PSSCC: Provably secure communication framework for crowdsourced industrial Internet of Things environments

Abstract

Summary Internet of things environment is adopted widely in different industries and business organizations with varying capacity. It provides a favorable environment to outsource the crowdsourced data in the cloud to minimize the cost of computation, which is called crowdsourcing. Crowdsourcing is a technique where individuals or organizations obtain goods and services. A professional or industry outsource the crowdsourced data in the cloud, where confidentiality and authenticity of data become essential. Signcryption is the cryptographic technique that serves both the authenticity and the privacy of transmitted messages. This technique ensures secure authentic data transmission and storage. Therefore, this paper proposes an identity‐based signcryption scheme. In the proposed PSSCC framework, the user does pairing free computation during signcryption, which makes efficient calculation on user‐side. Moreover, PSSCC framework is proved secure under modified bilinear Diffie‐Hellman inversion and modified bilinear strong Diffie‐Hellman problems. The performance analysis of PSSCC with related schemes indicates that the proposed system supports efficient communication along with less computation cost.

RETRACTION: Cryptanalysis and enhancement of multi factor remote user authentication scheme based on signcryption

“…The author here shows that their scheme is suitable for IoT based cloud. Several applications have been proposed on remote user authentication technique, some of which are utilized for real time applications such as IoT [10]. Teh et al [26] proposed an authentication technique for IoT that uses Lockitron.…”

“…Dharminder et al [11] No No Yes No No No No No Yes Yes Chaturadevi et al [6] Yes No Yes No No No No No No Yes Nikooghadam et al [17] Yes No Yes No Yes No Yes Yes Yes Yes Chandrakar et al [5] No Yes No No No No No No No Yes Sutrala et al [25] Yes No Yes No Yes Yes Yes Yes Yes Yes Dharminder et al [10] Yes No Yes No Yes Yes Yes Yes Yes Yes Li et al [15] Yes No Yes No No No Yes Yes Yes Yes Das et al [8] Yes No Yes No No No Yes Yes Yes Yes Sharma et al [23] No No Yes Yes Yes Yes Yes Yes Yes Yes Proposed Scheme No No No No No No No No No No A1: Server masquerading attack A2: Replay attack A3: Biometric recognition error A4:Mutual Authentication A5: Client Impersonation attack A6: Offline password guessing attack A7: Slow wrong password detection A8: Prone to DoS attack A9: Id Guessing attack A10: Lack of session key agreement 4.1.1. Server masquerading attack: Suppose an attacker tries to masquerade a legitimate server, he must send login request.…”

“…Therefore the intruders can never be able to forge the legitimate client and server; hence the proposed scheme is more secure than existing remote user authentication schemes. [10] scheme fails to establish the session key agreement between C i and S i . Hence there is no possibility for establishing secure communication between the communicating parties.…”

“…is satisfied • Based on assumption A7, S11 and jurisdiction rule it could be obtained as S12 : [11] 2T su + 1T h 2T bk + 1T h 3T su + 2T h + 1T bk Chaturadevi et al [6] 3T h 2T bk + 2T h 6T su + 2T h + 3T bk Nikooghadam et al [17] 3T h 2T bk + 3T h 5T su + 3T h + 2T bk Chandrakar et al [5] 5T h 2T bk + 6T h 5T su + 6T h + 2T bk Sutrala et al [25] 5T h + 2T su 3T bk + 4T h 6T su + 4T h + 1T bk Dharminder et al [10] 2T h + 1T su 1T bk + 4T h 6T su + 4T h + 1T bk Li et al [15] 5T h 2T bk + 3T h 4T su + 2T h + 1T bk Das et al [8] 1T h + 2T su 2T bk + 2T h 3T su + 2T h + 1T bk Sharma et al [23] 3T…”

“…ID guessing attack: In Dharminder et al's[10] schemeEd i = h(Id i ||N i )))whereas in the proposed schemeEd i = h(Id i ||h(Id i ||K S ||N i ))).The proposed scheme protects the value of Id i inEd i from public communication. Consider if an attacker knows Ed i he is not able to identify Id i from Ed i .…”