access control by allowing them to obtain their secret keys from a private key generator (PKG) using a secure key generation protocol. However, these encryption techniques use asymmetric encryption to encrypt and decrypt the communication between users and the cloud server, which leads to significant computational complexity [20,26].…”

“…Moreover, we propose a hybrid cryptographic scheme that combines symmetric and public key encryption algorithms in order to improve the security and performance of the personal and shared files that are outsourced. Symmetric encryption is used to encrypt the contents of outsourced files to reduce the encryption cost while slower asymmetric algorithms are used to secure the exchange of secret keys for the files [20]. The goals of the proposed OutFS are twofold.…”