Lightweight and Secure Certificateless Multi-receiver Encryption based on ECC

Abstract

In this paper, we propose an elliptic curve cryptography (ECC)-based certificateless multi-receiver encryption scheme for device to device communications on Internet of Things (IoT) applications. The proposed scheme eliminates computation expensive pairing operations to provide a lightweight multi-receiver encryption scheme, which has favourable properties for IoT applications. In addition to less time usage for both sender and receiver, the proposed scheme offers the necessary security properties such as source authentication, implicit user authentication, message integrity, and replay attack prevention for secure data exchange. In this paper, we show security proof for the proposed scheme based on the Elliptic Curve Discrete Logarithm Problem (ECDLP). We implemented our proposed scheme on a real embedded Android device and confirmed that it achieves less time cost for both encryption and decryption compared with the existing most efficient certificate-based multi-receiver encryption scheme and certificateless multi-receiver encryption scheme.

Anonymous Certificateless Multi-Receiver Signcryption Scheme Without Secure Channel

“…From TABLE 3 and TABLE 4, we can see that our scheme is more efficient than schemes [23], [31], [34]- [37], [41], and [42] in encryption/signcryption process, and it is more efficient than schemes [23], [31], [35], [37], [38], and [41] in decryption/de-signcryption process. However, our scheme is more inefficient than schemes [38] and [39] in encryption/signcryption process, and it is more inefficient than schemes [34], [36], [39], and [42] in decryption/ de-signcryption process, because we have increased some computation to avoid the use of secure channels. Although the computational complexity of our scheme is higher than that of some schemes, the extra calculation costs are considered acceptable when considering the costs spent on maintaining the secure channel, because it is well known that maintaining a secure channel requires a lot in practical applications.…”

“…Their scheme provides the function of mutual authentication between the receiver and the sender, but it directly puts the list of authorized receivers in ciphertext, exposing the privacy of authorized receivers. In 2018, Win et al [38] proposed an anonymous CLME scheme with CCA secure both in message confidentiality and receiver anonymity, and the scheme provides receivers with the function of verifying the sender. However, a large number of bilinear pairings used in Tseng et al's scheme results in its low computational efficiency.…”

“…However, a large number of bilinear pairings used in Tseng et al's scheme results in its low computational efficiency. At the same year, Pang et al [39] proposed an anonymous CLMS scheme, which is more efficient than schemes [37], [38] and offers receiver anonymity and source verifiability. Besides the aforementioned schemes, there are some other outstanding CLME/CLMS schemes [40]- [43] with various properties proposed for different application scenarios in recent years.…”

Secure Smart Cameras by Aggregate-Signcryption with Decryption Fairness for Multi-Receiver IoT Applications

“…We adopted a multi-receiver encryption scheme [46,47] with a sign-then-encrypt approach and customized it to aggregate-signcryption with decryption fairness for multiple receivers. The proposed approach avoids the key escrow problem and does not require a certification for public key authentication.…”

“…In the operational phase, the smart camera uses their private key, the public keys of receiving devices and the public parameters which are already defined by the KGC to execute the signcryption (Figure 3). We adopt the multi-receiver encryption approach [46,47] to perform the signcryption procedure. We then apply aggregation on the cluster head to merge the signcrypted data into a single, compact packet.…”